last executing test programs: 11m31.662046047s ago: executing program 32 (id=476): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000140)='stack\x00') pread64(r3, &(0x7f0000000440)=""/59, 0x3b, 0x40000000009) 10m10.886363303s ago: executing program 4 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008054) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f0, 0x6}, {0x10007, 0x30000080}]}}) 10m10.612160933s ago: executing program 4 (id=1078): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 10m9.456651108s ago: executing program 4 (id=1079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0xffffff7d}], 0x1) 10m8.185309433s ago: executing program 4 (id=1087): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 10m7.545816883s ago: executing program 4 (id=1093): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e", 0x4}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m6.80619157s ago: executing program 4 (id=1097): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 10m6.388112476s ago: executing program 33 (id=1097): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 9m25.4208567s ago: executing program 2 (id=1369): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 9m24.334937955s ago: executing program 2 (id=1379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48045}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 9m23.990438784s ago: executing program 2 (id=1383): bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={0x1, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0xffff, 0xa222209, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="50010000000000000600000000000000040000000000000003000000000000000080020000000000030000000000000009000000010001000600000000000000090000000000000004000000000000000b000000000000000600000000000000000000000000000006000000010000000600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="018000000000008000000000010000000000000001000000000000000100000094015432000000000000000004000000000000000300000000000000ff07000000000000ffffffffffffff7fff0f0000ff0700000300000000000000090000000000000003000000000000000600000000000000050000000000000002000000000000000200000006000000070000000080"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 9m23.740889784s ago: executing program 2 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 9m21.567927547s ago: executing program 2 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m21.451398713s ago: executing program 2 (id=1396): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20200, 0x80) close_range(r1, r1, 0x0) 9m6.400302565s ago: executing program 34 (id=1396): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20200, 0x80) close_range(r1, r1, 0x0) 7m2.646287515s ago: executing program 1 (id=2060): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x4, 0x5, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb6, 0x3, 0xe, 0x5, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x0, 0x7f, 0x2004cb, 0x1, 0xfffffd, 0x5, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m1.766627495s ago: executing program 1 (id=2063): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x9) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x18c6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m59.824121816s ago: executing program 1 (id=2075): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0xa, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080d8}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xe}, 0x1c) 6m58.148328749s ago: executing program 1 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x902, 0x4) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) syz_open_dev$admmidi(0x0, 0x20, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 6m56.954640726s ago: executing program 1 (id=2086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r1 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6m55.498542611s ago: executing program 1 (id=2092): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r0], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x68, {{0x9, 0x24, 0x6, 0x0, 0x0, "383ab800"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x19d, 0x91, 0x1, 0xfd}, [@country_functional={0x8, 0x24, 0x7, 0x6, 0x6, [0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x5, 0xf5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0xff, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xc0, 0xce, 0x3, 0x20, 0x4}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0xba, &(0x7f0000000640)=@string={0xba, 0x3, "8eb63e652b62bfebc8cc96503b9e8d0e44188ff6bdd8c845726598fb8d3e1cf517a6c563bb77d80d4711d48552857978fae9e30e0ceff3ca5b94589cde560919a27cc9a4ec4116ff5bcd910b48ef590bc316d4d9282b93184dd34d8c1294eb11326baea2398a3f588b7cae612cefc8e27fb8ca81c09f01c52dcd3def06600c2f06085ef9a875c51e2e58629d78c779a4911f284c970491943b16efce74cb33bf290392543074c8587e2eae00004d212be080404dceb7e130"}}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 6m55.099120656s ago: executing program 35 (id=2092): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r0], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x68, {{0x9, 0x24, 0x6, 0x0, 0x0, "383ab800"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x19d, 0x91, 0x1, 0xfd}, [@country_functional={0x8, 0x24, 0x7, 0x6, 0x6, [0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x5, 0xf5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0xff, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xc0, 0xce, 0x3, 0x20, 0x4}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0xba, &(0x7f0000000640)=@string={0xba, 0x3, "8eb63e652b62bfebc8cc96503b9e8d0e44188ff6bdd8c845726598fb8d3e1cf517a6c563bb77d80d4711d48552857978fae9e30e0ceff3ca5b94589cde560919a27cc9a4ec4116ff5bcd910b48ef590bc316d4d9282b93184dd34d8c1294eb11326baea2398a3f588b7cae612cefc8e27fb8ca81c09f01c52dcd3def06600c2f06085ef9a875c51e2e58629d78c779a4911f284c970491943b16efce74cb33bf290392543074c8587e2eae00004d212be080404dceb7e130"}}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 5m52.509178454s ago: executing program 8 (id=2366): r0 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x14) setuid(0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x44000) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(r0, 0xb, 0x0, 0x0) 5m52.150462086s ago: executing program 8 (id=2368): r0 = getpgid(0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000000140)="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", 0x87c}], 0x1) syz_pidfd_open(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(0x0, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 5m48.304660088s ago: executing program 8 (id=2375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 5m47.099001266s ago: executing program 8 (id=2377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x69, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5m42.366919573s ago: executing program 8 (id=2393): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 5m40.788517265s ago: executing program 8 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)="7aa19f7cf92cb78d1ed4b4a2a43f8e54416e16fd", 0x14}], 0x1}, 0x4011) 5m25.05060056s ago: executing program 36 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)="7aa19f7cf92cb78d1ed4b4a2a43f8e54416e16fd", 0x14}], 0x1}, 0x4011) 2m41.723191196s ago: executing program 9 (id=2809): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) request_key(0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 2m40.710833059s ago: executing program 9 (id=2810): openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x4a51, 0x4) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2m37.644228177s ago: executing program 9 (id=2816): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="41000000010001", 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x64}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x3}) 2m37.065710399s ago: executing program 9 (id=2821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x495, &(0x7f0000001380)={0x0, 0x104c55, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, r0, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x2, 0x0, 0x1}) io_uring_enter(r4, 0x6, 0x0, 0x0, 0x0, 0x0) 2m35.776317219s ago: executing program 9 (id=2825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) 2m34.279172077s ago: executing program 9 (id=2829): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000022c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x3ff, 0x400, 0xba0, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.113009263s ago: executing program 37 (id=2829): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000022c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x3ff, 0x400, 0xba0, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.251783379s ago: executing program 7 (id=3300): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 7.79030628s ago: executing program 7 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.726996162s ago: executing program 7 (id=3303): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000100"/20], 0x50) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.491241863s ago: executing program 5 (id=3309): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 5.417042286s ago: executing program 3 (id=3313): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 4.997612202s ago: executing program 0 (id=3316): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) recvmmsg$unix(r2, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x100, 0x0) 4.952517339s ago: executing program 3 (id=3317): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) 4.89871743s ago: executing program 5 (id=3318): ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000180)={&(0x7f0000000100)='\x00', &(0x7f0000000140)='&\x00', 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_clone(0x2820000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.837199652s ago: executing program 0 (id=3320): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)="7e26309cedb2123af445f51b4abb9f4842e5a6fff031050293e9d974786360b53d77d6d9c0f652246b0b00fa75852fd949cff419e47e5b4ce5063f25b4b2588719bc1d1dac0e1c047b214f2364388eba5d6b49b0258fda42219d24eace427214dacc3ec4764f3dd5794166d9696692517c66", 0x72}, {&(0x7f00000003c0)="08e8921bd8cd1d68f754c5a683c82284e0e3cab432e2852ad2938215b416b387fef3d8c470c5c715487ba74265e1b224b7612cdf79cc0667768a3cc6639cd4cd0ccb7465aa12692f72ce550ed3cf81322c2b1617655832ad441708b9d888d89a8125bccc4186cbde3d5f67941e794785362ba3f9b3a997e99a96c58a031d53ef4205d266b9f845f57403c16af517688f5ce4888207134e2f82797fe4c470a92527254f83c10c44492753a5fa399325ec9580feb6eb260105f4e4533a04", 0xbd}, {&(0x7f0000000480)="f1fbc154e2d46702a612e1be1ccc0dceee74dd1a960e76bd78c471774344d969b09079d2257fc614a1d6b933c60b5952c1eba9418a2ffb94", 0x38}, {&(0x7f00000004c0)="158ee1cbea7c9e5268fa18d7390acbe7df", 0x11}, {&(0x7f0000000500)="848bd5457ac727384cda7867c5c8bee82e232671b9a682cc21d1c1e4a57f2116745b839818ab639348662dd9351675ca43a07bd6c655ea125979136cbb149d7fcb1e", 0x42}], 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x80, 0x2, 0x4, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x65, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x5}, {[@ssrr={0x89, 0x3, 0x7b}]}}}}}) getsockname$llc(r3, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) 4.618097676s ago: executing program 0 (id=3321): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x94200, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) 4.530190302s ago: executing program 7 (id=3322): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.529163669s ago: executing program 0 (id=3323): ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x1, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 3.772039491s ago: executing program 6 (id=3325): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x1, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7ffffffe}, 0x24008000) 3.304748183s ago: executing program 6 (id=3326): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000f4c000/0x2000)=nil, 0x4000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) getpid() read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 2.921469876s ago: executing program 3 (id=3327): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) 2.701116003s ago: executing program 5 (id=3328): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.606621838s ago: executing program 6 (id=3329): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) keyctl$setperm(0x5, 0x0, 0x120c0603) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000040)) 2.555777504s ago: executing program 3 (id=3330): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4041) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.453424839s ago: executing program 5 (id=3331): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x4000100) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x109002, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x8, 0x141102) r4 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) 2.373944199s ago: executing program 7 (id=3332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='+ 1 0 1 1', 0x9) connect$can_bcm(r3, &(0x7f0000000180), 0x10) 2.327312641s ago: executing program 6 (id=3333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) socket(0x1d, 0x5, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) 2.300875423s ago: executing program 0 (id=3334): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000a00)=[{0x9, 0xb, 0x3, 0x3, @tick=0x4, {0x0, 0xfc}, {0xff, 0x6}, @control={0x5e, 0x0, 0x7}}], 0x1c) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c020020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.176138675s ago: executing program 3 (id=3335): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") 2.047995782s ago: executing program 6 (id=3336): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) semget$private(0x0, 0x7, 0x191) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], 0x0, 0x46, 0x0, 0xb, 0x5}, 0x28) 1.901922166s ago: executing program 5 (id=3337): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x8001}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) lsm_set_self_attr(0x0, &(0x7f00000001c0)={0x65, 0x4000000000000, 0x20}, 0x20, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 1.132703274s ago: executing program 5 (id=3338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fsmount(0xffffffffffffffff, 0x0, 0x1) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r4, 0x100, 0x1) getdents64(r4, 0x0, 0x4f) 1.13111869s ago: executing program 6 (id=3339): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) dup2(r0, r0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b0, 0x0, 0x5802, 0x294, 0x140, 0x294, 0x230, 0x378, 0x378, 0x230, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x800, 0x401, 0x7, 'pptp\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x4c091) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x4004662b, 0x0) 246.057091ms ago: executing program 3 (id=3340): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) 51.105247ms ago: executing program 7 (id=3341): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 0s ago: executing program 0 (id=3342): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0xffffffffffffffff, &(0x7f00000e8000/0x1000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) socket(0x29, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) kernel console output (not intermixed with test programs): 8][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 456.260570][ T31] audit: type=1400 audit(1791508341.146:1206): avc: denied { write } for