last executing test programs: 16m16.359947578s ago: executing program 3 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000410900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000008c000000060a010400000000000000000100000208000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800014000000011080002400000001208000340000000070900010073797a30"], 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000004c0)={0x8, "4e572252a69d3712"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r7, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x7) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xc6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) getsockopt(r5, 0x5, 0x1, &(0x7f0000000180)=""/62, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) fcntl$setlease(r3, 0x400, 0x2) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x33) 16m13.664266466s ago: executing program 3 (id=587): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40500000000000061100800000000007b0198000000000095000000000000007a8fa68f9941aae66b92edf133e2d2abaa8216a20e74d6dcc34fde28b09c97532e20bef3ee2c8101af9dea0271bf45345288d9127902ab6b6deaa19cdd895d80a4dbbbe3752b4d617093a4ab05c7531855f481ac7693359f361f8fc11a02c71876874dc5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') ioctl$BTRFS_IOC_RM_DEV(r6, 0x8008b705, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071", @ANYRES8, @ANYBLOB="48eb04d96bd185da1d645fc0830a732a924f529f08f4da29e70321a4831baa71c165251cf3cda9dff93bfce9e1bd6163f2fe2bd93df0d2be9e094d63d01720e064e45b838d765af9dbfebb3538e7df22a931bb3668c843c22617d1054d49aa46db9228c44e3176049ef5dff3e601fec1a0c724ed683ad1b786c96ebb68ae7c3d5f1bab7ee4c807dd", @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1060) 16m12.71583216s ago: executing program 3 (id=590): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x20, 0x32, 0x11, 0x0, 0x0, {0x0, 0x0, 0x3}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x4, 0x0, 0x3, 0xa}) 16m11.437889117s ago: executing program 3 (id=594): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40500000000000061100800000000007b0198000000000095000000000000007a8fa68f9941aae66b92edf133e2d2abaa8216a20e74d6dcc34fde28b09c97532e20bef3ee2c8101af9dea0271bf45345288d9127902ab6b6deaa19cdd895d80a4dbbbe3752b4d617093a4ab05c7531855f481ac7693359f361f8fc11a02c71876874dc588"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') ioctl$BTRFS_IOC_RM_DEV(r6, 0x8008b705, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071", @ANYRES8, @ANYBLOB="48eb04d96bd185da1d645fc0830a732a924f529f08f4da29e70321a4831baa71c165251cf3cda9dff93bfce9e1bd6163f2fe2bd93df0d2be9e094d63d01720e064e45b838d765af9dbfebb3538e7df22a931bb3668c843c22617d1054d49aa46db9228c44e3176049ef5dff3e601fec1a0c724ed683ad1b786c96ebb68ae7c3d5f1bab7ee4c807dd", @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f00000000c0)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x5, 0x2000008, 0x10000003, 0x0, 0x9, 0x8, 0xfffffffffffffffc, 0x101001}) r8 = dup(r0) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1060) 16m10.573188445s ago: executing program 3 (id=596): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) 16m9.719357339s ago: executing program 3 (id=598): socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2056, &(0x7f0000000100)=ANY=[], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f00000000c0)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000096000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') read$FUSE(r4, &(0x7f0000006280)={0x2020}, 0x2020) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x4, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 15m54.266068451s ago: executing program 32 (id=598): socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2056, &(0x7f0000000100)=ANY=[], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f00000000c0)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000096000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') read$FUSE(r4, &(0x7f0000006280)={0x2020}, 0x2020) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x4, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 4m27.989361298s ago: executing program 5 (id=2994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8a}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.774261928s ago: executing program 5 (id=2995): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x4, r1, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) 4m27.579448645s ago: executing program 5 (id=2997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x80041) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x68, 0x4000094}, 0x24000052) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0xffff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000280)={0x1, 0x0, 0x3, 0x10}) fallocate(r1, 0x0, 0xfea000, 0x2000402) lseek(r1, 0x1, 0x3) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) sched_setscheduler(r5, 0x0, &(0x7f00000004c0)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) cachestat(r1, &(0x7f0000000000)={0xc, 0xfffffffffffffffe}, &(0x7f0000000040), 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x5e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000580)={0x79, 0x0, 0xbd3}) 4m25.414112145s ago: executing program 5 (id=3006): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4m24.86178633s ago: executing program 5 (id=3008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r1, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x7dfffffd}}, 0x20000, 0xf401, 0xe457, 0x0, 0x4c, 0x6}, 0x9c) 4m24.602341135s ago: executing program 0 (id=3012): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x3d1, 0x8e, 0x3, 0x3, 0x4002004c2, 0x1007ff, 0x9, 0x6, 0x400, 0x7f, 0x89, 0x0, 0x1, 0x6], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m24.48225325s ago: executing program 5 (id=3013): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 4m24.326079799s ago: executing program 33 (id=3013): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 4m23.997544072s ago: executing program 0 (id=3016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x80041) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000030000000000000008400000001000000010005000b000000050000000900000001000080050000007b000000", @ANYRES32, @ANYBLOB="20000000000000008400000008"], 0x68, 0x4000094}, 0x24000052) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0xffff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000280)={0x1, 0x0, 0x3, 0x10}) fallocate(r1, 0x0, 0xfea000, 0x2000402) lseek(r1, 0x1, 0x3) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)=0x0) sched_setscheduler(r5, 0x0, &(0x7f00000004c0)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) cachestat(r1, &(0x7f0000000000)={0xc, 0xfffffffffffffffe}, &(0x7f0000000040), 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x5e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000580)={0x79, 0x0, 0xbd3}) 4m23.173748607s ago: executing program 0 (id=3023): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x598, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) 4m22.317760226s ago: executing program 0 (id=3027): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m22.106217522s ago: executing program 0 (id=3030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m18.533975053s ago: executing program 0 (id=3034): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 4m17.87163822s ago: executing program 34 (id=3034): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 3m53.285434579s ago: executing program 2 (id=3085): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffff7) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000400000)={0x0, 0x0}) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x400) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m52.863680013s ago: executing program 2 (id=3086): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, 0x0, 0x0}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 3m51.295803234s ago: executing program 2 (id=3087): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 3m46.220012239s ago: executing program 2 (id=3096): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='UA', 0x2) 3m44.376548315s ago: executing program 2 (id=3099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x10, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m43.065812186s ago: executing program 2 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 3m27.874413253s ago: executing program 35 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 15.890189398s ago: executing program 4 (id=3896): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x0, &(0x7f0000000b40)}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 15.694148763s ago: executing program 4 (id=3898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x6, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x92, 0x20000000, 0x4, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 10.074110663s ago: executing program 4 (id=3920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 7.150044452s ago: executing program 1 (id=3932): syz_usb_connect(0x4, 0x36, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165cc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x2, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 7.084988425s ago: executing program 4 (id=3933): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000280)={0x4040000, 0x0, 0x0, 0x0, {0x20}, &(0x7f00000001c0), 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x7, 0xc04a3) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001640)=[{&(0x7f00000005c0)='k', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001880)}], 0x1}}], 0x2, 0x4048050) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000400)=0x2) 6.993631627s ago: executing program 7 (id=3934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000080)={0x180801600, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.522202282s ago: executing program 1 (id=3935): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f00004d1000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) rmdir(0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000131) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 6.154997327s ago: executing program 6 (id=3938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 6.153553433s ago: executing program 1 (id=3939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f0000000200)='rm\x00', 0x610040, &(0x7f0000000240)={@align=0x100000000, {0x3, 0x101, 0xffffffff, 0x100000001}}, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x20}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="89f38a550a8de626601bf2e1194611cd7dc5711e3682f07a954b05933a9435a5e04f44c3d7055754690554d3c6d9286da5f778dd0241353498ba09c280c32297f7cd5eefceb56a99bfabf2d1b730dc1b29f35db6ee0a783451c401ba448c3123a40a66766ff0b76722ab84bf8fa6475596cd5721111bd5ff7bcd3aaf7bf322ec", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) 6.016248636s ago: executing program 7 (id=3940): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440c4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() syz_open_procfs$userns(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x1517f, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 5.199119138s ago: executing program 1 (id=3941): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 4.966008501s ago: executing program 1 (id=3943): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 4.945087685s ago: executing program 4 (id=3944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x52000700) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.942852194s ago: executing program 7 (id=3945): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.677080812s ago: executing program 8 (id=3946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4.420059767s ago: executing program 6 (id=3947): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r4, 0x0, 0x0, 0xe, &(0x7f0000000b40)='LLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r4, 0x0, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r4) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 4.210036629s ago: executing program 6 (id=3948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.992423987s ago: executing program 8 (id=3949): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount(&(0x7f0000000080)=@filename='nodev\x00', 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.566697633s ago: executing program 8 (id=3950): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x24, r2, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "f24c73908f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f1cfc15bb4a2c4bcb6502430d"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 