last executing test programs: 14m4.70866084s ago: executing program 4 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c000}, 0x240008c0) (fail_nth: 3) 14m4.205263954s ago: executing program 4 (id=133): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r9, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f00000009c0)=0x402) ppoll(&(0x7f0000000a00)=[{r10, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x4, 0x0, 0x0, 0x401, 0x5, 0x8, 0x0, 0x1139, 0x1, 0x10001, 0x10000, 0x8, 0x8, 0xc, 0xf, {0x8, 0x8}, 0x9, 0x4}}) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 14m2.893325477s ago: executing program 4 (id=137): rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000280)={0x0, 0xb9d8, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(&(0x7f0000000640)='./file2\x00', 0x1ff) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000680)=[@ioring_restriction_register_op], 0x1) io_uring_setup(0x266b, &(0x7f00000006c0)={0x0, 0x4abf, 0x3ff, 0x3, 0x2d3}) mount(&(0x7f0000000740)=@filename='127.0.0.1:/\x00', &(0x7f0000000780)='./file2\x00', &(0x7f00000007c0)='nfs\x00', 0x0, &(0x7f0000000800)='addr=127.0.0.1,vers=3,proto=udp\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000200)=@other={'lock', ' ', 'io+mem'}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) semget(0x3, 0x2, 0x5b2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 14m0.887750815s ago: executing program 4 (id=141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7) ptrace$pokeuser(0x6, r0, 0x3, 0x101) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39ca, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000300), 0x4003) write(r2, &(0x7f0000000740)='10', 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x2) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='ip\x00\x03cr\x80e\x83', &(0x7f0000000540)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x2000c8c0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 13m57.413330979s ago: executing program 4 (id=148): setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x1, 0xa}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x7, 0x0, r1}) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0xa5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m55.407893568s ago: executing program 4 (id=152): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x822b01) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x2}, 0x29) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) 13m40.18297825s ago: executing program 32 (id=152): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x822b01) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x2}, 0x29) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) 1m4.9715928s ago: executing program 2 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(r0, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) keyctl$setperm(0x5, 0x0, 0x280104) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r7, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f0000019580)=0x7) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000195c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000019640), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000019680)={0x0, 0x0, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 59.778106727s ago: executing program 2 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x2d, 0x107, 0x70bd28, 0xfffffff6, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\n\x00'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x1001, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) 57.734348008s ago: executing program 2 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001010000000000000040000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x613f, 0x81, 0x9cdbee1763468153, 0x3, 0x9}, 0x40}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001000000060004000000000006"], 0xe4}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 56.966046279s ago: executing program 2 (id=1620): r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(r0, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeb3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) keyctl$setperm(0x5, 0x0, 0x280104) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000019580)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000195c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000019640), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000019680)={0x0, 0x0, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r8, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000340)=[{&(0x7f0000000380)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 54.720995856s ago: executing program 2 (id=1623): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 51.373732498s ago: executing program 2 (id=1627): socket$kcm(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8a}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x21, 0x8001020, r0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x401) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) setrlimit(0x6, &(0x7f0000019600)={0x3, 0xc000000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000019640), 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000019680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01072cbd7000fcdbdf2506000000080003", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000197c0)={&(0x7f0000019800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000019840)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8845) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f00000198c0)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000019900), 0x4000095, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) 35.791963549s ago: executing program 33 (id=1627): socket$kcm(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8a}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x21, 0x8001020, r0, 0x0) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x401) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) setrlimit(0x6, &(0x7f0000019600)={0x3, 0xc000000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000019640), 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000019680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01072cbd7000fcdbdf2506000000080003", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000197c0)={&(0x7f0000019800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000019840)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8845) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f00000198c0)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000019900), 0x4000095, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) 13.168633167s ago: executing program 0 (id=1687): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) 12.243375114s ago: executing program 0 (id=1692): r0 = msgget$private(0x0, 0x193) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000780), 0x200000000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x1ff) mount(&(0x7f00000008c0)=@filename='./dev/sda1\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000940)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000009c0)=0x200000) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffc, 0xb, 0x6}) fchmod(0xffffffffffffffff, 0x60) syz_usb_disconnect(r2) syz_usb_connect(0x5, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000c40)=0x18) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-sm4-aesni-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="000102030405060708090a0b0c0d0e0f", 0x10) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]}, 0x0) read$alg(r4, &(0x7f0000000440)=""/32, 0x20) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRES32=r4], 0x1008, 0x0) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT=r1], 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000f00)=ANY=[@ANYRESHEX=r3, @ANYRES16], 0xd0}}, 0x80) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r0, &(0x7f0000000240)={0x0, ""/158}, 0xa6, 0x1, 0x3000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$radio(&(0x7f00000005c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000600)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x98f909, 0x300, '\x00', @value64=0x400003}}) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x2) 11.565057217s ago: executing program 6 (id=1654): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 10.401562617s ago: executing program 1 (id=1694): r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800012000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) mkdir(&(0x7f0000000340)='./file0\x00', 0x184) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000480)='./bus\x00') r4 = syz_open_dev$sndmidi(&(0x7f00000007c0), 0x2, 0x121c81) writev(r4, &(0x7f0000000800)=[{&(0x7f0000000840)="94", 0x1}], 0x1) r5 = open(&(0x7f00000004c0)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r5, r5, &(0x7f00000005c0), 0x7f03) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="9b689b969622368d6079d4710eb270bc7a5e"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) 10.393074066s ago: executing program 3 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='270', 0x3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write(r1, &(0x7f0000000500)='270', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_setup(0xf08, &(0x7f0000000540)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='lz4', 0x3) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b40)={0x2000009, "f563eb0000001c4c18410000055e0000001400"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="35582524551034ea1b59aa6cc5d489bd1bac9bfe78c93e65185dec33a64bd33c2b184d8fbf55"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./mnt\x00', 0x1ff) mount(&(0x7f0000000880)=@filename='./dev/sda1\x00', &(0x7f00000008c0)='./mnt\x00', &(0x7f0000000900)='ext4\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000980)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) fsync(r4) 10.392190253s ago: executing program 5 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000010900020073797a31000000000900010073797a30000000005c0003805800008008000340000000024c000b80340001800a0001006c696d6974000000240002800c00024000000000000000000c0001400000000000006fbc08000440000000"], 0x10c}}, 0x0) 9.903309369s ago: executing program 5 (id=1697): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xeaa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000019680)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980)={0x0}}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 9.600760016s ago: executing program 3 (id=1698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="99a82b7ca6a7e841d4c1b7df1799e8c9", 0x10}], 0x1, 0x3) close(r2) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000001c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfa, &(0x7f0000000240)) setns(0xc9, 0x20000000) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8000f28, 0x5) 9.416388317s ago: executing program 6 (id=1654): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 9.412537932s ago: executing program 1 (id=1699): r0 = socket(0x9, 0xa, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000c00)=ANY=[], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000d40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000bc0)={0x2, 0x4e20, @multicast2}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000900)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x142}, {&(0x7f00000003c0)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x30}}, 0x40) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000007c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r6) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="050000000000000000000500000014000180060001000a00120006000400"], 0x28}}, 0x0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) syz_usb_connect(0x0, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401007018000010102030109026c0001010080fa090400000aff00000009050102000200000009050202000200000009050302000200000009050402000200000009050502000200000009058102000200000009058202000200000009058302000200000009058402000200000009058502"], 0x0) 7.320103801s ago: executing program 0 (id=1700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8840) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800"], 0xa4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f00000005c0)={0x0, 0x1, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=@framed={{}, [@jmp={0x5, 0x1, 0x7}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x3, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x40) sendmmsg$sock(r5, &(0x7f00000008c0), 0x0, 0x40) 7.319030354s ago: executing program 5 (id=1701): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xe000000000000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000540)=0x9, 0x4) read$eventfd(r2, &(0x7f0000000040), 0x8) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='8') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x125f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r6 = syz_pidfd_open(r5, 0x0) r7 = open(&(0x7f00000004c0)='./file0\x00', 0x511000, 0x10) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000000500)) pidfd_send_signal(r6, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x6, &(0x7f0000a00000/0x600000)=nil) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="44012f733ee3aa6c000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000000000307144e230002000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 7.032771487s ago: executing program 6 (id=1654): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 5.03402188s ago: executing program 0 (id=1702): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="ad08009a3fc36e961e1500e4340cd695", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000740)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="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", 0xffc}, {&(0x7f0000002800)="4789d3aefc1a4d03345aed327be33c28", 0x10}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 5.018178545s ago: executing program 1 (id=1703): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7f, 0x200004d, 0x6}) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$dri(0x0, 0xcaf8, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$getflags(r0, 0x401) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000500), 0x7f03) syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000055c0)={0x1, 0x5, 0xcd}) 5.015581452s ago: executing program 3 (id=1704): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = userfaultfd(0x80001) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 5.012579911s ago: executing program 5 (id=1705): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002b40)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@mirror={0x0, 0x3c48, 0x0, 0x80, 'mirror\x00', {'core 2 1024 sync', 0x20, 0x2, [{0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '8191'}}, {0x20, {@ram_num={'1:', 0x1}, 0x20, '16'}}]}}]}) 4.936664862s ago: executing program 5 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x3bd4, 0x0, &(0x7f00000004c0), 0x0, 0x0) close(0x3) openat$snapshot(0xffffff9c, &(0x7f0000000500), 0x185301, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={0x0, 0x80000001, 0x30}, 0xc) r4 = dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r5, &(0x7f00000007c0)="31303017", 0x4) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000840)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000008c0)) openat(r5, &(0x7f0000000900)='./sys\x00', 0x280080, 