pid=13644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.311883][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.327529][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.327560][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.327584][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.327615][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.383035][ T9] usb 9-1: config 0 descriptor?? [ 456.730813][ T31] audit: type=1400 audit(1791508341.616:1207): avc: denied { write } for pid=13667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.011520][ T5611] usb 6-1: USB disconnect, device number 19 [ 458.207772][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 458.407272][ T9] usb 9-1: USB disconnect, device number 5 [ 458.492015][T13675] fido_id[13675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 458.597378][ T31] audit: type=1400 audit(1791508343.486:1208): avc: denied { ioctl } for pid=13678 comm="syz.5.2342" path="/dev/sg0" dev="devtmpfs" ino=1021 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 459.100702][T13689] netlink: 'syz.7.2345': attribute type 1 has an invalid length. [ 459.301198][T13691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.322011][T13691] bond3: (slave bond4): making interface the new active one [ 459.338076][T13691] bond3: (slave bond4): Enslaving as an active interface with an up link [ 460.360857][T13694] tipc: Enabled bearer , priority 0 [ 460.855083][T13689] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.856284][T13689] bond3: (slave bond5): Enslaving as a backup interface with an up link [ 461.008705][T13706] tipc: Enabled bearer , priority 0 [ 461.024367][T13706] syzkaller0: entered promiscuous mode [ 461.024392][T13706] syzkaller0: entered allmulticast mode [ 461.120502][T13713] tipc: Resetting bearer [ 461.161966][T13704] tipc: Resetting bearer [ 461.225327][T13704] tipc: Disabling bearer [ 461.489262][T13722] ve: renamed from veth0_vlan (while UP) [ 465.262683][T13752] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.262715][T13752] overlayfs: missing 'lowerdir' [ 470.001071][T13772] bond2: entered allmulticast mode [ 470.010474][T13772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.122049][T13774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.143572][T13774] macvlan2: entered allmulticast mode [ 470.151703][T13774] bond0: entered allmulticast mode [ 470.179855][T13781] binder: 13779:13781 ioctl c0306201 0 returned -14 [ 470.212433][T13772] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2370'. [ 470.221617][T13774] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 470.261848][T13785] binder: 13779:13785 ioctl c0306201 0 returned -14 [ 471.305332][T13772] bond0 (unregistering): left allmulticast mode [ 471.405947][ T6147] bond2: Warning: Found an uninitialized port [ 471.419443][T13772] bond2: (slave macvlan2): Releasing backup interface [ 471.420915][T13772] macvlan2 (unregistering): left allmulticast mode [ 471.491942][T13772] bond0 (unregistering): Released all slaves [ 473.241457][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2380'. [ 475.864666][T13824] syzkaller0: entered promiscuous mode [ 475.864693][T13824] syzkaller0: entered allmulticast mode [ 475.870946][T13828] ip_tables: iptables: counters copy to user failed while replacing table [ 475.909022][T13828] ip_tables: iptables: counters copy to user failed while replacing table [ 475.960366][T13824] tipc: Enabled bearer , priority 0 [ 475.974623][T13823] tipc: Resetting bearer [ 476.048628][T13823] tipc: Disabling bearer [ 476.110976][T13830] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 476.124346][T13830] batman_adv: batadv0: Adding interface: gretap1 [ 476.124358][T13830] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 476.204333][T13830] batman_adv: batadv0: Interface activated: gretap1 [ 478.545940][T13850] fuse: fd is not a fuse device [ 478.882022][T13853] syzkaller0: entered promiscuous mode [ 478.882049][T13853] syzkaller0: entered allmulticast mode [ 479.132308][ T5707] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 479.409377][ T5707] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 479.410459][ T5707] usb 6-1: config 219 has too many interfaces: 243, using maximum allowed: 32 [ 479.410484][ T5707] usb 6-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 479.410511][ T5707] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 243 [ 479.423459][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.423476][ T5707] usb 6-1: Product: syz [ 479.423500][ T5707] usb 6-1: Manufacturer: syz [ 479.423508][ T5707] usb 6-1: SerialNumber: syz [ 479.905534][ T5707] usbsevseg 6-1:219.0: USB 7 Segment device now attached [ 479.924431][ T5707] usb 6-1: USB disconnect, device number 20 [ 479.930184][ T5707] usbsevseg 6-1:219.0: USB 7 Segment now disconnected [ 480.671758][ T31] audit: type=1400 audit(1791508365.556:1209): avc: denied { ioctl } for pid=13867 comm="syz.7.2400" path="socket:[52865]" dev="sockfs" ino=52865 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.153632][T13896] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 487.065683][T13922] netlink: 'syz.3.2419': attribute type 28 has an invalid length. [ 487.065709][T13922] netlink: 'syz.3.2419': attribute type 29 has an invalid length. [ 487.065716][T13922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2419'. [ 487.162316][ T5707] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 487.320099][ T5707] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 487.321328][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.348711][ T5707] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 021 [ 487.984045][ T5707] (null): failure reading functionality [ 488.007534][ T5707] i2c i2c-1: failure reading functionality [ 488.048032][ T5707] i2c i2c-1: connected i2c-tiny-usb device [ 488.065010][ T5707] usb 6-1: USB disconnect, device number 21 [ 489.009715][ T31] audit: type=1326 audit(1791508373.896:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.009769][ T31] audit: type=1326 audit(1791508373.896:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.011793][ T31] audit: type=1326 audit(1791508373.896:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.012029][ T31] audit: type=1326 audit(1791508373.896:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.012062][ T31] audit: type=1326 audit(1791508373.896:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.073026][T13951] kvm: pic: non byte write [ 489.162871][ T31] audit: type=1326 audit(1791508374.056:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.162923][ T31] audit: type=1326 audit(1791508374.056:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.162945][ T31] audit: type=1326 audit(1791508374.056:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.228853][ T31] audit: type=1326 audit(1791508374.126:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.228895][ T31] audit: type=1326 audit(1791508374.126:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.3.2427" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9499e1d9 code=0x7ffc0000 [ 489.342013][T13951] kvm: user requested TSC rate below hardware speed [ 489.350469][T13951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 490.013081][T13963] 9p: Bad value for 'rfdno' [ 490.460918][T13976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2434'. [ 490.890573][T13980] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 493.835010][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.856265][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.857035][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.857622][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.857982][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.654765][ T31] kauditd_printk_skb: 150 callbacks suppressed [ 494.654788][ T31] audit: type=1326 audit(1791508379.546:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.654949][ T31] audit: type=1326 audit(1791508379.546:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.656200][ T31] audit: type=1326 audit(1791508379.546:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.656238][ T31] audit: type=1326 audit(1791508379.546:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.656289][ T31] audit: type=1326 audit(1791508379.546:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.657842][ T31] audit: type=1326 audit(1791508379.546:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.657991][ T31] audit: type=1326 audit(1791508379.546:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.658127][ T31] audit: type=1326 audit(1791508379.546:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.917630][ T31] audit: type=1326 audit(1791508379.806:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 494.917684][ T31] audit: type=1326 audit(1791508379.806:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.6.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607699e1d9 code=0x7ffc0000 [ 495.928113][ T5616] Bluetooth: hci3: command tx timeout [ 496.096553][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.099762][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.099810][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.324662][T14016] FAULT_INJECTION: forcing a failure. [ 497.324662][T14016] name failslab, interval 1, probability 0, space 0, times 0 [ 497.324690][T14016] CPU: 0 UID: 0 PID: 14016 Comm: syz.5.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.324707][T14016] Tainted: [L]=SOFTLOCKUP [ 497.324711][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 497.324718][T14016] Call Trace: [ 497.324723][T14016] [ 497.324728][T14016] dump_stack_lvl+0x100/0x190 [ 497.324751][T14016] should_fail_ex.cold+0x5/0xa [ 497.324767][T14016] should_failslab+0xc2/0x120 [ 497.324788][T14016] kmem_cache_alloc_noprof+0x92/0x6a0 [ 497.324802][T14016] ? __pfx_map_id_range_down+0x10/0x10 [ 497.324816][T14016] ? security_inode_alloc+0x3b/0x2c0 [ 497.324835][T14016] security_inode_alloc+0x3b/0x2c0 [ 497.324851][T14016] inode_init_always_gfp+0xc6f/0xfb0 [ 497.324871][T14016] alloc_inode+0x8e/0x250 [ 497.324884][T14016] iget_locked+0x1d9/0x6d0 [ 497.324898][T14016] ? __pfx_iget_locked+0x10/0x10 [ 497.324911][T14016] ? kernfs_root+0xee/0x2a0 [ 497.324921][T14016] ? kernfs_root+0xee/0x2a0 [ 497.324936][T14016] kernfs_get_inode+0x46/0x470 [ 497.324954][T14016] kernfs_iop_lookup+0x1a7/0x2d0 [ 497.324965][T14016] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 497.324977][T14016] lookup_open+0xa79/0x1990 [ 497.324996][T14016] path_openat+0xa2c/0x2440 [ 497.325015][T14016] ? __pfx_path_openat+0x10/0x10 [ 497.325035][T14016] do_file_open+0x20e/0x430 [ 497.325053][T14016] ? __pfx_do_file_open+0x10/0x10 [ 497.325079][T14016] ? _raw_spin_unlock+0x28/0x50 [ 497.325092][T14016] ? alloc_fd+0x471/0x7a0 [ 497.325112][T14016] do_sys_openat2+0x10f/0x1e0 [ 497.325124][T14016] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.325135][T14016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.325155][T14016] __x64_sys_openat+0x12d/0x210 [ 497.325166][T14016] ? __pfx___x64_sys_openat+0x10/0x10 [ 497.325183][T14016] do_syscall_64+0x123/0x790 [ 497.325200][T14016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.325212][T14016] RIP: 0033:0x7f8ab5f9e1d9 [ 497.325222][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.325234][T14016] RSP: 002b:00007f8ab41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.325247][T14016] RAX: ffffffffffffffda RBX: 00007f8ab6225fa0 RCX: 00007f8ab5f9e1d9 [ 497.325254][T14016] RDX: 00000000000a0081 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 497.325261][T14016] RBP: 00007f8ab6035888 R08: 0000000000000000 R09: 0000000000000000 [ 497.325268][T14016] R10: 00000000000001dd R11: 0000000000000246 R12: 0000000000000000 [ 497.325274][T14016] R13: 00007f8ab6226038 R14: 00007f8ab6225fa0 R15: 00007ffde0305148 [ 497.325290][T14016] [ 498.150456][ T5616] Bluetooth: hci3: command tx timeout [ 500.691095][ T5606] Bluetooth: hci3: command tx timeout [ 501.551452][T13993] lo speed is unknown, defaulting to 1000 [ 502.116085][ T6188] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 503.455890][ T5606] Bluetooth: hci3: command tx timeout [ 505.551611][T14092] netlink: 'syz.5.2465': attribute type 1 has an invalid length. [ 505.689158][T14099] overlayfs: failed to clone upperpath [ 505.726602][T14092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.862568][T14094] bond5: (slave gretap1): making interface the new active one [ 505.914306][T14094] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 506.087431][T13993] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.087504][T13993] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.087631][T13993] bridge_slave_0: entered allmulticast mode [ 506.104464][T13993] bridge_slave_0: entered promiscuous mode [ 506.187083][ T6146] bridge_slave_1: left allmulticast mode [ 506.187113][ T6146] bridge_slave_1: left promiscuous mode [ 506.187304][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.376942][ T6146] bridge_slave_0: left allmulticast mode [ 506.376974][ T6146] bridge_slave_0: left promiscuous mode [ 506.377107][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.759635][ T6146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.779580][ T6146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.795314][ T6146] bond0 (unregistering): Released all slaves [ 507.824547][T13993] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.824611][T13993] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.824736][T13993] bridge_slave_1: entered allmulticast mode [ 507.825733][T13993] bridge_slave_1: entered promiscuous mode [ 508.048851][ T6146] tipc: Disabling bearer [ 508.048951][ T6146] tipc: Left network mode [ 508.157583][T13993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.195070][T13993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.576108][T13993] team0: Port device team_slave_0 added [ 508.614011][T13993] team0: Port device team_slave_1 added [ 508.822457][T13993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.822471][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.822494][T13993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.840476][T13993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.840488][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.840512][T13993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.727276][T13993] hsr_slave_0: entered promiscuous mode [ 509.746385][T13993] hsr_slave_1: entered promiscuous mode [ 509.898924][ T31] kauditd_printk_skb: 123 callbacks suppressed [ 509.898947][ T31] audit: type=1400 audit(1791508394.786:1503): avc: denied { write } for pid=14135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.152820][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.152846][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.160246][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.160262][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.368563][ T31] audit: type=1400 audit(1791508395.256:1504): avc: denied { write } for pid=14161 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.524407][ T6146] veth0_macvtap: left promiscuous mode [ 510.584289][ T6146] veth1_vlan: left promiscuous mode [ 510.610148][ T6146] veth0_vlan: left promiscuous mode [ 513.258555][ T6146] team0 (unregistering): Port device team_slave_1 removed [ 513.322661][ T6146] team0 (unregistering): Port device team_slave_0 removed [ 513.808418][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 514.879667][T14206] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2496'. [ 515.103448][T14211] ubi0: attaching mtd1 [ 515.103465][T14211] ubi0 