3.426544498s ago: executing program 7 (id=3951): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = inotify_init() readv(r1, 0x0, 0x0) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.275335442s ago: executing program 8 (id=3952): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x7, 0x1, 0x2, 0x40, {{0x15, 0x4, 0x0, 0x3f, 0x54, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @remote, {[@rr={0x7, 0x23, 0xa8, [@dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @rand_addr=0x64010102, @empty, @multicast1, @broadcast, @broadcast, @local]}, @generic={0x7, 0x10, "9b8ff732391009e5e907cb2dcbd6"}, @timestamp_addr={0x44, 0xc, 0x15, 0x1, 0x5, [{@local, 0x9}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@newtclass={0x58, 0x28, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x10}, {0x5, 0x4}, {0xfff2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x23}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x9}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0xc4}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x4, 0x5}) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x3, 0x5}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x8a, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x6, 0x70, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7, [@midi_in_jack={0x6}, @ms_header={0x7, 0x24, 0x1, 0xa6ce, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x3, 0x0, 0x8, [{0x8, 0x80}, {0x40, 0x36}, {0x2, 0x80}, {0x6, 0x80}, {0x1, 0x2}, {0xd, 0x4a}, {0x80, 0x31}, {0x7f, 0x4}], 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x2}, @ms_header={0x7, 0x24, 0x1, 0xfffb, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x100, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5d1, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x2f, 0x6, [{0x80, 0x1}, {0xaa, 0x12}, {0x8, 0x1}, {0x3, 0x6}, {0x2, 0xb4}, {0x80, 0x6}], 0xe9}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x7, 0x8, {0xb, 0x25, 0x1, 0x7, "9b472314b09d6d"}}}]}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0xdc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x860}}, {0x0, 0x0}, {0x12, &(0x7f0000000380)=@string={0x12, 0x3, "59961e0a7a48eb1984eb4d1b19056c3f"}}, {0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="20034db67e7a0560dc0fd175c8ce5cee"]}, {0xde, &(0x7f0000000640)=@string={0xde, 0x3, "d9aef605b86eaa8784b13f2908e23bab592d62d629ca804c008e1221aeeadca1ee0484a487dbfca6b22cd3e31c634795986feecd36661ec10738efa4ee67e917f347385f10027a3accfdd82933f11a9454ba65d35a2b2862b380942bef718ba4d6cd69f0a5d62d0462448978084330d79ad02439cd9fd9d9dc6c3fa8104990e40c96276dcb84e4be5d7344919fa45f1316e56dd708567391a8511863b0c4d85f741abcabd337d8bba13c3bfb068e52c91369c4f060cb96215b844e230e8260285f22ebebd07f04e780d1fbd67ab4ec4ea46e8df0f326c766cb8bbe6a"}}, {0x0, 0x0}, {0xa, &(0x7f0000000540)=@string={0xa, 0x3, "d588951841eb1334"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200a050000008bb50ab585fa60e575d10b95a5c99c81b9"], 0x0, 0x0, 0x0, 0x0}) 3.032106244s ago: executing program 6 (id=3953): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) 2.663622811s ago: executing program 7 (id=3954): openat$autofs(0xffffff9c, 0x0, 0x80001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x1000004, 0x8010, r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d190890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) 2.412258026s ago: executing program 8 (id=3955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) connect$unix(r0, 0x0, 0x0) r1 = getpgrp(0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xb2c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.328938288s ago: executing program 8 (id=3956): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB], 0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') read$FUSE(r3, 0x0, 0x0) 811.673366ms ago: executing program 7 (id=3957): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 730.618765ms ago: executing program 1 (id=3958): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f00, 0x1, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25ab, 0x20, 0x0, 0x221}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x2, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x2, 0xfffffdff}}], 0x1, 0x0, 0x0) 199.567873ms ago: executing program 6 (id=3959): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x15, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 26.022988ms ago: executing program 4 (id=3960): semop(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x2, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 6 (id=3961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): feed not in list (type=0 state=0 pid=ffff) [ 1113.783810][T14099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.791007][T14099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.908062][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.915208][T14099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.931565][ T29] audit: type=1400 audit(1785255444.577:1174): avc: denied { write } for pid=16766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.246266][ T29] audit: type=1400 audit(1785255444.887:1175): avc: denied { write } for pid=16804 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.390626][T16578] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1114.424801][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1114.452032][T16578] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1114.495639][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.531136][T16578] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1114.563914][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1114.583219][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1114.606202][T16578] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1114.636942][T16578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.073393][T16578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.075820][T16832] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1115.103611][ T29] audit: type=1400 audit(1785255445.747:1176): avc: denied { connect } for pid=16829 comm="syz.1.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1115.141286][T16578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.143195][T14099] Bluetooth: hci4: Frame reassembly failed (-84) [ 1115.184966][T14105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.192137][T14105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.270500][T14104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.278254][T14104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.361954][T16474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.413864][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.424873][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.094581][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1117.101506][ T5623] Bluetooth: hci4: command 0x1003 tx timeout [ 1117.356353][ T29] audit: type=1400 audit(1785255447.997:1177): avc: denied { write } for pid=16831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.704012][ T29] audit: type=1400 audit(1785255448.337:1178): avc: denied { write } for pid=16881 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.832616][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3083'. [ 1117.955191][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1118.185668][T16474] veth0_vlan: entered promiscuous mode [ 1118.254929][T16578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.307008][T16474] veth1_vlan: entered promiscuous mode [ 1118.455457][T16474] veth0_macvtap: entered promiscuous mode [ 1118.523237][T16474] veth1_macvtap: entered promiscuous mode [ 1118.648532][T16474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.734279][T16474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.834500][T14102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.882843][T14102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.980699][T14102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.033623][T14102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.214379][ T29] audit: type=1400 audit(1785255449.857:1179): avc: denied { write } for pid=16896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1119.318385][T14076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.356596][T14076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.449751][T16578] veth0_vlan: entered promiscuous mode [ 1119.506254][T14076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.518174][ T29] audit: type=1400 audit(1785255450.157:1180): avc: denied { write } for pid=16922 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1119.540263][T14076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.969443][T16578] veth1_vlan: entered promiscuous mode [ 1121.113492][T16578] veth0_macvtap: entered promiscuous mode [ 1121.161755][T16578] veth1_macvtap: entered promiscuous mode [ 1121.208924][T16578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.249292][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1121.299123][T16578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.358876][T14101] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.388916][T14101] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.445504][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1121.458590][T14101] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.482035][T14101] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.366047][T14072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.382075][T16947] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1123.416213][T14072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.427612][T14103] Bluetooth: hci4: Frame reassembly failed (-84) [ 1123.550909][T14072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.586717][T14072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.767351][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1123.827179][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1123.838639][T16960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.912932][T16966] netlink: 'syz.1.3091': attribute type 32 has an invalid length. [ 1123.962612][T16966] netlink: 424 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1124.015664][ T29] audit: type=1400 audit(1785255454.657:1181): avc: denied { write } for pid=16968 comm="syz.7.3092" name="usb_gadget" dev="configfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1124.113899][ T29] audit: type=1400 audit(1785255454.707:1182): avc: denied { write } for pid=16968 comm="syz.7.3092" name="functions" dev="configfs" ino=61692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1124.213296][ T29] audit: type=1400 audit(1785255454.727:1183): avc: denied { write } for pid=16948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.292657][ T29] audit: type=1400 audit(1785255454.827:1184): avc: denied { write } for pid=16968 comm="syz.7.3092" name="extensions" dev="configfs" ino=61710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1124.364078][ T29] audit: type=1400 audit(1785255454.917:1185): avc: denied { write } for pid=16972 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.959553][T16977] syzkaller0: entered promiscuous mode [ 1124.965140][T16977] syzkaller0: entered allmulticast mode [ 1125.736217][ T5623] Bluetooth: hci4: command 0x1003 tx timeout [ 1125.744287][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1126.134539][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1126.806840][ T29] audit: type=1400 audit(1785255457.427:1186): avc: denied { read } for pid=16985 comm="syz.2.3096" name="/" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1126.981488][ T29] audit: type=1400 audit(1785255457.427:1187): avc: denied { open } for pid=16985 comm="syz.2.3096" path="/638/config" dev="configfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1127.092765][ T29] audit: type=1400 audit(1785255457.477:1188): avc: denied { read } for pid=16985 comm="syz.2.3096" name="g1" dev="configfs" ino=61691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1127.645550][ T29] audit: type=1400 audit(1785255457.477:1189): avc: denied { read } for pid=16985 comm="syz.2.3096" name="idVendor" dev="configfs" ino=60537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1127.837961][ T29] audit: type=1800 audit(1785255457.627:1190): pid=16986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3096" name="idVendor" dev="configfs" ino=60537 res=0 errno=0 [ 1128.650629][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1128.894604][ T5794] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1128.934496][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1128.951590][ T29] audit: type=1400 audit(1785255459.577:1191): avc: denied { write } for pid=17002 comm="syz.7.3101" name="uncompressed" dev="configfs" ino=61713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1129.024920][ T29] audit: type=1400 audit(1785255459.617:1192): avc: denied { write } for pid=17002 comm="syz.7.3101" name="u" dev="configfs" ino=60559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1129.094722][ T29] audit: type=1326 audit(1785255459.637:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17004 comm="syz.6.3102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe508b9de99 code=0x0 [ 1129.135674][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.189809][ T5794] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1129.190276][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3103'. [ 1129.225175][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.280229][ T5794] usb 5-1: config 0 descriptor?? [ 1129.312456][ T29] audit: type=1400 audit(1785255459.947:1194): avc: denied { search } for pid=17012 comm="syz.2.3104" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1129.370637][ T29] audit: type=1400 audit(1785255459.957:1195): avc: denied { write } for pid=17012 comm="syz.2.3104" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1129.455994][ T29] audit: type=1400 audit(1785255459.977:1196): avc: denied { open } for pid=17012 comm="syz.2.3104" path="/640/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1129.487463][ T29] audit: type=1400 audit(1785255460.097:1197): avc: denied { write } for pid=16996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.578715][ T5794] usbhid 5-1:0.0: can't add hid device: -71 [ 1129.589011][ T5794] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1129.628533][ T5794] usb 5-1: USB disconnect, device number 44 [ 1129.703944][T17020] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1129.718785][ T29] audit: type=1400 audit(1785255460.357:1198): avc: denied { write } for pid=17019 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.749451][ T295] Bluetooth: hci4: Frame reassembly failed (-84) [ 1129.802444][T17022] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1129.889356][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1130.666629][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1130.709934][T17035] fuse: Bad value for 'fd' [ 1131.731016][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1131.739890][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 1131.788311][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1131.814880][ T5611] Bluetooth: hci6: command 0x1003 tx timeout [ 1131.824969][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1132.062902][ T29] audit: type=1400 audit(1785255462.697:1199): avc: denied { bind } for pid=17049 comm="syz.6.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1132.197782][T17055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.221012][T16914] udevd[16914]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1133.918360][T17066] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1134.760005][ T29] audit: type=1400 audit(1785255465.397:1200): avc: denied { write } for pid=17064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.944732][ T29] audit: type=1400 audit(1785255465.587:1201): avc: denied { write } for pid=17085 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1135.195421][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1135.284892][T17093] netlink: 'syz.7.3120': attribute type 2 has an invalid length. [ 1135.341321][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1136.321106][T17103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1136.585660][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1136.773929][T17114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1138.414633][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1138.465631][T17132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1138.616193][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1138.895328][T17143] fuse: fd is not a fuse device [ 1139.148603][T17147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1139.189510][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1139.191430][T17149] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1139.262857][T17152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.397036][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1140.584908][ T29] audit: type=1400 audit(1785255471.227:1202): avc: denied { read } for pid=17161 comm="syz.6.3139" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1140.630725][T17171] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1140.694090][ T29] audit: type=1400 audit(1785255471.257:1203): avc: denied { open } for pid=17161 comm="syz.6.3139" path="/15/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1140.853553][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1140.863666][T17175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.016975][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1141.062420][T17179] bridge0: port 3(syz_tun) entered blocking state [ 1141.077453][T17179] bridge0: port 3(syz_tun) entered disabled state [ 1141.092259][T17179] syz_tun: entered allmulticast mode [ 1141.109215][T17179] syz_tun: entered promiscuous mode [ 1141.123557][T17179] bridge0: port 3(syz_tun) entered blocking state [ 1141.130865][T17179] bridge0: port 3(syz_tun) entered listening state [ 1141.140346][T14100] bridge0: port 3(syz_tun) entered disabled state [ 1141.278338][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1141.315441][ T29] audit: type=1400 audit(1785255471.937:1204): avc: denied { map } for pid=17183 comm="syz.6.3146" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1142.014164][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1142.085793][T17194] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1142.105947][T14105] Bluetooth: hci4: Frame reassembly failed (-84) [ 1143.211171][ T29] audit: type=1400 audit(1785255473.857:1205): avc: denied { write } for pid=17214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.456141][ T29] audit: type=1400 audit(1785255474.097:1206): avc: denied { write } for pid=17228 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.609330][ T29] audit: type=1400 audit(1785255474.247:1207): avc: denied { mounton } for pid=17230 comm="syz.7.3158" path="/17/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1144.139922][ T5611] Bluetooth: hci4: command 0x1003 tx timeout [ 1144.148982][ T5623] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1144.431731][T16914] udevd[16914]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1144.692241][T17259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.148480][ T29] audit: type=1400 audit(1785255475.787:1208): avc: denied { write } for pid=17233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.472471][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.497535][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.513163][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.524989][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.533801][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.557901][ T29] audit: type=1400 audit(1785255476.187:1209): avc: denied { write } for pid=17268 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.615043][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.626250][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.641708][T17272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.650990][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.660280][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.664601][T17275] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1145.669031][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.712695][T16951] udevd[16951]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1145.857024][T17281] fuse: fd is not a fuse device [ 1147.443257][T17293] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1147.541513][T17293] block device autoloading is deprecated and will be removed. [ 1147.731161][ T5623] Bluetooth: hci4: command tx timeout [ 1147.968442][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1148.079631][T17269] lo speed is unknown, defaulting to 1000 [ 1148.169841][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1148.254182][ T29] audit: type=1400 audit(1785255478.897:1210): avc: denied { write } for pid=17286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.371303][ T10] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1148.393159][ T10] usb 8-1: config 0 has no interface number 0 [ 1148.420667][ T10] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1148.444853][ T10] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1148.473546][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.515536][ T10] usb 8-1: Product: syz [ 1148.519848][ T10] usb 8-1: Manufacturer: syz [ 1148.524461][ T10] usb 8-1: SerialNumber: syz [ 1148.542593][ T10] usb 8-1: config 0 descriptor?? [ 1148.560898][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1148.890624][ T29] audit: type=1400 audit(1785255479.527:1211): avc: denied { write } for pid=17320 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1150.637182][ T5611] Bluetooth: hci4: command tx timeout [ 1150.719893][ T5732] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1150.807898][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3172'. [ 1150.848596][ T10] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1150.903500][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1150.926302][ T5732] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1150.950023][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.974841][ T5732] usb 7-1: config 0 descriptor?? [ 1150.988606][T17325] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1151.175704][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.190582][ T29] audit: type=1400 audit(1785255481.837:1212): avc: denied { write } for pid=17336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.195872][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.272392][T17269] bridge_slave_0: entered allmulticast mode [ 1151.283478][T17269] bridge_slave_0: entered promiscuous mode [ 1151.291834][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.299014][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.317624][T17269] bridge_slave_1: entered allmulticast mode [ 1151.336900][T17269] bridge_slave_1: entered promiscuous mode [ 1151.347213][ T29] audit: type=1400 audit(1785255481.977:1213): avc: denied { write } for pid=17356 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.423612][T17269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.454339][T17269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.476132][ T5732] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 1151.496977][ T5732] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 1151.519004][ T5732] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 1151.521344][T17269] team0: Port device team_slave_0 added [ 1151.530963][ T5732] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 1151.540141][ T5732] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 1151.547533][ T5732] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 1151.551992][T17269] team0: Port device team_slave_1 added [ 1151.563277][ T5732] kye 0003:0458:0138.0023: unexpected long global item [ 1151.589611][ T5732] kye 0003:0458:0138.0023: parse failed [ 1151.605253][ T5732] kye 0003:0458:0138.0023: probe with driver kye failed with error -22 [ 1151.613304][T17269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.627964][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.689212][T17269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.702187][T17269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.720418][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.741032][T17364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.763580][ T5794] usb 7-1: USB disconnect, device number 2 [ 1151.777575][T17269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.881657][ T10] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1151.904625][T17269] hsr_slave_0: entered promiscuous mode [ 1151.907147][ T10] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1151.914430][T17269] hsr_slave_1: entered promiscuous mode [ 1151.928161][T17269] debugfs: 'hsr0' already exists in 'hsr' [ 1151.934844][T17269] Cannot create hsr debugfs directory [ 1151.953280][ T10] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 1151.969362][ T10] usb 8-1: USB disconnect, device number 2 [ 1152.140472][ T29] audit: type=1400 audit(1785255482.777:1214): avc: denied { write } for pid=17359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.233119][ T5739] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 1152.388036][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1152.401304][ T29] audit: type=1400 audit(1785255483.027:1215): avc: denied { write } for pid=17382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.437397][T17384] 9pnet: p9_errstr2errno: server reported unknown error Ð [ 1152.444894][ T5739] usb 5-1: config 0 has no interfaces? [ 1152.455700][ T5739] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1152.485994][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.526609][ T5739] usb 5-1: config 0 descriptor?? [ 1152.700853][ T5623] Bluetooth: hci4: command tx timeout [ 1154.178759][T17269] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1154.198225][ T5732] usb 5-1: USB disconnect, device number 45 [ 1154.237171][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1154.271913][T17269] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1154.302083][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1154.337524][T17269] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1154.363344][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1154.381104][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1154.409215][T17269] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1154.432800][T17269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1154.600454][T17269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.626326][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1154.665828][T17269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.696839][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.704019][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.724835][ T29] audit: type=1400 audit(1785255485.367:1216): avc: denied { ioctl } for pid=17417 comm="syz.6.3194" path="/27/file0/file0" dev="fuse" ino=64 ioctlcmd=0x929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1154.763840][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.771004][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.779880][ T5623] Bluetooth: hci4: command tx timeout [ 1154.829197][T17269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1154.889699][T17269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1154.907962][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1156.529471][ T29] audit: type=1400 audit(1785255487.167:1217): avc: denied { write } for pid=17398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1156.764169][ T29] audit: type=1400 audit(1785255487.397:1218): avc: denied { write } for pid=17440 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1156.893970][T17446] fuse: fd is not a fuse device [ 1156.973584][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1157.005959][T17449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.159239][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1157.325015][T17269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.902924][T17468] fuse: fd is not a fuse device [ 1159.595203][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1159.692212][T17269] veth0_vlan: entered promiscuous mode [ 1159.725332][T17269] veth1_vlan: entered promiscuous mode [ 1159.784608][T17269] veth0_macvtap: entered promiscuous mode [ 1159.841114][T17269] veth1_macvtap: entered promiscuous mode [ 1159.897671][T17269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.935619][T17269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.957645][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1159.988972][T14105] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.016552][T14105] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.041678][T14105] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.070888][T17486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1160.100612][T14105] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.279456][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3211'. [ 1160.283589][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1160.307899][T14104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.326962][T14104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.474062][T14104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.499790][T14104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.603287][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1161.739499][T14075] Bluetooth: hci6: Frame reassembly failed (-84) [ 1161.769611][T17500] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1164.992504][ T5611] Bluetooth: hci6: command 0x1003 tx timeout [ 1165.000391][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1165.013012][T17518] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1165.192405][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1165.223296][ T29] audit: type=1400 audit(1785255495.867:1219): avc: denied { relabelfrom } for pid=17524 comm="syz.6.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1165.309895][ T29] audit: type=1400 audit(1785255495.867:1220): avc: denied { relabelto } for pid=17524 comm="syz.6.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1165.455219][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1165.525530][T17530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.699629][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1166.005575][ T29] audit: type=1400 audit(1785255496.647:1221): avc: denied { map } for pid=17541 comm="syz.7.3228" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1167.915200][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1169.788817][ T29] audit: type=1400 audit(1785255500.427:1222): avc: denied { map } for pid=17568 comm="syz.7.3236" path="socket:[63920]" dev="sockfs" ino=63920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1169.872378][ T29] audit: type=1400 audit(1785255500.427:1223): avc: denied { read write } for pid=17568 comm="syz.7.3236" path="socket:[63920]" dev="sockfs" ino=63920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1170.319098][ T29] audit: type=1400 audit(1785255500.957:1224): avc: denied { write } for pid=17583 comm="syz.7.3243" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1170.398743][ T29] audit: type=1400 audit(1785255500.957:1225): avc: denied { open } for pid=17583 comm="syz.7.3243" path="/38/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1170.433626][ T29] audit: type=1400 audit(1785255500.957:1226): avc: denied { ioctl } for pid=17583 comm="syz.7.3243" path="/38/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1170.590150][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1170.605868][T17593] fuse: fd is not a fuse device [ 1170.651595][T17592] tipc: Started in network mode [ 1170.664810][T17592] tipc: Node identity 4e9dcb3730ba, cluster identity 4711 [ 1172.045398][T17592] tipc: Enabled bearer , priority 0 [ 1172.177790][ T5794] tipc: Node number set to 2116537143 [ 1172.389264][T17602] syzkaller0: entered promiscuous mode [ 1172.422279][T17602] syzkaller0: entered allmulticast mode [ 1172.438827][T17602] tipc: Resetting bearer [ 1172.473267][T17590] tipc: Resetting bearer [ 1172.527227][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1172.809801][T11092] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1173.007124][T11092] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1173.036573][T11092] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1173.061526][T11092] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1173.097669][T11092] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1173.118898][T11092] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1173.150799][T11092] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1173.171375][T11092] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1173.183634][T11092] usb 7-1: Product: syz [ 1173.193590][T11092] usb 7-1: Manufacturer: syz [ 1173.220718][T11092] cdc_wdm 7-1:1.0: skipping garbage [ 1173.236145][T11092] cdc_wdm 7-1:1.0: skipping garbage [ 1173.254856][T11092] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1173.267468][T11092] cdc_wdm 7-1:1.0: Unknown control protocol [ 1173.464876][ T5732] IPVS: starting estimator thread 0... [ 1173.565206][T17626] IPVS: using max 54 ests per chain, 129600 per kthread [ 1174.491570][T17642] fuse: fd is not a fuse device [ 1175.100714][T17656] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1175.667645][T11094] usb 7-1: USB disconnect, device number 3 [ 1175.741475][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1175.915584][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1176.062155][T17667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.315425][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1176.454948][ T29] audit: type=1400 audit(1785255507.097:1227): avc: denied { unmount } for pid=16474 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1176.574890][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1176.776241][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1176.851596][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.858529][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.803952][T17590] tipc: Disabling bearer [ 1177.962391][ T29] audit: type=1326 audit(1785255508.607:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.7.3280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069f9de99 code=0x7fc00000 [ 1177.972814][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1178.015405][ T29] audit: type=1326 audit(1785255508.617:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.7.3280" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1069f9de99 code=0x7fc00000 [ 1178.284331][T17708] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1178.846536][T17717] overlayfs: failed to clone upperpath [ 1178.962942][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1179.165771][T17721] ipip0: entered promiscuous mode [ 1179.176618][T17721] ipip0: entered allmulticast mode [ 1180.821517][T17739] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1180.832167][T17739] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1181.102444][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1182.446690][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1184.116330][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1184.190536][T17779] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1186.228881][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1186.489377][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1186.550287][T17821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.597903][T17826] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1186.874301][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1187.045591][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1187.164880][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 1187.242509][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1187.991907][T17853] fuse: fd is not a fuse device [ 1188.041392][ T29] audit: type=1400 audit(1785255518.677:1230): avc: denied { name_bind } for pid=17855 comm="syz.7.3331" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1189.227498][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1189.485866][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1191.209880][ T5794] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1191.297332][T17884] ipip0: entered promiscuous mode [ 1191.316591][T17884] ipip0: entered allmulticast mode [ 1191.390036][ T5794] usb 7-1: Using ep0 maxpacket: 8 [ 1191.416681][ T5794] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1191.448932][ T5794] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1191.479992][ T5794] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1191.528727][ T5794] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1191.570503][ T5794] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.601574][ T5794] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1191.625322][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.893669][ T5794] usb 7-1: GET_CAPABILITIES returned 0 [ 1191.911004][ T5794] usbtmc 7-1:16.0: can't read capabilities [ 1192.195344][ T5794] usb 7-1: USB disconnect, device number 4 [ 1192.741053][T17906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.877802][T17907] kvm: pic: level sensitive irq not supported [ 1192.996355][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1193.032430][T17911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1193.057491][T17911] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1193.192365][ T29] audit: type=1400 audit(1785255523.827:1231): avc: denied { getopt } for pid=17916 comm="syz.4.