0x41) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xe}}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000280)) 4.910522612s ago: executing program 6 (id=1654): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.482653397s ago: executing program 0 (id=1707): openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x442, 0x42) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$can_bcm(r1, 0x0, 0x8050) (async) prlimit64(0x0, 0x1, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) (async) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) (rerun: 32) read$msr(r5, &(0x7f0000000480)=""/102392, 0x18ff8) (async, rerun: 64) sched_setaffinity(r4, 0x8, &(0x7f0000019480)=0xaf) (rerun: 64) syz_open_dev$usbmon(&(0x7f00000194c0), 0x0, 0x20120) (async) r6 = socket(0xa, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019500), 0x42002) write$sndseq(r7, &(0x7f0000000400)=[{0x9, 0xc, 0x2, 0x3, @tick=0x2, {0x5, 0x10}, {0xd, 0x3}, @queue={0x0, {0x810, 0xffff}}}], 0x1c) poll(&(0x7f0000019580), 0x0, 0xfbe) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, 0x0) (async, rerun: 64) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000195c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x400}}}, 0x108) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000019700)=ANY=[@ANYBLOB], 0x110) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r8, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) 3.481021207s ago: executing program 1 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000010900020073797a31000000000900010073797a30000000005c0003805800008008000340000000024c000b80340001800a0001006c696d6974000000240002800c00024000000000000000000c0001400000000000006fbc0800044000000001140801"], 0x10c}}, 0x0) 3.470646818s ago: executing program 3 (id=1709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x3, 0x8, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000a00)={0x1, 0x3, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000a40)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) mount$overlay(0x30, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) 3.314818194s ago: executing program 1 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000900)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000b80), 0x2, 0x141102) writev(r4, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'vcan0\x00'}) 2.493235372s ago: executing program 3 (id=1711): syz_clone(0x54018100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f0000000280)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f00000005c0)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000600)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x80, 0x1, 0x23b}}], 0x1, &(0x7f0000000a80)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000b00)="04", 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg', 0x3) shutdown(r0, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) (async) r8 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x14, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r10}, 0xc) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) r12 = creat(&(0x7f0000000200)='./file1\x00', 0x108) (async) r13 = fanotify_init(0xf00, 0x1) fanotify_mark(r13, 0x105, 0x40009975, r12, 0x0) (async) fallocate(r11, 0x0, 0x1000000, 0x3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r11, 0x0) 2.37670528s ago: executing program 6 (id=1654): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 267.15241ms ago: executing program 0 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000540)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000400)='+1\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='mem\n', 0x4) (async) nanosleep(&(0x7f00000004c0)={0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000640)=0x1f02, 0x12) getsockopt(r6, 0x200000000114, 0x2716, 0x0, &(0x7f0000000680)) write$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 259.750425ms ago: executing program 1 (id=1713): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r9}) ppoll(&(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x4, 0x0, 0x0, 0x401, 0x5, 0x8, 0x0, 0x1139, 0x1, 0x10001, 0x10000, 0x8, 0x8, 0xc, 0xf, {0x8, 0x8}, 0x9, 0x4}}) socket$inet_tcp(0x2, 0x1, 0x0) 259.060345ms ago: executing program 3 (id=1714): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='12..0.0.1:/root\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1'}, {'timeo=1'}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x1d) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 253.950404ms ago: executing program 5 (id=1715): r0 = socket(0x9, 0xa, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000c00)=ANY=[], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000d40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000bc0)={0x2, 0x4e20, @multicast2}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000900)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x142}, {&(0x7f00000003c0)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x30}}, 0x40) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000007c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r6) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="050000000000000000000500000014000180060001000a00120006000400"], 0x28}}, 0x0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) syz_usb_connect(0x0, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401007018000010102030109026c0001010080fa090400000aff00000009050102000200000009050202000200000009050302000200000009050402000200000009050502000200000009058102000200000009058202000200000009058302000200000009058402000200000009058502"], 0x0) 0s ago: executing program 6 (id=1654): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = userfaultfd(0x80001) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f00000003c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x141}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x100135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): sadm_r:sysadm_t pid=11331 comm="syz.5.1335" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffb99f559 code=0x7ffc0000 [ 759.173208][ T30] audit: type=1326 audit(1792680574.950:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1335" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f4ffb99f559 code=0x7ffc0000 [ 759.174990][ T30] audit: type=1326 audit(1792680574.950:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1335" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffb99f559 code=0x7ffc0000 [ 759.321322][T11309] lo speed is unknown, defaulting to 1000 [ 759.579605][T11340] overlayfs: missing 'lowerdir' [ 761.181204][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1339'. [ 761.423847][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 761.426557][T11351] ceph: No mds server is up or the cluster is laggy [ 761.446915][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 761.710230][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 761.710935][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 762.139054][T11361] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1341'. [ 763.229814][T11359] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1342'. [ 764.069145][T11371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1345'. [ 766.378530][ T3217] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 766.448420][ T5726] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 766.539192][ T3217] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 766.541294][ T3217] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 766.544383][ T3217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.544416][ T3217] usb 4-1: Product: syz [ 766.544467][ T3217] usb 4-1: Manufacturer: syz [ 766.544507][ T3217] usb 4-1: SerialNumber: syz [ 766.604232][T11387] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1346'. [ 766.659015][T11376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 766.750039][ T5726] usb 2-1: device descriptor read/64, error -71 [ 766.875363][ T10] usb 4-1: USB disconnect, device number 35 [ 767.147527][ T5726] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 767.328293][ T5726] usb 2-1: device descriptor read/64, error -71 [ 767.657558][T11395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1347'. [ 768.305534][ T5726] usb usb2-port1: attempt power cycle [ 769.576242][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 769.681070][T11414] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1353'. [ 770.574631][T11416] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1354'. [ 771.296808][T11422] ceph: No mds server is up or the cluster is laggy [ 771.298672][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 771.298813][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 771.696304][T11433] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1356'. [ 774.708979][T11440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1359'. [ 775.768329][ T5723] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 775.928793][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 775.930085][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 775.932542][ T5723] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.932635][ T5723] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.936740][ T5723] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 775.936771][ T5723] usb 4-1: Product: syz [ 775.936805][ T5723] usb 4-1: Manufacturer: syz [ 776.069513][ T5723] hub 4-1:4.0: USB hub found [ 776.388549][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 776.408618][ T5723] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 776.429939][ T5723] usb 4-1: USB disconnect, device number 36 [ 776.973242][ T10] usb 1-1: device descriptor read/64, error -71 [ 777.151751][T11457] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1357'. [ 777.208228][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 777.338214][ T10] usb 1-1: device descriptor read/64, error -71 [ 777.514837][ T10] usb usb1-port1: attempt power cycle [ 777.628332][ T5723] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 777.778264][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 777.779525][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 777.782218][ T5723] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.782292][ T5723] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.786325][ T5723] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 777.786353][ T5723] usb 4-1: Product: syz [ 777.786388][ T5723] usb 4-1: Manufacturer: syz [ 777.904214][ T5723] hub 4-1:4.0: USB hub found [ 778.231894][ T5723] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 778.249334][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 778.269391][ T10] usb 1-1: device descriptor read/8, error -71 [ 778.274877][ T5723] usb 4-1: USB disconnect, device number 37 [ 778.388748][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 778.518505][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 778.540124][ T10] usb 1-1: device descriptor read/8, error -71 [ 778.578241][ T3217] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 778.600438][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 778.601224][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 778.622029][T11468] ceph: No mds server is up or the cluster is laggy [ 778.762408][ T10] usb usb1-port1: unable to enumerate USB device [ 778.859751][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 778.860350][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 779.233007][T11478] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1367'. [ 779.423437][ T3217] usb 3-1: Using ep0 maxpacket: 32 [ 779.659983][ T3217] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 779.660721][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 779.661388][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 780.855283][ T3217] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.855342][ T3217] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.257842][ T3217] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 781.257924][ T3217] usb 3-1: Product: syz [ 781.257960][ T3217] usb 3-1: Manufacturer: syz [ 782.166312][ T3217] usb 3-1: can't set config #4, error -71 [ 782.207716][ T3217] usb 3-1: USB disconnect, device number 44 [ 782.406886][T11487] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1369'. [ 782.947616][T11491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1370'. [ 784.978226][ T5738] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 785.128251][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 785.131951][ T5738] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 785.135230][ T5738] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.135259][ T5738] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.183046][ T5738] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 785.183070][ T5738] usb 6-1: Product: syz [ 785.183083][ T5738] usb 6-1: Manufacturer: syz [ 785.215161][ T5738] hub 6-1:4.0: USB hub found [ 785.444050][ T5738] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 786.259227][ T5738] usb 6-1: reset high-speed USB device number 28 using dummy_hcd [ 786.617246][ T3217] libceph: connect (1)[c::]:6789 error -101 [ 786.617901][ T3217] libceph: mon0 (1)[c::]:6789 connect error [ 786.636552][T11507] ceph: No mds server is up or the cluster is laggy [ 788.409726][ T5820] usb 6-1: USB disconnect, device number 28 [ 788.968383][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1379'. [ 789.847519][ T5820] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 789.905202][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 789.999713][ T5820] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 790.000787][ T5820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 790.004707][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.004731][ T5820] usb 4-1: Product: syz [ 790.004745][ T5820] usb 4-1: Manufacturer: syz [ 790.004760][ T5820] usb 4-1: SerialNumber: syz [ 790.011641][T11516] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 790.690776][ T5820] usb 4-1: USB disconnect, device number 38 [ 790.856473][T11537] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1374'. [ 792.119135][T11542] overlayfs: missing 'lowerdir' [ 792.830428][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 794.878219][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 795.018272][ T10] usb 6-1: device descriptor read/64, error -71 [ 795.066022][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'. [ 796.988513][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 796.988633][T11563] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1385'. [ 797.118241][ T10] usb 6-1: device descriptor read/64, error -71 [ 797.228711][ T10] usb usb6-port1: attempt power cycle [ 797.284245][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 797.284942][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 797.309906][T11567] ceph: No mds server is up or the cluster is laggy [ 797.544237][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 797.545589][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 798.048505][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 799.226769][ T10] usb 6-1: device not accepting address 31, error -71 [ 799.546327][ T5820] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 799.597247][T11585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1391'. [ 799.657732][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1391'. [ 