error: ubi_attach_mtd_dev: bad VID header (64) or data offsets (128) [ 515.212836][T13993] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 515.230653][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.241289][T13993] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 515.266441][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.285117][T13993] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 515.290162][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.377599][T13993] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 515.426154][ T31] audit: type=1400 audit(1791508400.316:1505): avc: denied { write } for pid=14197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.476985][T13993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.824181][ T31] audit: type=1400 audit(1791508400.716:1506): avc: denied { write } for pid=14235 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.120440][T13993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.320122][T13993] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.348467][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 517.408156][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.408221][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.459605][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.459673][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.415412][ T31] audit: type=1400 audit(1791508669.301:1507): avc: denied { write } for pid=14248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.682827][ T31] audit: type=1400 audit(1791508669.571:1508): avc: denied { write } for pid=14274 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.824551][T13993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.864250][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 529.121188][T13993] veth0_vlan: entered promiscuous mode [ 529.129400][T13993] veth1_vlan: entered promiscuous mode [ 529.145859][T13993] veth0_macvtap: entered promiscuous mode [ 529.150398][T13993] veth1_macvtap: entered promiscuous mode [ 529.158263][T13993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.160575][T13993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.291603][ T6180] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.297045][ T6180] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.297252][ T6180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.297570][ T6180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.365502][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.365527][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.365696][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.365714][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.922823][ T31] audit: type=1400 audit(1791508670.811:1509): avc: denied { write } for pid=14289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.923962][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 529.923976][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 529.923982][T14280] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 530.162532][ T31] audit: type=1400 audit(1791508671.051:1510): avc: denied { write } for pid=14317 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.284357][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 531.649444][T14341] netdevsim netdevsim6: Direct firmware load for ÿ failed with error -2 [ 531.665039][ T31] audit: type=1400 audit(1791508672.561:1511): avc: denied { firmware_load } for pid=14340 comm="syz.6.2515" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 531.665112][T14341] netdevsim netdevsim6: Falling back to sysfs fallback for: ÿ [ 531.787410][T14330] ipvlan2: entered allmulticast mode [ 531.787435][T14330] batadv_slave_1: entered allmulticast mode [ 531.826332][T14330] batman_adv: batadv0: Adding interface: ipvlan2 [ 531.826346][T14330] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 531.826372][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.826382][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.826446][T14330] batman_adv: batadv0: Interface activated: ipvlan2 [ 532.384203][T14350] netlink: 'syz.3.2520': attribute type 1 has an invalid length. [ 533.286063][T14378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.704301][ T5707] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 533.851505][ T5707] usb 10-1: Using ep0 maxpacket: 32 [ 533.853599][ T5707] usb 10-1: unable to get BOS descriptor or descriptor too short [ 533.853637][ T5707] usb 10-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 533.857371][ T5707] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.857397][ T5707] usb 10-1: Product: syz [ 533.857407][ T5707] usb 10-1: Manufacturer: syz [ 533.857415][ T5707] usb 10-1: SerialNumber: syz [ 534.150755][T14378] ip_tables: iptables: counters copy to user failed while replacing table [ 534.185978][T14378] ip_tables: iptables: counters copy to user failed while replacing table [ 534.223252][ T5707] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.223291][ T5707] usb 10-1: MIDIStreaming interface descriptor not found [ 534.305241][ T5707] usb 10-1: USB disconnect, device number 2 [ 534.417588][T14398] udevd[14398]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.550135][ T5606] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 539.059052][ T31] audit: type=1400 audit(1791508679.952:1512): avc: denied { write } for pid=14472 comm="syz.5.2548" name="sg0" dev="devtmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 539.060641][ T31] audit: type=1400 audit(1791508679.952:1513): avc: denied { map } for pid=14472 comm="syz.5.2548" path="/dev/media3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.114215][ T31] audit: type=1400 audit(1791508680.012:1514): avc: denied { read } for pid=14472 comm="syz.5.2548" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 543.397661][ T31] audit: type=1400 audit(1791508684.292:1515): avc: denied { write } for pid=14479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.213073][ T31] audit: type=1400 audit(1791508685.113:1516): avc: denied { write } for pid=14517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.903294][T14540] xt_hashlimit: max too large, truncated to 1048576 [ 544.903379][T14540] xt_hashlimit: overflow, rate too high: 0 [ 545.436227][ T31] audit: type=1400 audit(1791508686.333:1517): avc: denied { name_bind } for pid=14543 comm="syz.3.2562" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 546.852189][ T31] audit: type=1400 audit(1791508687.753:1518): avc: denied { write } for pid=14542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.995095][T14578] dummy0: left promiscuous mode [ 547.024028][T14578] tipc: Resetting bearer [ 547.184904][ T31] audit: type=1400 audit(1791508688.083:1519): avc: denied { write } for pid=14579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.214312][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 547.242441][T14578] bridge2: left promiscuous mode [ 547.242467][T14578] bridge2: left allmulticast mode [ 547.302584][ T6180] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.302629][ T6180] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.302658][ T6180] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.302689][ T6180] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.362284][ T9] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 547.363692][ T9] usb 6-1: config 4 has an invalid interface number: 122 but max is 0 [ 547.363719][ T9] usb 6-1: config 4 has no interface number 0 [ 547.363733][ T9] usb 6-1: too many endpoints for config 4 interface 122 altsetting 16: 59, using maximum allowed: 30 [ 547.363761][ T9] usb 6-1: config 4 interface 122 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 547.363786][ T9] usb 6-1: config 4 interface 122 has no altsetting 0 [ 547.451307][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.451334][ T9] usb 6-1: Product: syz [ 547.451343][ T9] usb 6-1: Manufacturer: syz [ 547.451354][ T9] usb 6-1: SerialNumber: syz [ 548.602839][ T9] gspca_main: mars-2.14.0 probing 093a:050f [ 548.803591][ T9] usb 6-1: USB disconnect, device number 22 [ 549.311143][T14594] __vm_enough_memory: pid: 14594, comm: syz.3.2572, bytes: 4503599627366400 not enough memory for the allocation [ 550.935382][T14602] xt_hashlimit: size too large, truncated to 1048576 [ 553.756763][T14617] tmpfs: Bad value for 'nr_blocks' [ 554.264164][T14625] netlink: 6 bytes leftover after parsing attributes in process `syz.9.2579'. [ 554.280258][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2579'. [ 554.504673][ T31] audit: type=1400 audit(1791508695.394:1520): avc: denied { write } for pid=14600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.540210][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 554.689925][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 554.690987][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.691905][ T9] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 554.691939][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.691971][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.761247][ T9] usbtmc 10-1:16.0: bulk endpoints not found [ 554.874847][ T31] audit: type=1400 audit(1791508695.764:1521): avc: denied { shutdown } for pid=14635 comm="iou-wrk-14636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 554.918035][ T31] audit: type=1400 audit(1791508695.804:1522): avc: denied { write } for pid=14637 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.030793][T14625] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 555.034053][ T9] usb 10-1: USB disconnect, device number 3 [ 555.540757][T14656] netlink: 'syz.5.2586': attribute type 1 has an invalid length. [ 555.638923][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2586'. [ 555.641321][T14656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.877820][T14669] bridge_slave_0: left allmulticast mode [ 555.877853][T14669] bridge_slave_0: left promiscuous mode [ 555.877998][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.937695][T14669] bridge_slave_1: left allmulticast mode [ 555.937715][T14669] bridge_slave_1: left promiscuous mode [ 555.937870][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.028142][T14669] bond0: (slave bond_slave_0): Releasing backup interface [ 556.054848][T14669] bond0: (slave bond_slave_1): Releasing backup interface [ 556.118566][T14669] team0: Port device team_slave_0 removed [ 556.164896][T14669] team0: Port device team_slave_1 removed [ 556.168956][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.168972][T14669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.194983][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.195007][T14669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.210347][T14669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 556.411812][ T31] audit: type=1400 audit(1791508697.304:1523): avc: denied { write } for pid=14648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.533470][T14656] bond6: (slave bridge5): making interface the new active one [ 556.573467][T14656] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 556.702479][T14669] team0: Mode changed to "broadcast" [ 556.870420][ T31] audit: type=1400 audit(1791508697.764:1524): avc: denied { write } for pid=14679 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.485973][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2592'. [ 557.485990][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2592'. [ 557.486743][T14692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 557.529006][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.529310][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.529354][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.627911][ T31] audit: type=1400 audit(1791508698.514:1525): avc: denied { write } for pid=14693 comm="syz.5.2593" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 557.750516][T14692] netlink: 'syz.7.2592': attribute type 4 has an invalid length. [ 557.750534][T14692] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2592'. [ 557.929067][T14697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.930369][T14697] bond6: (slave bond0): making interface the new active one [ 558.014117][T14697] bond6: (slave bond0): Enslaving as an active interface with an up link [ 558.054412][T14692] .`: renamed from bond0 (while UP) [ 558.164123][T14704] syzkaller0: entered promiscuous mode [ 558.164151][T14704] syzkaller0: entered allmulticast mode [ 558.213722][T14698] tipc: Started in network mode [ 558.213752][T14698] tipc: Node identity e6d08f078c23, cluster identity 4711 [ 558.273860][T14698] tipc: Enabled bearer , priority 0 [ 558.303643][T14696] tipc: Resetting bearer [ 558.444489][T14696] tipc: Disabling bearer [ 560.115169][T14719] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2600'. [ 560.812817][T14721] syzkaller0: entered promiscuous mode [ 560.812844][T14721] syzkaller0: entered allmulticast mode [ 561.256474][ T31] audit: type=1400 audit(1791508702.135:1526): avc: denied { shutdown } for pid=14722 comm="syz.6.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 561.256523][ T31] audit: type=1400 audit(1791508702.135:1527): avc: denied { read } for pid=14722 comm="syz.6.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 561.966996][T14733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 564.134553][ T5707] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 567.098069][T14728] lo speed is unknown, defaulting to 1000 [ 569.358124][ T5707] usb 10-1: device descriptor read/all, error -71 [ 570.573282][ T31] audit: type=1804 audit(1791508711.466:1528): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2619" name="bus" dev="ramfs" ino=56457 res=1 errno=0 [ 570.612245][ T31] audit: type=1804 audit(1791508711.506:1529): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2619" name="bus" dev="ramfs" ino=56457 res=1 errno=0 [ 570.750894][T14783] ip_tables: iptables: counters copy to user failed while replacing table [ 574.485272][T14813] CIFS mount error: No usable UNC path provided in device string! [ 574.485272][T14813] [ 574.485485][T14813] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 576.018675][T14835] FAULT_INJECTION: forcing a failure. [ 576.018675][T14835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.018712][T14835] CPU: 0 UID: 0 PID: 14835 Comm: syz.5.2631 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.018730][T14835] Tainted: [L]=SOFTLOCKUP [ 576.018735][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 576.018741][T14835] Call Trace: [ 576.018746][T14835] [ 576.018752][T14835] dump_stack_lvl+0x100/0x190 [ 576.018779][T14835] should_fail_ex.cold+0x5/0xa [ 576.018794][T14835] ? prepare_alloc_pages+0x16d/0x5b0 [ 576.018815][T14835] should_fail_alloc_page+0xeb/0x140 [ 576.018835][T14835] prepare_alloc_pages+0x1f0/0x5b0 [ 576.018855][T14835] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 576.018870][T14835] ? __kernel_text_address+0xd/0x30 [ 576.018881][T14835] ? unwind_get_return_address+0x59/0xa0 [ 576.018897][T14835] ? arch_stack_walk+0xa6/0xf0 [ 576.018919][T14835] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 576.018934][T14835] ? __pfx_stack_trace_save+0x10/0x10 [ 576.018947][T14835] ? stack_depot_save_flags+0x27/0x9f0 [ 576.018964][T14835] ? debug_check_no_obj_freed+0x31f/0x630 [ 576.018985][T14835] ? kasan_save_stack+0x3f/0x50 [ 576.018999][T14835] ? kasan_save_stack+0x30/0x50 [ 576.019013][T14835] ? kasan_save_track+0x14/0x30 [ 576.019027][T14835] ? __kasan_kmalloc+0xaa/0xb0 [ 576.019040][T14835] ? __kmalloc_noprof+0x32f/0x840 [ 576.019054][T14835] ? copy_splice_read+0x1a3/0xbb0 [ 