last executing test programs: 2m40.166629303s ago: executing program 3 (id=2679): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x6687e, 0x0) io_uring_setup(0x5f61, &(0x7f0000000200)={0x0, 0xd2c, 0x40, 0x2, 0x5c}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) userfaultfd(0x801) socket(0x11, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x2010}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x10}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m38.612573019s ago: executing program 3 (id=2682): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x20004044}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 2m36.405155435s ago: executing program 3 (id=2684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) 2m35.3997456s ago: executing program 3 (id=2687): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/53, 0x0, 0x26000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2m34.438911323s ago: executing program 3 (id=2691): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000"], 0x0) 2m30.799802382s ago: executing program 3 (id=2705): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) write$tun(r5, &(0x7f0000000800)=ANY=[], 0x10) 2m14.97447227s ago: executing program 32 (id=2705): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) write$tun(r5, &(0x7f0000000800)=ANY=[], 0x10) 20.367009502s ago: executing program 4 (id=3068): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) write(r4, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000600)={0x1, r4}) write$tun(r4, &(0x7f0000000800)=ANY=[], 0x10) 18.205934581s ago: executing program 4 (id=3071): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.28268723s ago: executing program 4 (id=3075): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) 15.028012541s ago: executing program 4 (id=3078): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.533351622s ago: executing program 2 (id=3080): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.000065701s ago: executing program 5 (id=3081): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r0) 13.892686694s ago: executing program 4 (id=3082): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.269426342s ago: executing program 4 (id=3083): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.78313389s ago: executing program 2 (id=3085): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.437231251s ago: executing program 5 (id=3087): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.078382281s ago: executing program 2 (id=3090): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) 9.068650988s ago: executing program 0 (id=3091): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) write$tun(r5, &(0x7f0000000800)=ANY=[], 0x10) 6.679032589s ago: executing program 0 (id=3092): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 6.087524493s ago: executing program 2 (id=3093): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.428534957s ago: executing program 0 (id=3094): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.369861659s ago: executing program 1 (id=3095): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x6687e, 0x0) io_uring_setup(0x5f61, &(0x7f0000000200)={0x0, 0xd2c, 0x40, 0x2, 0x5c}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) userfaultfd(0x801) socket(0x11, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x10}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.102381061s ago: executing program 5 (id=3096): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.417696054s ago: executing program 1 (id=3097): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 4.080203123s ago: executing program 2 (id=3098): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) 3.198135166s ago: executing program 1 (id=3099): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a"], 0x1c8}}, 0x0) 3.159131241s ago: executing program 0 (id=3100): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2", 0x4ae, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.28313542s ago: executing program 5 (id=3101): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.090214074s ago: executing program 1 (id=3102): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.687201482s ago: executing program 1 (id=3103): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x5, 0x0, 0x200005, 0x4, 0x0, 0xfffffffffffffffb, 0x9e9, 0x2, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, 0xee01, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 1.587154233s ago: executing program 0 (id=3104): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 909.707235ms ago: executing program 2 (id=3105): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 602.258428ms ago: executing program 1 (id=3106): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r3, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) 434.890252ms ago: executing program 5 (id=3107): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0xf) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000200)="04000000000000000000000038010000380100"/28) ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a30203100") ioctl(r2, 0xc138fd06, &(0x7f0000000700)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/dm-0\x00', 0x2, 0x0) 238.298281ms ago: executing program 0 (id=3108): mkdirat(0xffffffffffffffff, 0x0, 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[], 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x4000921, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_clone(0x18000040, &(0x7f0000000440)="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", 0x1000, &(0x7f0000000180), &(0x7f0000001480), &(0x7f00000014c0)="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") 0s ago: executing program 5 (id=3109): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x6, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x200009, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) kernel console output (not intermixed with test programs): 74d08 [ 769.727032][T13672] [ 769.781434][T10339] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 769.873286][T13681] overlayfs: failed to resolve './file0': -2 [ 769.941002][T10339] usb 2-1: Using ep0 maxpacket: 32 [ 769.943074][T10339] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 769.943962][T10339] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 769.943981][T10339] usb 2-1: config 0 has no interface number 1 [ 769.947079][T10339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.947098][T10339] usb 2-1: Product: syz [ 769.947110][T10339] usb 2-1: Manufacturer: syz [ 769.947122][T10339] usb 2-1: SerialNumber: syz [ 769.957496][T10339] usb 2-1: config 0 descriptor?? [ 770.381212][T10339] viperboard 2-1:0.61: version 0.00 found at bus 002 address 035 [ 770.391351][T10339] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 770.391379][T10339] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 770.398333][T10339] viperboard 2-1:0.0: version 0.00 found at bus 002 address 035 [ 770.404064][T10339] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 770.404090][T10339] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 771.974531][ T30] usb 2-1: USB disconnect, device number 35 [ 773.098766][ T31] audit: type=1800 audit(1790155415.225:16803): pid=13741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2283" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 773.141627][T13738] FAULT_INJECTION: forcing a failure. [ 773.141627][T13738] name fail_futex, interval 1, probability 0, space 0, times 0 [ 773.141675][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.2.2284 Not tainted syzkaller #0 PREEMPT(full) [ 773.141700][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 773.141713][T13738] Call Trace: [ 773.141719][T13738] [ 773.141727][T13738] dump_stack_lvl+0x100/0x190 [ 773.141768][T13738] should_fail_ex.cold+0x5/0xa [ 773.141796][T13738] get_futex_key+0x1d0/0x14f0 [ 773.141826][T13738] ? __pfx_get_futex_key+0x10/0x10 [ 773.141848][T13738] ? do_raw_spin_unlock+0x145/0x1e0 [ 773.141884][T13738] futex_wait_setup+0x91/0x540 [ 773.141910][T13738] __futex_wait+0x19f/0x300 [ 773.141931][T13738] ? __pfx___futex_wait+0x10/0x10 [ 773.141948][T13738] ? rcu_is_watching+0x13/0xc0 [ 773.141978][T13738] ? __pfx_futex_wake_mark+0x10/0x10 [ 773.142013][T13738] ? __pfx_futex_hash+0x10/0x10 [ 773.142045][T13738] futex_wait+0xe6/0x370 [ 773.142063][T13738] ? __pfx_futex_wait+0x10/0x10 [ 773.142088][T13738] ? irqentry_exit+0x24d/0xa10 [ 773.142117][T13738] ? lockdep_hardirqs_on+0x7d/0x110 [ 773.142149][T13738] do_futex+0x265/0x440 [ 773.142176][T13738] ? __pfx_do_futex+0x10/0x10 [ 773.142209][T13738] __x64_sys_futex+0x34f/0x4d0 [ 773.142238][T13738] ? __pfx___x64_sys_futex+0x10/0x10 [ 773.142274][T13738] do_syscall_64+0x123/0x790 [ 773.142304][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.142324][T13738] RIP: 0033:0x7f71f019e159 [ 773.142340][T13738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.142359][T13738] RSP: 002b:00007f71f110f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 773.142379][T13738] RAX: ffffffffffffffda RBX: 00007f71f0425fa8 RCX: 00007f71f019e159 [ 773.142391][T13738] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f71f0425fa8 [ 773.142402][T13738] RBP: 00007f71f0425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 773.142414][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.142425][T13738] R13: 00007f71f0426038 R14: 00007ffe5e274c20 R15: 00007ffe5e274d08 [ 773.142451][T13738] [ 774.735473][T13761] FAULT_INJECTION: forcing a failure. [ 774.735473][T13761] name failslab, interval 1, probability 0, space 0, times 0 [ 774.735505][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.4.2291 Not tainted syzkaller #0 PREEMPT(full) [ 774.735527][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 774.735540][T13761] Call Trace: [ 774.735546][T13761] [ 774.735554][T13761] dump_stack_lvl+0x100/0x190 [ 774.735588][T13761] should_fail_ex.cold+0x5/0xa [ 774.735616][T13761] should_failslab+0xc2/0x120 [ 774.735639][T13761] __kmalloc_cache_node_noprof+0x94/0x720 [ 774.735664][T13761] ? sbitmap_queue_init_node+0x291/0x4a0 [ 774.735689][T13761] sbitmap_queue_init_node+0x291/0x4a0 [ 774.735712][T13761] blk_mq_init_tags+0x184/0x300 [ 774.735745][T13761] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 774.735781][T13761] blk_mq_alloc_sched_tags+0x1de/0x350 [ 774.735807][T13761] blk_mq_alloc_sched_res+0x8e/0x250 [ 774.735832][T13761] elevator_change+0x136/0x530 [ 774.735855][T13761] elv_iosched_store+0x3be/0x460 [ 774.735877][T13761] ? __pfx_elv_iosched_store+0x10/0x10 [ 774.735905][T13761] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 774.735928][T13761] ? __pfx_elv_iosched_store+0x10/0x10 [ 774.735948][T13761] queue_attr_store+0x25f/0x2f0 [ 774.735979][T13761] ? __pfx_queue_attr_store+0x10/0x10 [ 774.736008][T13761] ? __lock_acquire+0x5c0/0x1f40 [ 774.736041][T13761] ? lock_acquire+0x1d1/0x380 [ 774.736059][T13761] ? sysfs_file_kobj+0x21/0x290 [ 774.736082][T13761] ? find_held_lock+0x2b/0x80 [ 774.736110][T13761] ? sysfs_file_kobj+0xe4/0x290 [ 774.736133][T13761] ? sysfs_file_kobj+0xe4/0x290 [ 774.736161][T13761] ? __pfx_queue_attr_store+0x10/0x10 [ 774.736187][T13761] sysfs_kf_write+0xf2/0x150 [ 774.736213][T13761] kernfs_fop_write_iter+0x3e0/0x5f0 [ 774.736232][T13761] ? __pfx_sysfs_kf_write+0x10/0x10 [ 774.736258][T13761] vfs_write+0x6af/0x1050 [ 774.736286][T13761] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 774.736309][T13761] ? __pfx_vfs_write+0x10/0x10 [ 774.736328][T13761] ? find_held_lock+0x2b/0x80 [ 774.736368][T13761] ksys_write+0x12a/0x250 [ 774.736389][T13761] ? __pfx_ksys_write+0x10/0x10 [ 774.736417][T13761] do_syscall_64+0x123/0x790 [ 774.736448][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.736468][T13761] RIP: 0033:0x7f1de539e159 [ 774.736484][T13761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.736503][T13761] RSP: 002b:00007f1de61d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 774.736522][T13761] RAX: ffffffffffffffda RBX: 00007f1de5625fa0 RCX: 00007f1de539e159 [ 774.736534][T13761] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 774.736545][T13761] RBP: 00007f1de543506b R08: 0000000000000000 R09: 0000000000000000 [ 774.736556][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.736567][T13761] R13: 00007f1de5626038 R14: 00007f1de5625fa0 R15: 00007ffec23f7768 [ 774.736594][T13761] [ 776.133160][T11379] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 776.366775][T11379] usb 1-1: Using ep0 maxpacket: 32 [ 776.367281][T11379] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 776.368172][T11379] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 776.368194][T11379] usb 1-1: config 0 has no interface number 1 [ 776.369898][T11379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.369919][T11379] usb 1-1: Product: syz [ 776.369933][T11379] usb 1-1: Manufacturer: syz [ 776.369947][T11379] usb 1-1: SerialNumber: syz [ 776.372912][T11379] usb 1-1: config 0 descriptor?? [ 776.827346][T11379] viperboard 1-1:0.61: version 0.00 found at bus 001 address 036 [ 776.848037][T11379] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 776.848065][T11379] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 776.855310][T11379] viperboard 1-1:0.0: version 0.00 found at bus 001 address 036 [ 776.892539][T11379] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 776.892567][T11379] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 777.601833][ T5796] usb 1-1: USB disconnect, device number 36 [ 779.910678][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2316'. [ 782.381840][T13873] device-mapper: ioctl: name not supplied when creating device [ 782.410654][T13875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'. [ 785.157477][ T5796] page_pool_release_retry() stalled pool shutdown: id 36, 37 inflight 181 sec [ 788.837575][ T5796] page_pool_release_retry() stalled pool shutdown: id 37, 43 inflight 182 sec [ 789.091892][T13959] FAULT_INJECTION: forcing a failure. [ 789.091892][T13959] name failslab, interval 1, probability 0, space 0, times 0 [ 789.091920][T13959] CPU: 1 UID: 0 PID: 13959 Comm: syz.4.2353 Not tainted syzkaller #0 PREEMPT(full) [ 789.091940][T13959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 789.091951][T13959] Call Trace: [ 789.091958][T13959] [ 789.091965][T13959] dump_stack_lvl+0x100/0x190 [ 789.091997][T13959] should_fail_ex.cold+0x5/0xa [ 789.092026][T13959] should_failslab+0xc2/0x120 [ 789.092052][T13959] __kmalloc_noprof+0xfc/0x840 [ 789.092070][T13959] ? rcu_is_watching+0x13/0xc0 [ 789.092096][T13959] ? tomoyo_realpath_from_path+0xb6/0x690 [ 789.092128][T13959] tomoyo_realpath_from_path+0xb6/0x690 [ 789.092166][T13959] tomoyo_path_number_perm+0x23c/0x580 [ 789.092185][T13959] ? tomoyo_path_number_perm+0x22e/0x580 [ 789.092209][T13959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 789.092232][T13959] ? __pfx_futex_wait+0x10/0x10 [ 789.092259][T13959] ? __lock_acquire+0x5c0/0x1f40 [ 789.092292][T13959] ? __fget_files+0x34/0x3d0 [ 789.092317][T13959] ? find_held_lock+0x2b/0x80 [ 789.092343][T13959] ? hook_file_ioctl_common+0x140/0x440 [ 789.092376][T13959] ? __fget_files+0x21f/0x3d0 [ 789.092404][T13959] security_file_ioctl+0xd3/0x230 [ 789.092428][T13959] __x64_sys_ioctl+0xb7/0x210 [ 789.092450][T13959] do_syscall_64+0x123/0x790 [ 789.092480][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.092499][T13959] RIP: 0033:0x7f1de539e159 [ 789.092513][T13959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.092529][T13959] RSP: 002b:00007f1de61d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.092547][T13959] RAX: ffffffffffffffda RBX: 00007f1de5625fa0 RCX: 00007f1de539e159 [ 789.092559][T13959] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 789.092569][T13959] RBP: 00007f1de543506b R08: 0000000000000000 R09: 0000000000000000 [ 789.092580][T13959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.092590][T13959] R13: 00007f1de5626038 R14: 00007f1de5625fa0 R15: 00007ffec23f7768 [ 789.092615][T13959] [ 