800.878405][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 800.878808][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 800.879525][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.879542][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.880632][ T5820] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 800.880645][ T5820] usb 2-1: Product: syz [ 800.880653][ T5820] usb 2-1: Manufacturer: syz [ 800.889636][ T5820] hub 2-1:4.0: USB hub found [ 801.189329][ T10] libceph: connect (1)[c::]:6789 error -101 [ 801.200695][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 801.224264][T11597] ceph: No mds server is up or the cluster is laggy [ 801.556841][ T5820] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 801.642953][ T5820] usb 2-1: USB disconnect, device number 37 [ 803.100585][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.100633][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.303986][T11614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1400'. [ 803.426681][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 807.128943][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 807.128960][ T30] audit: type=1400 audit(1792680622.910:1550): avc: denied { audit_write } for pid=11640 comm="syz.1.1405" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 807.190411][T11641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1405'. [ 807.191875][T11641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1405'. [ 808.536129][T11622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1403'. [ 808.578209][T10662] rpcbind: server 127.0.0.1 not responding, timed out [ 808.624807][T11658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1395'. [ 809.106466][T11660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1408'. [ 811.426767][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1411'. [ 812.667353][T11676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1413'. [ 815.259482][ T30] audit: type=1326 audit(1792680631.040:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.260239][ T30] audit: type=1326 audit(1792680631.040:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.262857][ T30] audit: type=1326 audit(1792680631.040:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.264388][ T30] audit: type=1326 audit(1792680631.040:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.295102][ T30] audit: type=1326 audit(1792680631.040:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.295152][ T30] audit: type=1326 audit(1792680631.040:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.295192][ T30] audit: type=1326 audit(1792680631.050:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.295231][ T30] audit: type=1326 audit(1792680631.050:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.322860][ T30] audit: type=1326 audit(1792680631.040:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.322907][ T30] audit: type=1326 audit(1792680631.080:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.0.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 815.345665][T11688] udevd[11688]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 815.369715][T11688] udevd[11688]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 815.385884][T11688] udevd[11688]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 815.580148][T10656] rpcbind: server 127.0.0.1 not responding, timed out [ 816.461078][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 816.931004][T11707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1409'. [ 816.984556][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 819.267993][T11716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'. [ 819.345809][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 819.522649][T11729] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1424'. [ 820.880095][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1425'. [ 822.226462][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 822.227159][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 822.241621][T11738] ceph: No mds server is up or the cluster is laggy [ 822.721537][T11747] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1423'. [ 824.176864][T10666] rpcbind: server 127.0.0.1 not responding, timed out [ 824.663787][ T1440] rpcbind: server 127.0.0.1 not responding, timed out [ 826.738631][ T5820] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 826.745064][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 826.745079][ T30] audit: type=1326 audit(1792680642.520:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.745257][ T30] audit: type=1326 audit(1792680642.520:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.745417][ T30] audit: type=1326 audit(1792680642.520:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.746990][ T30] audit: type=1326 audit(1792680642.520:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.747282][ T30] audit: type=1326 audit(1792680642.520:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.747447][ T30] audit: type=1326 audit(1792680642.520:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.747854][ T30] audit: type=1326 audit(1792680642.520:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.747920][ T30] audit: type=1326 audit(1792680642.520:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.748034][ T30] audit: type=1326 audit(1792680642.520:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.748168][ T30] audit: type=1326 audit(1792680642.520:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11758 comm="syz.0.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 826.889684][ T5820] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 826.890670][ T5820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 826.892581][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.892600][ T5820] usb 4-1: Product: syz [ 826.892612][ T5820] usb 4-1: Manufacturer: syz [ 826.892625][ T5820] usb 4-1: SerialNumber: syz [ 826.905149][T11753] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 827.158840][ T5820] usb 4-1: USB disconnect, device number 39 [ 828.808343][T11768] team_slave_0: entered allmulticast mode [ 828.859881][T11768] team_slave_0: entered promiscuous mode [ 831.398530][ T5820] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 832.089190][ T5820] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 832.090240][ T5820] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 832.092425][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.092439][ T5820] usb 3-1: Product: syz [ 832.092447][ T5820] usb 3-1: Manufacturer: syz [ 832.092455][ T5820] usb 3-1: SerialNumber: syz [ 832.096721][T11780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 832.393465][ T986] libceph: connect (1)[c::]:6789 error -101 [ 832.394174][ T986] libceph: mon0 (1)[c::]:6789 connect error [ 832.413864][T11795] ceph: No mds server is up or the cluster is laggy [ 832.649996][ T986] libceph: connect (1)[c::]:6789 error -101 [ 832.650647][ T986] libceph: mon0 (1)[c::]:6789 connect error [ 832.772491][ T5820] usb 3-1: USB disconnect, device number 45 [ 833.160470][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 833.161277][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 833.177709][T11803] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1435'. [ 834.424431][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 834.425340][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 835.423740][ T986] libceph: connect (1)[c::]:6789 error -101 [ 835.423883][ T986] libceph: mon0 (1)[c::]:6789 connect error [ 835.624845][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 835.624863][ T30] audit: type=1326 audit(1792680651.400:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.624968][ T30] audit: type=1326 audit(1792680651.400:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.625148][ T30] audit: type=1326 audit(1792680651.400:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.625253][ T30] audit: type=1326 audit(1792680651.400:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.658657][ T30] audit: type=1326 audit(1792680651.410:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.658701][ T30] audit: type=1326 audit(1792680651.410:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.658735][ T30] audit: type=1326 audit(1792680651.410:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.658768][ T30] audit: type=1326 audit(1792680651.410:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.658801][ T30] audit: type=1326 audit(1792680651.410:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 835.658842][ T30] audit: type=1326 audit(1792680651.410:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.0.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 836.033432][T11813] FAULT_INJECTION: forcing a failure. [ 836.033432][T11813] name failslab, interval 1, probability 0, space 0, times 0 [ 836.033466][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.0.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.033493][T11813] Tainted: [L]=SOFTLOCKUP [ 836.033500][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 836.033511][T11813] Call Trace: [ 836.033518][T11813] [ 836.033526][T11813] dump_stack_lvl+0x100/0x190 [ 836.033559][T11813] should_fail_ex.cold+0x5/0xa [ 836.033589][T11813] should_failslab+0xc2/0x120 [ 836.033614][T11813] kmem_cache_alloc_noprof+0x92/0x6a0 [ 836.033639][T11813] ? copy_pid_ns+0x326/0x10a0 [ 836.033670][T11813] copy_pid_ns+0x326/0x10a0 [ 836.033698][T11813] ? __pfx_copy_pid_ns+0x10/0x10 [ 836.033723][T11813] ? rcu_is_watching+0x13/0xc0 [ 836.033750][T11813] ? __pfx_copy_mnt_ns+0x10/0x10 [ 836.033774][T11813] ? create_new_namespaces+0x30/0xac0 [ 836.033800][T11813] create_new_namespaces+0x2aa/0xac0 [ 836.033827][T11813] unshare_nsproxy_namespaces+0xf6/0x210 [ 836.033856][T11813] ksys_unshare+0x44f/0x980 [ 836.033878][T11813] ? __pfx_ksys_unshare+0x10/0x10 [ 836.033914][T11813] __x64_sys_unshare+0x31/0x40 [ 836.033935][T11813] do_syscall_64+0x123/0x790 [ 836.033966][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.033987][T11813] RIP: 0033:0x7f2193d9f559 [ 836.034003][T11813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.034021][T11813] RSP: 002b:00007f2194c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 836.034040][T11813] RAX: ffffffffffffffda RBX: 00007f2194025fa0 RCX: 00007f2193d9f559 [ 836.034053][T11813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 836.034065][T11813] RBP: 00007f2193e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 836.034076][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.034087][T11813] R13: 00007f2194026038 R14: 00007f2194025fa0 R15: 00007ffca99bfdd8 [ 836.034115][T11813] [ 836.243593][T11816] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1446'. [ 836.294303][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 837.178330][ T5820] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 837.878879][ T5820] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 837.879742][ T5820] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 837.879765][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.879782][ T5820] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 837.879830][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.885575][ T5820] usb 1-1: config 0 descriptor?? [ 837.892178][ T5820] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 838.301396][T11837] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1439'. [ 838.330688][ T5820] uvcvideo 1-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 838.354620][ T5820] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 838.354800][ T5820] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 838.419181][ T5820] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -71 [ 838.509413][ T5820] usb 1-1: USB disconnect, device number 40 [ 838.703578][T11839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 839.105967][T11841] md: could not open device unknown-block(1,5). [ 839.425093][T11846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1452'. [ 839.974130][ T5723] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 840.216342][T11848] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1453'. [ 840.458949][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 840.497084][ T5723] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 840.516344][ T5723] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.516364][ T5723] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.530983][ T5723] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 840.531006][ T5723] usb 2-1: Product: syz [ 840.531019][ T5723] usb 2-1: Manufacturer: syz [ 840.549648][ T5723] hub 2-1:4.0: USB hub found [ 840.669397][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 840.669415][ T30] audit: type=1326 audit(1792680656.450:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.669482][ T30] audit: type=1326 audit(1792680656.450:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.671224][ T30] audit: type=1326 audit(1792680656.450:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.671337][ T30] audit: type=1326 audit(1792680656.450:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.671476][ T30] audit: type=1326 audit(1792680656.450:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.671648][ T30] audit: type=1326 audit(1792680656.450:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.671910][ T30] audit: type=1326 audit(1792680656.450:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.671983][ T30] audit: type=1326 audit(1792680656.450:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.672335][ T30] audit: type=1326 audit(1792680656.450:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.675087][ T30] audit: type=1326 audit(1792680656.450:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.3.1455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 840.768824][ T5723] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 840.976694][ T5723] usb 2-1: USB disconnect, device number 38 [ 841.458287][ T5723] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 841.618272][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 841.620204][ T5723] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 841.624635][ T5723] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.624689][ T5723] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.668786][ T5723] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 841.668812][ T5723] usb 2-1: Product: syz [ 841.668825][ T5723] usb 2-1: Manufacturer: syz [ 841.802898][T11874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1458'. [ 841.854306][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 842.305268][ T5723] hub 2-1:4.0: USB hub found [ 843.329936][ T5723] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 843.370920][ T5723] usb 2-1: USB disconnect, device number 39 [ 843.441752][T11890] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 843.480604][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.674921][T11904] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1462'. [ 845.076557][T11911] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1467'. [ 846.717895][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 846.717908][ T30] audit: type=1326 audit(1792680662.480:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.717934][ T30] audit: type=1326 audit(1792680662.480:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.717956][ T30] audit: type=1326 