576.019072][T14835] ? do_splice_read+0x285/0x370 [ 576.019088][T14835] ? splice_direct_to_actor+0x2a1/0xa30 [ 576.019105][T14835] ? do_splice_direct+0x174/0x240 [ 576.019121][T14835] ? do_sendfile+0xadc/0xe20 [ 576.019143][T14835] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 576.019162][T14835] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 576.019176][T14835] ? rcu_is_watching+0x13/0xc0 [ 576.019194][T14835] ? __kmalloc_noprof+0x350/0x840 [ 576.019208][T14835] ? copy_splice_read+0x1a3/0xbb0 [ 576.019227][T14835] copy_splice_read+0x1e1/0xbb0 [ 576.019247][T14835] ? __pfx_copy_splice_read+0x10/0x10 [ 576.019266][T14835] ? __pfx_splice_from_pipe+0x10/0x10 [ 576.019282][T14835] ? __pfx_copy_splice_read+0x10/0x10 [ 576.019299][T14835] do_splice_read+0x285/0x370 [ 576.019317][T14835] splice_direct_to_actor+0x2a1/0xa30 [ 576.019336][T14835] ? __pfx_direct_splice_actor+0x10/0x10 [ 576.019355][T14835] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 576.019374][T14835] ? lock_acquire+0x1d1/0x380 [ 576.019389][T14835] do_splice_direct+0x174/0x240 [ 576.019407][T14835] ? __pfx_do_splice_direct+0x10/0x10 [ 576.019423][T14835] ? avc_policy_seqno+0x9/0x20 [ 576.019434][T14835] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 576.019452][T14835] ? bpf_lsm_file_permission+0x9/0x10 [ 576.019468][T14835] ? security_file_permission+0x76/0x210 [ 576.019484][T14835] ? rw_verify_area+0xce/0x6d0 [ 576.019497][T14835] do_sendfile+0xadc/0xe20 [ 576.019513][T14835] ? __pfx_do_sendfile+0x10/0x10 [ 576.019525][T14835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.019543][T14835] ? __x64_sys_futex+0x34f/0x4d0 [ 576.019559][T14835] ? __x64_sys_futex+0x358/0x4d0 [ 576.019577][T14835] __x64_sys_sendfile64+0x1d8/0x220 [ 576.019594][T14835] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 576.019615][T14835] do_syscall_64+0x123/0x790 [ 576.019631][T14835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.019644][T14835] RIP: 0033:0x7f8ab5f9e1d9 [ 576.019656][T14835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.019667][T14835] RSP: 002b:00007f8ab41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 576.019679][T14835] RAX: ffffffffffffffda RBX: 00007f8ab6225fa0 RCX: 00007f8ab5f9e1d9 [ 576.019686][T14835] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 576.019692][T14835] RBP: 00007f8ab6035888 R08: 0000000000000000 R09: 0000000000000000 [ 576.019699][T14835] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.019706][T14835] R13: 00007f8ab6226038 R14: 00007f8ab6225fa0 R15: 00007ffde0305148 [ 576.019721][T14835] [ 577.900593][T14848] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14848 comm=syz.7.2633 [ 577.900626][T14848] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14848 comm=syz.7.2633 [ 579.906305][T14881] tipc: Enabling of bearer rejected, already enabled [ 582.805647][ T5707] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 583.277821][ T5707] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 583.280221][ T5707] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 583.280248][ T5707] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.280269][ T5707] usb 10-1: config 0 has no interface number 0 [ 583.280287][ T5707] usb 10-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.282680][ T5707] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.282705][ T5707] usb 10-1: Product: syz [ 583.282715][ T5707] usb 10-1: Manufacturer: syz [ 583.282734][ T5707] usb 10-1: SerialNumber: syz [ 583.344444][ T5707] usb 10-1: config 0 descriptor?? [ 584.053867][ T31] audit: type=1400 audit(1791508724.947:1530): avc: denied { append } for pid=14899 comm="syz.9.2650" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 584.212607][T14913] ip_tables: iptables: counters copy to user failed while replacing table [ 584.268839][T14913] tipc: Enabling of bearer rejected, already enabled [ 585.947876][ T5707] usb 10-1: USB disconnect, device number 6 [ 590.428196][T14935] netlink: 'syz.7.2649': attribute type 5 has an invalid length. [ 590.600248][T14940] ip_tables: iptables: counters copy to user failed while replacing table [ 590.630388][T14927] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 590.630419][T14927] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 591.074437][T14948] macsec1: entered promiscuous mode [ 591.074454][T14948] virt_wifi0: entered promiscuous mode [ 591.266360][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2662'. [ 594.933236][ T31] audit: type=1326 audit(1791508735.829:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 594.933430][ T31] audit: type=1326 audit(1791508735.829:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.004085][ T31] audit: type=1326 audit(1791508736.909:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5821b5ea0e code=0x7ffc0000 [ 596.004397][ T31] audit: type=1326 audit(1791508736.909:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.005011][ T31] audit: type=1326 audit(1791508736.909:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.129178][T14989] futex_wake_op: syz.6.2674 tries to shift op by 144; fix this program [ 596.244233][T14989] lo speed is unknown, defaulting to 1000 [ 596.482237][ T31] audit: type=1326 audit(1791508737.379:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.482396][ T31] audit: type=1326 audit(1791508737.379:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.482549][ T31] audit: type=1326 audit(1791508737.379:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.578435][ T31] audit: type=1326 audit(1791508737.479:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 596.579504][ T31] audit: type=1326 audit(1791508737.479:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14985 comm="syz.7.2673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5821b9e1d9 code=0x7ffc0000 [ 597.867933][T15000] lo speed is unknown, defaulting to 1000 [ 597.868002][T15000] lo speed is unknown, defaulting to 1000 [ 597.868486][T15000] lo speed is unknown, defaulting to 1000 [ 597.869074][T15000] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 597.869104][T15000] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 597.869138][T15000] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 597.872585][T15000] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 597.891384][T15000] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 597.911080][T15000] lo speed is unknown, defaulting to 1000 [ 597.912094][T15000] lo speed is unknown, defaulting to 1000 [ 597.913438][T15000] lo speed is unknown, defaulting to 1000 [ 597.917664][T15000] lo speed is unknown, defaulting to 1000 [ 597.918725][T15000] lo speed is unknown, defaulting to 1000 [ 597.919706][T15000] lo speed is unknown, defaulting to 1000 [ 597.920710][T15000] lo speed is unknown, defaulting to 1000 [ 599.732304][ T9] libceph: connect (1)[c::]:6789 error -101 [ 599.732456][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 599.754962][T15006] ceph: No mds server is up or the cluster is laggy [ 601.097975][T15026] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2682'. [ 605.284279][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 605.284304][ T31] audit: type=1400 audit(1791508746.190:1571): avc: denied { ioctl } for pid=15043 comm="syz.5.2690" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 611.326204][T15074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15074 comm=syz.5.2697 [ 612.921115][T15080] fuse: fd is not a fuse device [ 612.966225][ T31] audit: type=1800 audit(1791508753.871:1572): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2696" name="nullb0" dev="tmpfs" ino=1860 res=0 errno=0 [ 614.536114][T15093] lo: Caught tx_queue_len zero misconfig [ 614.722773][ T5787] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 614.879513][ T5787] usb 6-1: unable to get BOS descriptor or descriptor too short [ 614.879550][ T5787] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 614.880426][ T5787] usb 6-1: config index 0 descriptor too short (expected 40744, got 96) [ 614.880442][ T5787] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 614.880463][ T5787] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 614.880493][ T5787] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 614.880522][ T5787] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 614.880537][ T5787] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 614.880561][ T5787] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 614.880575][ T5787] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 614.911894][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.911923][ T5787] usb 6-1: Product: syz [ 614.911932][ T5787] usb 6-1: Manufacturer: syz [ 614.911950][ T5787] usb 6-1: SerialNumber: syz [ 615.487646][ T5787] usb 6-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 615.736350][ T5787] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 617.073698][ T5787] usb 6-1: USB disconnect, device number 23 [ 617.234628][ T31] audit: type=1400 audit(1791508758.141:1573): avc: denied { ioctl } for pid=15112 comm="syz.9.2699" path="socket:[57864]" dev="sockfs" ino=57864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 617.867975][ T31] audit: type=1400 audit(1791508758.771:1574): avc: denied { connect } for pid=15127 comm="syz.3.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 617.896271][T15131] udevd[15131]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.922089][T15133] fuse: fd is not a fuse device [ 618.272081][T15142] 9p: Bad value for 'rfdno' [ 618.707133][T15146] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 618.920560][T15146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.829958][ T5787] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 619.831600][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.850496][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.850536][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.019007][T15146] macvtap1: entered allmulticast mode [ 620.031653][ T5787] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 620.035187][ T5787] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.035205][ T5787] usb 10-1: Product: syz [ 620.035223][ T5787] usb 10-1: Manufacturer: syz [ 620.035231][ T5787] usb 10-1: SerialNumber: syz [ 621.254961][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 621.257376][T15146] bond6: (slave geneve2): making interface the new active one [ 621.446415][ T5787] rtl8150 10-1:1.0: couldn't reset the device [ 621.446612][ T5787] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 621.482919][ T5787] usb 10-1: USB disconnect, device number 7 [ 621.778240][T15146] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 621.780888][ T6165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.782652][ T6172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.782690][ T6172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.782720][ T6172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.350871][T15168] tmpfs: Using encoding : utf8-12.1.0 [ 622.742730][T15153] Bluetooth: hci3: command 0x0406 tx timeout [ 623.122607][T15146] syz.3.2717 (15146) used greatest stack depth: 19928 bytes left [ 623.202313][ T5787] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 628.472676][T15219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15219 comm=syz.3.2737 [ 629.753326][T15221] syz.9.2736 (15221) used greatest stack depth: 19896 bytes left [ 632.205005][T15247] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 633.632431][T15263] UHID_CREATE from different security context by process 1214 (syz.5.2749), this is not allowed. [ 634.892372][T15282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2755'. [ 636.079400][T15296] fuse: fd is not a fuse device [ 636.085055][T15293] syzkaller0: entered promiscuous mode [ 636.085070][T15293] syzkaller0: entered allmulticast mode [ 637.073150][T15315] team_slave_1: Caught tx_queue_len zero misconfig [ 639.055641][T15321] tmpfs: Using encoding : utf8-12.1.0 [ 639.448031][T15320] SELinux: invalid class [ 639.466197][T15320] SELinux: failed to load policy [ 640.384786][T15329] veth0_macvtap: Caught tx_queue_len zero misconfig [ 640.416568][T15334] fuse: fd is not a fuse device [ 641.606841][T15338] netlink: 'syz.7.2775': attribute type 1 has an invalid length. [ 641.779608][T15338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.153336][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2776'. [ 642.256515][T15338] macvtap1: entered allmulticast mode [ 642.922156][T15359] trusted_key: encrypted_key: key trusted:syz not found [ 643.216589][T15363] syzkaller0: entered promiscuous mode [ 643.216615][T15363] syzkaller0: entered allmulticast mode [ 645.226902][T15366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.318923][T15368] veth1_macvtap: left promiscuous mode [ 645.883039][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'. [ 645.883055][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2784'. [ 646.047451][T15371] netlink: 'syz.5.2784': attribute type 4 has an invalid length. [ 646.047464][T15371] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2784'. [ 646.478858][T15366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.514926][T15382] siw: device registration error -23 [ 646.531982][T15366] bond7: (slave bond0): making interface the new active one [ 646.556940][T15366] bond7: (slave bond0): Enslaving as an active interface with an up link [ 646.603073][T15371] .`: renamed from bond0 (while UP) [ 648.389224][T15401] netlink: 'syz.6.2791': attribute type 1 has an invalid length. [ 648.464668][T15401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.973810][T15401] macvtap1: entered allmulticast mode [ 650.253164][T15401] bond0: (slave geneve2): making interface the new active one [ 650.290905][T15401] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 650.489592][ T6157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.489632][ T6157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.489662][ T6157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.489690][ T6157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.063316][T15422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 653.823239][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2800'. [ 653.823274][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'. [ 654.018880][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2803'. [ 654.072878][T15432] netlink: 'syz.3.2800': attribute type 4 has an invalid length. [ 654.072907][T15432] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2800'. [ 654.111216][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.217970][T15422] bond7: (slave bond0): making interface the new active one [ 654.218590][T15422] bond7: (slave bond0): Enslaving as an active interface with an up link [ 654.223203][T15432] .