789.092622][T13959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 790.220173][T13980] fuse: Bad value for 'fd' [ 790.227031][ T5693] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 790.386740][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 790.387201][ T5693] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 790.388004][ T5693] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 790.388017][ T5693] usb 1-1: config 0 has no interface number 1 [ 790.389811][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.389823][ T5693] usb 1-1: Product: syz [ 790.389832][ T5693] usb 1-1: Manufacturer: syz [ 790.389840][ T5693] usb 1-1: SerialNumber: syz [ 790.391383][ T5693] usb 1-1: config 0 descriptor?? [ 790.564940][ T5693] viperboard 1-1:0.61: version 0.00 found at bus 001 address 037 [ 790.571230][ T5693] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 790.571256][ T5693] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 790.576491][ T5693] viperboard 1-1:0.0: version 0.00 found at bus 001 address 037 [ 790.582775][ T5693] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 790.582801][ T5693] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 791.182912][T11379] usb 1-1: USB disconnect, device number 37 [ 791.491437][ T4917] Bluetooth: hci0: command tx timeout [ 791.957176][ T5586] page_pool_release_retry() stalled pool shutdown: id 53, 42 inflight 121 sec [ 792.002359][T14000] syzkaller0: entered promiscuous mode [ 792.002375][T14000] syzkaller0: entered allmulticast mode [ 792.286847][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 793.897626][ T5693] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 794.068683][ T5693] usb 5-1: Using ep0 maxpacket: 32 [ 794.071253][ T5693] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 794.075418][ T5693] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 794.075441][ T5693] usb 5-1: config 0 has no interface number 1 [ 794.078079][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.078097][ T5693] usb 5-1: Product: syz [ 794.078110][ T5693] usb 5-1: Manufacturer: syz [ 794.078121][ T5693] usb 5-1: SerialNumber: syz [ 794.083156][ T5693] usb 5-1: config 0 descriptor?? [ 794.244305][ T5693] viperboard 5-1:0.61: version 0.00 found at bus 005 address 031 [ 794.256640][ T5693] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 794.258249][ T5693] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 794.272583][ T5693] viperboard 5-1:0.0: version 0.00 found at bus 005 address 031 [ 794.283452][ T5693] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 794.283478][ T5693] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 794.549419][ T5796] usb 5-1: USB disconnect, device number 31 [ 794.810550][ T31] audit: type=1400 audit(1790155436.935:16804): avc: denied { read } for pid=14045 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 794.944285][ T31] audit: type=1400 audit(1790155437.005:16805): avc: denied { ioctl } for pid=14045 comm="syz.1.2378" path="socket:[52960]" dev="sockfs" ino=52960 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 794.944455][ T31] audit: type=1400 audit(1790155437.015:16806): avc: denied { write } for pid=14045 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 794.944567][ T31] audit: type=1400 audit(1790155437.065:16807): avc: denied { read append } for pid=14045 comm="syz.1.2378" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 794.944680][ T31] audit: type=1400 audit(1790155437.065:16808): avc: denied { ioctl open } for pid=14045 comm="syz.1.2378" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 795.583642][ T31] audit: type=1326 audit(1790155437.715:16809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.1.2383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7e579e159 code=0x0 [ 795.994749][ T31] audit: type=1326 audit(1790155438.125:16810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.1.2383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e579e159 code=0x7fc00000 [ 795.994926][ T31] audit: type=1326 audit(1790155438.125:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.1.2383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7e579e159 code=0x7fc00000 [ 795.995826][ T31] audit: type=1326 audit(1790155438.125:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.1.2383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e579e159 code=0x7fc00000 [ 795.996019][ T31] audit: type=1326 audit(1790155438.125:16813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.1.2383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e579e159 code=0x7fc00000 [ 797.117082][ T1196] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 797.811345][ T1196] usb 4-1: Using ep0 maxpacket: 32 [ 797.815957][ T1196] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 797.822035][ T1196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.822062][ T1196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.822092][ T1196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.862052][ T1196] usb 4-1: config 0 descriptor?? [ 797.914907][T14092] syzkaller0: entered promiscuous mode [ 797.914922][T14092] syzkaller0: entered allmulticast mode [ 798.112143][T14098] device-mapper: table: 248:1: zero-length target [ 798.112157][T14098] device-mapper: ioctl: error adding target to table [ 798.284187][ T1196] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 798.284220][ T1196] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 798.485100][ T1196] ft260 0003:0403:6030.0017: chip code: 0000 0000 [ 798.689094][ T1196] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 798.895473][ T1196] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 799.112684][T14083] ft260 0003:0403:6030.0017: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 799.187907][T14083] ft260 0003:0403:6030.0017: ft260_i2c_write: failed with -38 [ 799.393964][ T5586] usb 4-1: USB disconnect, device number 37 [ 799.877212][ T1196] page_pool_release_retry() stalled pool shutdown: id 71, 46 inflight 60 sec [ 800.980387][T14110] kexec: Could not allocate control_code_buffer [ 803.229052][T14175] batman_adv: batadv0: Adding interface: syzkaller0 [ 803.229075][T14175] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.229164][T14175] batman_adv: batadv0: Interface activated: syzkaller0 [ 803.238078][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.238120][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.303562][T14174] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 803.341833][T14174] batman_adv: batadv0: Removing interface: syzkaller0 [ 803.963033][T14196] device-mapper: table: 248:1: zero-length target [ 803.963048][T14196] device-mapper: ioctl: error adding target to table [ 804.976763][ T31] kauditd_printk_skb: 594 callbacks suppressed [ 804.976795][ T31] audit: type=1800 audit(1790155447.105:17408): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2427" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 805.538245][T14223] batman_adv: batadv0: Adding interface: syzkaller0 [ 805.538262][T14223] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.538346][T14223] batman_adv: batadv0: Interface activated: syzkaller0 [ 805.582685][T14222] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 805.668440][T14222] batman_adv: batadv0: Removing interface: syzkaller0 [ 806.287803][T14235] syzkaller0: entered promiscuous mode [ 806.287824][T14235] syzkaller0: entered allmulticast mode [ 806.378291][T14241] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 806.378313][T14241] device-mapper: ioctl: error adding target to table [ 806.438134][ T1196] page_pool_release_retry() stalled pool shutdown: id 40, 22 inflight 182 sec [ 806.676975][ T4917] Bluetooth: hci3: command 0x0406 tx timeout [ 806.729776][T14255] fuse: Bad value for 'fd' [ 806.835037][T14255] FAULT_INJECTION: forcing a failure. [ 806.835037][T14255] name fail_futex, interval 1, probability 0, space 0, times 0 [ 806.835065][T14255] CPU: 1 UID: 0 PID: 14255 Comm: syz.4.2440 Not tainted syzkaller #0 PREEMPT(full) [ 806.835085][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 806.835096][T14255] Call Trace: [ 806.835102][T14255] [ 806.835109][T14255] dump_stack_lvl+0x100/0x190 [ 806.835141][T14255] should_fail_ex.cold+0x5/0xa [ 806.835166][T14255] get_futex_key+0x1d0/0x14f0 [ 806.835191][T14255] ? __pfx_get_futex_key+0x10/0x10 [ 806.835223][T14255] futex_wake+0xf4/0x5e0 [ 806.835244][T14255] ? __pfx_futex_wake+0x10/0x10 [ 806.835261][T14255] ? __x64_sys_getdents64+0x19f/0x2c0 [ 806.835289][T14255] do_futex+0x2b2/0x440 [ 806.835313][T14255] ? __pfx_do_futex+0x10/0x10 [ 806.835335][T14255] ? iterate_dir+0xb3/0xae0 [ 806.835357][T14255] __x64_sys_futex+0x34f/0x4d0 [ 806.835381][T14255] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 806.835400][T14255] ? __pfx___x64_sys_futex+0x10/0x10 [ 806.835432][T14255] do_syscall_64+0x123/0x790 [ 806.835458][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.835474][T14255] RIP: 0033:0x7f1de539e159 [ 806.835488][T14255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.835504][T14255] RSP: 002b:00007f1de61d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 806.835521][T14255] RAX: ffffffffffffffda RBX: 00007f1de5625fa8 RCX: 00007f1de539e159 [ 806.835533][T14255] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1de5625fac [ 806.835549][T14255] RBP: 00007f1de5625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 806.835559][T14255] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 806.835569][T14255] R13: 00007f1de5626038 R14: 00007ffec23f7680 R15: 00007ffec23f7768 [ 806.835592][T14255] [ 806.962095][ T31] audit: type=1400 audit(1790155449.085:17409): avc: denied { create } for pid=14256 comm="syz.3.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 806.962260][ T31] audit: type=1400 audit(1790155449.095:17410): avc: denied { read } for pid=14256 comm="syz.3.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 807.096156][T14261] input: syz0 as /devices/virtual/input/input6 [ 807.140976][ T31] audit: type=1400 audit(1790155449.165:17411): avc: denied { ioctl } for pid=14256 comm="syz.3.2441" path="socket:[55319]" dev="sockfs" ino=55319 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 807.141180][ T31] audit: type=1400 audit(1790155449.165:17412): avc: denied { write } for pid=14256 comm="syz.3.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 808.609042][T10339] page_pool_release_retry() stalled pool shutdown: id 42, 49 inflight 182 sec [ 808.763906][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 809.110367][T14291] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 809.139872][T14291] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 809.140026][T14291] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 810.076196][ T31] audit: type=1800 audit(1790155451.985:17413): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2453" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 810.942244][T14314] input: syz0 as /devices/virtual/input/input7 [ 812.571173][T14331] device-mapper: table: 248:2: mirror: Unrecognised feature requested (-EINVAL) [ 812.571220][T14331] device-mapper: ioctl: error adding target to table [ 813.015741][T14339] input: syz0 as /devices/virtual/input/input8 [ 813.305320][T14338] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 813.305341][T14338] device-mapper: ioctl: error adding target to table [ 815.535174][T14368] FAULT_INJECTION: forcing a failure. [ 815.535174][T14368] name failslab, interval 1, probability 0, space 0, times 0 [ 815.535206][T14368] CPU: 1 UID: 0 PID: 14368 Comm: syz.1.2468 Not tainted syzkaller #0 PREEMPT(full) [ 815.535228][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 815.535238][T14368] Call Trace: [ 815.535244][T14368] [ 815.535251][T14368] dump_stack_lvl+0x100/0x190 [ 815.535283][T14368] should_fail_ex.cold+0x5/0xa [ 815.535311][T14368] should_failslab+0xc2/0x120 [ 815.535337][T14368] __kmalloc_noprof+0xfc/0x840 [ 815.535357][T14368] ? rcu_is_watching+0x13/0xc0 [ 815.535383][T14368] ? tomoyo_realpath_from_path+0xb6/0x690 [ 815.535414][T14368] tomoyo_realpath_from_path+0xb6/0x690 [ 815.535444][T14368] tomoyo_path_number_perm+0x23c/0x580 [ 815.535463][T14368] ? tomoyo_path_number_perm+0x22e/0x580 [ 815.535485][T14368] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 815.535506][T14368] ? __pfx_futex_wait+0x10/0x10 [ 815.535529][T14368] ? __lock_acquire+0x5c0/0x1f40 [ 815.535566][T14368] ? __fget_files+0x34/0x3d0 [ 815.535591][T14368] ? find_held_lock+0x2b/0x80 [ 815.535616][T14368] ? hook_file_ioctl_common+0x140/0x440 [ 815.535650][T14368] ? __fget_files+0x21f/0x3d0 [ 815.535680][T14368] security_file_ioctl+0xd3/0x230 [ 815.535705][T14368] __x64_sys_ioctl+0xb7/0x210 [ 815.535727][T14368] do_syscall_64+0x123/0x790 [ 815.535758][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.535775][T14368] RIP: 0033:0x7fe7e579e159 [ 815.535790][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.535806][T14368] RSP: 002b:00007fe7e6680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.535824][T14368] RAX: ffffffffffffffda RBX: 00007fe7e5a25fa0 RCX: 00007fe7e579e159 [ 815.535836][T14368] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 815.535847][T14368] RBP: 00007fe7e583506b R08: 0000000000000000 R09: 0000000000000000 [ 815.535857][T14368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.535867][T14368] R13: 00007fe7e5a26038 R14: 00007fe7e5a25fa0 R15: 00007ffea197dea8 [ 815.535891][T14368] [ 815.535898][T14368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 817.474915][ T31] audit: type=1800 audit(1790155459.605:17414): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2477" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 819.407820][T14395] input: syz0 as /devices/virtual/input/input9 [ 819.423037][T14420] FAULT_INJECTION: forcing a failure. [ 819.423037][T14420] name fail_futex, interval 1, probability 0, space 0, times 0 [ 819.423067][T14420] CPU: 1 UID: 0 PID: 14420 Comm: syz.1.2482 Not tainted syzkaller #0 PREEMPT(full) [ 819.423089][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 819.423100][T14420] Call Trace: [ 819.423108][T14420] [ 819.423115][T14420] dump_stack_lvl+0x100/0x190 [ 819.423148][T14420] should_fail_ex.cold+0x5/0xa [ 819.423176][T14420] get_futex_key+0x1d0/0x14f0 [ 819.423205][T14420] ? __pfx_get_futex_key+0x10/0x10 [ 819.423238][T14420] futex_wake+0xf4/0x5e0 [ 819.423261][T14420] ? __pfx_futex_wake+0x10/0x10 [ 819.423279][T14420] ? __x64_sys_getdents64+0x19f/0x2c0 [ 819.423310][T14420] do_futex+0x2b2/0x440 [ 819.423338][T14420] ? __pfx_do_futex+0x10/0x10 [ 819.423365][T14420] ? iterate_dir+0xb3/0xae0 [ 819.423390][T14420] __x64_sys_futex+0x34f/0x4d0 [ 819.423420][T14420] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 819.423443][T14420] ? __pfx___x64_sys_futex+0x10/0x10 [ 819.423480][T14420] do_syscall_64+0x123/0x790 [ 819.423517][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.423538][T14420] RIP: 0033:0x7fe7e579e159 [ 819.423554][T14420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.423572][T14420] RSP: 002b:00007fe7e66800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 819.423592][T14420] RAX: ffffffffffffffda RBX: 00007fe7e5a25fa8 RCX: 00007fe7e579e159 [ 819.423605][T14420] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe7e5a25fac [ 819.423616][T14420] RBP: 00007fe7e5a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 819.423628][T14420] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 819.423640][T14420] R13: 00007fe7e5a26038 R14: 00007ffea197ddc0 R15: 00007ffea197dea8 [ 819.423666][T14420] [ 820.504661][ T31] audit: type=1800 audit(1790155462.635:17415): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2486" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 822.920099][T14455] input: syz0 as /devices/virtual/input/input10 [ 825.373939][T14481] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 825.373968][T14481] device-mapper: ioctl: error adding target to table [ 827.028506][ T31] audit: type=1400 audit(1790155469.165:17416): avc: denied { checkpoint_restore } for pid=14506 comm="syz.2.2503" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 827.370917][T14510] input: syz0 as /devices/virtual/input/input11 [ 827.780128][T14513] device-mapper: ioctl: populate_table: no targets specified [ 830.162971][T14548] device-mapper: ioctl: populate_table: no targets specified [ 830.207152][T14550] fuse: Unknown parameter '0x0000000000000003' [ 830.657592][ T31] audit: type=1800 audit(1790155472.765:17417): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2513" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 831.302306][ T31] audit: type=1400 audit(1790155473.415:17418): avc: denied { sqpoll } for pid=14562 comm="syz.1.