audit(1792680662.480:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.717978][ T30] audit: type=1326 audit(1792680662.480:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.718002][ T30] audit: type=1326 audit(1792680662.480:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.718023][ T30] audit: type=1326 audit(1792680662.480:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.718045][ T30] audit: type=1326 audit(1792680662.480:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.718067][ T30] audit: type=1326 audit(1792680662.490:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.718103][ T30] audit: type=1326 audit(1792680662.490:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.718125][ T30] audit: type=1326 audit(1792680662.490:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.2.1468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65ef9f559 code=0x7ffc0000 [ 846.998216][ T5723] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 847.173550][ T5723] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 847.194078][ T5723] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 847.194476][ T5723] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.194655][ T5723] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 847.195498][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.334071][ T5723] usb 6-1: config 0 descriptor?? [ 847.442239][ T5723] uvcvideo 6-1:0.0: Found UVC 9.00 device (046d:0825) [ 848.672496][ T5723] uvcvideo 6-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 848.673110][ T5723] uvcvideo 6-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 848.673149][ T5723] uvcvideo 6-1:0.1: Failed to initialize the device (-71). [ 848.673587][ T5723] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -71 [ 848.720289][ T5723] usb 6-1: USB disconnect, device number 33 [ 849.668327][ T5820] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 849.893348][ T5820] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 849.894358][ T5820] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 849.896469][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.896487][ T5820] usb 3-1: Product: syz [ 849.896501][ T5820] usb 3-1: Manufacturer: syz [ 849.896514][ T5820] usb 3-1: SerialNumber: syz [ 849.941761][T11932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 850.543628][ T5820] usb 3-1: USB disconnect, device number 46 [ 850.875714][T11953] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1480'. [ 851.954906][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 851.954923][ T30] audit: type=1400 audit(1792680667.730:1765): avc: denied { bind } for pid=11951 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 851.964200][T11957] blktrace: Concurrent blktraces are not allowed on loop10 [ 851.964507][T11957] FAULT_INJECTION: forcing a failure. [ 851.964507][T11957] name failslab, interval 1, probability 0, space 0, times 0 [ 851.964533][T11957] CPU: 1 UID: 0 PID: 11957 Comm: syz.5.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.964559][T11957] Tainted: [L]=SOFTLOCKUP [ 851.964566][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 851.964577][T11957] Call Trace: [ 851.964583][T11957] [ 851.964590][T11957] dump_stack_lvl+0x100/0x190 [ 851.964629][T11957] should_fail_ex.cold+0x5/0xa [ 851.964653][T11957] should_failslab+0xc2/0x120 [ 851.964677][T11957] __kvmalloc_node_noprof+0x113/0x9b0 [ 851.964696][T11957] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 851.964713][T11957] ? percpu_ref_init+0xec/0x3f0 [ 851.964732][T11957] ? io_alloc_cache_init+0x38/0x170 [ 851.964755][T11957] io_alloc_cache_init+0x38/0x170 [ 851.964776][T11957] io_uring_setup.cold+0x450/0x1c7e [ 851.964795][T11957] ? lock_acquire+0x1d1/0x380 [ 851.964811][T11957] ? avc_has_perm_noaudit+0x56/0x470 [ 851.964830][T11957] ? __pfx_io_uring_setup+0x10/0x10 [ 851.964853][T11957] ? find_held_lock+0x2b/0x80 [ 851.964874][T11957] ? avc_has_perm_noaudit+0x11e/0x470 [ 851.964892][T11957] ? avc_has_perm_noaudit+0x11e/0x470 [ 851.964925][T11957] ? xfd_validate_state+0x129/0x190 [ 851.964950][T11957] __x64_sys_io_uring_setup+0xc2/0x170 [ 851.964976][T11957] do_syscall_64+0x123/0x790 [ 851.965004][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.965022][T11957] RIP: 0033:0x7f4ffb99f559 [ 851.965036][T11957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.965052][T11957] RSP: 002b:00007f4ffc7e2fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 851.965069][T11957] RAX: ffffffffffffffda RBX: 00002000000001c0 RCX: 00007f4ffb99f559 [ 851.965084][T11957] RDX: 0000200000000740 RSI: 00002000000001c0 RDI: 000000000000063a [ 851.965095][T11957] RBP: 00007f4ffba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 851.965107][T11957] R10: 00002000000002c0 R11: 0000000000000206 R12: 0000200000000740 [ 851.965118][T11957] R13: 00002000000002c0 R14: 0000200000000240 R15: 00007fff5f514df8 [ 851.965147][T11957] [ 852.207630][ T30] audit: type=1326 audit(1792680667.980:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.207809][ T30] audit: type=1326 audit(1792680667.980:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.214070][ T30] audit: type=1326 audit(1792680667.980:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.214110][ T30] audit: type=1326 audit(1792680667.990:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.214165][ T30] audit: type=1326 audit(1792680667.990:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.216975][ T30] audit: type=1326 audit(1792680667.990:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.217000][ T30] audit: type=1326 audit(1792680667.990:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.217022][ T30] audit: type=1326 audit(1792680667.990:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 852.224636][ T30] audit: type=1326 audit(1792680668.000:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11961 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2193d9f559 code=0x7ffc0000 [ 857.298355][T10662] IPVS: starting estimator thread 0... [ 857.388313][T11990] IPVS: using max 40 ests per chain, 96000 per kthread [ 859.094207][T12002] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1491'. [ 859.312847][T10664] rpcbind: server 127.0.0.1 not responding, timed out [ 859.709881][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1492'. [ 861.216164][T12011] overlayfs: missing 'lowerdir' [ 862.511298][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 862.511315][ T30] audit: type=1326 audit(1792680678.290:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.512456][ T30] audit: type=1326 audit(1792680678.290:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.516119][ T30] audit: type=1326 audit(1792680678.290:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.516164][ T30] audit: type=1326 audit(1792680678.290:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.516872][ T30] audit: type=1326 audit(1792680678.290:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.516917][ T30] audit: type=1326 audit(1792680678.290:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.516957][ T30] audit: type=1326 audit(1792680678.290:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.517184][ T30] audit: type=1326 audit(1792680678.290:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.517357][ T30] audit: type=1326 audit(1792680678.290:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 862.822333][ T30] audit: type=1326 audit(1792680678.580:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.1.1495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51a79f559 code=0x7ffc0000 [ 865.104764][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.104811][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.220547][T10654] rpcbind: server 127.0.0.1 not responding, timed out [ 865.478526][ T8888] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 865.588538][ T5820] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 865.629861][ T8888] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 865.630772][ T8888] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 865.630794][ T8888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.630811][ T8888] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 865.630859][ T8888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.635055][ T8888] usb 3-1: config 0 descriptor?? [ 866.558540][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 866.567144][ T8888] uvcvideo 3-1:0.0: Found UVC 9.00 device (046d:0825) [ 866.582580][ T5820] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 866.584923][ T5820] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.584951][ T5820] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.587970][ T5820] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 866.587993][ T5820] usb 4-1: Product: syz [ 866.588007][ T5820] usb 4-1: Manufacturer: syz [ 866.648918][ T5820] hub 4-1:4.0: USB hub found [ 866.780494][ T8888] uvcvideo 3-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 866.782406][ T8888] uvcvideo 3-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 866.782459][ T8888] uvcvideo 3-1:0.1: Failed to initialize the device (-71). [ 866.782975][ T8888] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -71 [ 866.807023][ T8888] usb 3-1: USB disconnect, device number 47 [ 866.911985][ T5820] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 866.978518][ T5723] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 867.210722][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 867.212694][ T5723] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 867.269218][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.269466][ T5723] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.269505][ T5723] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.269555][ T5723] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.269611][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 867.269761][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.383710][ T5723] usb 2-1: config 0 descriptor?? [ 867.511696][ T5820] usb 4-1: reset high-speed USB device number 40 using dummy_hcd [ 867.767275][ T5723] usbhid 2-1:0.0: can't add hid device: -71 [ 867.767357][ T5723] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 867.798093][T12068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1506'. [ 868.241152][ T5723] usb 2-1: USB disconnect, device number 40 [ 868.422390][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 868.422430][ T30] audit: type=1400 audit(1792680684.200:1863): avc: denied { write } for pid=12073 comm="syz.2.1508" path="socket:[33978]" dev="sockfs" ino=33978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 869.387367][ T986] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 869.450510][ T5723] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 869.450580][ T5738] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 869.538200][ T986] usb 1-1: Using ep0 maxpacket: 8 [ 869.538687][ T986] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 869.539541][ T986] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 869.539563][ T986] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 869.539580][ T986] usb 1-1: config 135 has no interface number 0 [ 869.539612][ T986] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.541262][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.541282][ T986] usb 1-1: Product: syz [ 869.541295][ T986] usb 1-1: Manufacturer: syz [ 869.541308][ T986] usb 1-1: SerialNumber: syz [ 869.556853][ T986] uvcvideo 1-1:135.230: Found Unit with invalid ID 0 [ 869.556946][ T986] uvcvideo 1-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 869.556969][ T986] uvcvideo 1-1:135.230: No valid video chain found. [ 869.589305][ T5726] usb 4-1: USB disconnect, device number 40 [ 869.599506][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 869.599916][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 869.606347][ T5723] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 869.614067][ T5738] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 869.624835][ T5738] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 869.624857][ T5738] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 869.624874][ T5738] usb 6-1: config 0 has no interface number 0 [ 869.624906][ T5738] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.624964][ T5738] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 869.624985][ T5738] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.625347][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.625380][ T5723] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.625401][ T5723] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.625419][ T5723] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 869.625440][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 869.625463][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.636631][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 869.636651][ T5738] usb 6-1: Product: syz [ 869.918749][ T5723] usb 2-1: config 0 descriptor?? [ 869.968505][ T5738] usb 6-1: config 0 descriptor?? [ 870.002288][T12076] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 870.215884][ T5723] usb 2-1: can't set config #0, error -71 [ 870.224996][ T5723] usb 2-1: USB disconnect, device number 41 [ 870.555962][T12094] trusted_key: encrypted_key: insufficient parameters specified [ 870.720022][T12091] rxe_eth0 speed is unknown, defaulting to 1000 [ 870.796190][T12091] lo speed is unknown, defaulting to 1000 [ 871.773468][T10655] rpcbind: server 127.0.0.1 not responding, timed out [ 871.799226][ T10] usb 1-1: USB disconnect, device number 41 [ 871.874331][ T5738] usb 6-1: USB disconnect, device number 34 [ 872.799715][ T1415] rpcbind: server 127.0.0.1 not responding, timed out [ 873.198503][ T8888] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 873.348905][ T8888] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 873.349980][ T8888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 873.350015][ T8888] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 873.350038][ T8888] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 873.350060][ T8888] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 873.350091][ T8888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.424623][T12117] syz.5.1515 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 873.521388][T12108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 875.580757][T12105] bridge0: port 4(ip6gretap0) entered blocking state [ 875.580931][T12105] bridge0: port 4(ip6gretap0) entered disabled state [ 875.581341][T12105] ip6gretap0: entered allmulticast mode [ 875.603781][T12105] ip6gretap0: entered promiscuous mode [ 875.605024][T12105] bridge0: port 4(ip6gretap0) entered blocking state [ 875.605171][T12105] bridge0: port 4(ip6gretap0) entered forwarding state [ 875.678926][ T8888] ims_pcu 1-1:1.0: Failed to set line state, error: -71 [ 875.683495][ T8888] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 875.702113][ T8888] usb 1-1: USB disconnect, device number 42 [ 876.475566][T12138] netlink: 'syz.1.1523': attribute type 4 has an invalid length. [ 876.475593][T12138] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1523'. [ 876.671776][T12139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.732893][T12144] FAULT_INJECTION: forcing a failure. [ 876.732893][T12144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.732925][T12144] CPU: 0 UID: 0 PID: 12144 Comm: syz.3.