`: renamed from bond0 (while UP) [ 660.997356][T15492] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 660.997595][T15492] bridge1: entered promiscuous mode [ 660.997614][T15492] bridge1: entered allmulticast mode [ 661.233464][ T6180] IPVS: starting estimator thread 0... [ 661.686208][T15497] IPVS: using max 78 ests per chain, 187200 per kthread [ 661.705137][T15509] futex_wake_op: syz.3.2822 tries to shift op by 144; fix this program [ 661.705843][T15509] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2822'. [ 662.606485][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 662.877226][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2824'. [ 664.210327][T15529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15529 comm=syz.3.2828 [ 664.210345][T15529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15529 comm=syz.3.2828 [ 664.215295][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 664.659786][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 664.715389][ T31] audit: type=1804 audit(1791508805.607:1575): pid=15535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.2829" name="/newroot/59/file1" dev="fuse" ino=1 res=1 errno=0 [ 664.715595][ T31] audit: type=1800 audit(1791508805.607:1576): pid=15535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2829" name="/" dev="fuse" ino=1 res=0 errno=0 [ 666.327162][ T9] usb 6-1: string descriptor 0 read error: -71 [ 666.327237][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.328484][ T9] usb 6-1: config 0 descriptor?? [ 666.804391][T15554] netlink: Conntrack attr has 8 unknown bytes [ 666.804412][T15554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.812339][ T9] usb 6-1: can't set config #0, error -71 [ 666.813148][ T9] usb 6-1: USB disconnect, device number 24 [ 667.010917][T15557] syzkaller0: entered promiscuous mode [ 667.010934][T15557] syzkaller0: entered allmulticast mode [ 668.954534][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2844'. [ 670.842509][T15606] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15606] [ 671.128209][T15611] ip_tables: iptables: counters copy to user failed while replacing table [ 671.155377][T15611] ip_tables: iptables: counters copy to user failed while replacing table [ 675.593898][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 676.590500][ T6188] IPVS: starting estimator thread 0... [ 676.892773][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 677.026668][T15653] IPVS: using max 76 ests per chain, 182400 per kthread [ 677.245494][ T9] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 677.446793][ T9] usb 6-1: config 0 has no interfaces? [ 678.752327][T15681] jffs2: notice: (15681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 678.757098][T15681] overlayfs: failed to clone upperpath [ 678.860743][T15683] netlink: 'syz.6.2875': attribute type 5 has an invalid length. [ 679.043596][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.043615][ T9] usb 6-1: Product: syz [ 679.046359][ T9] usb 6-1: config 0 descriptor?? [ 679.154509][ T9] usb 6-1: can't set config #0, error -71 [ 679.155290][ T9] usb 6-1: USB disconnect, device number 25 [ 679.501811][T15153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.510308][T15153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.511083][T15153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.511472][T15153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.511715][T15153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.216408][T15689] lo speed is unknown, defaulting to 1000 [ 680.217048][T15689] lo speed is unknown, defaulting to 1000 [ 681.024503][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.024744][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.024771][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.390250][ T5606] Bluetooth: hci1: command tx timeout [ 683.917987][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.918033][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.918090][T15689] bridge_slave_0: entered allmulticast mode [ 683.918767][T15689] bridge_slave_0: entered promiscuous mode [ 683.920191][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.920234][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.920286][T15689] bridge_slave_1: entered allmulticast mode [ 683.920994][T15689] bridge_slave_1: entered promiscuous mode [ 683.932592][T15689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.933884][T15689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.944837][T15689] team0: Port device team_slave_0 added [ 683.945963][T15689] team0: Port device team_slave_1 added [ 683.956477][T15689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.956489][T15689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.956502][T15689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.957241][T15689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.957249][T15689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.957262][T15689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.975780][T15689] hsr_slave_0: entered promiscuous mode [ 683.976194][T15689] hsr_slave_1: entered promiscuous mode [ 683.976476][T15689] debugfs: 'hsr0' already exists in 'hsr' [ 683.976487][T15689] Cannot create hsr debugfs directory [ 684.587748][ T5606] Bluetooth: hci1: command tx timeout [ 685.770741][ T31] audit: type=1400 audit(1791508826.660:1577): avc: denied { write } for pid=15756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.805152][ T31] audit: type=1400 audit(1791508826.660:1578): avc: denied { write } for pid=15773 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.493156][ T31] audit: type=1400 audit(1791508827.310:1579): avc: denied { write } for pid=15775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.779209][ T5606] Bluetooth: hci1: command tx timeout [ 686.809336][ T31] audit: type=1400 audit(1791508827.640:1580): avc: denied { write } for pid=15794 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.459490][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2896'. [ 688.949506][ T5606] Bluetooth: hci1: command tx timeout [ 689.023913][ T31] audit: type=1400 audit(1791508829.910:1581): avc: denied { write } for pid=15798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.059726][T15808] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2898'. [ 689.117641][ T31] audit: type=1400 audit(1791508830.010:1582): avc: denied { write } for pid=15825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.882077][T15689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 689.893960][T15689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.894684][T15689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 689.900927][T15689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.925734][T15840] virt_wifi0: left promiscuous mode [ 689.925849][T15840] macsec1: left promiscuous mode [ 689.931443][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2906'. [ 689.934640][T15840] macvtap1: left allmulticast mode [ 689.951584][T15689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 690.903265][T15689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.903758][T15689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.846154][T15689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.663375][ T6165] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.668111][ T6180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.668211][ T6180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.668245][ T6180] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.721304][ T31] audit: type=1400 audit(1791508833.560:1583): avc: denied { write } for pid=15834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.806995][ T31] audit: type=1400 audit(1791508833.670:1584): avc: denied { write } for pid=15864 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.837465][T15689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.842016][T15689] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.854845][T15689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.854860][T15689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.767133][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.767183][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.775174][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.775222][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.373106][T15689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.450664][T15689] veth0_vlan: entered promiscuous mode [ 694.472298][T15689] veth1_vlan: entered promiscuous mode [ 694.788998][T15689] veth0_macvtap: entered promiscuous mode [ 694.790773][T15689] veth1_macvtap: entered promiscuous mode [ 694.796114][T15689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.797805][T15689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.915875][ T31] audit: type=1400 audit(1791508835.731:1585): avc: denied { write } for pid=15880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.023656][ T31] audit: type=1400 audit(1791508835.841:1586): avc: denied { write } for pid=15914 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.152737][ T6188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.157021][ T6180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.157166][ T6180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.829765][ T6157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.829780][ T6157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.021488][T15928] CIFS mount error: No usable UNC path provided in device string! [ 696.021488][T15928] [ 696.021502][T15928] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 696.060585][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.060600][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.137222][ T6188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.376845][ T31] audit: type=1400 audit(1791508837.251:1587): avc: denied { write } for pid=15920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.418005][ T31] audit: type=1400 audit(1791508837.251:1588): avc: denied { write } for pid=15942 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.740467][ T31] audit: type=1400 audit(1791508837.581:1589): avc: denied { write } for pid=15945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.865966][ T31] audit: type=1400 audit(1791508837.681:1590): avc: denied { write } for pid=15957 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.900777][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 697.672759][ T31] audit: type=1400 audit(1791508838.551:1591): avc: denied { write } for pid=15963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.936214][T15988] trusted_key: encrypted_key: key trusted:syz not found [ 698.002308][ T31] audit: type=1400 audit(1791508838.891:1592): avc: denied { write } for pid=15987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.015814][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2927'. [ 698.067509][T15983] vlan4: entered allmulticast mode [ 698.067522][T15983] bridge2: entered allmulticast mode [ 698.149961][T15983] bridge2: port 1(erspan0) entered blocking state [ 698.150009][T15983] bridge2: port 1(erspan0) entered disabled state [ 698.150100][T15983] erspan0: entered allmulticast mode [ 698.150864][T15983] erspan0: entered promiscuous mode [ 698.151349][T15983] bridge2: port 1(erspan0) entered blocking state [ 698.151420][T15983] bridge2: port 1(erspan0) entered forwarding state [ 698.390887][T15983] erspan0: left allmulticast mode [ 698.390907][T15983] erspan0: left promiscuous mode [ 698.391013][T15983] bridge2: port 1(erspan0) entered disabled state [ 699.303420][T15983] syz_tun: left allmulticast mode [ 699.303439][T15983] syz_tun: left promiscuous mode [ 699.303540][T15983] bridge0: port 1(syz_tun) entered disabled state [ 699.329472][T15983] bond6: (slave .`): Releasing backup interface [ 699.346296][T15983] team0: Port device xfrm0 removed [ 699.346867][T15983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 699.353677][ T6188] tipc: Resetting bearer [ 704.383887][ T31] audit: type=1400 audit(1791508845.252:1593): avc: denied { write } for pid=15992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.604545][ T31] audit: type=1400 audit(1791508845.472:1594): avc: denied { write } for pid=16030 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.116730][ T31] audit: type=1400 audit(1791508846.972:1595): avc: denied { write } for pid=16038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.150272][ T31] audit: type=1400 audit(1791508846.972:1596): avc: denied { write } for pid=16067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.875675][T16072] pim6reg: entered allmulticast mode [ 709.024101][ T31] audit: type=1400 audit(1791508849.882:1597): avc: denied { write } for pid=16076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.141546][ T31] audit: type=1400 audit(1791508849.992:1598): avc: denied { write } for pid=16111 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.141804][T16112] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 709.141804][T16112] The task syz.0.2947 (16112) triggered the difference, watch for misbehavior. [ 710.451463][T16133] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 710.451489][T16133] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 710.451514][T16133] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 710.457693][T16133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 710.809216][ T31] audit: type=1400 audit(1791508851.722:1599): avc: denied { write } for pid=16115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.842244][ T31] audit: type=1400 audit(1791508851.722:1600): avc: denied { write } for pid=16144 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.928470][ T31] audit: type=1400 audit(1791508852.803:1601): avc: denied { write } for pid=16146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.963665][ T31] audit: type=1400 audit(1791508852.803:1602): avc: denied { write } for pid=16171 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.499576][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2968'. [ 721.042316][T16238] overlayfs: failed to clone lowerpath [ 723.248930][T16251] netlink: 'syz.7.2982': attribute type 1 has an invalid length. [ 723.259862][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'. [ 724.066736][T16251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 725.703104][T16251] macvlan2: entered promiscuous mode [ 725.703121][T16251] macvlan2: entered allmulticast mode [ 725.703249][T16251] bond7: entered allmulticast mode [ 725.703268][T16251] bond7: entered promiscuous mode [ 725.703521][T16251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 725.704885][T16251] team0: Port device macvlan2 added [ 725.773989][T16258] bond7: (slave ip6gretap1): making interface the new active one [ 725.774006][T16258] ip6gretap1: entered promiscuous mode [ 725.774072][T16258] ip6gretap1: entered allmulticast mode [ 725.774718][T16258] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 726.036874][T16269] fuse: Bad value for 'fd' [ 730.563956][T16300] ip_tables: iptables: counters copy to user failed while replacing table [ 731.596696][T16303] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 731.596902][T16303] bridge3: entered promiscuous mode [ 731.596913][T16303] bridge3: entered allmulticast mode [ 731.808935][ T5611] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 732.573061][ T6141] IPVS: starting estimator thread 0... [ 732.885213][T16315] IPVS: using max 77 ests per chain, 184800 per kthread [ 733.364319][T16326] netlink: Conntrack attr has 8 unknown bytes [ 733.364339][T16326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.528502][ T5611] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 734.711848][ T5611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.711871][ T5611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 736.162639][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 736.187776][T16355] Set syz0 is full, maxelem 0 reached [ 736.973414][ T5611] usb 1-1: can't set config #1, error -71 [ 736.974200][ T5611] usb 1-1: USB disconnect, device number 16 [ 737.474259][ T31] audit: type=1400 audit(1791508878.326:1603): avc: denied { ioctl } for pid=16366 comm="syz.3.3018" path="socket:[62557]" dev="sockfs" ino=62557 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 737.767264][ T31] audit: type=1400 audit(1791508878.636:1604): avc: denied { read } for