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 831.883882][T14566] input: syz0 as /devices/virtual/input/input12 [ 832.354557][ T1231] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 832.506923][ T1231] usb 5-1: Using ep0 maxpacket: 32 [ 832.509181][ T1231] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 832.517531][ T1231] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 832.517818][ T1231] usb 5-1: config 0 has no interface number 1 [ 832.553049][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.553277][ T1231] usb 5-1: Product: syz [ 832.553415][ T1231] usb 5-1: Manufacturer: syz [ 832.553788][ T1231] usb 5-1: SerialNumber: syz [ 832.683602][ T1231] usb 5-1: config 0 descriptor?? [ 833.956155][ T1231] viperboard 5-1:0.61: version 0.00 found at bus 005 address 032 [ 833.999308][ T1231] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 833.999338][ T1231] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 834.961384][ T1231] viperboard 5-1:0.0: version 0.00 found at bus 005 address 032 [ 834.971987][ T1231] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 834.972013][ T1231] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 835.160071][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'. [ 835.170988][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'. [ 835.724987][T14607] input: syz0 as /devices/virtual/input/input13 [ 836.523325][ T31] audit: type=1400 audit(1790155478.655:17419): avc: denied { mount } for pid=14609 comm="syz.3.2527" name="/" dev="autofs" ino=57039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 837.026945][ T5693] usb 5-1: USB disconnect, device number 32 [ 837.658738][T14616] FAULT_INJECTION: forcing a failure. [ 837.658738][T14616] name failslab, interval 1, probability 0, space 0, times 0 [ 837.658770][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.4.2530 Not tainted syzkaller #0 PREEMPT(full) [ 837.658793][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 837.658804][T14616] Call Trace: [ 837.658811][T14616] [ 837.658818][T14616] dump_stack_lvl+0x100/0x190 [ 837.658853][T14616] should_fail_ex.cold+0x5/0xa [ 837.658879][T14616] should_failslab+0xc2/0x120 [ 837.658904][T14616] __kmalloc_noprof+0xfc/0x840 [ 837.658926][T14616] ? tomoyo_encode2+0xfb/0x3c0 [ 837.658956][T14616] tomoyo_encode2+0xfb/0x3c0 [ 837.658985][T14616] tomoyo_encode+0x29/0x50 [ 837.659007][T14616] tomoyo_realpath_from_path+0x18c/0x690 [ 837.659038][T14616] tomoyo_path_number_perm+0x23c/0x580 [ 837.659058][T14616] ? tomoyo_path_number_perm+0x22e/0x580 [ 837.659080][T14616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 837.659111][T14616] ? __lock_acquire+0x5c0/0x1f40 [ 837.659143][T14616] ? __fget_files+0x34/0x3d0 [ 837.659169][T14616] ? find_held_lock+0x2b/0x80 [ 837.659198][T14616] ? hook_file_ioctl_common+0x140/0x440 [ 837.659231][T14616] ? __fget_files+0x21f/0x3d0 [ 837.659259][T14616] security_file_ioctl+0xd3/0x230 [ 837.659282][T14616] __x64_sys_ioctl+0xb7/0x210 [ 837.659304][T14616] do_syscall_64+0x123/0x790 [ 837.659337][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.659357][T14616] RIP: 0033:0x7f1de539e159 [ 837.659372][T14616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.659395][T14616] RSP: 002b:00007f1de61d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.659415][T14616] RAX: ffffffffffffffda RBX: 00007f1de5625fa0 RCX: 00007f1de539e159 [ 837.659427][T14616] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 837.659438][T14616] RBP: 00007f1de543506b R08: 0000000000000000 R09: 0000000000000000 [ 837.659449][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.659461][T14616] R13: 00007f1de5626038 R14: 00007f1de5625fa0 R15: 00007ffec23f7768 [ 837.659487][T14616] [ 837.662066][T14616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.805007][ T31] audit: type=1400 audit(1790155479.935:17420): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 837.968018][ T31] audit: type=1400 audit(1790155480.105:17421): avc: denied { mount } for pid=14619 comm="syz.1.2533" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 838.235154][ T31] audit: type=1800 audit(1790155480.355:17422): pid=14628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2535" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 838.816793][ T31] audit: type=1400 audit(1790155480.935:17423): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 840.234466][T14636] input: syz0 as /devices/virtual/input/input14 [ 840.237859][T14641] input: syz0 as /devices/virtual/input/input15 [ 841.745667][ T31] audit: type=1800 audit(1790155483.875:17424): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2543" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 841.881332][T14659] input: syz0 as /devices/virtual/input/input16 [ 842.414330][ T31] audit: type=1800 audit(1790155484.535:17425): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2544" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 845.882087][ T31] audit: type=1800 audit(1790155488.015:17426): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2553" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 846.117742][ T1231] page_pool_release_retry() stalled pool shutdown: id 36, 37 inflight 242 sec [ 846.231594][ T31] audit: type=1800 audit(1790155488.365:17427): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2554" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 849.124701][T14732] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 849.124725][T14732] device-mapper: ioctl: error adding target to table [ 849.142365][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 849.142384][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 849.204664][ T31] audit: type=1800 audit(1790155491.335:17428): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2563" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 849.247643][ T1231] page_pool_release_retry() stalled pool shutdown: id 37, 43 inflight 242 sec [ 849.630783][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 849.630805][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 849.638821][T13347] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.638863][T13347] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.638893][T13347] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.638922][T13347] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.847680][ T1231] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 851.854312][ T1231] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 852.036111][ T31] audit: type=1800 audit(1790155494.155:17429): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2571" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 852.401429][ T1231] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 852.602035][T14754] ceph: No mds server is up or the cluster is laggy [ 852.757007][ T1231] page_pool_release_retry() stalled pool shutdown: id 53, 42 inflight 182 sec [ 852.840494][T14775] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 852.848715][T14775] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 852.848904][T14775] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 852.851075][T14775] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 852.851242][T14775] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 852.912098][T14780] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 852.915744][T14780] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 852.915899][T14780] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 853.004366][T14786] FAULT_INJECTION: forcing a failure. [ 853.004366][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 853.004395][T14786] CPU: 0 UID: 0 PID: 14786 Comm: syz.2.2579 Not tainted syzkaller #0 PREEMPT(full) [ 853.004417][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 853.004429][T14786] Call Trace: [ 853.004436][T14786] [ 853.004443][T14786] dump_stack_lvl+0x100/0x190 [ 853.004477][T14786] should_fail_ex.cold+0x5/0xa [ 853.004505][T14786] should_failslab+0xc2/0x120 [ 853.004532][T14786] kmem_cache_alloc_noprof+0x92/0x6a0 [ 853.004555][T14786] ? __fget_files+0x215/0x3d0 [ 853.004580][T14786] ? create_new_namespaces+0x30/0xac0 [ 853.004612][T14786] create_new_namespaces+0x30/0xac0 [ 853.004641][T14786] __do_sys_setns+0x213/0x1f30 [ 853.004667][T14786] ? __pfx___do_sys_setns+0x10/0x10 [ 853.004699][T14786] do_syscall_64+0x123/0x790 [ 853.004730][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.004750][T14786] RIP: 0033:0x7f71f019e159 [ 853.004766][T14786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.004790][T14786] RSP: 002b:00007f71f110f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 853.004809][T14786] RAX: ffffffffffffffda RBX: 00007f71f0425fa0 RCX: 00007f71f019e159 [ 853.004822][T14786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 853.004832][T14786] RBP: 00007f71f023506b R08: 0000000000000000 R09: 0000000000000000 [ 853.004844][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.004854][T14786] R13: 00007f71f0426038 R14: 00007f71f0425fa0 R15: 00007ffe5e274d08 [ 853.004880][T14786] [ 853.335394][ T31] audit: type=1800 audit(1790155495.455:17430): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2580" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 853.902035][ T31] audit: type=1800 audit(1790155496.015:17431): pid=14799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2583" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 854.374196][T14805] FAULT_INJECTION: forcing a failure. [ 854.374196][T14805] name failslab, interval 1, probability 0, space 0, times 0 [ 854.374228][T14805] CPU: 1 UID: 0 PID: 14805 Comm: syz.4.2586 Not tainted syzkaller #0 PREEMPT(full) [ 854.374250][T14805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 854.374260][T14805] Call Trace: [ 854.374266][T14805] [ 854.374273][T14805] dump_stack_lvl+0x100/0x190 [ 854.374304][T14805] should_fail_ex.cold+0x5/0xa [ 854.374330][T14805] should_failslab+0xc2/0x120 [ 854.374355][T14805] kmem_cache_alloc_noprof+0x92/0x6a0 [ 854.374374][T14805] ? __fget_files+0x215/0x3d0 [ 854.374396][T14805] ? create_new_namespaces+0x30/0xac0 [ 854.374422][T14805] create_new_namespaces+0x30/0xac0 [ 854.374451][T14805] __do_sys_setns+0x213/0x1f30 [ 854.374476][T14805] ? __pfx___do_sys_setns+0x10/0x10 [ 854.374509][T14805] do_syscall_64+0x123/0x790 [ 854.374541][T14805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.374561][T14805] RIP: 0033:0x7f1de539e159 [ 854.374577][T14805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.374595][T14805] RSP: 002b:00007f1de61d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 854.374616][T14805] RAX: ffffffffffffffda RBX: 00007f1de5625fa0 RCX: 00007f1de539e159 [ 854.374629][T14805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 854.374641][T14805] RBP: 00007f1de543506b R08: 0000000000000000 R09: 0000000000000000 [ 854.374653][T14805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.374664][T14805] R13: 00007f1de5626038 R14: 00007f1de5625fa0 R15: 00007ffec23f7768 [ 854.374690][T14805] [ 854.376162][T14801] syzkaller0: entered promiscuous mode [ 854.376178][T14801] syzkaller0: entered allmulticast mode [ 854.501104][ T31] audit: type=1800 audit(1790155496.635:17432): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2585" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 855.363419][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 855.363442][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 856.206117][ T31] audit: type=1800 audit(1790155498.315:17433): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2592" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 856.206296][ T31] audit: type=1800 audit(1790155498.325:17434): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2593" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 857.074854][ T31] audit: type=1800 audit(1790155499.195:17435): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2596" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 857.811675][T14851] syzkaller0: entered promiscuous mode [ 857.811697][T14851] syzkaller0: entered allmulticast mode [ 858.481982][T14867] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2604'. [ 858.824081][T14873] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2606'. [ 859.473453][ T31] audit: type=1800 audit(1790155501.595:17436): pid=14878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2607" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 860.008748][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'. [ 860.033897][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'. [ 860.549820][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 860.604946][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 860.793569][T13347] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.839562][T13347] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.840886][T13347] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.841053][T13347] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.974314][ T5693] page_pool_release_retry() stalled pool shutdown: id 71, 46 inflight 121 sec [ 861.059721][T14902] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2614'. [ 861.699970][ T5693] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 862.314373][ T5693] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 862.327497][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.327521][ T5693] usb 4-1: config 0 has no interfaces? [ 862.331632][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 862.331655][ T5693] usb 4-1: Product: syz [ 862.331669][ T5693] usb 4-1: Manufacturer: syz [ 862.337739][ T5693] usb 4-1: config 0 descriptor?? [ 862.456327][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2621'. [ 862.466546][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2621'. [ 862.531879][T14927] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n [ 862.531900][T14927] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL) [ 862.531909][T14927] device-mapper: ioctl: error adding target to table [ 862.565979][ T5736] usb 4-1: USB disconnect, device number 38 [ 862.883500][T14929] input: syz0 as /devices/virtual/input/input17 [ 862.959826][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 862.959848][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 863.390898][ T31] audit: type=1800 audit(1790155505.525:17437): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2625" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 864.411023][ T31] audit: type=1800 audit(1790155506.535:17438): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2628" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 864.680205][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.682898][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.338862][T14991] input: syz0 as /devices/virtual/input/input18 [ 866.996835][ T5736] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 866.996931][T10339] page_pool_release_retry() stalled pool shutdown: id 40, 22 inflight 243 sec [ 867.149290][ T5736] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 867.149327][ T5736] usb 2-1: no configurations [ 867.149339][ T5736] usb 2-1: can't read configurations, error -22 [ 867.277007][ T5736] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 867.427935][ T5736] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 867.427984][ T5736] usb 2-1: no configurations [ 867.427997][ T5736] usb 2-1: can't read configurations, error -22 [ 867.431617][ T5736] usb usb2-port1: attempt power cycle [ 867.778357][ T5736] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 867.820313][ T5736] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 867.820352][ T5736] usb 2-1: no configurations [ 867.820362][ T5736] usb 2-1: can't read configurations, error -22 [ 867.947297][ T5736] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 867.970281][ T5736] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 867.970319][ T5736] usb 2-1: no configurations [ 867.970331][ T5736] usb 2-1: can't read configurations, error -22 [ 867.970689][ T5736] usb usb2-port1: unable to enumerate USB device [ 868.205543][T15023] syzkaller0: entered promiscuous mode [ 868.205564][T15023] syzkaller0: entered allmulticast mode [ 869.076778][ T1196] page_pool_release_retry() stalled pool shutdown: id 42, 49 inflight 242 sec [ 869.727986][ T31] audit: type=1800 audit(1790155511.845:17439): pid=15055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2653" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 870.603580][ T31] audit: type=1400 audit(1790155512.735:17440): avc: denied { bind } for pid=15067 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 870.604059][ T31] audit: type=1400 audit(1790155512.735:17441): avc: denied { connect } for pid=15067 comm="syz.3.