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.732950][T12144] Tainted: [L]=SOFTLOCKUP [ 876.732957][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 876.732967][T12144] Call Trace: [ 876.732974][T12144] [ 876.732981][T12144] dump_stack_lvl+0x100/0x190 [ 876.733012][T12144] should_fail_ex.cold+0x5/0xa [ 876.733042][T12144] _copy_from_user+0x2e/0xd0 [ 876.733069][T12144] copy_msghdr_from_user+0x9f/0x4c0 [ 876.733098][T12144] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 876.733131][T12144] ? lock_acquire+0x1d1/0x380 [ 876.733149][T12144] ? get_pid_task+0x2a/0x250 [ 876.733173][T12144] ___sys_sendmsg+0x106/0x1e0 [ 876.733203][T12144] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.733230][T12144] ? get_pid_task+0x106/0x250 [ 876.733263][T12144] ? find_held_lock+0x2b/0x80 [ 876.733309][T12144] __sys_sendmsg+0x160/0x210 [ 876.733332][T12144] ? __pfx___sys_sendmsg+0x10/0x10 [ 876.733368][T12144] do_syscall_64+0x123/0x790 [ 876.733399][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.733417][T12144] RIP: 0033:0x7feb7199f559 [ 876.733433][T12144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.733450][T12144] RSP: 002b:00007feb72838028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.733469][T12144] RAX: ffffffffffffffda RBX: 00007feb71c25fa0 RCX: 00007feb7199f559 [ 876.733481][T12144] RDX: 000000000000c0d4 RSI: 0000200000000340 RDI: 0000000000000003 [ 876.733493][T12144] RBP: 00007feb72838090 R08: 0000000000000000 R09: 0000000000000000 [ 876.733504][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.733514][T12144] R13: 00007feb71c26038 R14: 00007feb71c25fa0 R15: 00007fff9d0f6ce8 [ 876.733540][T12144] [ 877.294653][T12152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26779 sclass=netlink_route_socket pid=12152 comm=syz.0.1525 [ 877.295599][T12152] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1525'. [ 877.388705][ T986] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 877.418392][T12129] Bluetooth: hci5: command 0x0406 tx timeout [ 877.540594][ T986] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 877.543414][ T986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.547714][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 877.547774][ T986] usb 2-1: Product: syz [ 877.547812][ T986] usb 2-1: Manufacturer: syz [ 878.783806][T12153] ceph: No mds server is up or the cluster is laggy [ 878.785353][ T8888] libceph: connect (1)[c::]:6789 error -101 [ 878.785505][ T8888] libceph: mon0 (1)[c::]:6789 connect error [ 878.870902][T10661] rpcbind: server 127.0.0.1 not responding, timed out [ 878.970830][ T986] usb 2-1: selecting invalid altsetting 1 [ 878.975478][ T986] dvb_ttusb_budget: ttusb_init_controller: error [ 878.975491][ T986] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 879.067687][T12147] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 879.137606][ T986] DVB: Unable to find symbol cx22700_attach() [ 879.226511][ T986] DVB: Unable to find symbol tda10046_attach() [ 879.226525][ T986] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 879.232624][ T986] usb 2-1: USB disconnect, device number 42 [ 882.315208][ T8888] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 882.587091][ T8888] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 882.722221][ T8888] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 882.722251][ T8888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.722267][ T8888] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 882.722319][ T8888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.138334][T10662] rpcbind: server 127.0.0.1 not responding, timed out [ 883.284908][ T8888] usb 2-1: config 0 descriptor?? [ 883.303057][ T8888] uvcvideo 2-1:0.0: Found UVC 9.00 device (046d:0825) [ 883.433913][T12203] ceph: No mds server is up or the cluster is laggy [ 883.688469][ T5723] libceph: connect (1)[c::]:6789 error -101 [ 883.688640][ T5723] libceph: mon0 (1)[c::]:6789 connect error [ 884.103377][ T8888] uvcvideo 2-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 884.103748][ T8888] uvcvideo 2-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 884.103789][ T8888] uvcvideo 2-1:0.1: Failed to initialize the device (-71). [ 884.107119][ T8888] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -71 [ 884.114517][ T8888] usb 2-1: USB disconnect, device number 43 [ 884.270956][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 884.273274][ T30] audit: type=1400 audit(1792680700.050:1864): avc: denied { write } for pid=12213 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 884.597174][ T52] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 884.614100][ T30] audit: type=1400 audit(1792680700.390:1865): avc: denied { read } for pid=12224 comm="syz.5.1544" name="oneway_spam_detection" dev="binder" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 884.614129][ T30] audit: type=1400 audit(1792680700.390:1866): avc: denied { open } for pid=12224 comm="syz.5.1544" path="/dev/binderfs/features/oneway_spam_detection" dev="binder" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 884.824879][ T30] audit: type=1400 audit(1792680700.580:1867): avc: denied { ioctl } for pid=12224 comm="syz.5.1544" path="/dev/binderfs/features/oneway_spam_detection" dev="binder" ino=1048697 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 885.367165][ T5738] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 885.898279][ T5738] usb 2-1: Using ep0 maxpacket: 8 [ 885.898721][ T5738] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 885.899491][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.904251][ T5738] pvrusb2: Hardware description: Terratec Grabster AV400 [ 885.904265][ T5738] pvrusb2: ********** [ 885.904271][ T5738] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 885.904304][ T5738] pvrusb2: Important functionality might not be entirely working. [ 885.904313][ T5738] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 885.904322][ T5738] pvrusb2: ********** [ 886.135346][ T2356] pvrusb2: Invalid write control endpoint [ 886.274540][ T5726] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 886.459931][ T5726] usb 6-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 886.465327][ T5726] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 886.465358][ T5726] usb 6-1: config 0 interface 0 has no altsetting 0 [ 886.465389][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.477557][T12229] pvrusb2: Invalid write control endpoint [ 886.532461][ T10] usb 2-1: USB disconnect, device number 44 [ 886.573091][ T2356] pvrusb2: Invalid write control endpoint [ 886.573102][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 886.573110][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 886.573116][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 886.573123][ T2356] pvrusb2: Device being rendered inoperable [ 886.585351][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 886.596407][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 886.636964][ T2356] pvrusb2: Attached sub-driver cx25840 [ 886.637073][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 886.637081][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 886.777133][ T5726] usb 6-1: config 0 descriptor?? [ 887.031756][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.032078][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.210750][T12252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1551'. [ 887.273166][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.274726][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.460451][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.478362][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.510968][ T30] audit: type=1400 audit(1792680703.290:1868): avc: denied { create } for pid=12237 comm="syz.5.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 887.549651][ T30] audit: type=1400 audit(1792680703.320:1869): avc: denied { ioctl } for pid=12237 comm="syz.5.1548" path="socket:[34289]" dev="sockfs" ino=34289 ioctlcmd=0x40106151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 888.498385][ T10] libceph: connect (1)[c::]:6789 error -101 [ 888.499056][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 888.512337][T12264] ceph: No mds server is up or the cluster is laggy [ 889.142221][ T10] libceph: connect (1)[c::]:6789 error -101 [ 889.142434][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 890.887509][T12279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1556'. [ 891.469189][ T5726] usbhid 6-1:0.0: can't add hid device: -71 [ 891.469275][ T5726] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 891.477985][ T5726] usb 6-1: USB disconnect, device number 35 [ 893.099551][T12291] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1563'. [ 893.658329][ T5726] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 893.860017][ T5726] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 893.865308][ T5726] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 893.865366][ T5726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.865408][ T5726] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 893.865577][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.943329][ T5726] usb 4-1: config 0 descriptor?? [ 893.957727][ T5726] uvcvideo 4-1:0.1: Unknown video format 00000059-0000-0000-0000-000000000000 [ 893.957770][ T5726] uvcvideo 4-1:0.0: Found UVC 9.00 device (046d:0825) [ 893.957798][ T5726] uvcvideo 4-1:0.1: No supported video formats found. [ 893.957806][ T5726] uvcvideo 4-1:0.1: Failed to initialize the device (-22). [ 893.993619][ T5726] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 894.113401][T12295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1565'. [ 894.787831][T12310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1558'. [ 895.284366][ T30] audit: type=1400 audit(1792680711.060:1870): avc: denied { append } for pid=12316 comm="syz.1.1560" name="uprobe_events" dev="tracefs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 895.397486][ T30] audit: type=1400 audit(1792680711.170:1871): avc: denied { write } for pid=12316 comm="syz.1.1560" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 895.424729][ T30] audit: type=1400 audit(1792680711.200:1872): avc: denied { open } for pid=12316 comm="syz.1.1560" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 895.456995][T12318] trusted_key: encrypted_key: insufficient parameters specified [ 895.480886][T12303] ima: policy update failed [ 895.480971][ T30] audit: type=1802 audit(1792680711.260:1873): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1566" res=0 errno=0 [ 895.551930][ T30] audit: type=1400 audit(1792680711.330:1874): avc: denied { read } for pid=6538 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 895.552270][ T30] audit: type=1400 audit(1792680711.330:1875): avc: denied { open } for pid=6538 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 895.552308][ T30] audit: type=1400 audit(1792680711.330:1876): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 895.552506][ T30] audit: type=1400 audit(1792680711.330:1877): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 895.768257][ T986] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 896.057967][ T986] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 896.342401][ T986] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 896.342429][ T986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.397781][T12329] ceph: No mds server is up or the cluster is laggy [ 896.405058][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 896.405299][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 896.434572][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.434598][ T986] usb 2-1: Product: syz [ 896.434613][ T986] usb 2-1: Manufacturer: syz [ 896.434626][ T986] usb 2-1: SerialNumber: syz [ 896.590789][ T10] usb 4-1: USB disconnect, device number 41 [ 896.821991][ T986] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input53 [ 897.075248][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 897.076399][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 897.090142][T12340] ceph: No mds server is up or the cluster is laggy [ 897.365671][T12321] jffs2: notice: (12321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 897.708043][ T986] bcm5974 2-1:1.0: could not read from device [ 897.927429][ T986] input: failed to attach handler mousedev to device input53, error: -5 [ 897.983019][ T986] usb 2-1: USB disconnect, device number 45 [ 899.378705][T12365] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1567'. [ 900.143761][T12368] vlan2: entered promiscuous mode [ 900.143781][T12368] bridge0: entered promiscuous mode [ 901.908993][ T986] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 902.124850][ T986] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 902.130762][ T986] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 902.130785][ T986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.130801][ T986] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 902.130843][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.140192][ T986] usb 1-1: config 0 descriptor?? [ 902.157487][ T986] uvcvideo 1-1:0.1: Unknown video format 00000059-0000-0000-0000-000000000000 [ 902.157550][ T986] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 902.157595][ T986] uvcvideo 1-1:0.1: No supported video formats found. [ 902.157606][ T986] uvcvideo 1-1:0.1: Failed to initialize the device (-22). [ 902.167815][ T986] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 902.780409][T12393] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1575'. [ 903.382215][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 903.382219][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 903.413544][ T30] audit: type=1400 audit(1792680719.190:1878): avc: denied { create } for pid=12401 comm="syz.2.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 904.117517][ T5738] usb 1-1: USB disconnect, device number 43 [ 904.245649][T12418] jffs2: notice: (12418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 904.290426][ T30] audit: type=1400 audit(1792680720.070:1879): avc: denied { write } for pid=12415 comm="syz.5.1588" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.307313][ T30] audit: type=1400 audit(1792680720.080:1880): avc: denied { add_name } for pid=12415 comm="syz.5.1588" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.307696][ T30] audit: type=1400 audit(1792680720.080:1881): avc: denied { create } for pid=12415 comm="syz.5.1588" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 904.319836][ T30] audit: type=1400 audit(1792680720.100:1882): avc: denied { read append open } for pid=12415 comm="syz.5.1588" path="/258/file0/file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 904.392601][ T30] audit: type=1400 audit(1792680720.170:1883): avc: denied { write } for pid=12415 comm="syz.5.1588" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.708387][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 904.858673][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 904.860362][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 904.863044][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 904.863114][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 904.863152][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 904.863248][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 904.863315][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 904.863383][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 904.863492][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.890005][ T10] usb 1-1: config 0 descriptor?? [ 905.170994][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 905.324636][ T30] audit: type=1400 audit(1792680721.100:1884): avc: denied { connect } for pid=12429 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 905.639871][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 905.738372][T12129] Bluetooth: hci5: command 0x0406 tx timeout [ 905.791301][ T10] usb 6-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.00 [ 905.792203][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 905.792234][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.799131][ T10] usb 6-1: config 0 descriptor?? [ 905.852929][T12439] FAULT_INJECTION: forcing a failure. [ 905.852929][T12439] name failslab, interval 1, probability 0, space 0, times 0 [ 905.852970][T12439] CPU: 1 UID: 0 PID: 12439 Comm: syz.3.