pid=16370 comm="syz.5.3019" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 737.767301][ T31] audit: type=1400 audit(1791508878.636:1605): avc: denied { open } for pid=16370 comm="syz.5.3019" path="/452/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 739.074186][T16386] tipc: Started in network mode [ 739.074204][T16386] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 739.375818][ T31] audit: type=1400 audit(1791508880.276:1606): avc: denied { write } for pid=16391 comm="syz.0.3026" name="subsystems" dev="configfs" ino=3565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 739.433779][ T31] audit: type=1400 audit(1791508880.276:1607): avc: denied { write } for pid=16391 comm="syz.0.3026" name="attr_allow_any_host" dev="configfs" ino=62624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 739.433815][ T31] audit: type=1400 audit(1791508880.276:1608): avc: denied { open } for pid=16391 comm="syz.0.3026" path="/25/config/nvmet/subsystems/testsubsys/attr_allow_any_host" dev="configfs" ino=62624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 739.439555][T16393] nvmet: adding nsid 1 to subsystem testsubsys [ 739.439700][ T31] audit: type=1400 audit(1791508880.276:1609): avc: denied { write } for pid=16391 comm="syz.0.3026" name="namespaces" dev="configfs" ino=62622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 742.082559][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.082801][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.082828][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.115331][T16414] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 742.282688][ T5065] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 742.317501][T16423] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 743.166759][T16426] futex_wake_op: syz.3.3035 tries to shift op by 144; fix this program [ 743.911277][T16426] lo speed is unknown, defaulting to 1000 [ 743.912355][T16426] lo speed is unknown, defaulting to 1000 [ 746.186319][ T5708] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 746.467455][ T5708] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 746.468381][ T5708] usb 6-1: config 0 interface 0 has no altsetting 0 [ 746.468412][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.504657][ T5708] usb 6-1: config 0 descriptor?? [ 749.015703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 749.556113][ T5708] usb 6-1: string descriptor 0 read error: -71 [ 749.599734][ T5708] usbhid 6-1:0.0: can't add hid device: -71 [ 749.599808][ T5708] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 749.624802][ T5708] usb 6-1: USB disconnect, device number 27 [ 749.642587][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 750.013818][ T6170] IPVS: starting estimator thread 0... [ 750.351626][T16508] IPVS: using max 47 ests per chain, 112800 per kthread [ 751.622308][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 751.622403][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 752.598391][T16538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3065'. [ 755.037893][T16546] syz.5.3067 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 755.037930][T16546] CPU: 1 UID: 0 PID: 16546 Comm: syz.5.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.037957][T16546] Tainted: [L]=SOFTLOCKUP [ 755.037964][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 755.037976][T16546] Call Trace: [ 755.037983][T16546] [ 755.037991][T16546] dump_stack_lvl+0x100/0x190 [ 755.038020][T16546] dump_header+0xfb/0x606 [ 755.038042][T16546] oom_kill_process.cold+0xd/0x380 [ 755.038064][T16546] out_of_memory+0x340/0x14f0 [ 755.038096][T16546] ? __pfx_out_of_memory+0x10/0x10 [ 755.038128][T16546] mem_cgroup_out_of_memory+0xc6/0x130 [ 755.038150][T16546] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 755.038170][T16546] ? find_held_lock+0x2b/0x80 [ 755.038201][T16546] ? do_raw_spin_unlock+0x145/0x1e0 [ 755.038228][T16546] ? _raw_spin_unlock+0x28/0x50 [ 755.038253][T16546] try_charge_memcg+0x783/0xf60 [ 755.038279][T16546] ? __pfx_try_charge_memcg+0x10/0x10 [ 755.038306][T16546] ? find_held_lock+0x2b/0x80 [ 755.038332][T16546] ? rcu_read_unlock+0x17/0x60 [ 755.038351][T16546] ? rcu_read_unlock+0x17/0x60 [ 755.038381][T16546] obj_cgroup_charge_pages+0x2b/0x1f0 [ 755.038404][T16546] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 755.038435][T16546] ? kasan_save_track+0x14/0x30 [ 755.038465][T16546] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 755.038489][T16546] ? copy_fs_struct+0x49/0x340 [ 755.038520][T16546] copy_fs_struct+0x49/0x340 [ 755.038546][T16546] ksys_unshare+0x3a6/0xa70 [ 755.038567][T16546] ? __pfx_ksys_unshare+0x10/0x10 [ 755.038600][T16546] __x64_sys_unshare+0x31/0x40 [ 755.038621][T16546] do_syscall_64+0x123/0x790 [ 755.038649][T16546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.038667][T16546] RIP: 0033:0x7f8ab5f9e1d9 [ 755.038682][T16546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.038698][T16546] RSP: 002b:00007f8ab41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 755.038716][T16546] RAX: ffffffffffffffda RBX: 00007f8ab6225fa0 RCX: 00007f8ab5f9e1d9 [ 755.038728][T16546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 755.038740][T16546] RBP: 00007f8ab6035888 R08: 0000000000000000 R09: 0000000000000000 [ 755.038752][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.038763][T16546] R13: 00007f8ab6226038 R14: 00007f8ab6225fa0 R15: 00007ffde0305148 [ 755.038791][T16546] [ 755.038798][T16546] memory: usage 0kB, limit 0kB, failcnt 19 [ 755.038809][T16546] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.038820][T16546] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.038830][T16546] Memory cgroup stats for /syz5/test: [ 755.038955][T16546] cache 0 [ 755.038964][T16546] rss 0 [ 755.038971][T16546] rss_huge 0 [ 755.038977][T16546] shmem 0 [ 755.038983][T16546] mapped_file 0 [ 755.038990][T16546] dirty 0 [ 755.038996][T16546] writeback 0 [ 755.039004][T16546] workingset_refault_anon 0 [ 755.039011][T16546] workingset_refault_file 0 [ 755.039019][T16546] swap 0 [ 755.039025][T16546] swapcached 0 [ 755.039031][T16546] pgpgin 0 [ 755.039037][T16546] pgpgout 0 [ 755.039043][T16546] pgfault 15 [ 755.039049][T16546] pgmajfault 0 [ 755.039055][T16546] inactive_anon 0 [ 755.039061][T16546] active_anon 0 [ 755.039067][T16546] inactive_file 0 [ 755.039074][T16546] active_file 0 [ 755.039080][T16546] unevictable 0 [ 755.039086][T16546] hierarchical_memory_limit 0 [ 755.039094][T16546] hierarchical_memsw_limit 9223372036854771712 [ 755.039102][T16546] total_cache 0 [ 755.039108][T16546] total_rss 0 [ 755.039114][T16546] total_rss_huge 0 [ 755.039136][T16546] total_shmem 0 [ 755.039143][T16546] total_mapped_file 0 [ 755.039149][T16546] total_dirty 0 [ 755.039156][T16546] total_writeback 0 [ 755.039162][T16546] total_workingset_refault_anon 0 [ 755.039170][T16546] total_workingset_refault_file 0 [ 755.039177][T16546] total_swap 0 [ 755.039183][T16546] total_swapcached 0 [ 755.039189][T16546] total_pgpgin 0 [ 755.039196][T16546] total_pgpgout 0 [ 755.039202][T16546] total_pgfault 15 [ 755.039209][T16546] total_pgmajfault 0 [ 755.039215][T16546] total_inactive_anon 0 [ 755.039222][T16546] total_active_anon 0 [ 755.039229][T16546] total_inactive_file 0 [ 755.039235][T16546] total_active_file 0 [ 755.039242][T16546] total_unevictable 0 [ 755.039249][T16546] anon_cost 0 [ 755.039256][T16546] file_cost 0 [ 755.039264][T16546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.3067,pid=16545,uid=0 [ 755.042108][T16546] Memory cgroup out of memory: Killed process 16545 (syz.5.3067) total-vm:104440kB, anon-rss:1456kB, file-rss:23096kB, shmem-rss:11480kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 755.332519][ T31] audit: type=1400 audit(1791508896.238:1610): avc: denied { write } for pid=16566 comm="syz.0.3074" name="ports" dev="configfs" ino=3566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 755.527081][ T31] audit: type=1400 audit(1791508896.398:1611): avc: denied { connect } for pid=16568 comm="syz.3.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 755.536236][ T31] audit: type=1400 audit(1791508896.458:1612): avc: denied { write } for pid=16566 comm="syz.0.3074" name="subsystems" dev="configfs" ino=62910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 755.694338][ T31] audit: type=1400 audit(1791508896.458:1613): avc: denied { write } for pid=16566 comm="syz.0.3074" name="subsystems" dev="configfs" ino=62910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 755.721241][T16567] nvmet_tcp: malformed ip/port passed: :4 [ 756.663529][ T31] audit: type=1400 audit(1791508897.538:1614): avc: denied { watch } for pid=16578 comm="syz.5.3080" path="/462/file1" dev="tmpfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 757.734976][ T5745] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 757.945143][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 757.946966][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 757.947008][ T5745] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 757.947863][ T5745] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 757.947892][ T5745] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 757.947911][ T5745] usb 1-1: config 14 has no interface number 0 [ 757.947927][ T5745] usb 1-1: config 14 has no interface number 1 [ 757.947976][ T5745] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 757.947996][ T5745] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 757.948020][ T5745] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 757.948057][ T5745] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 757.948083][ T5745] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 757.948108][ T5745] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.948134][ T5745] usb 1-1: config 14 interface 57 has no altsetting 0 [ 757.948151][ T5745] usb 1-1: config 14 interface 228 has no altsetting 0 [ 757.949892][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.949913][ T5745] usb 1-1: Product: syz [ 757.949927][ T5745] usb 1-1: Manufacturer: syz [ 757.949949][ T5745] usb 1-1: SerialNumber: syz [ 758.593984][T16587] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15689] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16587] [ 758.682902][T16601] tipc: Started in network mode [ 758.682932][T16601] tipc: Node identity 7f000001, cluster identity 4711 [ 758.683158][T16601] tipc: New replicast peer: 127.0.0.2 [ 758.683766][T16601] tipc: Enabled bearer , priority 10 [ 758.855900][ T5745] legousbtower 1-1:14.57: interrupt endpoints not found [ 759.076521][ T5745] legousbtower 1-1:14.228: get version request failed: -71 [ 759.076670][ T5745] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 759.128176][ T5745] usb 1-1: USB disconnect, device number 17 [ 760.250754][ T5065] tipc: Node number set to 2130706433 [ 763.724080][ T5708] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 764.084885][ T5708] usb 6-1: Using ep0 maxpacket: 16 [ 764.085621][ T5708] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 764.088774][ T5708] usb 6-1: config 3 has an invalid interface number: 88 but max is 0 [ 764.088801][ T5708] usb 6-1: config 3 has no interface number 0 [ 764.088825][ T5708] usb 6-1: config 3 interface 88 has no altsetting 0 [ 764.092226][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.092260][ T5708] usb 6-1: Product: syz [ 764.092269][ T5708] usb 6-1: Manufacturer: syz [ 764.092278][ T5708] usb 6-1: SerialNumber: syz [ 764.450701][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3094'. [ 764.452978][T16631] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3094'. [ 764.486681][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3094'. [ 764.514379][T16631] 9p: Bad value for 'rfdno' [ 764.537747][ T5708] kl5kusb105 6-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 764.720598][ T5708] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 765.411496][ T5708] usb 6-1: USB disconnect, device number 28 [ 765.420570][ T5708] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 765.447771][ T5708] kl5kusb105 6-1:3.88: device disconnected [ 767.465176][T16671] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3102'. [ 771.851180][ T31] audit: type=1404 audit(1791508912.739:1615): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 771.864975][ T31] audit: type=1400 audit(1791508912.739:1616): avc: denied { prog_load } for pid=16707 comm="syz.7.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 771.958576][ T31] audit: type=1400 audit(1791508912.859:1617): avc: denied { shutdown } for pid=16706 comm="syz.0.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 772.012810][ T31] audit: type=1400 audit(1791508912.919:1618): avc: denied { create } for pid=16704 comm="syz.6.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 772.084983][ T31] audit: type=1400 audit(1791508912.969:1619): avc: denied { mounton } for pid=16707 comm="syz.7.3113" path="/326/proc" dev="tmpfs" ino=1768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 772.085282][ T31] audit: type=1400 audit(1791508912.969:1620): avc: denied { map_create } for pid=16707 comm="syz.7.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 772.113248][ T31] audit: type=1400 audit(1791508912.969:1621): avc: denied { execmem } for pid=16716 comm="syz.3.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 772.224588][ T31] audit: type=1400 audit(1791508913.089:1622): avc: denied { read } for pid=15689 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 772.293681][ T31] audit: type=1400 audit(1791508913.199:1623): avc: denied { name_bind } for pid=16718 comm="syz.0.3116" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 772.295599][ T31] audit: type=1400 audit(1791508913.199:1624): avc: denied { create } for pid=16716 comm="syz.3.3115" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 772.324535][T16719] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.324786][T16719] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.674859][T16719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.691376][T16719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.071284][ T6170] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.075598][ T6147] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.075705][ T6147] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.075731][ T6147] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.450996][T16775] netlink: 'syz.6.3132': attribute type 1 has an invalid length. [ 776.462593][T16775] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.489357][T16775] macvlan2: entered promiscuous mode [ 776.489384][T16775] macvlan2: entered allmulticast mode [ 776.515926][T16775] bond3: (slave ip6gretap1): making interface the new active one [ 776.516599][T16775] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 776.885115][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 776.885128][ T31] audit: type=1400 audit(1791508917.769:1679): avc: denied { create } for pid=16781 comm="syz.6.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 777.035977][ T31] audit: type=1400 audit(1791508917.929:1680): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 777.104828][ T31] audit: type=1400 audit(1791508917.999:1681): avc: denied { execmem } for pid=16789 comm="syz.5.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 777.273943][ T31] audit: type=1400 audit(1791508918.159:1682): avc: denied { map_create } for pid=16789 comm="syz.5.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 777.273974][ T31] audit: type=1400 audit(1791508918.159:1683): avc: denied { create } for pid=16787 comm="syz.3.