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 871.128187][ T31] audit: type=1400 audit(1790155513.265:17442): avc: denied { read } for pid=15075 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 871.144339][ T31] audit: type=1400 audit(1790155513.275:17443): avc: denied { read } for pid=15075 comm="syz.3.2658" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 871.146215][ T31] audit: type=1400 audit(1790155513.275:17444): avc: denied { open } for pid=15075 comm="syz.3.2658" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 871.158856][ T31] audit: type=1400 audit(1790155513.295:17445): avc: denied { ioctl } for pid=15075 comm="syz.3.2658" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=926 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 872.179392][T15085] syzkaller0: entered promiscuous mode [ 872.179413][T15085] syzkaller0: entered allmulticast mode [ 873.157705][T11379] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 873.386718][T11379] usb 4-1: Using ep0 maxpacket: 32 [ 873.391485][T11379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 873.391521][T11379] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.392235][T11379] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 873.392262][T11379] usb 4-1: can't read configurations, error -71 [ 875.802215][ T1196] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 876.206719][ T1196] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 876.230692][ T31] audit: type=1400 audit(1790155517.975:17446): avc: denied { write } for pid=15106 comm="syz.2.2666" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 876.314598][ T1196] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.314631][ T1196] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 876.314670][ T1196] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 876.317134][ T1196] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 876.317154][ T1196] usb 2-1: Manufacturer: syz [ 876.371703][ T1196] usb 2-1: config 0 descriptor?? [ 876.376557][ T1196] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 876.737709][ T31] audit: type=1800 audit(1790155518.855:17447): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2667" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 877.216957][ T1196] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 877.486179][ T1196] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 877.497316][ T1196] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.497350][ T1196] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 877.497391][ T1196] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 877.574250][ T1196] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 877.574281][ T1196] usb 5-1: Manufacturer: syz [ 877.628594][T10339] usb 2-1: USB disconnect, device number 40 [ 877.637913][ T1196] usb 5-1: config 0 descriptor?? [ 877.648350][ T1196] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 877.974412][T10339] usb 5-1: USB disconnect, device number 33 [ 878.697603][T15143] input: syz0 as /devices/virtual/input/input19 [ 881.537831][ T31] audit: type=1800 audit(1790155523.665:17448): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2682" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 886.169667][T15208] input: syz0 as /devices/virtual/input/input20 [ 886.501369][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 886.930493][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 886.933724][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.933745][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 886.957813][ T25] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 886.957836][ T25] usb 4-1: Manufacturer: syz [ 886.974794][ T25] usb 4-1: config 0 descriptor?? [ 887.821821][T11379] usb 4-1: USB disconnect, device number 41 [ 888.726746][ T1196] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 888.937346][ T1196] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 889.002568][ T1196] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.002605][ T1196] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 889.002638][ T1196] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 889.175343][ T1196] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 889.175369][ T1196] usb 5-1: Manufacturer: syz [ 890.492419][ T1196] usb 5-1: config 0 descriptor?? [ 891.122677][ T1196] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 891.153642][T15241] kthread_run failed with err -4 [ 892.856788][ T1196] usb 5-1: USB disconnect, device number 34 [ 893.349177][ T1231] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 893.726355][ T1231] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 894.075433][ T1231] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 894.075471][ T1231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.075491][ T1231] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 894.079542][ T1231] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 894.079564][ T1231] usb 2-1: Manufacturer: syz [ 894.083038][ T1231] usb 2-1: config 0 descriptor?? [ 895.392544][ T1231] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 895.780945][ T1231] usb 2-1: USB disconnect, device number 41 [ 905.240721][T15333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2732'. [ 905.243787][T15332] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2731'. [ 905.350264][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 905.353581][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 905.354170][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 905.355907][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 905.356364][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 906.032747][T15349] input: syz0 as /devices/virtual/input/input21 [ 906.242681][ T1231] page_pool_release_retry() stalled pool shutdown: id 36, 37 inflight 302 sec [ 907.478277][ T52] Bluetooth: hci5: command tx timeout [ 909.556792][ T52] Bluetooth: hci5: command tx timeout [ 909.623879][ T1231] page_pool_release_retry() stalled pool shutdown: id 37, 43 inflight 302 sec [ 911.647318][ T52] Bluetooth: hci5: command tx timeout [ 911.950680][T15398] kthread_run failed with err -4 [ 912.143031][T15408] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.536411][T15334] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.536554][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.551726][T15334] bridge_slave_0: entered allmulticast mode [ 912.565690][T15334] bridge_slave_0: entered promiscuous mode [ 912.605608][T15334] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.605720][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.605832][T15334] bridge_slave_1: entered allmulticast mode [ 912.622979][T15334] bridge_slave_1: entered promiscuous mode [ 913.839079][ T52] Bluetooth: hci5: command tx timeout [ 914.407739][T15334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.438767][T15334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.699677][T15334] team0: Port device team_slave_0 added [ 915.705387][T15334] team0: Port device team_slave_1 added [ 916.183284][T15439] input: syz0 as /devices/virtual/input/input22 [ 916.247370][T15334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.247385][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.247406][T15334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.293188][T15251] syz_tun (unregistering): left allmulticast mode [ 916.352568][T15334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.352584][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.352605][T15334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.650963][T15334] hsr_slave_0: entered promiscuous mode [ 916.815205][T15334] hsr_slave_1: entered promiscuous mode [ 916.825238][T15334] debugfs: 'hsr0' already exists in 'hsr' [ 916.825260][T15334] Cannot create hsr debugfs directory [ 918.744504][T13184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.745948][T13184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.960991][T13184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.961025][T13184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.991188][T15476] input: syz0 as /devices/virtual/input/input23 [ 921.071681][T13184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.071713][T13184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.087241][ T1196] page_pool_release_retry() stalled pool shutdown: id 71, 46 inflight 181 sec [ 921.125428][T15477] kthread_run failed with err -4 [ 922.551387][T15497] input: syz0 as /devices/virtual/input/input24 [ 925.396003][T15498] kthread_run failed with err -4 [ 925.443616][T13184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.443649][T13184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.509740][T15334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 925.547515][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 925.549390][T15334] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 925.573472][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 925.574557][T15334] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 925.604020][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 925.606790][T15334] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 925.657400][T15334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.117758][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.117841][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.646921][ T5780] page_pool_release_retry() stalled pool shutdown: id 40, 22 inflight 303 sec [ 928.057091][T11379] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 928.096722][ T1196] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 928.257219][ T1196] usb 2-1: Using ep0 maxpacket: 32 [ 928.297713][T11379] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 928.301749][T11379] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 928.301787][T11379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.301811][T11379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.301831][T11379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 928.318305][ T1196] usb 2-1: unable to get BOS descriptor or descriptor too short [ 928.318484][ T1196] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.324371][ T1196] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 928.329825][ T1196] usb 2-1: can't read configurations, error -71 [ 928.336802][T11379] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 928.336823][T11379] usb 3-1: Manufacturer: syz [ 928.581145][T11379] usb 3-1: config 0 descriptor?? [ 930.615530][T11379] usbhid 3-1:0.0: can't add hid device: -71 [ 930.615954][T11379] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 930.628407][T11379] usb 3-1: USB disconnect, device number 47 [ 930.720310][T10339] page_pool_release_retry() stalled pool shutdown: id 42, 49 inflight 304 sec [ 931.994293][T15552] input: syz0 as /devices/virtual/input/input25 [ 932.423661][T10339] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 932.597090][T10339] usb 2-1: Using ep0 maxpacket: 32 [ 932.603052][T10339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 932.603094][T10339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 932.603815][T10339] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 932.603850][T10339] usb 2-1: can't read configurations, error -71 [ 936.159025][ T31] audit: type=1400 audit(1790155578.255:17449): avc: denied { write } for pid=15544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.225022][ T31] audit: type=1400 audit(1790155578.355:17450): avc: denied { write } for pid=15576 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.362390][T15578] input: syz0 as /devices/virtual/input/input26 [ 936.705473][T13184] bond0 (unregistering): Released all slaves [ 936.892770][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 936.957264][T13184] tipc: Left network mode [ 936.971512][T15334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.404264][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2792'. [ 938.869293][T15614] input: syz0 as /devices/virtual/input/input27 [ 939.155788][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2792'. [ 939.249115][T15334] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.265602][T13344] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.265685][T13344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.280258][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.280378][T13175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.344599][T15620] fuse: Bad value for 'fd' [ 939.773397][T13184] hsr_slave_0: left promiscuous mode [ 939.793114][T13184] hsr_slave_1: left promiscuous mode [ 939.841527][ T31] audit: type=1400 audit(1790155581.975:17451): avc: denied { write } for pid=15621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.901879][T13184] veth1_macvtap: left promiscuous mode [ 939.901934][T13184] veth0_macvtap: left promiscuous mode [ 939.904562][T13184] veth1_vlan: left promiscuous mode [ 939.904645][T13184] veth0_vlan: left promiscuous mode [ 940.023921][ T31] audit: type=1400 audit(1790155582.155:17452): avc: denied { write } for pid=15655 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.114704][T15661] fuse: Bad value for 'fd' [ 941.258025][T15669] fuse: Bad value for 'fd' [ 942.853084][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 943.849838][T13184] IPVS: stop unused estimator thread 0... [ 944.916442][T15714] fuse: Bad value for 'fd' [ 945.126821][ T31] audit: type=1400 audit(1790155587.205:17453): avc: denied { create } for pid=15717 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 945.192889][ T31] audit: type=1400 audit(1790155587.325:17454): avc: denied { write } for pid=15689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.221598][ T31] audit: type=1400 audit(1790155587.365:17455): avc: denied { connect } for pid=15717 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 945.425755][ T31] audit: type=1400 audit(1790155587.555:17456): avc: denied { write } for pid=15724 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.593981][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 947.317598][ T52] Bluetooth: hci4: command tx timeout [ 947.690960][T10339] device-mapper: multipath: 248:0: Failing path 7:0. [ 947.694653][T15334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.719861][T10339] Buffer I/O error on dev dm-0, logical block 0, async page read [ 947.947452][T15764] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 948.074050][T15772] fuse: Bad value for 'fd' [ 948.141888][T15334] veth0_vlan: entered promiscuous mode [ 948.163056][T15334] veth1_vlan: entered promiscuous mode [ 948.352917][ T31] audit: type=1400 audit(1790155590.365:17457): avc: denied { write } for pid=15743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.352962][ T31] audit: type=1400 audit(1790155590.435:17458): avc: denied { write } for pid=15781 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.434458][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 948.563240][T15787] ieee802154 phy0 wpan0: encryption failed: -22 [ 948.609386][T15787] input: syz0 as /devices/virtual/input/input28 [ 948.786193][T15769] md: pers->run() failed ... [ 948.968626][T15334] veth0_macvtap: entered promiscuous mode [ 948.973835][T15334] veth1_macvtap: entered promiscuous mode [ 949.001235][T15334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.025352][T15334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.069542][T13346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.070916][T13346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.070946][T13346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.070975][T13346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.397656][ T4917] Bluetooth: hci4: command 0x0406 tx timeout [ 949.481647][T13180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.481667][T13180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.564495][T13347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.564535][T13347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.035088][ T31] audit: type=1400 audit(1790155592.165:17459): avc: denied { mounton } for pid=15334 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 951.826688][ T1231] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 951.984265][ T1231] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.158333][ T1231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.158520][ T1231] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 952.204228][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.204314][ T1231] usb 5-1: Product: syz [ 952.204368][ T1231] usb 5-1: Manufacturer: syz [ 952.204422][ T1231] usb 5-1: SerialNumber: syz [ 952.370548][ T4917] Bluetooth: hci4: command 0x0406 tx timeout [ 952.664618][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.664857][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.711188][ T1231] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 952.735149][ T1231] usb 5-1: USB disconnect, device number 35 [ 952.985304][ T31] audit: type=1400 audit(1790155595.115:17460): avc: denied { bind } for pid=15850 comm="syz.5.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 952.985613][ T31] audit: type=1400 audit(1790155595.115:17461): avc: denied { listen } for pid=15850 comm="syz.5.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 953.007242][ T31] audit: type=1400 audit(1790155595.125:17462): avc: denied { accept } for pid=15850 comm="syz.5.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 953.327031][ T5780] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 953.478202][ T5780] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.480493][ T5780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.480514][ T5780] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 953.482316][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.482340][ T5780] usb 3-1: Product: syz [ 953.482354][ T5780] usb 3-1: Manufacturer: syz [ 953.482367][ T5780] usb 3-1: SerialNumber: syz [ 953.950323][T15856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.993959][T15856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.620622][ T5780] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 954.631960][ T5780] usb 3-1: USB disconnect, device number 48 [ 955.720544][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 956.057423][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 956.057920][ T30] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 956.058752][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.058778][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.058808][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.061024][ T30] usb 6-1: config 0 descriptor?? [ 956.312737][T15895] device-mapper: multipath: 248:0: Failing path 7:0. [ 956.325139][T15895] Buffer I/O error on dev dm-0, logical block 0, async page read [ 956.447607][ T1231] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 956.479883][ T30] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 956.479913][ T30] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 956.638417][ T1231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 956.639252][ T1231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.639271][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 956.641297][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.641321][ T1231] usb 1-1: Product: syz [ 956.641334][ T1231] usb 1-1: Manufacturer: syz [ 956.641347][ T1231] usb 1-1: SerialNumber: syz [ 956.679472][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 956.876204][T15911] input: syz0 as /devices/virtual/input/input29 [ 957.189948][ T30] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 957.227742][ T30] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 957.499744][ T30] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 957.672589][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.694638][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.707722][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.708664][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.836830][ T5796] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 957.883128][ T1231] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 957.958654][T15876] ft260 0003:0403:6030.0018: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 958.076379][ T1231] usb 1-1: USB disconnect, device number 38 [ 959.360975][T15923] input: syz0 as /devices/virtual/input/input30 [ 959.794023][T15929] device-mapper: multipath: 248:0: Failing path 7:0. [ 959.796052][T15929] Buffer I/O error on dev dm-0, logical block 0, async page read [ 960.247318][ T31] audit: type=1400 audit(1790155602.375:17463): avc: denied { write } for pid=15926 comm="syz.4.2865" name="netlink" dev="proc" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 960.959472][ T31] audit: type=1400 audit(1790155602.795:17464): avc: denied { mount } for pid=15941 comm="syz.1.2869" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 961.379328][ T31] audit: type=1400 audit(1790155603.515:17465): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 962.757462][ T1196] device-mapper: multipath: 248:0: Failing path 7:0. [ 962.757561][ T1196] Buffer I/O error on dev dm-0, logical block 0, async page read [ 962.833744][ T31] audit: type=1400 audit(1790155604.965:17466): avc: denied { write } for pid=15949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.923086][T15876] ft260 0003:0403:6030.0018: failed to reset I2C controller: -32 [ 962.923110][T15876] ft260 0003:0403:6030.0018: ft260_i2c_write: failed with -38 [ 963.289369][ T30] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 963.440282][ T30] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 963.445677][ T30] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 963.445762][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 963.445823][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 963.603136][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.603159][ T30] usb 3-1: Product: syz [ 963.603167][ T30] usb 3-1: Manufacturer: syz [ 963.603176][ T30] usb 3-1: SerialNumber: syz [ 963.623020][ T30] usb 3-1: config 0 descriptor?? [ 963.625214][T15979] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 963.709570][T11379] usb 6-1: USB disconnect, device number 2 [ 963.805827][ T31] audit: type=1400 audit(1790155605.935:17467): avc: denied { write } for pid=15986 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.818526][ T30] rc_core: IR keymap rc-streamzap not found [ 963.818541][ T30] Registered IR keymap rc-empty [ 963.824021][ T30] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 963.833709][ T30] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 963.860998][ T31] audit: type=1400 audit(1790155605.995:17468): avc: denied { read } for pid=15978 comm="syz.2.2876" name="sg0" dev="devtmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 963.861048][ T31] audit: type=1400 audit(1790155605.995:17469): avc: denied { open } for pid=15978 comm="syz.2.2876" path="/dev/sg0" dev="devtmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 963.863526][ T31] audit: type=1400 audit(1790155605.995:17470): avc: denied { ioctl } for pid=15978 comm="syz.2.2876" path="/dev/sg0" dev="devtmpfs" ino=885 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 963.863627][T15979] sd 0:0:1:0: device reset [ 963.941320][ T30] usb 3-1: USB disconnect, device number 49 [ 964.319411][T16007] device-mapper: multipath: 248:0: Failing path 7:0. [ 964.335314][T16007] Buffer I/O error on dev dm-0, logical block 0, async page read [ 964.943576][T16030] Buffer I/O error on dev dm-0, logical block 0, async page read [ 965.054935][ T31] audit: type=1400 audit(1790155607.185:17471): avc: denied { write } for pid=16000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.626480][ T31] audit: type=1400 audit(1790155607.755:17472): avc: denied { write } for pid=16042 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.628246][ T1231] page_pool_release_retry() stalled pool shutdown: id 36, 37 inflight 364 sec [ 967.901049][ T31] audit: type=1326 audit(1790155610.035:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.2896" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71f019e159 code=0x0 [ 968.279703][ T31] audit: type=1804 audit(1790155610.415:17474): pid=16070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2896" name="/newroot/579/file1" dev="fuse" ino=1 res=1 errno=0 [ 968.279732][ T31] audit: type=1800 audit(1790155610.415:17475): pid=16070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2896" name="/" dev="fuse" ino=1 res=0 errno=0 [ 968.461011][T16080] syzkaller0: entered promiscuous mode [ 968.461035][T16080] syzkaller0: entered allmulticast mode [ 968.545467][ T31] audit: type=1400 audit(1790155610.675:17476): avc: denied { write } for pid=16061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.092707][ T31] audit: type=1400 audit(1790155611.215:17477): avc: denied { write } for pid=16093 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.127063][ T1196] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 969.276663][ T1196] usb 1-1: Using ep0 maxpacket: 8 [ 969.277454][ T1196] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.278981][ T1196] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 969.279021][ T1196] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 969.279043][ T1196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 969.279081][ T1196] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 969.279105][ T1196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 969.279125][ T1196] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.279157][ T1196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.659265][ T1196] usb 1-1: usb_control_msg returned -71 [ 969.659304][ T1196] usbtmc 1-1:16.0: can't read capabilities [ 969.666132][ T1196] usb 1-1: USB disconnect, device number 39 [ 969.717967][ T30] page_pool_release_retry() stalled pool shutdown: id 37, 43 inflight 363 sec [ 970.283920][T16117] device-mapper: multipath: 248:0: Failing path 7:0. [ 970.284048][T16117] Buffer I/O error on dev dm-0, logical block 0, async page read [ 970.534813][ T31] audit: type=1400 audit(1790155612.665:17478): avc: denied { write } for pid=16105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.606445][T16124] device-mapper: multipath: 248:0: Failing path 7:0. [ 970.606691][T16124] Buffer I/O error on dev dm-0, logical block 0, async page read [ 970.876029][ T31] audit: type=1326 audit(1790155613.005:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.2896" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f019e159 code=0x7fc00000 [ 970.927614][ T31] audit: type=1400 audit(1790155613.055:17480): avc: denied { write } for pid=16136 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.036956][ T30] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 971.186956][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 971.189193][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 971.190475][ T30] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 971.190520][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 971.190543][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 971.190562][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 971.190587][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 971.190606][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.190645][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.412348][ T30] usb 5-1: usb_control_msg returned -71 [ 971.412374][ T30] usbtmc 5-1:16.0: can't read capabilities [ 971.433882][ T30] usb 5-1: USB disconnect, device number 36 [ 971.707311][T11379] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 971.857192][T11379] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 971.858084][T11379] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 971.858110][T11379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 971.858132][T11379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 971.860372][T11379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.860393][T11379] usb 3-1: Product: syz [ 971.860406][T11379] usb 3-1: Manufacturer: syz [ 971.860419][T11379] usb 3-1: SerialNumber: syz [ 971.872552][T11379] usb 3-1: config 0 descriptor?? [ 971.874448][T16146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.069714][T11379] rc_core: IR keymap rc-streamzap not found [ 972.069731][T11379] Registered IR keymap rc-empty [ 972.070565][T11379] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 972.079556][T11379] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 972.128466][T16146] sd 0:0:1:0: device reset [ 972.454905][T11379] usb 3-1: USB disconnect, device number 50 [ 973.008572][T16171] device-mapper: multipath: 248:0: Failing path 7:0. [ 973.009311][T16171] Buffer I/O error on dev dm-0, logical block 0, async page read [ 973.216219][ T31] audit: type=1326 audit(1790155615.345:17481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.5.2922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dacb9e159 code=0x0 [ 973.420546][ T31] audit: type=1804 audit(1790155615.555:17482): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2922" name="/newroot/16/file1" dev="fuse" ino=1 res=1 errno=0 [ 973.420581][ T31] audit: type=1800 audit(1790155615.555:17483): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2922" name="/" dev="fuse" ino=1 res=0 errno=0 [ 974.017472][T16191] device-mapper: multipath: 248:0: Failing path 7:0. [ 974.017685][T16191] Buffer I/O error on dev dm-0, logical block 0, async page read [ 974.276512][T16203] fuse: Bad value for 'fd' [ 974.578502][T16210] ======================================================= [ 974.578502][T16210] WARNING: The mand mount option has been deprecated and [ 974.578502][T16210] and is ignored by this kernel. Remove the mand [ 974.578502][T16210] option from the mount to silence this warning. [ 974.578502][T16210] ======================================================= [ 974.689874][T16210] overlayfs: overlapping lowerdir path [ 975.189813][ T30] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 975.648289][ T30] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 975.649159][ T30] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.649185][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 975.649208][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 975.650880][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.650901][ T30] usb 1-1: Product: syz [ 975.650914][ T30] usb 1-1: Manufacturer: syz [ 975.650927][ T30] usb 1-1: SerialNumber: syz [ 975.654295][ T30] usb 1-1: config 0 descriptor?? [ 