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.852998][T12439] Tainted: [L]=SOFTLOCKUP [ 905.853006][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 905.853018][T12439] Call Trace: [ 905.853025][T12439] [ 905.853033][T12439] dump_stack_lvl+0x100/0x190 [ 905.853066][T12439] should_fail_ex.cold+0x5/0xa [ 905.853092][T12439] should_failslab+0xc2/0x120 [ 905.853117][T12439] kmem_cache_alloc_noprof+0x92/0x6a0 [ 905.853141][T12439] ? __kernfs_new_node+0xd2/0xa10 [ 905.853171][T12439] __kernfs_new_node+0xd2/0xa10 [ 905.853196][T12439] ? __pfx___kernfs_new_node+0x10/0x10 [ 905.853220][T12439] ? lock_acquire+0x1d1/0x380 [ 905.853241][T12439] ? kernfs_root+0x23/0x2a0 [ 905.853260][T12439] ? find_held_lock+0x2b/0x80 [ 905.853286][T12439] ? kernfs_root+0xee/0x2a0 [ 905.853305][T12439] ? kernfs_root+0xee/0x2a0 [ 905.853331][T12439] kernfs_new_node+0x194/0x200 [ 905.853354][T12439] ? __pfx_kernfs_new_node+0x10/0x10 [ 905.853376][T12439] ? kernfs_add_one+0x213/0xb40 [ 905.853403][T12439] __kernfs_create_file+0x53/0x350 [ 905.853432][T12439] sysfs_add_file_mode_ns+0x207/0x3c0 [ 905.853468][T12439] internal_create_group+0x593/0xfb0 [ 905.853494][T12439] ? __pfx_internal_create_group+0x10/0x10 [ 905.853517][T12439] ? kernfs_create_link+0x1f1/0x280 [ 905.853544][T12439] internal_create_groups+0x9d/0x150 [ 905.853566][T12439] device_add+0xf60/0x1970 [ 905.853595][T12439] ? __pfx_device_add+0x10/0x10 [ 905.853618][T12439] ? lockdep_init_map_type+0x5c/0x250 [ 905.853639][T12439] ? __init_waitqueue_head+0xca/0x150 [ 905.853667][T12439] wakeup_source_device_create+0x243/0x2e0 [ 905.853695][T12439] wakeup_source_sysfs_add+0x1c/0x90 [ 905.853720][T12439] wakeup_source_register+0x154/0x3e0 [ 905.853743][T12439] ep_create_wakeup_source+0x13b/0x2e0 [ 905.853771][T12439] ? __mutex_unlock_slowpath+0x35d/0x930 [ 905.853804][T12439] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 905.853840][T12439] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 905.853861][T12439] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 905.853890][T12439] do_epoll_ctl_file+0x1e26/0x36e0 [ 905.853922][T12439] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 905.853950][T12439] ? lock_acquire+0x1d1/0x380 [ 905.853969][T12439] ? __fget_files+0x34/0x3d0 [ 905.853996][T12439] ? find_held_lock+0x2b/0x80 [ 905.854019][T12439] ? __fget_files+0x215/0x3d0 [ 905.854047][T12439] ? __fget_files+0x21f/0x3d0 [ 905.854075][T12439] ? do_epoll_ctl+0xfd/0x1a0 [ 905.854092][T12439] do_epoll_ctl+0xfd/0x1a0 [ 905.854112][T12439] ? __pfx_do_epoll_ctl+0x10/0x10 [ 905.854138][T12439] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 905.854158][T12439] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 905.854186][T12439] do_syscall_64+0x123/0x790 [ 905.854214][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.854235][T12439] RIP: 0033:0x7feb7199f559 [ 905.854252][T12439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.854271][T12439] RSP: 002b:00007feb72838028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 905.854291][T12439] RAX: ffffffffffffffda RBX: 00007feb71c25fa0 RCX: 00007feb7199f559 [ 905.854305][T12439] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 905.854317][T12439] RBP: 00007feb71a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 905.854329][T12439] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 905.854342][T12439] R13: 00007feb71c26038 R14: 00007feb71c25fa0 R15: 00007fff9d0f6ce8 [ 905.854368][T12439] [ 906.256720][ T10] input: HID 6253:0100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:6253:0100.000A/input/input54 [ 906.303530][ T10] twinhan 0003:6253:0100.000A: input,hidraw0: USB HID v80.00 Joystick [HID 6253:0100] on usb-dummy_hcd.5-1/input0 [ 907.216163][T12446] udevd[12446]: open /dev/null failed: Not a directory [ 907.346343][T12447] device-mapper: table: 248:6: mirror: Device lookup failure (-ENOENT) [ 907.346361][T12447] device-mapper: ioctl: error adding target to table [ 907.398882][T12422] syz.0.1589 (12422): drop_caches: 2 [ 907.418851][ T5722] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 907.456681][T12451] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1596'. [ 907.503440][ T8888] usb 1-1: USB disconnect, device number 44 [ 907.538653][ T8888] usblp0: removed [ 907.569285][ T5722] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 907.570319][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 907.572339][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.572361][ T5722] usb 2-1: Product: syz [ 907.572376][ T5722] usb 2-1: Manufacturer: syz [ 907.572390][ T5722] usb 2-1: SerialNumber: syz [ 907.575335][T12442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 907.801769][ T8888] usb 2-1: USB disconnect, device number 46 [ 907.821514][T12455] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1597'. [ 908.671623][ T8888] usb 6-1: USB disconnect, device number 36 [ 908.980176][T12471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1602'. [ 908.980218][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1602'. [ 911.493576][T12488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1604'. [ 911.700372][ T10] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 911.856407][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 911.868583][ T10] usb 2-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 911.868604][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 911.875848][ T10] usb 2-1: string descriptor 0 read error: -22 [ 911.875922][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.925695][T12493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 912.626559][T12499] netlink: 'syz.0.1608': attribute type 10 has an invalid length. [ 912.627251][T12499] bridge0: port 4(ip6gretap0) entered disabled state [ 912.627374][T12499] bridge0: port 3(syz_tun) entered disabled state [ 912.627541][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.627637][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.038989][ T986] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 913.169408][ T986] usb 1-1: device descriptor read/64, error -71 [ 913.408346][ T986] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 913.571552][ T986] usb 1-1: device descriptor read/64, error -71 [ 913.679736][ T986] usb usb1-port1: attempt power cycle [ 913.992519][ T10] hid_parser_main: 29 callbacks suppressed [ 913.992542][ T10] apple 0003:05AC:0262.000B: unknown main item tag 0x2 [ 913.992629][ T10] apple 0003:05AC:0262.000B: unknown global tag 0xc [ 913.992646][ T10] apple 0003:05AC:0262.000B: item 0 0 1 12 parsing failed [ 914.027534][ T986] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 914.060230][ T986] usb 1-1: device descriptor read/8, error -71 [ 914.299255][ T986] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 914.319573][ T986] usb 1-1: device descriptor read/8, error -71 [ 914.343745][ T10] apple 0003:05AC:0262.000B: parse failed [ 914.343847][ T10] apple 0003:05AC:0262.000B: probe with driver apple failed with error -22 [ 914.430310][ T986] usb usb1-port1: unable to enumerate USB device [ 915.085864][T12508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1610'. [ 915.166898][T12509] 9p: Bad value for 'wfdno' [ 915.538715][ T5722] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 915.658952][ T10] usb 2-1: USB disconnect, device number 47 [ 915.700102][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 915.744661][ T5722] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 915.792748][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 915.792814][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.792956][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 915.793008][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 915.882983][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.883001][ T5722] usb 6-1: Product: syz [ 915.883010][ T5722] usb 6-1: Manufacturer: syz [ 915.883018][ T5722] usb 6-1: SerialNumber: syz [ 915.892952][ T5722] usb 6-1: config 0 descriptor?? [ 915.896212][T12509] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 915.996007][ T5722] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input55 [ 916.147677][T12513] SELinux: policydb version -1978981918 does not match my version range 15-35 [ 916.147723][T12513] SELinux: failed to load policy [ 916.836938][T12520] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 916.983875][ T30] audit: type=1400 audit(1792680732.760:1885): avc: denied { write } for pid=12524 comm="syz.1.1615" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 916.992327][T12525] loop9: detected capacity change from 0 to 16384 [ 917.034965][T12033] udevd[12033]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 917.443577][ C0] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 917.488031][T12528] loop9: detected capacity change from 16384 to 0 [ 917.504083][T12033] udevd[12033]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 917.531859][T12531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1616'. [ 917.531875][T12531] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1616'. [ 917.531883][T12531] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1616'. [ 918.832513][ T5738] usb 6-1: USB disconnect, device number 37 [ 918.832555][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 918.832793][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 919.564733][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 921.314424][ T30] audit: type=1400 audit(1792680737.090:1886): avc: denied { read } for pid=12556 comm="syz.1.1624" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 921.314771][ T30] audit: type=1400 audit(1792680737.090:1887): avc: denied { open } for pid=12556 comm="syz.1.1624" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 921.698840][T12570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1625'. [ 924.697601][ T30] audit: type=1400 audit(1792680740.470:1888): avc: denied { watch } for pid=12577 comm="syz.2.1627" path="pipe:[36275]" dev="pipefs" ino=36275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 924.896073][T12585] lo speed is unknown, defaulting to 1000 [ 924.897234][T12585] lo speed is unknown, defaulting to 1000 [ 924.923315][T12585] lo speed is unknown, defaulting to 1000 [ 924.955599][T12590] smc: removing ib device rxe0 [ 925.003481][T12580] hfs: unable to load iocharset "io#harset" [ 925.242150][T12594] syzkaller0: entered promiscuous mode [ 925.242168][T12594] syzkaller0: entered allmulticast mode [ 925.268758][ T5722] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 926.008518][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.008565][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.169295][T12598] fuse: Bad value for 'group_id' [ 926.169307][T12598] fuse: Bad value for 'group_id' [ 927.187396][ T30] audit: type=1400 audit(1792680742.960:1889): avc: denied { append } for pid=12591 comm="syz.5.1630" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 927.200739][T12594] 9p: Bad value for 'rfdno' [ 927.303771][ T5722] usb 4-1: device descriptor read/all, error -71 [ 927.596191][T12590] smbdirect: ib_dev[rxe0] removed [ 929.017463][T12616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1636'. [ 929.650136][T12621] FAULT_INJECTION: forcing a failure. [ 929.650136][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.650164][T12621] CPU: 0 UID: 0 PID: 12621 Comm: syz.0.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.650180][T12621] Tainted: [L]=SOFTLOCKUP [ 929.650184][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 929.650191][T12621] Call Trace: [ 929.650195][T12621] [ 929.650199][T12621] dump_stack_lvl+0x100/0x190 [ 929.650220][T12621] should_fail_ex.cold+0x5/0xa [ 929.650236][T12621] _copy_from_user+0x2e/0xd0 [ 929.650253][T12621] copy_msghdr_from_user+0x9f/0x4c0 [ 929.650272][T12621] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 929.650292][T12621] ? lock_acquire+0x1d1/0x380 [ 929.650303][T12621] ? get_pid_task+0x2a/0x250 [ 929.650318][T12621] ___sys_sendmsg+0x106/0x1e0 [ 929.650336][T12621] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.650352][T12621] ? get_pid_task+0x106/0x250 [ 929.650371][T12621] ? find_held_lock+0x2b/0x80 [ 929.650394][T12621] __sys_sendmsg+0x160/0x210 [ 929.650408][T12621] ? __pfx___sys_sendmsg+0x10/0x10 [ 929.650428][T12621] do_syscall_64+0x123/0x790 [ 929.650447][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.650458][T12621] RIP: 0033:0x7f2193d9f559 [ 929.650468][T12621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.650479][T12621] RSP: 002b:00007f2194c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.650490][T12621] RAX: ffffffffffffffda RBX: 00007f2194025fa0 RCX: 00007f2193d9f559 [ 929.650497][T12621] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 929.650504][T12621] RBP: 00007f2194c07090 R08: 0000000000000000 R09: 0000000000000000 [ 929.650510][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.650516][T12621] R13: 00007f2194026038 R14: 00007f2194025fa0 R15: 00007ffca99bfdd8 [ 929.650530][T12621] [ 930.151657][ T30] audit: type=1800 audit(1792680745.930:1890): pid=12628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1634" name="file0" dev="overlay" ino=1875 res=0 errno=0 [ 930.264657][T12630] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1634'. [ 931.141490][T12585] infiniband syz0: set active [ 931.143617][T12585] infiniband syz0: added lo [ 931.145404][T12585] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 931.176619][T12585] infiniband syz0: Couldn't open port 1 [ 931.176811][T12585] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 931.176839][T12585] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 931.176876][T12585] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 931.539799][T12585] RDS/IB: syz0: added [ 931.539849][T12585] smc: adding ib device syz0 with port count 1 [ 931.539867][T12585] smc: ib device syz0 port 1 has no pnetid [ 933.331832][ T30] audit: type=1400 audit(1792680749.110:1891): avc: denied { write } for pid=12647 comm="syz.0.1643" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 933.332468][T12649] 9p: Bad value for 'wfdno' [ 934.211226][ T5722] lo speed is unknown, defaulting to 1000 [ 934.212313][ T5726] lo speed is unknown, defaulting to 1000 [ 934.214510][T12585] lo speed is unknown, defaulting to 1000 [ 934.334715][T12651] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1644'. [ 934.576248][ T30] audit: type=1800 