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 777.273997][ T31] audit: type=1400 audit(1791508918.159:1684): avc: denied { create } for pid=16787 comm="syz.3.3137" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 777.276544][ T31] audit: type=1400 audit(1791508918.159:1685): avc: denied { allowed } for pid=16787 comm="syz.3.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 777.279175][ T31] audit: type=1400 audit(1791508918.159:1686): avc: denied { create } for pid=16789 comm="syz.5.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 777.411038][ T31] audit: type=1400 audit(1791508918.269:1687): avc: denied { execmem } for pid=16793 comm="syz.6.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 777.590332][ T31] audit: type=1400 audit(1791508918.489:1688): avc: denied { execmem } for pid=16796 comm="syz.3.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 778.351913][T16808] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3143'. [ 778.730163][T16815] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 778.850031][T16815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.856153][T16819] macvlan2: entered promiscuous mode [ 778.856180][T16819] macvlan2: entered allmulticast mode [ 779.305739][T16815] bond1: (slave ip6gretap1): making interface the new active one [ 779.309399][T16815] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 782.165783][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 782.165807][ T31] audit: type=1400 audit(1791508923.070:1752): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 782.209965][ T31] audit: type=1400 audit(1791508923.130:1753): avc: denied { create } for pid=16866 comm="syz.5.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 782.216203][ T31] audit: type=1400 audit(1791508923.130:1754): avc: denied { read write } for pid=16866 comm="syz.5.3165" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 782.332502][ T31] audit: type=1400 audit(1791508923.250:1755): avc: denied { map_create } for pid=16866 comm="syz.5.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 782.375564][ T31] audit: type=1400 audit(1791508923.250:1756): avc: denied { prog_load } for pid=16866 comm="syz.5.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 782.580570][ T31] audit: type=1400 audit(1791508923.460:1757): avc: denied { prog_load } for pid=16866 comm="syz.5.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 782.684775][ T31] audit: type=1400 audit(1791508923.610:1758): avc: denied { create } for pid=16870 comm="syz.3.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 782.727721][ T31] audit: type=1400 audit(1791508923.630:1759): avc: denied { execmem } for pid=16865 comm="syz.7.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 782.903268][ T31] audit: type=1400 audit(1791508923.800:1760): avc: denied { create } for pid=16870 comm="syz.3.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 782.937630][ T31] audit: type=1400 audit(1791508923.800:1761): avc: denied { create } for pid=16870 comm="syz.3.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 783.287710][T16877] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3169'. [ 783.287733][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3169'. [ 783.287745][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3169'. [ 785.587618][T16909] syzkaller0: entered promiscuous mode [ 785.587635][T16909] syzkaller0: entered allmulticast mode [ 787.186014][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 787.186030][ T31] audit: type=1400 audit(1791508928.110:1837): avc: denied { execmem } for pid=16936 comm="syz.3.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 787.375401][ T31] audit: type=1400 audit(1791508928.270:1838): avc: denied { execmem } for pid=16941 comm="syz.7.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 787.646492][ T31] audit: type=1400 audit(1791508928.550:1839): avc: denied { execmem } for pid=16944 comm="syz.6.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 787.723456][ T31] audit: type=1400 audit(1791508928.600:1840): avc: denied { bpf } for pid=16941 comm="syz.7.3192" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 787.764394][ T31] audit: type=1400 audit(1791508928.660:1841): avc: denied { map_create } for pid=16941 comm="syz.7.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 787.766787][ T31] audit: type=1400 audit(1791508928.660:1842): avc: denied { mounton } for pid=16944 comm="syz.6.3193" path="/456/mnt" dev="tmpfs" ino=2469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 788.073051][ T31] audit: type=1400 audit(1791508928.990:1843): avc: denied { execmem } for pid=16947 comm="syz.3.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 788.141566][ T31] audit: type=1400 audit(1791508929.040:1844): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 788.189660][ T31] audit: type=1400 audit(1791508929.110:1845): avc: denied { read } for pid=15689 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 788.678812][ T31] audit: type=1400 audit(1791508929.580:1846): avc: denied { execmem } for pid=16955 comm="syz.0.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 790.776721][T16985] bond0: option mode: unable to set because the bond device has slaves [ 790.865020][T16985] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 790.885154][T16985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.963589][T16993] lo speed is unknown, defaulting to 1000 [ 791.984919][T16993] lo speed is unknown, defaulting to 1000 [ 792.264177][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 792.264191][ T31] audit: type=1400 audit(1791508933.150:1888): avc: denied { read } for pid=17002 comm="syz.5.3212" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 792.629542][ T31] audit: type=1400 audit(1791508933.520:1889): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 792.754396][ T31] audit: type=1400 audit(1791508933.630:1890): avc: denied { read } for pid=17012 comm="syz.5.3213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 792.755556][ T31] audit: type=1400 audit(1791508933.630:1891): avc: denied { read } for pid=17012 comm="syz.5.3213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 792.791044][ T31] audit: type=1400 audit(1791508933.690:1892): avc: denied { read } for pid=17012 comm="syz.5.3213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 792.944364][ T31] audit: type=1400 audit(1791508933.850:1893): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 793.144725][ T31] audit: type=1400 audit(1791508933.970:1894): avc: denied { execmem } for pid=17014 comm="syz.5.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 793.144777][ T31] audit: type=1400 audit(1791508934.030:1895): avc: denied { create } for pid=17014 comm="syz.5.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 793.144810][ T31] audit: type=1400 audit(1791508934.030:1896): avc: denied { read } for pid=17014 comm="syz.5.3215" dev="nsfs" ino=4026534664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 793.144843][ T31] audit: type=1400 audit(1791508934.030:1897): avc: denied { read } for pid=17014 comm="syz.5.3215" dev="nsfs" ino=4026534664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 797.242452][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 797.242473][ T31] audit: type=1400 audit(1791508938.161:1943): avc: denied { mounton } for pid=17065 comm="syz.0.3232" path="/66/proc" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 797.322784][ T31] audit: type=1400 audit(1791508938.211:1944): avc: denied { read } for pid=15689 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 797.373751][ T31] audit: type=1400 audit(1791508938.281:1945): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 797.452112][ T31] audit: type=1400 audit(1791508938.381:1946): avc: denied { create } for pid=17069 comm="syz.7.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 797.455403][ T31] audit: type=1400 audit(1791508938.381:1947): avc: denied { create } for pid=17071 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 797.455776][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 797.460718][T17072] bridge_slave_0: left allmulticast mode [ 797.460743][T17072] bridge_slave_0: left promiscuous mode [ 797.460924][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.643477][ T31] audit: type=1400 audit(1791508938.561:1948): avc: denied { create } for pid=17074 comm="syz.6.3236" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 797.688876][ T31] audit: type=1400 audit(1791508938.561:1949): avc: denied { allowed } for pid=17074 comm="syz.6.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 797.688926][ T31] audit: type=1400 audit(1791508938.561:1950): avc: denied { prog_load } for pid=17074 comm="syz.6.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 797.690413][ T31] audit: type=1400 audit(1791508938.561:1951): avc: denied { map_create } for pid=17074 comm="syz.6.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 797.690461][ T31] audit: type=1400 audit(1791508938.561:1952): avc: denied { create } for pid=17074 comm="syz.6.3236" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 797.800793][T17072] bridge_slave_1: left allmulticast mode [ 797.800819][T17072] bridge_slave_1: left promiscuous mode [ 797.801002][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.832439][T17072] bond0: (slave bond_slave_0): Releasing backup interface [ 797.834116][T17072] bond0: (slave bond_slave_1): Releasing backup interface [ 797.838473][T17072] team0: Port device team_slave_0 removed [ 797.839833][T17072] team0: Port device team_slave_1 removed [ 797.840122][T17072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.840694][T17072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.841234][T17072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 797.843648][ T5611] syz1: Port: 1 Link DOWN [ 800.291029][T17113] syzkaller0: entered promiscuous mode [ 800.291054][T17113] syzkaller0: entered allmulticast mode [ 800.539093][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3247'. [ 800.912491][T17126] netlink: 'syz.5.3251': attribute type 1 has an invalid length. [ 801.028275][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.061392][T17126] netlink: 'syz.5.3251': attribute type 10 has an invalid length. [ 801.061416][T17126] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3251'. [ 801.172941][T17129] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 802.196503][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 802.196618][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 802.352082][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 802.352101][ T31] audit: type=1400 audit(1791508943.282:2006): avc: denied { execmem } for pid=17155 comm="syz.5.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 802.426973][T17146] ceph: No mds server is up or the cluster is laggy [ 802.514837][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 802.514934][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 802.597617][T17156] bridge0: port 4(netdevsim0) entered blocking state [ 802.597694][T17156] bridge0: port 4(netdevsim0) entered disabled state [ 802.597843][T17156] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 802.601286][T17156] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 802.611713][ T31] audit: type=1400 audit(1791508943.502:2007): avc: denied { create } for pid=17145 comm="syz.0.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 802.708296][ T31] audit: type=1400 audit(1791508943.622:2008): avc: denied { read } for pid=15689 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 802.778118][ T31] audit: type=1400 audit(1791508943.672:2009): avc: denied { prog_load } for pid=17162 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 802.778945][ T31] audit: type=1400 audit(1791508943.672:2010): avc: denied { execmem } for pid=17162 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 802.832052][ T31] audit: type=1400 audit(1791508943.742:2011): avc: denied { create } for pid=17161 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 802.832594][ T31] audit: type=1400 audit(1791508943.742:2012): avc: denied { create } for pid=17161 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 802.832892][ T31] audit: type=1400 audit(1791508943.742:2013): avc: denied { create } for pid=17161 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 802.833071][ T31] audit: type=1400 audit(1791508943.742:2014): avc: denied { create } for pid=17161 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 802.833250][ T31] audit: type=1400 audit(1791508943.742:2015): avc: denied { execmem } for pid=17161 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 803.334422][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.334804][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.334844][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.446239][T15153] Bluetooth: hci1: command 0x0406 tx timeout [ 807.469268][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 807.469286][ T31] audit: type=1400 audit(1791508948.385:2083): avc: denied { read } for pid=7266 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 807.551588][ T31] audit: type=1400 audit(1791508948.445:2084): avc: denied { create } for pid=17244 comm="syz.5.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 807.553798][ T31] audit: type=1400 audit(1791508948.445:2085): avc: denied { create } for pid=17244 comm="syz.5.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 807.800995][ T31] audit: type=1400 audit(1791508948.725:2086): avc: denied { create } for pid=17237 comm="syz.3.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 807.801399][ T31] audit: type=1400 audit(1791508948.725:2087): avc: denied { create } for pid=17237 comm="syz.3.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 807.852718][ T31] audit: type=1400 audit(1791508948.775:2088): avc: denied { create } for pid=17244 comm="syz.5.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 808.066517][T17249] 8021q: adding VLAN 0 to HW filter on device bond9 [ 808.100135][ T31] audit: type=1400 audit(1791508948.995:2089): avc: denied { read } for pid=15689 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 808.137681][ T31] audit: type=1400 audit(1791508949.065:2090): avc: denied { read } for pid=17254 comm="syz.0.3291" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 808.142590][ T31] audit: type=1400 audit(1791508949.065:2091): avc: denied { allowed } for pid=17254 comm="syz.0.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 808.171587][ T31] audit: type=1400 audit(1791508949.065:2092): avc: denied { prog_load } for pid=17254 comm="syz.0.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 808.626845][T17260] gtp0: entered allmulticast mode [ 812.262304][T17313] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 812.281488][ T6157] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 812.286092][T17313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.354666][T16696] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 812.666386][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 812.666404][ T31] audit: type=1400 audit(1791508953.598:2160): avc: denied { allowed } for pid=17316 comm="syz.6.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 813.005745][ T31] audit: type=1400 audit(1791508953.918:2161): avc: denied { execmem } for pid=17320 comm="syz.6.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 813.140976][ T31] audit: type=1400 audit(1791508954.038:2162): avc: denied { read } for pid=15689 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 813.261286][ T31] audit: type=1400 audit(1791508954.148:2163): avc: denied { create } for pid=17324 comm="syz.0.