975.654844][T16205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 975.836985][ T30] rc_core: IR keymap rc-streamzap not found [ 975.837004][ T30] Registered IR keymap rc-empty [ 975.838832][ T30] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 975.840917][ T30] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 976.087579][T16229] sd 0:0:1:0: device reset [ 976.135348][ T1196] usb 1-1: USB disconnect, device number 40 [ 976.208869][ T31] audit: type=1326 audit(1790155618.345:17484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16172 comm="syz.5.2922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dacb9e159 code=0x7fc00000 [ 977.133434][T16243] Buffer I/O error on dev dm-0, logical block 0, async page read [ 977.334388][T16244] input: syz0 as /devices/virtual/input/input34 [ 977.688478][T16249] fuse: Bad value for 'fd' [ 979.081177][ T31] audit: type=1800 audit(1790155621.175:17485): pid=16265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2949" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 979.122924][ T31] audit: type=1326 audit(1790155621.255:17486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.4.2950" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de539e159 code=0x0 [ 979.419357][T16275] device-mapper: multipath: 248:0: Failing path 7:0. [ 979.420833][T16275] Buffer I/O error on dev dm-0, logical block 0, async page read [ 979.787986][ T31] audit: type=1804 audit(1790155621.835:17487): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2950" name="/newroot/597/file1" dev="fuse" ino=1 res=1 errno=0 [ 979.788115][ T31] audit: type=1800 audit(1790155621.925:17488): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2950" name="/" dev="fuse" ino=1 res=0 errno=0 [ 979.884511][ T31] audit: type=1400 audit(1790155622.015:17489): avc: denied { mount } for pid=16282 comm="syz.5.2954" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 979.913727][ T31] audit: type=1807 audit(1790155622.045:17490): action=measure UNKNOWN=f res=0 [ 979.914686][ T31] audit: type=1802 audit(1790155622.045:17491): pid=16283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.2954" res=0 errno=0 [ 979.915145][T16282] ima: policy update failed [ 979.915256][ T31] audit: type=1802 audit(1790155622.045:17492): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2954" res=0 errno=0 [ 979.984252][ T31] audit: type=1400 audit(1790155622.115:17493): avc: denied { unmount } for pid=15334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 980.180016][T16290] fuse: Bad value for 'fd' [ 980.633100][T16297] device-mapper: table: 248:0: zero-length target [ 980.633111][T16297] device-mapper: ioctl: error adding target to table [ 980.967838][ T4917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 980.971972][ T4917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 980.977067][ T4917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 981.008534][ T4917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 981.014296][ T4917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 981.236990][ T5736] page_pool_release_retry() stalled pool shutdown: id 71, 46 inflight 242 sec [ 981.829298][T16308] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 982.049265][T13070] syz_tun (unregistering): left allmulticast mode [ 982.117345][ T31] audit: type=1326 audit(1790155624.255:17494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.4.2950" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de539e159 code=0x7fc00000 [ 982.759774][T16339] overlayfs: overlapping lowerdir path [ 983.078082][ T52] Bluetooth: hci1: command tx timeout [ 983.737807][T16342] ima: policy update failed [ 983.746347][ T31] audit: type=1807 audit(1790155625.865:17495): action=measure UNKNOWN=func= res=0 [ 983.746389][ T31] audit: type=1802 audit(1790155625.865:17496): pid=16343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.2970" res=0 errno=0 [ 983.746419][ T31] audit: type=1802 audit(1790155625.875:17497): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.2970" res=0 errno=0 [ 983.815752][T13344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.335176][T13344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.763996][T13344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.974307][T16359] overlayfs: overlapping lowerdir path [ 985.157368][ T52] Bluetooth: hci1: command tx timeout [ 985.866237][ T31] audit: type=1326 audit(1790155627.995:17498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.4.2977" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de539e159 code=0x0 [ 985.902828][T13344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.088396][ T31] audit: type=1804 audit(1790155628.215:17499): pid=16371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2977" name="/newroot/600/file1" dev="fuse" ino=1 res=1 errno=0 [ 986.130669][ T31] audit: type=1800 audit(1790155628.235:17500): pid=16371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2977" name="/" dev="fuse" ino=1 res=0 errno=0 [ 987.003683][T16382] overlayfs: overlapping lowerdir path [ 987.238266][ T52] Bluetooth: hci1: command tx timeout [ 987.559924][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.559997][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.826659][T16300] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.827029][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.833906][T16300] bridge_slave_0: entered allmulticast mode [ 987.840542][T16300] bridge_slave_0: entered promiscuous mode [ 987.843728][T16300] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.843797][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.843880][T16300] bridge_slave_1: entered allmulticast mode [ 987.863446][T16300] bridge_slave_1: entered promiscuous mode [ 988.346918][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.353550][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.471494][T16300] team0: Port device team_slave_0 added [ 988.678272][ T1196] page_pool_release_retry() stalled pool shutdown: id 40, 22 inflight 364 sec [ 988.849771][ T31] audit: type=1326 audit(1790155630.985:17501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16364 comm="syz.4.2977" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de539e159 code=0x7fc00000 [ 988.887737][T16398] device-mapper: multipath: 248:0: Failing path 7:0. [ 988.887865][T16398] Buffer I/O error on dev dm-0, logical block 0, async page read [ 989.345302][ T52] Bluetooth: hci1: command tx timeout [ 989.618542][T13344] bond0 (unregistering): Released all slaves [ 989.665159][T16300] team0: Port device team_slave_1 added [ 989.805800][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 989.805822][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 989.906049][ T31] audit: type=1400 audit(1790155632.035:17502): avc: denied { write } for pid=16396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.024183][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.024200][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.024215][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.025182][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.025193][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.025211][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.174611][ T31] audit: type=1400 audit(1790155632.305:17503): avc: denied { write } for pid=16440 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.204872][ T31] audit: type=1800 audit(1790155632.335:17504): pid=16439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2993" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 990.568153][T16300] hsr_slave_0: entered promiscuous mode [ 990.587104][T16300] hsr_slave_1: entered promiscuous mode [ 990.614219][T16300] debugfs: 'hsr0' already exists in 'hsr' [ 990.614240][T16300] Cannot create hsr debugfs directory [ 990.761448][ T5736] page_pool_release_retry() stalled pool shutdown: id 42, 49 inflight 364 sec [ 990.861721][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 990.924870][T13344] hsr_slave_0: left promiscuous mode [ 990.933556][T13344] hsr_slave_1: left promiscuous mode [ 990.962755][T13344] veth1_macvtap: left promiscuous mode [ 990.962779][T13344] veth0_macvtap: left promiscuous mode [ 990.962821][T13344] veth1_vlan: left promiscuous mode [ 990.962853][T13344] veth0_vlan: left promiscuous mode [ 993.164596][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 993.164614][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 993.824960][T13344] IPVS: stop unused estimator thread 0... [ 993.827720][ T5693] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 993.976714][ T5693] usb 6-1: Using ep0 maxpacket: 32 [ 993.979435][ T5693] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 993.980172][ T5693] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 993.981727][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 993.981741][ T5693] usb 6-1: Product: syz [ 993.981749][ T5693] usb 6-1: Manufacturer: syz [ 993.981757][ T5693] usb 6-1: SerialNumber: syz [ 993.983100][ T5693] usb 6-1: config 0 descriptor?? [ 993.983804][T16484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 993.984445][ T5693] hub 6-1:0.0: bad descriptor, ignoring hub [ 993.984457][ T5693] hub 6-1:0.0: probe with driver hub failed with error -5 [ 995.486541][ T31] audit: type=1400 audit(1790155637.615:17505): avc: denied { write } for pid=16473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.622934][T16300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 995.629897][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 995.630764][T16300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 995.654120][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 995.655830][T16300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 995.677949][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 995.677972][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 995.677997][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 995.678010][ T52] Workqueue: hci2 hci_rx_work [ 995.678044][ T52] Call Trace: [ 995.678050][ T52] [ 995.678058][ T52] dump_stack_lvl+0x100/0x190 [ 995.678090][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 995.678121][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 995.678151][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 995.678173][ T52] ? find_held_lock+0x2b/0x80 [ 995.678200][ T52] ? kobject_add_internal+0x25f/0x930 [ 995.678218][ T52] ? kobject_add_internal+0x25f/0x930 [ 995.678241][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 995.678265][ T52] kobject_add_internal+0x2c8/0x930 [ 995.678296][ T52] kobject_add+0x16a/0x1e0 [ 995.678315][ T52] ? __pfx_kobject_add+0x10/0x10 [ 995.678334][ T52] ? class_to_subsys+0x10f/0x150 [ 995.678368][ T52] ? kobject_put+0xb9/0x640 [ 995.678387][ T52] ? _raw_spin_unlock+0x28/0x50 [ 995.678419][ T52] device_add+0x294/0x1970 [ 995.678445][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 995.678464][ T52] ? __pfx_device_add+0x10/0x10 [ 995.678490][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 995.678522][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 995.678550][ T52] le_conn_complete_evt+0x122f/0x2130 [ 995.678581][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 995.678605][ T52] ? hci_event_packet+0x186/0xcd0 [ 995.678639][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 995.678665][ T52] ? skb_pull_data+0x15f/0x1e0 [ 995.678699][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 995.678726][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 995.678755][ T52] hci_event_packet+0x51c/0xcd0 [ 995.678779][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 995.678805][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 995.678835][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 995.678868][ T52] hci_rx_work+0x451/0xfc0 [ 995.678896][ T52] process_one_work+0xac7/0x1b10 [ 995.678937][ T52] ? __pfx_process_one_work+0x10/0x10 [ 995.678968][ T52] ? lock_acquire+0x1d1/0x380 [ 995.678995][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 995.679020][ T52] worker_thread+0x5ef/0xe50 [ 995.679057][ T52] ? kthread+0x13a/0x450 [ 995.679082][ T52] ? __pfx_worker_thread+0x10/0x10 [ 995.679105][ T52] kthread+0x373/0x450 [ 995.679128][ T52] ? __pfx_kthread+0x10/0x10 [ 995.679155][ T52] ret_from_fork+0x730/0xd60 [ 995.679180][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 995.679203][ T52] ? __switch_to+0x800/0x10f0 [ 995.679231][ T52] ? __pfx_kthread+0x10/0x10 [ 995.679259][ T52] ret_from_fork_asm+0x1a/0x30 [ 995.679294][ T52] [ 995.680611][ T52] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 995.680654][ T52] Bluetooth: hci2: failed to register connection device [ 995.696049][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 995.700040][T16300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 995.713918][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 995.933998][T13180] raw-gadget.0 gadget.5: failed to queue suspend event [ 995.944401][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.012101][T16484] raw-gadget.0 gadget.5: failed to queue resume event [ 996.022799][ T31] audit: type=1800 audit(1790155638.155:17506): pid=16521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3009" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 996.074341][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.161256][T13344] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.162540][T13344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.189361][T13344] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.189490][T13344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.221619][ T5810] raw-gadget.0 gadget.5: failed to queue suspend event [ 996.288616][T16484] raw-gadget.0 gadget.5: failed to queue resume event [ 996.314225][T13180] raw-gadget.0 gadget.5: failed to queue suspend event [ 996.471326][T16484] raw-gadget.0 gadget.5: failed to queue resume event [ 996.526345][ T31] audit: type=1400 audit(1790155638.655:17507): avc: denied { write } for pid=16522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.533211][ T5810] raw-gadget.0 gadget.5: failed to queue suspend event [ 996.718357][T16484] raw-gadget.0 gadget.5: failed to queue disconnect event [ 996.824016][ T52] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 996.826924][T10339] usb 6-1: USB disconnect, device number 3 [ 996.909737][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 996.909802][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 997.570200][ T31] audit: type=1400 audit(1790155639.705:17508): avc: denied { write } for pid=16535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.570408][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.059439][T16300] veth0_vlan: entered promiscuous mode [ 998.136325][T16300] veth1_vlan: entered promiscuous mode [ 998.150391][ T31] audit: type=1400 audit(1790155640.285:17509): avc: denied { write } for pid=16565 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.322283][T16300] veth0_macvtap: entered promiscuous mode [ 998.356868][T16300] veth1_macvtap: entered promiscuous mode [ 998.399654][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.416443][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.445781][T13181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.523905][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.528072][T13181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.529644][T13181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.111466][T13364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.111488][T13364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.333808][ T4917] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 999.377431][T13180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.377594][T13180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.621738][ T31] audit: type=1400 audit(1790155642.755:17510): avc: denied { write } for pid=16570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.734523][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 