audit(1792680750.350:1892): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1646" name="file0" dev="overlay" ino=1889 res=0 errno=0 [ 934.671041][T12660] input: syz0 as /devices/virtual/input/input56 [ 935.481559][T12656] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1647'. [ 935.549755][ T30] audit: type=1326 audit(1792680751.320:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.3.1648" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 935.549915][ T30] audit: type=1326 audit(1792680751.330:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.3.1648" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7199f559 code=0x7ffc0000 [ 935.750067][T12585] lo speed is unknown, defaulting to 1000 [ 935.755103][ T30] audit: type=1400 audit(1792680751.530:1895): avc: denied { search } for pid=12664 comm="syz.0.1649" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 937.480186][T12585] lo speed is unknown, defaulting to 1000 [ 937.816010][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 937.890362][T12585] lo speed is unknown, defaulting to 1000 [ 938.230033][T12585] lo speed is unknown, defaulting to 1000 [ 939.572470][T12590] bridge0: port 3(syz_tun) entered disabled state [ 939.607750][T12590] syz_tun (unregistering): left allmulticast mode [ 939.607767][T12590] syz_tun (unregistering): left promiscuous mode [ 939.607809][T12590] bridge0: port 3(syz_tun) entered disabled state [ 939.807262][ T30] audit: type=1400 audit(1792680755.580:1896): avc: denied { search } for pid=12697 comm="syz.0.1656" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.807310][ T30] audit: type=1400 audit(1792680755.580:1897): avc: denied { search } for pid=12697 comm="syz.0.1656" name="usb_gadget" dev="configfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.807346][ T30] audit: type=1400 audit(1792680755.580:1898): avc: denied { write search } for pid=12697 comm="syz.0.1656" name="usb_gadget" dev="configfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.807382][ T30] audit: type=1400 audit(1792680755.580:1899): avc: denied { add_name } for pid=12697 comm="syz.0.1656" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.807416][ T30] audit: type=1400 audit(1792680755.580:1900): avc: denied { create } for pid=12697 comm="syz.0.1656" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 940.030426][T12703] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1657'. [ 940.157298][ T30] audit: type=1400 audit(1792680755.920:1901): avc: denied { search } for pid=12697 comm="syz.0.1656" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 940.157411][ T30] audit: type=1400 audit(1792680755.920:1902): avc: denied { search } for pid=12697 comm="syz.0.1656" name="usb_gadget" dev="configfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 940.892645][ T1474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.420331][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 941.961219][ T1474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.057765][ T1474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.158069][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 942.158086][ T30] audit: type=1400 audit(1792680757.930:1906): avc: denied { mount } for pid=12713 comm="syz.1.1662" name="/" dev="hugetlbfs" ino=37176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 943.133707][ T30] audit: type=1400 audit(1792680758.460:1907): avc: denied { create } for pid=12713 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 943.133746][ T30] audit: type=1400 audit(1792680758.470:1908): avc: denied { write } for pid=12713 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 943.133766][ T30] audit: type=1400 audit(1792680758.900:1909): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 943.163266][ T30] audit: type=1326 audit(1792680758.940:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.5.1663" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ffb99f559 code=0x0 [ 943.246956][ T1474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.495295][ T1474] bridge_slave_1: left allmulticast mode [ 943.495320][ T1474] bridge_slave_1: left promiscuous mode [ 943.495488][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.161457][T12718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1661'. [ 944.311053][ T5726] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 944.512509][ T5726] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 944.515875][ T5726] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 944.515900][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.515917][ T5726] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 944.515965][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.523822][ T5726] usb 6-1: config 0 descriptor?? [ 944.539924][ T5726] uvcvideo 6-1:0.1: Unknown video format 32595559-0000-0010-8000-00aa00000000 [ 944.539994][ T5726] uvcvideo 6-1:0.0: Found UVC 9.00 device (046d:0825) [ 944.540040][ T5726] uvcvideo 6-1:0.1: No supported video formats found. [ 944.540051][ T5726] uvcvideo 6-1:0.1: Failed to initialize the device (-22). [ 944.545033][ T5726] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 945.190507][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 945.947384][ T30] audit: type=1400 audit(1792680761.720:1911): avc: denied { write } for pid=12738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.306891][ T30] audit: type=1400 audit(1792680762.080:1912): avc: denied { write } for pid=12751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.533843][ T30] audit: type=1800 audit(1792680762.180:1913): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1664" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 946.654146][ T1474] hsr_slave_0: left promiscuous mode [ 946.655556][ T1474] hsr_slave_1: left promiscuous mode [ 946.671478][ T1474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.671497][ T1474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.673883][ T1474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.673899][ T1474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.728829][ T5722] usb 6-1: USB disconnect, device number 38 [ 946.801694][ T1474] veth1_macvtap: left promiscuous mode [ 946.801793][ T1474] veth0_macvtap: left promiscuous mode [ 946.801910][ T1474] veth1_vlan: left promiscuous mode [ 946.801973][ T1474] veth0_vlan: left promiscuous mode [ 947.439399][ T30] audit: type=1400 audit(1792680763.210:1914): avc: denied { connect } for pid=12761 comm="syz.5.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 948.459862][ T5722] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 948.462327][ T5726] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 948.566799][ T30] audit: type=1800 audit(1792680764.340:1915): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1668" name="file0" dev="overlay" ino=1932 res=0 errno=0 [ 948.594420][T12771] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1668'. [ 948.648205][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 948.657343][ T5722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.683423][ T5722] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 948.683477][ T5722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 948.683508][ T5722] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 948.730907][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 948.730942][ T5722] usb 1-1: SerialNumber: syz [ 948.772567][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 948.772609][ T5726] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 948.810514][ T5722] hub 1-1:1.0: bad descriptor, ignoring hub [ 948.810656][ T5722] hub 1-1:1.0: probe with driver hub failed with error -5 [ 948.816396][ T5722] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 948.927946][ T5726] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.928009][ T5726] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 948.928054][ T5726] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.009302][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.009327][ T5726] usb 6-1: Product: syz [ 949.009341][ T5726] usb 6-1: Manufacturer: syz [ 949.009355][ T5726] usb 6-1: SerialNumber: syz [ 950.109761][ T1474] team0 (unregistering): Port device team_slave_1 removed [ 950.126885][ T1474] team0 (unregistering): Port device team_slave_0 removed [ 950.272893][T10660] smc: removing ib device syz0 [ 950.310561][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 950.311124][ T986] infiniband syz0: ib_query_port failed (-19) [ 950.372486][T10657] smbdirect: ib_dev[syz2] removed [ 950.434334][T10660] smbdirect: ib_dev[syz0] removed [ 951.995440][ T5726] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 951.995647][ T5726] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 952.061288][ T5722] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 952.110970][ T5722] usb 1-1: USB disconnect, device number 49 [ 952.124684][ T5820] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 953.003094][ T30] audit: type=1400 audit(1792680768.460:1916): avc: denied { getopt } for pid=12798 comm="syz.5.1673" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 953.111729][ T5820] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 953.112756][ T5820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 953.115466][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.115489][ T5820] usb 4-1: Product: syz [ 953.115503][ T5820] usb 4-1: Manufacturer: syz [ 953.115518][ T5820] usb 4-1: SerialNumber: syz [ 953.137823][ T30] audit: type=1400 audit(1792680768.910:1917): avc: denied { write } for pid=12794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.222643][T12789] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 953.226788][ T5726] usb 6-1: USB disconnect, device number 39 [ 953.362993][T12723] udevd[12723]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.404478][ T30] audit: type=1400 audit(1792680769.180:1918): avc: denied { write } for pid=12811 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.472323][ T10] usb 4-1: USB disconnect, device number 44 [ 953.611273][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 953.830862][ T30] audit: type=1400 audit(1792680769.610:1919): avc: denied { write } for pid=12815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.972085][ T30] audit: type=1400 audit(1792680769.750:1920): avc: denied { write } for pid=12824 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.088339][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 954.250139][T12830] loop4: detected capacity change from 0 to 7 [ 954.259880][T12830] Dev loop4: unable to read RDB block 7 [ 954.259911][T12830] loop4: unable to read partition table [ 954.260052][T12830] loop4: partition table beyond EOD, truncated [ 954.260065][T12830] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 954.284582][T12725] udevd[12725]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 954.316140][T12725] udevd[12725]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 954.345868][T12725] udevd[12725]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 954.425642][ T30] audit: type=1400 audit(1792680770.200:1921): avc: denied { write } for pid=12826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.763624][T12844] ceph: No mds server is up or the cluster is laggy [ 954.770048][ T10] libceph: connect (1)[c::]:6789 error -101 [ 954.770192][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 955.576341][T12832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1676'. [ 955.703476][ T5723] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 955.856495][ T30] audit: type=1400 audit(1792680771.630:1922): avc: denied { write } for pid=12854 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.859953][ T5723] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 955.860789][ T5723] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 955.860810][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.860831][ T5723] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 955.860874][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.863339][ T5723] usb 1-1: config 0 descriptor?? [ 955.871507][ T5723] uvcvideo 1-1:0.1: Unknown video format 32595559-0000-0010-8000-00aa00000000 [ 955.871570][ T5723] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 955.871612][ T5723] uvcvideo 1-1:0.1: No supported video formats found. [ 955.871623][ T5723] uvcvideo 1-1:0.1: Failed to initialize the device (-22). [ 955.872037][ T5723] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 955.972466][ T1474] IPVS: stop unused estimator thread 0... [ 956.117862][ T30] audit: type=1400 audit(1792680771.890:1923): avc: denied { write } for pid=12856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.262839][ T30] audit: type=1400 audit(1792680772.040:1924): avc: denied { write } for pid=12865 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.693370][ T10] libceph: connect (1)[c::]:6789 error -101 [ 956.694057][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 956.719028][T12875] ceph: No mds server is up or the cluster is laggy [ 957.506551][ T30] audit: type=1400 audit(1792680773.280:1925): avc: denied { write } for pid=12869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.666562][ T10] usb 1-1: USB disconnect, device number 50 [ 958.955305][ T30] audit: type=1400 audit(1792680774.700:1926): avc: denied { write } for pid=12889 comm="syz.1.1680" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 959.433698][ T10] libceph: connect (1)[c::]:6789 error -101 [ 959.434402][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 959.434676][T12899] ceph: No mds server is up or the cluster is laggy [ 959.449385][ T10] libceph: connect (1)[c::]:6789 error -101 [ 959.449529][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 959.712781][ T10] libceph: connect (1)[c::]:6789 error -101 [ 959.713218][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 960.317659][ T30] audit: type=1400 audit(1792680776.090:1927): avc: denied { write } for pid=12907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.461269][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 960.536364][ T30] audit: type=1400 audit(1792680776.310:1928): avc: denied { unlink } for pid=12910 comm="syz.3.1686" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 960.554185][T12911] binder: 12910:12911 ioctl c0306201 20000000cf00 returned -14 [ 960.816389][ T30] audit: type=1800 audit(1792680776.590:1929): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1682" name="file0" dev="overlay" ino=1658 res=0 errno=0 [ 960.843016][T12922] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1682'. [ 961.664277][T12929] FAULT_INJECTION: forcing a failure. [ 961.664277][T12929] name failslab, interval 1, probability 0, space 0, times 0 [ 961.664312][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.3.1689 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.664344][T12929] Tainted: [L]=SOFTLOCKUP [ 961.664351][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 961.664363][T12929] Call Trace: [ 961.664370][T12929] [ 961.664378][T12929] dump_stack_lvl+0x100/0x190 [ 961.664415][T12929] should_fail_ex.cold+0x5/0xa [ 961.664446][T12929] should_failslab+0xc2/0x120 [ 961.664474][T12929] __kmalloc_noprof+0xfc/0x840 [ 961.664499][T12929] ? netlink_realloc_groups+0x149/0x380 [ 961.664527][T12929] netlink_realloc_groups+0x149/0x380 [ 961.664553][T12929] netlink_bind+0x7e0/0xa20 [ 961.664578][T12929] ? __pfx_netlink_bind+0x10/0x10 [ 961.664607][T12929] __sys_bind+0x1a9/0x260 [ 961.664628][T12929] ? __pfx___sys_bind+0x10/0x10 [ 961.664664][T12929] __x64_sys_bind+0x72/0xb0 [ 961.664682][T12929] ? lockdep_hardirqs_on+0x7d/0x110 [ 961.664712][T12929] do_syscall_64+0x123/0x790 [ 961.664751][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.664772][T12929] RIP: 0033:0x7feb7199f559 [ 961.664791][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.664810][T12929] RSP: 002b:00007feb72838028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 961.664832][T12929] RAX: ffffffffffffffda RBX: 00007feb71c25fa0 RCX: 00007feb7199f559 [ 961.664844][T12929] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000004 [ 961.664856][T12929] RBP: 00007feb71a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 961.664867][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.664879][T12929] R13: 00007feb71c26038 R14: 00007feb71c25fa0 R15: 00007fff9d0f6ce8 [ 961.664907][T12929] [ 961.881472][T12931] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 962.301232][T12933] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 962.354127][ T30] audit: type=1400 audit(1792680778.130:1930): avc: denied { shutdown } for pid=12935 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 962.354542][ T30] audit: type=1400 audit(1792680778.130:1931): avc: denied { read } for pid=12935 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 962.724944][T12939] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1690'. [ 963.110736][T12944] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 963.237651][ T10] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 963.279588][T12948] device-mapper: table: 248:7: mirror: Device lookup failure (-ENOENT) [ 963.279613][T12948] device-mapper: ioctl: error adding target to table [ 963.400477][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 963.401388][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 963.401411][ T10] usb 4-1: config 0 has no interface number 0 [ 963.401445][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 963.401471][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 963.401505][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.404845][ T10] usb 4-1: config 0 descriptor?? [ 963.406825][T12936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 963.467743][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 963.615807][ T30] audit: type=1400 audit(1792680779.390:1932): avc: denied { ioctl } for pid=12935 comm="syz.3.1691" path="socket:[37630]" dev="sockfs" ino=37630 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 963.644470][ T10] usb 4-1: USB disconnect, device number 45 [ 963.698763][ T5723] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 963.848909][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 963.849385][ T5723] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 963.850207][ T5723] usb 1-1: config index 0 descriptor too short (expected 24081, got 18) [ 963.850228][ T5723] usb 1-1: config 217 has an invalid descriptor of length 11, skipping remainder of the config [ 963.850262][ T5723] usb 1-1: config 217 has 0 interfaces, different from the descriptor's value: 15 [ 963.850291][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.370612][ T30] audit: type=1800 audit(1792680780.140:1933): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1694" name="file0" dev="overlay" ino=1979 res=0 errno=0 [ 964.576227][T12956] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 966.082350][ T5723] usb 1-1: string descriptor 0 read error: -71 [ 966.084307][ T5723] usb 1-1: USB disconnect, device number 51 [ 966.368397][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 966.538552][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 966.539127][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 966.540248][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.540276][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.541583][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 966.541601][ T10] usb 2-1: Product: syz [ 966.541609][ T10] usb 2-1: Manufacturer: syz [ 966.547103][ T10] hub 2-1:4.0: USB hub found [ 966.749534][ T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 966.779965][ T10] usb 2-1: USB disconnect, device number 48 [ 967.188233][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 967.338298][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 967.343494][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 967.346150][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.346179][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.349717][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 967.349740][ T10] usb 2-1: Product: syz [ 967.349753][ T10] usb 2-1: Manufacturer: syz [ 967.379506][ T10] hub 2-1:4.0: USB hub found [ 967.488194][ T30] audit: type=1400 audit(1792680783.250:1934): avc: denied { write } for pid=12975 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 967.594687][ T10] hub 2-1:4.0: 1 port detected [ 967.674494][ T5723] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 967.867684][ T5723] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 967.874338][ T5723] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 967.874368][ T5723] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 967.939420][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.939452][ T5723] usb 6-1: Product: syz [ 967.939489][ T5723] usb 6-1: Manufacturer: syz [ 967.939527][ T5723] usb 6-1: SerialNumber: syz [ 968.325950][ T5723] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 968.528557][ T10] hub 2-1:4.0: activate --> -90 [ 968.931710][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.932054][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.933595][ T5723] usb 2-1: USB disconnect, device number 49 [ 969.009558][ T10] usb 6-1: USB disconnect, device number 40 [ 969.012576][ T10] usblp0: removed [ 969.830712][T12997] random: crng reseeded on system resumption [ 970.148197][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 970.298999][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 970.299432][ T10] usb 6-1: config 0 has no interfaces? [ 970.300869][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.300882][ T10] usb 6-1: Product: syz [ 970.300890][ T10] usb 6-1: Manufacturer: syz [ 970.300898][ T10] usb 6-1: SerialNumber: syz [ 970.302262][ T10] usb 6-1: config 0 descriptor?? [ 971.402761][T13011] overlayfs: overlapping lowerdir path [ 972.024160][ T30] audit: type=1400 audit(1792680787.800:1935): avc: denied { write } for pid=13010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.335978][ T30] audit: type=1400 audit(1792680788.110:1936): avc: denied { name_bind } for pid=13024 comm="syz.3.1711" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 972.877182][ T30] audit: type=1400 audit(1792680788.630:1937): avc: denied { write } for pid=13033 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.955701][ T5723] usb 6-1: USB disconnect, device number 41 [ 973.303907][ T30] audit: type=1400 audit(1792680789.080:1938): avc: denied { write } for pid=13039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.380102][ T30] audit: type=1400 audit(1792680789.160:1939): avc: denied { write } for pid=13048 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.491706][ T30] audit: type=1400 audit(1792680789.270:1940): avc: denied { write } for pid=13051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.579222][ T30] audit: type=1400 audit(1792680789.360:1941): avc: denied { write } for pid=13060 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.693205][ T30] audit: type=1400 audit(1792680789.470:1942): avc: denied { write } for pid=13063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.783165][ T30] audit: type=1400 audit(1792680789.560:1943): avc: denied { write } for pid=13072 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.480584][T13081] PM: suspend entry (deep) [ 974.619709][T13087] ceph: No mds server is up or the cluster is laggy [ 974.622602][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 974.623290][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 974.751331][ T5723] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 974.953299][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 974.967817][ T5723] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 975.000820][ T5723] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.000884][ T5723] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.045042][ T5723] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 975.045139][ T5723] usb 6-1: Product: syz [ 975.045261][ T5723] usb 6-1: Manufacturer: syz [ 975.227963][ T5723] hub 6-1:4.0: USB hub found [ 975.543971][ T5723] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 975.616983][T10660] Filesystems sync: 1.133 seconds [ 975.630090][ T5723] usb 6-1: USB disconnect, device number 42 [ 975.697415][T13081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 975.697911][T13081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 975.698082][T13081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 ** replaying previous printk message ** [ 975.698082][T13081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 975.699476][T13081] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 975.710146][T13081] Freezing user space processes [ 975.714806][T13081] ------------[ cut here ]------------ [ 975.714816][T13081] debug_locks && p->lockdep_depth [ 975.714822][T13081] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x211/0x2e0, CPU#0: syz.0.1712/13081 [ 975.756478][T13081] Modules linked in: [ 975.760365][T13081] CPU: 0 UID: 0 PID: 13081 Comm: syz.0.1712 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.771277][T13081] Tainted: [L]=SOFTLOCKUP [ 975.775573][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 975.785598][T13081] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 975.791301][T13081] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 b8 a2 8a 00 8b ab a0 0b 00 00 31 ff 89 ee e8 59 4b 16 00 85 ed 74 09 e8 e0 50 16 00 90 <0f> 0b 90 e8 d7 50 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 975.810893][T13081] RSP: 0018:ffffc90003737998 EFLAGS: 00010087 [ 975.816940][T13081] RAX: 00000000000605c6 RBX: ffff88802f44cb00 RCX: ffffc90004fe1000 [ 975.824884][T13081] RDX: 0000000000080000 RSI: ffffffff81f60ad0 RDI: ffff88802be48000 [ 975.832826][T13081] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 975.840770][T13081] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802f44cb18 [ 975.848713][T13081] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff88802f44d580 [ 975.856654][T13081] FS: 00007f2194c076c0(0000) GS:ffff888122930000(0000) knlGS:0000000000000000 [ 975.865553][T13081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 975.872109][T13081] CR2: 00007fe51a9f62f8 CR3: 0000000076f61000 CR4: 00000000003526f0 [ 975.880054][T13081] Call Trace: [ 975.883306][T13081] [ 975.886213][T13081] ? __pfx___set_task_frozen+0x10/0x10 [ 975.891650][T13081] task_call_func+0x169/0x380 [ 975.896301][T13081] ? cgroup1_freezing+0x12c/0x3b0 [ 975.901304][T13081] ? cgroup1_freezing+0x12c/0x3b0 [ 975.906305][T13081] ? __pfx_task_call_func+0x10/0x10 [ 975.911481][T13081] ? cgroup1_freezing+0x136/0x3b0 [ 975.916483][T13081] freeze_task+0x151/0x270 [ 975.920874][T13081] ? __pfx_freeze_task+0x10/0x10 [ 975.925785][T13081] ? lockdep_hardirqs_on+0x7d/0x110 [ 975.930958][T13081] ? ktime_get_with_offset+0x2b6/0x3d0 [ 975.936390][T13081] try_to_freeze_tasks+0x243/0x680 [ 975.941478][T13081] ? do_raw_spin_lock+0xf0/0x260 [ 975.946392][T13081] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 975.952002][T13081] ? _raw_spin_unlock_irq+0x23/0x50 [ 975.957175][T13081] ? lockdep_hardirqs_on+0x7d/0x110 [ 975.962357][T13081] freeze_processes+0xf2/0x1e0 [ 975.967102][T13081] pm_suspend+0x32c/0x7b0 [ 975.971410][T13081] state_store+0x101/0x240 [ 975.975798][T13081] ? __pfx_state_store+0x10/0x10 [ 975.980704][T13081] kobj_attr_store+0x58/0x80 [ 975.985267][T13081] ? __pfx_kobj_attr_store+0x10/0x10 [ 975.990524][T13081] sysfs_kf_write+0xf2/0x150 [ 975.995089][T13081] kernfs_fop_write_iter+0x3e0/0x5f0 [ 976.000348][T13081] ? __pfx_sysfs_kf_write+0x10/0x10 [ 976.005523][T13081] vfs_write+0x6af/0x1050 [ 976.009828][T13081] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 976.015608][T13081] ? __pfx_vfs_write+0x10/0x10 [ 976.020351][T13081] ? find_held_lock+0x2b/0x80 [ 976.025021][T13081] ksys_write+0x12a/0x250 [ 976.029329][T13081] ? __pfx_ksys_write+0x10/0x10 [ 976.034155][T13081] do_syscall_64+0x123/0x790 [ 976.038726][T13081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.044589][T13081] RIP: 0033:0x7f2193d9f559 [ 976.048981][T13081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.068558][T13081] RSP: 002b:00007f2194c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.076939][T13081] RAX: ffffffffffffffda RBX: 00007f2194025fa0 RCX: 00007f2193d9f559 [ 976.084880][T13081] RDX: 0000000000000004 RSI: 0000200000000480 RDI: 0000000000000000 [ 976.092820][T13081] RBP: 00007f2193e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 976.100769][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.108710][T13081] R13: 00007f2194026038 R14: 00007f2194025fa0 R15: 00007ffca99bfdd8 [ 976.116665][T13081] [ 976.119659][T13081] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 976.126912][T13081] CPU: 0 UID: 0 PID: 13081 Comm: syz.0.1712 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.137819][T13081] Tainted: [L]=SOFTLOCKUP [ 976.142122][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 976.152146][T13081] Call Trace: [ 976.155397][T13081] [ 976.158299][T13081] dump_stack_lvl+0x100/0x190 [ 976.162954][T13081] vpanic+0x553/0x970 [ 976.166907][T13081] ? __pfx_vpanic+0x10/0x10 [ 976.171383][T13081] panic+0xd1/0xe0 [ 976.175074][T13081] ? __pfx_panic+0x10/0x10 [ 976.179468][T13081] check_panic_on_warn.cold+0x19/0x34 [ 976.184821][T13081] ? __set_task_frozen+0x211/0x2e0 [ 976.189908][T13081] __warn.cold+0x191/0x318 [ 976.194295][T13081] __report_bug+0x30f/0x440 [ 976.198767][T13081] ? __set_task_frozen+0x211/0x2e0 [ 976.203853][T13081] ? __pfx___report_bug+0x10/0x10 [ 976.208848][T13081] ? pick_eevdf+0x1ad/0x880 [ 976.213336][T13081] ? __set_task_frozen+0x211/0x2e0 [ 976.218422][T13081] report_bug+0xb3/0x220 [ 976.222636][T13081] ? __set_task_frozen+0x211/0x2e0 [ 976.227724][T13081] handle_bug+0x16a/0x2a0 [ 976.232024][T13081] exc_invalid_op+0x17/0x50 [ 976.236498][T13081] asm_exc_invalid_op+0x1a/0x20 [ 976.241318][T13081] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 976.247012][T13081] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 b8 a2 8a 00 8b ab a0 0b 00 00 31 ff 89 ee e8 59 4b 16 00 85 ed 74 09 e8 e0 50 16 00 90 <0f> 0b 90 e8 d7 50 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 976.266588][T13081] RSP: 0018:ffffc90003737998 EFLAGS: 00010087 [ 976.272631][T13081] RAX: 00000000000605c6 RBX: ffff88802f44cb00 RCX: ffffc90004fe1000 [ 976.280586][T13081] RDX: 0000000000080000 RSI: ffffffff81f60ad0 RDI: ffff88802be48000 [ 976.288542][T13081] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 976.296488][T13081] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802f44cb18 [ 976.304431][T13081] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff88802f44d580 [ 976.312381][T13081] ? __set_task_frozen+0x210/0x2e0 [ 976.317476][T13081] ? __set_task_frozen+0x210/0x2e0 [ 976.322572][T13081] ? __pfx___set_task_frozen+0x10/0x10 [ 976.328010][T13081] task_call_func+0x169/0x380 [ 976.332673][T13081] ? cgroup1_freezing+0x12c/0x3b0