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 813.285101][ T31] audit: type=1400 audit(1791508954.148:2164): avc: denied { create } for pid=17324 comm="syz.0.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 813.315700][ T31] audit: type=1400 audit(1791508954.218:2165): avc: denied { module_request } for pid=17324 comm="syz.0.3314" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 813.315784][ T31] audit: type=1400 audit(1791508954.218:2166): avc: denied { sys_module } for pid=17324 comm="syz.0.3314" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 813.402170][ T31] audit: type=1400 audit(1791508954.328:2167): avc: denied { module_request } for pid=17324 comm="syz.0.3314" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 813.403772][ T31] audit: type=1400 audit(1791508954.328:2168): avc: denied { sys_module } for pid=17324 comm="syz.0.3314" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 813.404204][ T31] audit: type=1400 audit(1791508954.328:2169): avc: denied { create } for pid=17323 comm="syz.3.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 813.796356][T17340] xt_hashlimit: size too large, truncated to 1048576 [ 813.796370][T17340] xt_hashlimit: max too large, truncated to 1048576 [ 814.195279][T17352] 8021q: adding VLAN 0 to HW filter on device .` [ 814.322316][T17352] ve: left promiscuous mode [ 814.340591][T17352] ve: entered promiscuous mode [ 814.379202][T17352] veth1_macvtap: entered promiscuous mode [ 814.440753][T17352] vlan2: left allmulticast mode [ 814.440778][T17352] bond1: left allmulticast mode [ 814.440791][T17352] geneve2: left allmulticast mode [ 814.519423][T17352] bond2: left promiscuous mode [ 814.519448][T17352] bridge1: left promiscuous mode [ 814.521117][T17352] bond2: left allmulticast mode [ 814.521137][T17352] bridge1: left allmulticast mode [ 814.556183][T17352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.592973][T17352] bond0: entered allmulticast mode [ 814.593152][T17352] macvtap1: left allmulticast mode [ 814.593165][T17352] bond0: left allmulticast mode [ 814.620433][T17352] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 814.681787][T17352] vlan4: left allmulticast mode [ 814.681811][T17352] bridge2: left allmulticast mode [ 814.696730][T17352] macvlan2: left promiscuous mode [ 814.696751][T17352] bond7: left promiscuous mode [ 814.698015][T17352] macvlan2: left allmulticast mode [ 814.698032][T17352] bond7: left allmulticast mode [ 814.698044][T17352] ip6gretap1: left allmulticast mode [ 814.701599][T17352] bridge3: left promiscuous mode [ 814.701622][T17352] bridge3: left allmulticast mode [ 814.769824][T17352] 8021q: adding VLAN 0 to HW filter on device bond8 [ 816.525423][T17380] can0: slcan on ttyS3. [ 817.385912][T17380] can0 (unregistered): slcan off ttyS3. [ 817.707996][ T31] kauditd_printk_skb: 899 callbacks suppressed [ 817.708019][ T31] audit: type=1400 audit(1791508958.640:3069): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708060][ T31] audit: type=1400 audit(1791508958.640:3070): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708097][ T31] audit: type=1400 audit(1791508958.640:3071): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708132][ T31] audit: type=1400 audit(1791508958.640:3072): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708166][ T31] audit: type=1400 audit(1791508958.640:3073): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708202][ T31] audit: type=1400 audit(1791508958.640:3074): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708239][ T31] audit: type=1400 audit(1791508958.640:3075): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708275][ T31] audit: type=1400 audit(1791508958.640:3076): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708310][ T31] audit: type=1400 audit(1791508958.640:3077): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 817.708345][ T31] audit: type=1400 audit(1791508958.640:3078): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 818.621615][ T32] INFO: task syz.9.2829:15530 blocked for more than 143 seconds. [ 818.621638][ T32] Tainted: G L syzkaller #0 [ 818.621648][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.621655][ T32] task:syz.9.2829 state:D stack:27128 pid:15530 tgid:15530 ppid:13993 task_flags:0x400040 flags:0x00080002 [ 818.621732][ T32] Call Trace: [ 818.621738][ T32] [ 818.621745][ T32] __schedule+0x1259/0x6920 [ 818.621764][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 818.621784][ T32] ? lock_acquire+0x1d1/0x380 [ 818.621798][ T32] ? __pfx___schedule+0x10/0x10 [ 818.621811][ T32] ? find_held_lock+0x2b/0x80 [ 818.621829][ T32] ? schedule+0x225/0x2c0 [ 818.621845][ T32] schedule+0xdd/0x2c0 [ 818.621858][ T32] request_wait_answer+0x531/0x860 [ 818.621875][ T32] ? __pfx_request_wait_answer+0x10/0x10 [ 818.621890][ T32] ? fuse_dev_queue_req+0x26c/0x370 [ 818.621904][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 818.621916][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 818.621933][ T32] ? _raw_spin_unlock+0x28/0x50 [ 818.621945][ T32] ? fuse_dev_queue_req+0x2cb/0x370 [ 818.621960][ T32] fuse_chan_send+0x5a3/0x9c0 [ 818.621977][ T32] __fuse_simple_request+0x18e/0x1e0 [ 818.621993][ T32] fuse_flush+0x4d6/0x6a0 [ 818.622008][ T32] ? __pfx_fuse_flush+0x10/0x10 [ 818.622021][ T32] ? __pte_offset_map+0x179/0x310 [ 818.622047][ T32] ? find_held_lock+0x2b/0x80 [ 818.622065][ T32] ? __pfx_fuse_flush+0x10/0x10 [ 818.622079][ T32] filp_flush+0xe7/0x190 [ 818.622094][ T32] filp_close+0x1c/0x30 [ 818.622108][ T32] __range_close+0x137/0x7a0 [ 818.622129][ T32] __x64_sys_close_range+0x3ce/0x5d0 [ 818.622149][ T32] ? __pfx___x64_sys_close_range+0x10/0x10 [ 818.622171][ T32] do_syscall_64+0x123/0x790 [ 818.622188][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.622200][ T32] RIP: 0033:0x7f475539e1d9 [ 818.622210][ T32] RSP: 002b:00007fff1af2ac48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 818.622222][ T32] RAX: ffffffffffffffda RBX: 00007f4755627da0 RCX: 00007f475539e1d9 [ 818.622229][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 818.622236][ T32] RBP: 00007f4755627da0 R08: 0000000000000006 R09: 0000000000000000 [ 818.622243][ T32] R10: 00007f4755627cb0 R11: 0000000000000246 R12: 00000000000a268b [ 818.622250][ T32] R13: 00007f475562609c R14: 00000000000a255e R15: 00007fff1af2ad50 [ 818.622265][ T32] [ 818.622271][ T32] INFO: task syz.9.2829:15535 blocked for more than 143 seconds. [ 818.622281][ T32] Tainted: G L syzkaller #0 [ 818.622287][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.622291][ T32] task:syz.9.2829 state:D stack:25784 pid:15535 tgid:15530 ppid:13993 task_flags:0x400040 flags:0x00080003 [ 818.622319][ T32] Call Trace: [ 818.622323][ T32] [ 818.622329][ T32] __schedule+0x1259/0x6920 [ 818.622343][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 818.622362][ T32] ? lock_acquire+0x1d1/0x380 [ 818.622376][ T32] ? __pfx___schedule+0x10/0x10 [ 818.622394][ T32] ? find_held_lock+0x2b/0x80 [ 818.622411][ T32] ? schedule+0x225/0x2c0 [ 818.622427][ T32] schedule+0xdd/0x2c0 [ 818.622440][ T32] request_wait_answer+0x531/0x860 [ 818.622457][ T32] ? __pfx_request_wait_answer+0x10/0x10 [ 818.622471][ T32] ? fuse_dev_queue_req+0x26c/0x370 [ 818.622485][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 818.622497][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 818.622513][ T32] ? _raw_spin_unlock+0x28/0x50 [ 818.622526][ T32] ? fuse_dev_queue_req+0x2cb/0x370 [ 818.622541][ T32] fuse_chan_send+0x5a3/0x9c0 [ 818.622558][ T32] __fuse_simple_request+0x18e/0x1e0 [ 818.622574][ T32] fuse_flush+0x4d6/0x6a0 [ 818.622588][ T32] ? __pfx_fuse_flush+0x10/0x10 [ 818.622614][ T32] ? find_held_lock+0x2b/0x80 [ 818.622631][ T32] ? __pfx_fuse_flush+0x10/0x10 [ 818.622645][ T32] filp_flush+0xe7/0x190 [ 818.622659][ T32] filp_close+0x1c/0x30 [ 818.622673][ T32] __range_close+0x137/0x7a0 [ 818.622693][ T32] __x64_sys_close_range+0x3ce/0x5d0 [ 818.622713][ T32] ? __pfx___x64_sys_close_range+0x10/0x10 [ 818.622735][ T32] do_syscall_64+0x123/0x790 [ 818.622752][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.622763][ T32] RIP: 0033:0x7f475539e1d9 [ 818.622772][ T32] RSP: 002b:00007f47561c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 818.622782][ T32] RAX: ffffffffffffffda RBX: 00007f4755626090 RCX: 00007f475539e1d9 [ 818.622789][ T32] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 818.622796][ T32] RBP: 00007f4755435888 R08: 0000000000000000 R09: 0000000000000000 [ 818.622803][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.622810][ T32] R13: 00007f4755626128 R14: 00007f4755626090 R15: 00007fff1af2aae8 [ 818.622824][ T32] [ 818.622839][ T32] [ 818.622839][ T32] Showing all locks held in the system: [ 818.622845][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 818.622853][ T32] #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 818.622919][ T32] locks held by getty/5364: 2, on CPU#0: [ 818.622928][ T32] #0: ffff888034bb80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 818.622958][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 818.623003][ T32] locks held by syz.6.3319/17343: 1, last CPU#0: [ 818.623011][ T32] #0: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x7a/0x410 [ 818.623043][ T32] locks held by syz.6.3329/17372: 1, last CPU#1: [ 818.623050][ T32] #0: ffff88802c4c2460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 818.623080][ T32] locks held by syz.6.3336/17393: 3, last CPU#0: [ 818.623088][ T32] #0: ffff88802c4c2460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 818.623116][ T32] #1: ffff88804f4650f0 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 818.623148][ T32] #2: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 818.623178][ T32] locks held by syz.5.3338/17398: 2, last CPU#1: [ 818.623186][ T32] #0: ffff88807d3b8f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 818.623215][ T32] #1: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 818.623243][ T32] locks held by syz.6.3339/17400: 2, last CPU#0: [ 818.623251][ T32] #0: ffff88807d3bd900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 818.623279][ T32] #1: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 818.623307][ T32] locks held by syz.3.3340/17405: 2, last CPU#0: [ 818.623315][ T32] #0: ffff888027c3c080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 818.623344][ T32] #1: ffffffff8fdec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 818.623372][ T32] [ 818.623375][ T32] ============================================= [ 818.623375][ T32] [ 818.623380][ T32] NMI backtrace for cpu 1 [ 818.623393][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 818.623408][ T32] Tainted: [L]=SOFTLOCKUP [ 818.623412][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 818.623418][ T32] Call Trace: [ 818.623422][ T32] [ 818.623426][ T32] dump_stack_lvl+0x100/0x190 [ 818.623443][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 818.623462][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 818.623475][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 818.623490][ T32] sys_info+0x141/0x190 [ 818.623500][ T32] watchdog+0xcb1/0x1030 [ 818.623517][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 818.623531][ T32] ? __pfx_watchdog+0x10/0x10 [ 818.623545][ T32] ? __kthread_parkme+0x18f/0x230 [ 818.623561][ T32] ? kthread+0x13a/0x450 [ 818.623576][ T32] ? __pfx_watchdog+0x10/0x10 [ 818.623589][ T32] kthread+0x373/0x450 [ 818.623604][ T32] ? __pfx_kthread+0x10/0x10 [ 818.623620][ T32] ret_from_fork+0x730/0xd60 [ 818.623634][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 818.623648][ T32] ? __switch_to+0x800/0x10f0 [ 818.623663][ T32] ? __pfx_kthread+0x10/0x10 [ 818.623680][ T32] ret_from_fork_asm+0x1a/0x30 [ 818.623698][ T32] [ 818.623702][ T32] Sending NMI from CPU 1 to CPUs 0: [ 818.623734][ C0] NMI backtrace for cpu 0 [ 818.623746][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.623766][ C0] Tainted: [L]=SOFTLOCKUP [ 818.623771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 818.623779][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 818.623799][ C0] Code: 07 97 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b8 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 818.623812][ C0] RSP: 0018:ffffffff8fa07cf0 EFLAGS: 00000246 [ 818.623824][ C0] RAX: 000000000034b6ed RBX: ffffffff8fa91580 RCX: ffffffff8bd40235 [ 818.623834][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e26f2 RDI: ffffffff8c625080 [ 818.623844][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10170467bd [ 818.623853][ C0] R10: ffff8880b8233deb R11: 0000000000000001 R12: 0000000000000000 [ 818.623863][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 818.623872][ C0] FS: 0000000000000000(0000) GS:ffff888122947000(0000) knlGS:0000000000000000 [ 818.623890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.623899][ C0] CR2: 0000200000001000 CR3: 000000002cf3b000 CR4: 00000000003526f0 [ 818.623909][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 818.623918][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 818.623927][ C0] Call Trace: [ 818.623932][ C0] [ 818.623937][ C0] default_idle+0x9/0x10 [ 818.623956][ C0] default_idle_call+0x6c/0xb0 [ 818.623974][ C0] do_idle+0x3ae/0x5b0 [ 818.623992][ C0] ? __pfx_do_idle+0x10/0x10 [ 818.624008][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 818.624028][ C0] cpu_startup_entry+0x4f/0x60 [ 818.624046][ C0] rest_init+0x2d3/0x2e0 [ 818.624058][ C0] ? __pfx_rest_init+0x10/0x10 [ 818.624070][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 818.624085][ C0] ? lock_acquire+0x1d1/0x380 [ 818.624102][ C0] ? __pfx_kernel_init+0x10/0x10 [ 818.624115][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 818.624132][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 818.624149][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 818.624164][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 818.624180][ C0] start_kernel+0x48e/0x490 [ 818.624196][ C0] x86_64_start_reservations+0x24/0x30 [ 818.624211][ C0] x86_64_start_kernel+0x12b/0x130 [ 818.624226][ C0] common_startup_64+0x13e/0x158 [ 818.624248][ C0] [ 818.624716][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 819.668492][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 819.679141][ T32] Tainted: [L]=SOFTLOCKUP [ 819.683448][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 819.693474][ T32] Call Trace: [ 819.696740][ T32] [ 819.699672][ T32] dump_stack_lvl+0x100/0x190 [ 819.704360][ T32] vpanic+0x553/0x970 [ 819.708335][ T32] ? __pfx_vpanic+0x10/0x10 [ 819.713114][ T32] panic+0xd1/0xe0 [ 819.717183][ T32] ? __pfx_panic+0x10/0x10 [ 819.721592][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 819.726616][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 819.732756][ T32] ? watchdog.cold+0x1ec/0x234 [ 819.737502][ T32] watchdog.cold+0x1fd/0x234 [ 819.742097][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 819.747916][ T32] ? __pfx_watchdog+0x10/0x10 [ 819.752583][ T32] ? __kthread_parkme+0x18f/0x230 [ 819.757585][ T32] ? kthread+0x13a/0x450 [ 819.761813][ T32] ? __pfx_watchdog+0x10/0x10 [ 819.766474][ T32] kthread+0x373/0x450 [ 819.770551][ T32] ? __pfx_kthread+0x10/0x10 [ 819.775131][ T32] ret_from_fork+0x730/0xd60 [ 819.779704][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 819.784791][ T32] ? __switch_to+0x800/0x10f0 [ 819.789444][ T32] ? __pfx_kthread+0x10/0x10 [ 819.794023][ T32] ret_from_fork_asm+0x1a/0x30 [ 819.798768][ T32] [ 819.801989][ T32] Kernel Offset: disabled [ 819.806303][ T32] Rebooting in 86400 seconds..