1000.734540][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 1000.990380][ T31] audit: type=1400 audit(1790155643.125:17511): avc: denied { write } for pid=16605 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.467507][T13952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1001.475601][T13952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1001.476402][T13952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1001.499365][T13952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1001.499632][T13952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.370809][T14492] syz_tun (unregistering): left allmulticast mode [ 1003.629970][ T4917] Bluetooth: hci4: command tx timeout [ 1004.869260][ T31] audit: type=1400 audit(1790155646.995:17512): avc: denied { write } for pid=16621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.925343][T13364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.444084][ T31] audit: type=1400 audit(1790155647.575:17513): avc: denied { write } for pid=16667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.660822][T13364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.716763][ T4917] Bluetooth: hci4: command tx timeout [ 1006.382571][T16692] device-mapper: multipath: 248:0: Failing path 7:0. [ 1006.382706][T16692] Buffer I/O error on dev dm-0, logical block 0, async page read [ 1006.433993][T13364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.611433][T13364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.806812][ T4917] Bluetooth: hci4: command tx timeout [ 1008.941660][T16727] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1009.878450][ T4917] Bluetooth: hci4: command tx timeout [ 1009.982577][T13364] bond0 (unregistering): Released all slaves [ 1010.474456][ T31] audit: type=1400 audit(1790155652.595:17514): avc: denied { write } for pid=16720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.170136][ T31] audit: type=1400 audit(1790155653.305:17515): avc: denied { write } for pid=16765 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.200561][T16611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.200780][T16611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.200861][T16611] bridge_slave_0: entered allmulticast mode [ 1011.204037][T16611] bridge_slave_0: entered promiscuous mode [ 1011.314345][T13364] hsr_slave_0: left promiscuous mode [ 1011.314626][T13364] hsr_slave_1: left promiscuous mode [ 1011.351438][T13364] veth1_macvtap: left promiscuous mode [ 1011.351463][T13364] veth0_macvtap: left promiscuous mode [ 1011.351506][T13364] veth1_vlan: left promiscuous mode [ 1011.351624][T13364] veth0_vlan: left promiscuous mode [ 1012.643777][ T5796] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1013.830073][ T5796] usb 3-1: Using ep0 maxpacket: 32 [ 1013.830596][ T5796] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1013.832959][ T5796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1013.866200][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1013.866217][ T5796] usb 3-1: Product: syz [ 1013.866225][ T5796] usb 3-1: Manufacturer: syz [ 1013.866232][ T5796] usb 3-1: SerialNumber: syz [ 1013.875953][ T5796] usb 3-1: config 0 descriptor?? [ 1013.880747][T16772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1013.885514][ T5796] hub 3-1:0.0: bad descriptor, ignoring hub [ 1013.885527][ T5796] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1014.668988][T16611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.669068][T16611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.669294][T16611] bridge_slave_1: entered allmulticast mode [ 1014.670561][T16611] bridge_slave_1: entered promiscuous mode [ 1014.728708][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1014.841107][T16611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.859457][T16611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.983070][T16611] team0: Port device team_slave_0 added [ 1014.992811][T16611] team0: Port device team_slave_1 added [ 1015.134621][T16611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.134638][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.134660][T16611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.742100][T16611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.742144][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.742178][T16611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.383279][T16611] hsr_slave_0: entered promiscuous mode [ 1016.387438][T16611] hsr_slave_1: entered promiscuous mode [ 1016.387968][T16611] debugfs: 'hsr0' already exists in 'hsr' [ 1016.387984][T16611] Cannot create hsr debugfs directory [ 1016.759409][T11379] usb 3-1: USB disconnect, device number 51 [ 1018.156932][T13364] IPVS: stop unused estimator thread 0... [ 1019.025805][ T31] audit: type=1400 audit(1790155661.155:17516): avc: denied { write } for pid=16796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.342227][ T31] audit: type=1400 audit(1790155661.475:17517): avc: denied { write } for pid=16835 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.401119][T16838] fuse: Bad value for 'fd' [ 1019.817274][ T1231] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1020.876658][ T1231] usb 3-1: Using ep0 maxpacket: 32 [ 1020.877156][ T1231] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1020.878635][ T1231] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1021.588337][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1021.588363][ T1231] usb 3-1: Product: syz [ 1021.588372][ T1231] usb 3-1: Manufacturer: syz [ 1021.588381][ T1231] usb 3-1: SerialNumber: syz [ 1021.622588][ T1231] usb 3-1: config 0 descriptor?? [ 1021.623153][T16840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1021.624869][ T1231] hub 3-1:0.0: bad descriptor, ignoring hub [ 1021.624890][ T1231] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1022.183871][T16862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.184069][T16862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.313864][T16611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1022.336528][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.348893][T16611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1022.372212][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.375228][T16611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1022.413128][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.414894][T16611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1022.431821][ T31] audit: type=1400 audit(1790155664.575:17518): avc: denied { write } for pid=16845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.464657][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1022.693790][T16611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.747277][T16611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.806996][T13364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.807051][T13364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.873625][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.873775][T13347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.952616][ T5810] raw-gadget.0 gadget.2: failed to queue suspend event [ 1023.013000][ T31] audit: type=1400 audit(1790155665.145:17519): avc: denied { write } for pid=16875 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.040410][T16840] raw-gadget.0 gadget.2: failed to queue resume event [ 1023.072917][ T5810] raw-gadget.0 gadget.2: failed to queue suspend event [ 1023.529858][T16840] raw-gadget.0 gadget.2: failed to queue resume event [ 1023.550777][T13347] raw-gadget.0 gadget.2: failed to queue suspend event [ 1023.585179][T16840] raw-gadget.0 gadget.2: failed to queue disconnect event [ 1023.816292][ T1231] usb 3-1: USB disconnect, device number 52 [ 1024.793031][T16905] fuse: Bad value for 'fd' [ 1025.353496][ T31] audit: type=1400 audit(1790155667.485:17520): avc: denied { write } for pid=16881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.856265][ T31] audit: type=1400 audit(1790155667.975:17521): avc: denied { write } for pid=16927 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.122195][T16611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.305721][T16611] veth0_vlan: entered promiscuous mode [ 1026.336668][ T5693] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1026.340525][T16611] veth1_vlan: entered promiscuous mode [ 1026.383406][T16937] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1026.471698][T16611] veth0_macvtap: entered promiscuous mode [ 1026.489099][T16611] veth1_macvtap: entered promiscuous mode [ 1026.496863][ T5693] usb 6-1: Using ep0 maxpacket: 32 [ 1026.497412][ T5693] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1026.498262][ T5693] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1026.499891][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1026.499909][ T5693] usb 6-1: Product: syz [ 1026.499921][ T5693] usb 6-1: Manufacturer: syz [ 1026.499933][ T5693] usb 6-1: SerialNumber: syz [ 1026.503472][ T5693] usb 6-1: config 0 descriptor?? [ 1026.504095][T16936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1026.505187][ T5693] hub 6-1:0.0: bad descriptor, ignoring hub [ 1026.505204][ T5693] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1026.624057][T16611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.648286][T16611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.819628][T13184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.825218][T13184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.825255][T13184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.825282][T13184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.002770][T13184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.002789][T13184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.093573][T13347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.093595][T13347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.445033][ T31] audit: type=1400 audit(1790155669.575:17522): avc: denied { write } for pid=16938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.858664][ T5693] usb 6-1: USB disconnect, device number 4 [ 1027.890567][ T31] audit: type=1400 audit(1790155670.025:17523): avc: denied { write } for pid=16969 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.611397][T13952] Bluetooth: hci5: command 0x0406 tx timeout [ 1030.853411][T10170] syz_tun (unregistering): left allmulticast mode [ 1033.353836][T13347] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.397158][T16996] overlayfs: overlapping lowerdir path [ 1033.966930][T13952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1033.968782][T13952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1033.972960][T13952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1034.004852][T13952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1034.020584][T13952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1034.212113][T13347] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.534103][T13347] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.722092][T13347] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.730976][T17030] overlayfs: overlapping lowerdir path [ 1036.116778][T13952] Bluetooth: hci2: command tx timeout [ 1036.935074][T17038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1038.196763][T13952] Bluetooth: hci2: command tx timeout [ 1038.349879][T13347] bond0 (unregistering): Released all slaves [ 1038.358037][ T31] audit: type=1400 audit(1790155680.495:17524): avc: denied { mounton } for pid=17054 comm="syz.1.3103" path="/6/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1038.421476][ T31] audit: type=1400 audit(1790155680.555:17525): avc: denied { write } for pid=17054 comm="syz.1.3103" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1038.556678][T13347] tipc: Left network mode [ 1038.616552][ T31] audit: type=1400 audit(1790155680.745:17526): avc: denied { write } for pid=17026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.829136][T13347] hsr_slave_0: left promiscuous mode [ 1038.834614][T13347] hsr_slave_1: left promiscuous mode [ 1038.879836][T13347] veth1_macvtap: left promiscuous mode [ 1038.879870][T13347] veth0_macvtap: left promiscuous mode [ 1038.879916][T13347] veth1_vlan: left promiscuous mode [ 1038.879947][T13347] veth0_vlan: left promiscuous mode [ 1039.185548][ T31] audit: type=1400 audit(1790155681.315:17527): avc: denied { setattr } for pid=17054 comm="syz.1.3103" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1039.211072][ T31] audit: type=1400 audit(1790155681.345:17528): avc: denied { write } for pid=17066 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.313673][ T31] audit: type=1400 audit(1790155681.445:17529): avc: denied { unmount } for pid=16611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1039.608414][T17075] device-mapper: ioctl: name not supplied when creating device [ 1040.308377][T13952] Bluetooth: hci2: command tx timeout [ 1040.414655][T17078] [ 1040.417008][T17078] ====================================================== [ 1040.424007][T17078] WARNING: possible circular locking dependency detected [ 1040.431013][T17078] syzkaller #0 Not tainted [ 1040.435407][T17078] ------------------------------------------------------ [ 1040.442397][T17078] syz.0.3108/17078 is trying to acquire lock: [ 1040.448444][T17078] ffff88803560a138 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 1040.458174][T17078] [ 1040.458174][T17078] but task is already holding lock: [ 1040.465519][T17078] ffff888057a81080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1040.474804][T17078] [ 1040.474804][T17078] which lock already depends on the new lock. [ 1040.474804][T17078] [ 1040.485192][T17078] [ 1040.485192][T17078] the existing dependency chain (in reverse order) is: [ 1040.494186][T17078] [ 1040.494186][T17078] -> #2 (&of->mutex){+.+.}-{4:4}: [ 1040.501379][T17078] lock_acquire+0x1d1/0x380 [ 1040.506387][T17078] __mutex_lock+0x1a4/0x1bd0 [ 1040.511498][T17078] kernfs_fop_write_iter+0x2c2/0x5f0 [ 1040.517284][T17078] iter_file_splice_write+0x830/0x10b0 [ 1040.523250][T17078] do_splice+0x109c/0x1fa0 [ 1040.528171][T17078] __do_splice+0x33b/0x370 [ 1040.533098][T17078] __x64_sys_splice+0x187/0x250 [ 1040.538483][T17078] do_syscall_64+0x123/0x790 [ 1040.543587][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.549982][T17078] [ 1040.549982][T17078] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1040.557344][T17078] lock_acquire+0x1d1/0x380 [ 1040.562364][T17078] __mutex_lock+0x1a4/0x1bd0 [ 1040.567467][T17078] anon_pipe_prefill_and_lock+0x3fb/0x580 [ 1040.573690][T17078] anon_pipe_write+0x164/0x1b50 [ 1040.579043][T17078] __kernel_write_iter+0x6bb/0x930 [ 1040.584670][T17078] __kernel_write+0xf6/0x140 [ 1040.589763][T17078] autofs_notify_daemon+0x50d/0xd90 [ 1040.595468][T17078] autofs_wait+0x10fd/0x1b50 [ 1040.600568][T17078] autofs_mount_wait+0x132/0x3b0 [ 1040.606010][T17078] autofs_d_automount+0x490/0x950 [ 1040.611541][T17078] __traverse_mounts+0x1b9/0x8a0 [ 1040.616991][T17078] step_into_slowpath+0xb7e/0xf90 [ 1040.622516][T17078] link_path_walk+0xf28/0x1cc0 [ 1040.627791][T17078] path_lookupat+0x74/0xc40 [ 1040.632794][T17078] filename_lookup+0x202/0x590 [ 1040.638060][T17078] vfs_statx+0xff/0x3f0 [ 1040.642722][T17078] __do_sys_newstat+0xaa/0x130 [ 1040.647990][T17078] do_syscall_64+0x123/0x790 [ 1040.653089][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.659482][T17078] [ 1040.659482][T17078] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1040.667190][T17078] check_prev_add+0xeb/0xe60 [ 1040.672284][T17078] __lock_acquire+0x1528/0x1f40 [ 1040.677634][T17078] lock_acquire+0x1d1/0x380 [ 1040.682637][T17078] __mutex_lock+0x1a4/0x1bd0 [ 1040.687732][T17078] autofs_notify_daemon+0x4f8/0xd90 [ 1040.693436][T17078] autofs_wait+0x10fd/0x1b50 [ 1040.698532][T17078] autofs_mount_wait+0x132/0x3b0 [ 1040.703994][T17078] autofs_d_automount+0x490/0x950 [ 1040.709523][T17078] __traverse_mounts+0x1b9/0x8a0 [ 1040.714969][T17078] step_into_slowpath+0xb7e/0xf90 [ 1040.720494][T17078] path_lookupat+0x58b/0xc40 [ 1040.725584][T17078] filename_lookup+0x202/0x590 [ 1040.730849][T17078] kern_path+0x37/0x50 [ 1040.735420][T17078] lookup_bdev+0xd8/0x2a0 [ 1040.740247][T17078] resume_store+0x1d6/0x460 [ 1040.745257][T17078] kobj_attr_store+0x58/0x80 [ 1040.750348][T17078] sysfs_kf_write+0xf2/0x150 [ 1040.755440][T17078] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1040.761236][T17078] vfs_write+0x6af/0x1050 [ 1040.766068][T17078] ksys_write+0x12a/0x250 [ 1040.770896][T17078] do_syscall_64+0x123/0x790 [ 1040.775991][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.782386][T17078] [ 1040.782386][T17078] other info that might help us debug this: [ 1040.782386][T17078] [ 1040.792592][T17078] Chain exists of: [ 1040.792592][T17078] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 1040.792592][T17078] [ 1040.804993][T17078] Possible unsafe locking scenario: [ 1040.804993][T17078] [ 1040.812424][T17078] CPU0 CPU1 [ 1040.817765][T17078] ---- ---- [ 1040.823110][T17078] lock(&of->mutex); [ 1040.827069][T17078] lock(&pipe->mutex); [ 1040.833723][T17078] lock(&of->mutex); [ 1040.840205][T17078] lock(&sbi->pipe_mutex); [ 1040.844687][T17078] [ 1040.844687][T17078] *** DEADLOCK *** [ 1040.844687][T17078] [ 1040.852818][T17078] locks held by syz.0.3108/17078: 4, last CPU#0: [ 1040.859120][T17078] #0: ffff88803376b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1040.868153][T17078] #1: ffff888037ad8460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1040.877102][T17078] #2: ffff888057a81080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1040.886823][T17078] #3: ffff8880206ef5a8 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1040.896808][T17078] [ 1040.896808][T17078] stack backtrace: [ 1040.902676][T17078] CPU: 0 UID: 0 PID: 17078 Comm: syz.0.3108 Not tainted syzkaller #0 PREEMPT(full) [ 1040.912023][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1040.922058][T17078] Call Trace: [ 1040.925321][T17078] [ 1040.928232][T17078] dump_stack_lvl+0x100/0x190 [ 1040.932898][T17078] print_circular_bug.cold+0x178/0x1be [ 1040.938363][T17078] check_noncircular+0x146/0x160 [ 1040.943285][T17078] check_prev_add+0xeb/0xe60 [ 1040.947858][T17078] __lock_acquire+0x1528/0x1f40 [ 1040.952695][T17078] lock_acquire+0x1d1/0x380 [ 1040.957178][T17078] ? autofs_notify_daemon+0x4f8/0xd90 [ 1040.962541][T17078] ? __pfx___might_resched+0x10/0x10 [ 1040.967808][T17078] __mutex_lock+0x1a4/0x1bd0 [ 1040.972388][T17078] ? autofs_notify_daemon+0x4f8/0xd90 [ 1040.977747][T17078] ? autofs_notify_daemon+0x4f8/0xd90 [ 1040.983112][T17078] ? find_held_lock+0x2b/0x80 [ 1040.987805][T17078] ? autofs_notify_daemon+0x4a0/0xd90 [ 1040.993169][T17078] ? autofs_notify_daemon+0x4a0/0xd90 [ 1040.998537][T17078] ? __pfx___mutex_lock+0x10/0x10 [ 1041.003559][T17078] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1041.009186][T17078] ? from_kgid_munged+0xab/0x130 [ 1041.014114][T17078] ? __pfx_from_kgid_munged+0x10/0x10 [ 1041.019470][T17078] ? path_lookupat+0x58b/0xc40 [ 1041.024218][T17078] ? autofs_notify_daemon+0x4f8/0xd90 [ 1041.029577][T17078] autofs_notify_daemon+0x4f8/0xd90 [ 1041.034786][T17078] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1041.040500][T17078] ? lockdep_init_map_type+0x5c/0x250 [ 1041.045876][T17078] ? lockdep_init_map_type+0x5c/0x250 [ 1041.051233][T17078] autofs_wait+0x10fd/0x1b50 [ 1041.055809][T17078] ? __pfx_autofs_wait+0x10/0x10 [ 1041.060742][T17078] ? find_held_lock+0x2b/0x80 [ 1041.065408][T17078] ? path_has_submounts+0xcf/0x120 [ 1041.070503][T17078] ? do_raw_spin_unlock+0x145/0x1e0 [ 1041.075702][T17078] ? find_held_lock+0x2b/0x80 [ 1041.080369][T17078] autofs_mount_wait+0x132/0x3b0 [ 1041.085306][T17078] autofs_d_automount+0x490/0x950 [ 1041.090320][T17078] __traverse_mounts+0x1b9/0x8a0 [ 1041.095252][T17078] step_into_slowpath+0xb7e/0xf90 [ 1041.100259][T17078] ? rcu_is_watching+0x13/0xc0 [ 1041.105011][T17078] ? __pfx_step_into_slowpath+0x10/0x10 [ 1041.110550][T17078] ? lookup_slow+0x5b/0x70 [ 1041.114967][T17078] ? lookup_slow+0x5b/0x70 [ 1041.119390][T17078] path_lookupat+0x58b/0xc40 [ 1041.123970][T17078] filename_lookup+0x202/0x590 [ 1041.128725][T17078] ? __pfx_filename_lookup+0x10/0x10 [ 1041.134002][T17078] ? do_getname_kernel+0x5d/0x250 [ 1041.139020][T17078] ? __asan_memcpy+0x3c/0x60 [ 1041.143597][T17078] kern_path+0x37/0x50 [ 1041.147652][T17078] lookup_bdev+0xd8/0x2a0 [ 1041.151964][T17078] ? __pfx_lookup_bdev+0x10/0x10 [ 1041.156898][T17078] ? __asan_memcpy+0x3c/0x60 [ 1041.161469][T17078] resume_store+0x1d6/0x460 [ 1041.165955][T17078] ? __pfx_resume_store+0x10/0x10 [ 1041.170963][T17078] ? lock_acquire+0x1d1/0x380 [ 1041.175619][T17078] ? sysfs_file_kobj+0x21/0x290 [ 1041.180451][T17078] ? find_held_lock+0x2b/0x80 [ 1041.185110][T17078] ? sysfs_file_kobj+0xe4/0x290 [ 1041.189940][T17078] ? sysfs_file_kobj+0xe4/0x290 [ 1041.194772][T17078] ? __pfx_resume_store+0x10/0x10 [ 1041.199779][T17078] kobj_attr_store+0x58/0x80 [ 1041.204348][T17078] ? __pfx_kobj_attr_store+0x10/0x10 [ 1041.209619][T17078] sysfs_kf_write+0xf2/0x150 [ 1041.214208][T17078] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1041.219477][T17078] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1041.224667][T17078] vfs_write+0x6af/0x1050 [ 1041.228989][T17078] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1041.234780][T17078] ? __pfx_vfs_write+0x10/0x10 [ 1041.239548][T17078] ? find_held_lock+0x2b/0x80 [ 1041.244218][T17078] ksys_write+0x12a/0x250 [ 1041.248529][T17078] ? __pfx_ksys_write+0x10/0x10 [ 1041.253367][T17078] do_syscall_64+0x123/0x790 [ 1041.257945][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.263822][T17078] RIP: 0033:0x7f4a9fd9e159 [ 1041.268219][T17078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.287809][T17078] RSP: 002b:00007f4aa0c28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.296203][T17078] RAX: ffffffffffffffda RBX: 00007f4aa0025fa0 RCX: 00007f4a9fd9e159 [ 1041.304155][T17078] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000007 [ 1041.312103][T17078] RBP: 00007f4a9fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 1041.320052][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.328000][T17078] R13: 00007f4aa0026038 R14: 00007f4aa0025fa0 R15: 00007ffef2675e38 [ 1041.335955][T17078] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1041.575151][T17078] PM: Image not found (code -6) [ 1041.757726][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1041.859941][T15003] syz_tun (unregistering): left allmulticast mode [ 1042.093004][T13347] IPVS: stop unused estimator thread 0... [ 1042.212366][T13347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.213942][ T31] audit: type=1400 audit(1790155684.345:17530): avc: denied { write } for pid=17085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.269600][ T31] audit: type=1400 audit(1790155684.405:17531): avc: denied { write } for pid=17096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.271177][T13347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.305139][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1042.326083][T13347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.373982][T13347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.444317][ T31] audit: type=1400 audit(1790155684.575:17532): avc: denied { write } for pid=17099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.470985][T13347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.471016][T13347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.511678][ T31] audit: type=1400 audit(1790155684.645:17533): avc: denied { write } for pid=17110 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.542876][T13347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.542906][T13347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.545148][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1042.584003][T13347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.584034][T13347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.641374][T13347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.641404][T13347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.741877][T13347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.744599][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1042.780488][T13347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.832277][T13347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.883563][T13347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.952954][T13347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.971856][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1043.013095][T13347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.051250][T13347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.081094][T13347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.155633][T13347] bridge_slave_1: left allmulticast mode [ 1043.155655][T13347] bridge_slave_1: left promiscuous mode [ 1043.155763][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.179558][T13347] bridge_slave_0: left allmulticast mode [ 1043.179578][T13347] bridge_slave_0: left promiscuous mode [ 1043.179673][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.201184][T13347] bridge_slave_1: left allmulticast mode [ 1043.201199][T13347] bridge_slave_1: left promiscuous mode [ 1043.201266][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.201899][T13347] bridge_slave_0: left allmulticast mode [ 1043.201909][T13347] bridge_slave_0: left promiscuous mode [ 1043.201956][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.204056][T13347] bridge_slave_1: left allmulticast mode [ 1043.204067][T13347] bridge_slave_1: left promiscuous mode [ 1043.204118][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.204711][T13347] bridge_slave_0: left allmulticast mode [ 1043.204720][T13347] bridge_slave_0: left promiscuous mode [ 1043.204770][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.314163][T13347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.315078][T13347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.315532][T13347] bond0 (unregistering): Released all slaves [ 1043.362819][T13347] bond0 (unregistering): Released all slaves [ 1043.383805][T13347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.384744][T13347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.385192][T13347] bond0 (unregistering): Released all slaves [ 1043.423570][T13347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.424327][T13347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.424777][T13347] bond0 (unregistering): Released all slaves [ 1043.426066][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1043.592094][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1043.592109][ T31] audit: type=1400 audit(1790155685.725:17540): avc: denied { write } for pid=17158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.640507][ T31] audit: type=1400 audit(1790155685.775:17541): avc: denied { write } for pid=17169 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.684089][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1043.807342][ T31] audit: type=1400 audit(1790155685.945:17542): avc: denied { write } for pid=17173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.863351][ T31] audit: type=1400 audit(1790155685.995:17543): avc: denied { write } for pid=17184 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.910756][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1043.968339][T13347] hsr_slave_0: left promiscuous mode [ 1043.968762][T13347] hsr_slave_1: left promiscuous mode [ 1043.969113][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.969127][T13347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.969740][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.969753][T13347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.971612][T13347] hsr_slave_0: left promiscuous mode [ 1043.972222][T13347] hsr_slave_1: left promiscuous mode [ 1043.974164][T13347] hsr_slave_0: left promiscuous mode [ 1043.974437][T13347] hsr_slave_1: left promiscuous mode [ 1043.974784][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.974798][T13347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.975109][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.975122][T13347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.987747][T13347] hsr_slave_0: left promiscuous mode [ 1043.995360][T13347] hsr_slave_1: left promiscuous mode [ 1043.995727][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.995740][T13347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.004510][T13347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.004526][T13347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.028192][T13347] veth1_macvtap: left promiscuous mode [ 1044.028217][T13347] veth0_macvtap: left promiscuous mode [ 1044.028264][T13347] veth1_vlan: left promiscuous mode [ 1044.028296][T13347] veth0_vlan: left promiscuous mode [ 1044.053038][T13347] veth1_macvtap: left promiscuous mode [ 1044.053064][T13347] veth0_macvtap: left promiscuous mode [ 1044.053113][T13347] veth1_vlan: left promiscuous mode [ 1044.053147][T13347] veth0_vlan: left promiscuous mode [ 1044.068743][ T31] audit: type=1400 audit(1790155686.205:17544): avc: denied { write } for pid=17187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.079771][T13347] veth1_macvtap: left promiscuous mode [ 1044.083557][T13347] veth0_macvtap: left promiscuous mode [ 1044.083608][T13347] veth1_vlan: left promiscuous mode [ 1044.083648][T13347] veth0_vlan: left promiscuous mode [ 1044.100445][T13347] veth1_macvtap: left promiscuous mode [ 1044.100469][T13347] veth0_macvtap: left promiscuous mode [ 1044.100513][T13347] veth1_vlan: left promiscuous mode [ 1044.100546][T13347] veth0_vlan: left promiscuous mode [ 1044.123073][ T31] audit: type=1400 audit(1790155686.255:17545): avc: denied { write } for pid=17198 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.297523][T13347] team0 (unregistering): Port device team_slave_1 removed [ 1044.299439][T13347] team0 (unregistering): Port device team_slave_0 removed [ 1044.422615][T13347] team0 (unregistering): Port device team_slave_1 removed [ 1044.426255][T13347] team0 (unregistering): Port device team_slave_0 removed [ 1044.491392][T13347] team0 (unregistering): Port device team_slave_1 removed [ 1044.493380][T13347] team0 (unregistering): Port device team_slave_0 removed [ 1044.518528][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1044.674938][ T31] audit: type=1400 audit(1790155686.805:17546): avc: denied { write } for pid=17202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.722640][ T31] audit: type=1400 audit(1790155686.855:17547): avc: denied { write } for pid=17213 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.805404][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1044.954589][ T31] audit: type=1400 audit(1790155687.085:17548): avc: denied { write } for pid=17216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.011099][ T31] audit: type=1400 audit(1790155687.135:17549): avc: denied { write } for pid=17227 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.050671][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1045.213251][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1045.303798][T13347] IPVS: stop unused estimator thread 0... [ 1045.408634][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1045.561144][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1045.705499][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1045.855837][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1046.004194][ T5262] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1046.144734][ T5262] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1046.306074][ T5262] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1046.453654][ T5262] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1048.997359][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.997398][ T1308] ieee802154 phy1 wpan1: encryption failed: -22