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1193.270949][T17911] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1193.295658][T14084] Bluetooth: hci6: Frame reassembly failed (-84) [ 1193.412521][T17925] binder: 17924:17925 ioctl c0306201 200000000080 returned -14 [ 1193.451200][ T29] audit: type=1400 audit(1785255524.097:1232): avc: denied { map } for pid=17924 comm="syz.8.3355" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1193.488677][T17925] binder: 17924:17925 ioctl c0306201 2000000003c0 returned -14 [ 1193.536264][ T29] audit: type=1400 audit(1785255524.167:1233): avc: denied { call } for pid=17924 comm="syz.8.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1193.641962][T17928] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1193.684221][T17930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.847585][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3359'. [ 1195.176303][ T29] audit: type=1400 audit(1785255525.817:1234): avc: denied { transfer } for pid=17946 comm="syz.8.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1195.330945][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1195.516728][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1195.603302][ T29] audit: type=1400 audit(1785255526.247:1235): avc: denied { listen } for pid=17962 comm="syz.6.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1195.662362][ T29] audit: type=1400 audit(1785255526.297:1236): avc: denied { accept } for pid=17962 comm="syz.6.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1195.719924][T17968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1195.803758][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1195.936515][T17973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.116197][ T29] audit: type=1400 audit(1785255526.757:1237): avc: denied { ioctl } for pid=17975 comm="syz.8.3374" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1196.299858][ T5794] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1196.466278][T17982] fuse: fd is not a fuse device [ 1196.469832][ T5794] usb 7-1: Using ep0 maxpacket: 32 [ 1196.483233][ T5794] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1196.504172][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.524689][ T5794] usb 7-1: config 0 descriptor?? [ 1196.754500][ T5794] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1196.771590][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1196.791748][ T5794] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1196.810879][ T5794] usb 7-1: media controller created [ 1196.864755][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1197.789797][ T5794] stb0899_attach: Driver disabled by Kconfig [ 1197.812371][ T5794] az6027: no front-end attached [ 1197.812371][ T5794] [ 1197.828734][T18018] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1197.838348][T14100] Bluetooth: hci6: Frame reassembly failed (-84) [ 1197.849178][ T29] audit: type=1400 audit(1785255528.487:1238): avc: denied { write } for pid=18015 comm="syz.4.3389" name="functions" dev="configfs" ino=61692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1197.878050][ T5794] az6027: usb out operation failed. (-71) [ 1197.894490][ T5794] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1197.914710][ T5794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 1197.930958][ T5794] dvb-usb: schedule remote query interval to 400 msecs. [ 1197.938572][ T5794] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1197.953175][ T5794] usb 7-1: USB disconnect, device number 5 [ 1198.075314][ T5794] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1198.111849][T18022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.302296][ T29] audit: type=1400 audit(1785255528.947:1239): avc: denied { execute } for pid=18033 comm="syz.1.3397" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=66620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1198.389072][T18036] pim6reg: entered allmulticast mode [ 1198.405441][T18036] pim6reg: left allmulticast mode [ 1198.515662][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1198.558655][T18036] ./file0: Can't open blockdev [ 1198.766418][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 1199.248676][T18053] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1199.432572][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1199.710583][T18069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.773938][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1199.889950][ T5623] Bluetooth: hci6: command 0x1003 tx timeout [ 1199.890942][ T5611] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1200.498110][ T29] audit: type=1400 audit(1785255531.137:1240): avc: denied { write } for pid=18085 comm="syz.4.3412" name="configs" dev="configfs" ino=61693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1200.591476][ T29] audit: type=1400 audit(1785255531.177:1241): avc: denied { write } for pid=18085 comm="syz.4.3412" name="c.1" dev="configfs" ino=65940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1200.687985][ T29] audit: type=1400 audit(1785255531.177:1242): avc: denied { create } for pid=18085 comm="syz.4.3412" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1200.800023][ T29] audit: type=1400 audit(1785255531.207:1243): avc: denied { write } for pid=18085 comm="syz.4.3412" name="c.1" dev="configfs" ino=65940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1200.907790][T18090] md: md2 stopped. [ 1201.010182][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1201.183313][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 1201.197663][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1201.219611][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.454448][ T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1201.637363][T18101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1201.865734][ T29] audit: type=1400 audit(1785255532.507:1244): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1201.890729][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3417'. [ 1201.988223][T18107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.139529][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1202.378868][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1202.551949][T14084] Bluetooth: hci6: Frame reassembly failed (-84) [ 1202.572653][T18118] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1203.056544][T18131] netlink: 'syz.7.3428': attribute type 1 has an invalid length. [ 1203.220007][T18131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1204.337593][ T29] audit: type=1400 audit(1785255534.977:1245): avc: denied { accept } for pid=18137 comm="syz.8.3429" laddr=172.20.20.170 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1204.474692][T18136] bond1: (slave geneve2): making interface the new active one [ 1204.534854][T18136] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1204.609945][ T5623] Bluetooth: hci6: command 0x1003 tx timeout [ 1204.611476][ T5611] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1204.684926][T18143] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1204.750871][T14084] Bluetooth: hci7: Frame reassembly failed (-84) [ 1204.801903][T16951] udevd[16951]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1205.321308][T18146] syzkaller0: entered promiscuous mode [ 1205.326841][T18146] syzkaller0: entered allmulticast mode [ 1206.389555][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1206.444066][T18152] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1206.690206][ T5623] Bluetooth: hci7: command 0x1003 tx timeout [ 1206.690534][ T5611] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1207.425933][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3440'. [ 1207.743732][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1207.792656][T18185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.028866][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1208.051137][T18190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1208.101134][T18195] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1208.121062][T14076] Bluetooth: hci6: Frame reassembly failed (-84) [ 1208.288338][T18202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.309824][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1208.471582][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.494168][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1208.518775][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.533393][ T10] usb 7-1: config 0 descriptor?? [ 1208.547470][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1208.655901][T18206] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1208.675801][T14100] Bluetooth: hci7: Frame reassembly failed (-84) [ 1208.852741][T18208] fuse: fd is not a fuse device [ 1208.960021][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1208.973405][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1209.001833][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1209.011142][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1209.018731][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1209.029603][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1209.041146][T18214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.243005][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 1209.257421][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 1209.264825][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 1209.273454][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1209.280435][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1209.287188][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1209.295201][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1209.302135][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1209.308927][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1209.317672][ T10] pwc: Registered as video103. [ 1209.325894][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 1209.367397][ T10] usb 7-1: USB disconnect, device number 6 [ 1209.814058][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1209.970597][T18226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3461'. [ 1209.974316][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1210.019649][T18228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.086401][T18230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.098625][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1210.133893][ T5611] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1210.139909][ T5625] Bluetooth: hci6: command 0x1003 tx timeout [ 1210.198344][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1210.254852][T18237] fuse: Bad value for 'rootmode' [ 1210.268362][T18237] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þhë~"G [ 1210.272027][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802c838800: rx timeout, send abort [ 1210.290376][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c838800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1210.309023][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880291d3c00: rx timeout, send abort [ 1210.318965][ T29] audit: type=1400 audit(1785255540.957:1246): avc: denied { read } for pid=4961 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1210.321601][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880291d3c00: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 1210.421962][ T29] audit: type=1400 audit(1785255540.957:1247): avc: denied { search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1210.492029][ T29] audit: type=1400 audit(1785255540.957:1248): avc: denied { write search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1210.553390][ T29] audit: type=1400 audit(1785255540.957:1249): avc: denied { add_name } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1210.587951][ T29] audit: type=1400 audit(1785255540.957:1250): avc: denied { create } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1210.636497][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1210.647845][ T29] audit: type=1400 audit(1785255540.957:1251): avc: denied { append open } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1210.674716][ T29] audit: type=1400 audit(1785255540.957:1252): avc: denied { getattr } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1210.695325][ T5623] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1210.812605][T18246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.844919][T18248] kvm: kvm [18247]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 1210.989411][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1211.081329][T18257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.225912][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1211.365490][T18261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.438280][T18264] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1211.735642][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1211.834923][ T29] audit: type=1400 audit(1785255542.477:1253): avc: denied { read } for pid=18270 comm="syz.8.3479" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1211.862156][T18271] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8933, magic 89 != 6b] [ 1212.137784][T18274] syzkaller0: entered promiscuous mode [ 1212.153240][T18279] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1212.170302][T18274] syzkaller0: entered allmulticast mode [ 1212.177978][T18279] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 1212.213138][T18279] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 1212.243416][T18279] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 1212.264643][T14075] Bluetooth: hci6: Frame reassembly failed (-84) [ 1212.274608][T18283] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1212.282019][T14075] Bluetooth: hci6: Frame reassembly failed (-84) [ 1212.291614][T18279] kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 1212.308487][T18279] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 1212.318023][T18279] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1212.327621][T18279] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1213.826114][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1213.971034][T18291] fuse: fd is not a fuse device [ 1214.129952][ T1239] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1214.299570][ T5611] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1214.311723][ T5623] Bluetooth: hci6: command 0x1003 tx timeout [ 1214.339976][ T1239] usb 7-1: Using ep0 maxpacket: 32 [ 1214.352414][ T1239] usb 7-1: config 8 has an invalid interface number: 202 but max is 0 [ 1214.373555][ T1239] usb 7-1: config 8 has no interface number 0 [ 1214.394033][ T1239] usb 7-1: config 8 interface 202 has no altsetting 0 [ 1214.408947][ T1239] usb 7-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 1214.419932][ T1239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.428607][ T1239] usb 7-1: Product: syz [ 1214.433522][ T1239] usb 7-1: Manufacturer: syz [ 1214.438574][ T1239] usb 7-1: SerialNumber: syz [ 1214.553307][T18305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.181765][ T5794] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1215.323668][ T1239] usb 7-1: No union descriptors [ 1215.332252][ T1239] gspca_main: spca500-2.14.0 probing 046d:0890 [ 1215.340202][ T5794] usb 5-1: Using ep0 maxpacket: 32 [ 1215.385270][ T5794] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1215.396049][ T5794] usb 5-1: config 0 has no interface number 0 [ 1215.411475][ T1239] usb 7-1: USB disconnect, device number 7 [ 1215.423022][ T5794] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1215.472562][ T5794] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1215.492691][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.508649][ T5794] usb 5-1: Product: syz [ 1215.514992][ T5794] usb 5-1: Manufacturer: syz [ 1215.521365][ T5794] usb 5-1: SerialNumber: syz [ 1215.539977][ T5794] usb 5-1: config 0 descriptor?? [ 1215.999586][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1216.052472][T18320] binder_alloc: 18319: binder_alloc_buf size 66480 failed, no address space [ 1216.064378][T18320] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1216.176929][ T5794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1216.194491][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1216.223297][ T5794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1216.244186][T18322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.398458][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1217.461091][ T5794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1217.502077][ T5794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1217.539825][ T5794] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1217.560398][ T5794] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1217.671204][ T5794] usb 5-1: USB disconnect, device number 46 [ 1218.234638][T18326] ipip0: entered promiscuous mode [ 1218.298642][T18326] ipip0: entered allmulticast mode [ 1218.416012][T18341] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1218.639831][ T5739] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1218.652235][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1218.698939][T18340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.708198][T18340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.709965][ T29] audit: type=1400 audit(1785255549.347:1254): avc: denied { ioctl } for pid=18349 comm="syz.6.3498" path="socket:[67595]" dev="sockfs" ino=67595 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1218.831315][ T5739] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 136, changing to 7 [ 1218.864150][ T5739] usb 8-1: language id specifier not provided by device, defaulting to English [ 1218.905286][ T5739] usb 8-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 1218.927012][ T5739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.958608][ T5739] usb 8-1: Manufacturer: ë¨ë˜ªí‹ƒâŸ›ï¥†Ï¹ì‡±ä§©â¹•é±ºå¤å¸ë¯½ì»˜ã…£åŸ…䞩陊æ»îµ½æ‹›ì´žï‘†èˆšà¹½Õ˜â¸¸ï¦€ë…¡ [ 1218.985796][ T5739] usb 8-1: SerialNumber: syz [ 1219.074639][T18340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.166133][T18340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.221045][ T5739] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1219.343306][T18340] veth1_vlan: left allmulticast mode [ 1219.357205][T18340] macvlan1: left promiscuous mode [ 1219.373784][T18375] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1219.392618][T18340] macvlan1: left allmulticast mode [ 1219.417756][ T5739] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1219.526341][ T5739] usb 8-1: USB disconnect, device number 3 [ 1219.714999][T18340] ipip0: left promiscuous mode [ 1219.733588][T18340] ipip0: left allmulticast mode [ 1219.736016][T18379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.772191][T14084] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.790779][T14084] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.824318][T14084] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.855240][T14084] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.922605][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1220.168278][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1220.232163][T18398] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1220.436134][T14084] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.883097][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1221.891180][ T5611] Bluetooth: hci6: command 0x1003 tx timeout [ 1222.157216][T14076] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.351476][T18421] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1222.638352][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1223.463319][T18439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.706817][T18441] binder: 18440:18441 ioctl c0306201 200000000680 returned -14 [ 1223.833101][T18443] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1223.922619][ T29] audit: type=1400 audit(1785255554.557:1255): avc: denied { append } for pid=18446 comm="syz.7.3519" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1223.954333][T18448] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.970057][T18448] binder: 18446:18448 ioctl 4018620d 200000000180 returned -16 [ 1224.016018][T18445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.105561][T18455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.128849][T16949] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1224.158773][T16949] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1224.196092][T14101] wlan1: authenticated [ 1225.654112][T14101] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1225.770983][T14075] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 1225.889902][T14084] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1226.012440][T14100] wlan1: association with 08:02:11:00:00:00 timed out [ 1226.127206][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1226.201085][T18470] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1226.260429][ T29] audit: type=1400 audit(1785255556.897:1256): avc: denied { mounton } for pid=18474 comm="syz.8.3527" path="/61/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1226.462393][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1226.628603][T18484] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1228.923748][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1228.945471][T18494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.065439][T18500] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1229.132714][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1229.372878][ T29] audit: type=1400 audit(1785255560.017:1257): avc: denied { write } for pid=18514 comm="syz.6.3538" name="strings" dev="configfs" ino=61694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1229.459907][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1229.732800][ T29] audit: type=1400 audit(1785255560.377:1258): avc: denied { create } for pid=18520 comm="syz.7.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1229.805812][ T29] audit: type=1400 audit(1785255560.397:1259): avc: denied { ioctl } for pid=18520 comm="syz.7.3530" path="socket:[67969]" dev="sockfs" ino=67969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1229.950771][ T29] audit: type=1400 audit(1785255560.587:1260): avc: denied { append } for pid=18523 comm="syz.6.3540" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1230.040144][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1230.066257][ T29] audit: type=1400 audit(1785255560.657:1261): avc: denied { map } for pid=18523 comm="syz.6.3540" path="socket:[68050]" dev="sockfs" ino=68050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1230.097938][T18528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.640558][T18534] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1230.684708][T14101] Bluetooth: hci6: Frame reassembly failed (-84) [ 1230.722512][T18536] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1231.275966][T18548] fuse: fd is not a fuse device [ 1231.302810][T16951] udevd[16951]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1231.474504][ T29] audit: type=1400 audit(1785255562.117:1262): avc: denied { mounton } for pid=18547 comm="syz.1.3547" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1231.991190][T18558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.134022][T18560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.299834][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1233.678299][ T5611] Bluetooth: hci6: command 0x1003 tx timeout [ 1233.687838][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1233.717523][T18570] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1233.725060][T18570] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1234.199842][ T5731] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1234.334301][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1234.370694][ T5731] usb 8-1: Using ep0 maxpacket: 8 [ 1234.395309][ T5731] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1234.431556][ T5731] usb 8-1: config 0 has no interface number 0 [ 1234.444954][ T5731] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.475492][ T5731] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1234.523399][ T5731] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.562102][ T5731] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1234.577006][ T5731] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1234.585150][ T29] audit: type=1326 audit(1785255565.227:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1234.587692][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.636157][ T5731] usb 8-1: config 0 descriptor?? [ 1234.662417][ T29] audit: type=1326 audit(1785255565.257:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1234.699430][ T5731] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1234.745988][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1234.771126][ T29] audit: type=1326 audit(1785255565.267:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1234.799510][ T29] audit: type=1326 audit(1785255565.267:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1234.827557][ T29] audit: type=1326 audit(1785255565.267:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc8695e6ce code=0x7ffc0000 [ 1234.899282][ T29] audit: type=1400 audit(1785255565.277:1268): avc: denied { append } for pid=18589 comm="syz.8.3561" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1234.928660][ T29] audit: type=1326 audit(1785255565.277:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1234.980129][ T29] audit: type=1326 audit(1785255565.277:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1234.989779][ T5739] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1235.041348][T18351] usb 8-1: USB disconnect, device number 4 [ 1235.058750][T18351] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1235.101082][ T29] audit: type=1326 audit(1785255565.287:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1235.108068][T18598] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1235.169890][T18598] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1235.170992][ T29] audit: type=1326 audit(1785255565.287:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.8.3561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8699de99 code=0x7ffc0000 [ 1235.711822][T18604] syzkaller0: entered promiscuous mode [ 1235.717337][T18604] syzkaller0: entered allmulticast mode [ 1236.553783][ T5739] usb 7-1: Using ep0 maxpacket: 16 [ 1236.575399][ T5739] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1236.588451][ T5739] usb 7-1: config 0 has no interface number 0 [ 1236.594681][ T5739] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1236.614405][ T5739] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1236.705677][ T5739] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1236.715745][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.724312][ T5739] usb 7-1: Product: syz [ 1236.728575][ T5739] usb 7-1: Manufacturer: syz [ 1236.733617][ T5739] usb 7-1: SerialNumber: syz [ 1236.741975][ T5739] usb 7-1: config 0 descriptor?? [ 1236.747600][T18593] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1236.825878][T18593] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1236.895377][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3567'. [ 1236.938969][T18609] »»»»»»: renamed from vlan0 (while UP) [ 1237.079469][T18593] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1237.102421][T18593] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1237.316928][ T5739] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1237.659794][T18366] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1237.822102][T18366] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.845789][T18366] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1237.869913][T18366] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1237.888778][T18366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.905681][T18366] usb 5-1: config 0 descriptor?? [ 1237.927306][T18366] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1237.938755][T18366] dvb-usb: bulk message failed: -22 (3/0) [ 1237.953034][T18366] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1237.983113][T18366] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1237.999816][T18366] usb 5-1: media controller created [ 1238.009547][T18366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1238.023977][T18351] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1238.063697][T18366] dvb-usb: bulk message failed: -22 (6/0) [ 1238.083347][T18366] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1238.103020][T18366] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 1238.142575][T18366] dvb-usb: schedule remote query interval to 150 msecs. [ 1238.163328][T18366] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1238.206746][T18366] usb 5-1: USB disconnect, device number 47 [ 1238.222633][T18351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.256751][T18351] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1238.297601][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.297977][T18366] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1238.304721][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.322310][T18351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.338245][T18351] usb 8-1: config 0 descriptor?? [ 1238.583485][T18351] usbhid 8-1:0.0: can't add hid device: -71 [ 1238.601721][T18351] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1238.621454][T18351] usb 8-1: USB disconnect, device number 5 [ 1240.434733][ T5739] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1240.495680][ T5739] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1240.600158][T17914] udevd[17914]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1240.652679][ T5739] asix 7-1:0.34: probe with driver asix failed with error -71 [ 1240.663767][ T5739] usb 7-1: USB disconnect, device number 8 [ 1240.752146][T18645] bridge0: port 3(syz_tun) entered disabled state [ 1241.026152][T18370] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1241.067660][T18645] syz_tun (unregistering): left allmulticast mode [ 1241.075274][T18645] syz_tun (unregistering): left promiscuous mode [ 1241.082710][T18645] bridge0: port 3(syz_tun) entered disabled state [ 1241.485232][T18370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1241.511005][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1241.533038][T18370] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1241.562015][T18370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.653210][T18370] usb 8-1: config 0 descriptor?? [ 1241.680609][T18370] usb 8-1: can't set config #0, error -71 [ 1241.711473][T18370] usb 8-1: USB disconnect, device number 6 [ 1241.743550][T18656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.845234][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1243.707304][T18678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.720986][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1243.721013][ T29] audit: type=1400 audit(1785255574.367:1335): avc: denied { bind } for pid=18666 comm="syz.1.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1243.822889][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1244.268714][T18695] xt_nat: multiple ranges no longer supported [ 1246.065788][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1247.923618][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1248.004392][ T29] audit: type=1400 audit(1785255578.647:1336): avc: denied { bind } for pid=18709 comm="syz.6.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1248.026220][T18711] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1248.064017][ T29] audit: type=1400 audit(1785255578.647:1337): avc: denied { listen } for pid=18709 comm="syz.6.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1250.038544][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1250.049793][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1250.323866][T18732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.395078][T18734] syzkaller0: entered promiscuous mode [ 1250.413708][T18734] syzkaller0: entered allmulticast mode [ 1250.448879][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1250.620268][T18734] tipc: Started in network mode [ 1250.626242][T18734] tipc: Node identity 42e2ac11ade8, cluster identity 4711 [ 1250.644132][T18734] tipc: Enabled bearer , priority 0 [ 1252.072245][T18733] tipc: Resetting bearer [ 1252.119310][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1252.339832][T18733] tipc: Disabling bearer [ 1252.703027][T18344] tipc: Node number set to 4010454033 [ 1252.857138][T18750] syzkaller0: entered promiscuous mode [ 1252.869514][T18750] syzkaller0: entered allmulticast mode [ 1252.928372][T18750] tipc: Started in network mode [ 1252.959840][T18750] tipc: Node identity a61be4a91451, cluster identity 4711 [ 1252.979930][T18750] tipc: Enabled bearer , priority 0 [ 1254.768147][T18748] tipc: Resetting bearer [ 1254.925229][T18748] tipc: Disabling bearer [ 1254.949940][T18785] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3613'. [ 1254.990124][T18344] tipc: Node number set to 2991252649 [ 1255.548853][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1257.212775][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1259.332472][ T5623] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1259.826831][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1260.882584][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1261.577424][T18858] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1261.972489][ T5611] Bluetooth: hci6: command 0x1003 tx timeout [ 1261.981289][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1262.068752][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1264.097581][T18891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.519549][T18897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.005209][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1266.834483][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1266.931746][T18914] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1268.504179][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1268.622337][T18924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1268.868056][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1268.933005][ T5611] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1268.935840][ T5623] Bluetooth: hci6: command 0x1003 tx timeout [ 1269.120724][ T5739] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1269.289851][ T5739] usb 7-1: Using ep0 maxpacket: 32 [ 1269.301881][ T5739] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1269.332425][ T5739] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1269.333612][ T29] audit: type=1326 audit(1785255599.977:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.1.3653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f498b79de99 code=0x0 [ 1269.448893][T18931] lo speed is unknown, defaulting to 1000 [ 1269.484759][ T5739] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1269.519451][T18940] 0x000000000007-0x000000020000 : "" [ 1269.558067][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.620758][ T5739] usb 7-1: Product: syz [ 1269.661713][ T5739] usb 7-1: Manufacturer: syz [ 1269.742884][T18940] ftl_cs: FTL header corrupt! [ 1269.769653][ T5739] usb 7-1: SerialNumber: syz [ 1270.587813][ T5739] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1270.622594][ T5739] usb 7-1: unit 4 not found! [ 1270.801738][ T5739] usb 7-1: USB disconnect, device number 9 [ 1271.408572][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1272.715395][T18961] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1273.009112][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1273.164820][T18964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.405310][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1273.830886][T18984] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1273.857557][T14100] Bluetooth: hci6: Frame reassembly failed (-84) [ 1275.052984][T19003] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1275.552729][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1275.894188][ T5623] Bluetooth: hci6: command 0x1003 tx timeout [ 1275.902261][ T5611] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1275.951764][T19008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.045679][T19011] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1276.182909][T19015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1276.195787][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1276.334313][T19016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.404029][T19022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.923130][T19023] syzkaller0: entered promiscuous mode [ 1276.928730][T19023] syzkaller0: entered allmulticast mode [ 1277.916856][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3678'. [ 1280.160393][T19049] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1280.184557][T19049] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1280.517574][T14084] Bluetooth: hci6: Frame reassembly failed (-84) [ 1280.540379][T19054] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1280.918985][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1280.923237][ T29] audit: type=1400 audit(1785255611.557:1339): avc: denied { watch watch_reads } for pid=19057 comm="syz.1.3688" path="/" dev="ramfs" ino=69476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1281.055461][T19061] CIFS: bad ip= option (127®0.0.1) [ 1281.063162][T19061] CIFS: Attempting to mount (null) [ 1282.185895][T19061] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1282.194285][T19061] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1282.376974][ T29] audit: type=1800 audit(1785255613.017:1340): pid=19059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3688" name="bus" dev="ramfs" ino=69479 res=0 errno=0 [ 1282.476481][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1282.484063][T19078] syzkaller0: entered promiscuous mode [ 1282.495336][T19078] syzkaller0: entered allmulticast mode [ 1282.529850][ T5611] Bluetooth: hci6: command 0x1003 tx timeout [ 1282.529850][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1282.556940][T19080] syzkaller0: entered promiscuous mode [ 1282.562969][T19080] syzkaller0: entered allmulticast mode [ 1282.736587][T19085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.847147][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1282.925464][T19091] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1283.235161][T19097] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3697'. [ 1285.445679][T16914] udevd[16914]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1285.532680][T19110] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1285.539223][T19110] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1285.602120][T19110] vhci_hcd vhci_hcd.0: Device attached [ 1285.659149][T19112] vhci_hcd: connection closed [ 1285.663123][T14084] vhci_hcd vhci_hcd.6: stop threads [ 1285.693886][T14084] vhci_hcd vhci_hcd.6: release socket [ 1285.707903][T14084] vhci_hcd vhci_hcd.6: disconnect device [ 1286.090092][T19119] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1286.764665][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1287.406586][T19148] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1288.702975][T19158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1290.976175][T18351] IPVS: starting estimator thread 0... [ 1291.216679][T19175] IPVS: using max 43 ests per chain, 103200 per kthread [ 1292.725661][T19187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.760237][T19191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.868011][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1295.858300][T19227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.668097][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1297.113597][T19236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1297.699164][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1297.797309][T19114] udevd[19114]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1297.824653][T19247] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1298.605649][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1298.709399][T19253] bridge2: port 1(dummy0) entered blocking state [ 1298.715966][T19253] bridge2: port 1(dummy0) entered disabled state [ 1298.722482][T19253] dummy0: entered allmulticast mode [ 1298.731247][T19253] dummy0: entered promiscuous mode [ 1298.756289][T19253] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 1298.764210][T19253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1298.775927][T19253] bridge2: port 1(dummy0) entered blocking state [ 1298.784281][T19253] bridge2: port 1(dummy0) entered forwarding state [ 1298.794385][T19253] dummy0: left allmulticast mode [ 1298.799547][T19253] bridge2: port 1(dummy0) entered disabled state [ 1299.733988][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.294147][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.648866][T19264] syz_tun: entered allmulticast mode [ 1300.801195][T16763] udevd[16763]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1301.796599][T19275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.899142][T17276] udevd[17276]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system [ 1301.935351][T19281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3748'. [ 1301.974022][T19280] lo speed is unknown, defaulting to 1000 [ 1301.995014][ T29] audit: type=1404 audit(1785255632.637:1341): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1302.048825][ T29] audit: type=1400 audit(1785255632.667:1342): avc: denied { ioctl } for pid=19276 comm="syz.6.3746" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1302.081344][ T5739] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1302.115676][ T29] audit: type=1400 audit(1785255632.747:1343): avc: denied { name_bind } for pid=19284 comm="syz.1.3749" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 1302.144971][T19285] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1302.156131][T19285] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1302.287045][ T29] audit: type=1400 audit(1785255632.927:1344): avc: denied { create } for pid=19287 comm="syz.1.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 1302.331456][ T29] audit: type=1400 audit(1785255632.927:1345): avc: denied { prog_load } for pid=19287 comm="syz.1.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1302.389817][ T29] audit: type=1400 audit(1785255632.937:1346): avc: denied { create } for pid=19287 comm="syz.1.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1302.456626][ T29] audit: type=1400 audit(1785255632.937:1347): avc: denied { create } for pid=19287 comm="syz.1.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1302.549759][ T29] audit: type=1400 audit(1785255633.007:1348): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1302.627050][ T29] audit: type=1400 audit(1785255633.017:1349): avc: denied { create } for pid=19289 comm="syz.1.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1302.672684][ T29] audit: type=1400 audit(1785255633.057:1350): avc: denied { execmem } for pid=19289 comm="syz.1.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1303.377500][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3758'. [ 1303.593133][T19318] netlink: 'syz.6.3760': attribute type 1 has an invalid length. [ 1303.726557][T19318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1303.888929][T19322] vlan2: entered promiscuous mode [ 1303.915675][T19322] bond1: entered promiscuous mode [ 1303.930837][T19322] vlan2: entered allmulticast mode [ 1303.965328][T19322] bond1: entered allmulticast mode [ 1304.081929][T19318] bond1: (slave bridge1): making interface the new active one [ 1304.096240][T19318] bridge1: entered promiscuous mode [ 1304.108909][T19318] bridge1: entered allmulticast mode [ 1304.120891][T19318] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1304.215610][T19329] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1304.238213][T19329] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1304.688592][T19333] syzkaller0: entered promiscuous mode [ 1304.718643][T19333] syzkaller0: entered allmulticast mode [ 1307.131247][T19389] syzkaller0: entered promiscuous mode [ 1307.196071][T19389] syzkaller0: entered allmulticast mode [ 1307.196217][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 1307.196230][ T29] audit: type=1400 audit(1785255637.837:1456): avc: denied { create } for pid=19388 comm="syz.8.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1307.605414][ T29] audit: type=1400 audit(1785255638.247:1457): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1307.727027][T19396] serio: Serial port ptm0 [ 1307.765530][ T29] audit: type=1400 audit(1785255638.407:1458): avc: denied { create } for pid=19395 comm="syz.4.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 1307.841529][ T29] audit: type=1400 audit(1785255638.407:1459): avc: denied { create } for pid=19395 comm="syz.4.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 1307.909159][ T29] audit: type=1400 audit(1785255638.477:1460): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1307.977962][ T29] audit: type=1400 audit(1785255638.527:1461): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1308.119100][ T29] audit: type=1400 audit(1785255638.757:1462): avc: denied { block_suspend } for pid=19399 comm="syz.4.3790" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1308.260974][ T29] audit: type=1400 audit(1785255638.907:1463): avc: denied { read } for pid=19402 comm="syz.8.3789" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 1308.388947][ T29] audit: type=1400 audit(1785255638.967:1464): avc: denied { read write } for pid=19402 comm="syz.8.3789" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 1308.609231][ T29] audit: type=1400 audit(1785255639.147:1465): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1309.083555][T19411] batman_adv: batadv0: Adding interface: macvtap1 [ 1309.120317][T19411] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1309.249842][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3794'. [ 1309.289183][T19411] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1309.851674][T19420] syzkaller0: entered promiscuous mode [ 1309.884060][T19420] syzkaller0: entered allmulticast mode [ 1310.818873][T19430] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3799'. [ 1311.735809][T19442] syzkaller0: entered promiscuous mode [ 1311.764199][T19442] syzkaller0: entered allmulticast mode [ 1312.434345][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1312.434387][ T29] audit: type=1400 audit(1785255643.077:1510): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1312.548239][ T29] audit: type=1400 audit(1785255643.117:1511): avc: denied { read write } for pid=19450 comm="syz.8.3806" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 1312.591396][ T29] audit: type=1400 audit(1785255643.127:1512): avc: denied { create } for pid=19450 comm="syz.8.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 1312.621120][ T29] audit: type=1400 audit(1785255643.137:1513): avc: denied { read write } for pid=19450 comm="syz.8.3806" name="video6" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 1312.673647][ T29] audit: type=1400 audit(1785255643.317:1514): avc: denied { create } for pid=19453 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1312.734958][ T29] audit: type=1400 audit(1785255643.337:1515): avc: denied { create } for pid=19453 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 1312.817394][ T29] audit: type=1400 audit(1785255643.337:1516): avc: denied { create } for pid=19453 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 1312.861290][ T29] audit: type=1400 audit(1785255643.377:1517): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1312.932612][ T29] audit: type=1400 audit(1785255643.537:1518): avc: denied { execmem } for pid=19455 comm="syz.4.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1313.005531][ T29] audit: type=1400 audit(1785255643.577:1519): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1314.207724][T19472] syzkaller0: entered promiscuous mode [ 1314.237086][T19472] syzkaller0: entered allmulticast mode [ 1316.265802][T19516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1318.307369][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1318.307386][ T29] audit: type=1400 audit(1785255648.947:1589): avc: denied { read write } for pid=16474 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1318.414596][ T29] audit: type=1400 audit(1785255649.037:1590): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1318.527040][ T29] audit: type=1400 audit(1785255649.097:1591): avc: denied { read } for pid=19531 comm="syz.6.3833" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1318.619398][ T29] audit: type=1400 audit(1785255649.157:1592): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1318.694566][ T29] audit: type=1400 audit(1785255649.207:1593): avc: denied { read write } for pid=16474 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1318.768322][T19534] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1318.775725][ T29] audit: type=1400 audit(1785255649.317:1594): avc: denied { execmem } for pid=19535 comm="syz.6.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1318.812986][T19534] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1318.837590][ T29] audit: type=1400 audit(1785255649.387:1595): avc: denied { prog_load } for pid=19535 comm="syz.6.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1318.904545][ T29] audit: type=1400 audit(1785255649.397:1596): avc: denied { execmem } for pid=19537 comm="syz.7.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1318.960838][ T29] audit: type=1400 audit(1785255649.397:1597): avc: denied { create } for pid=19533 comm="syz.4.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1319.024496][ T29] audit: type=1400 audit(1785255649.567:1598): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1319.285342][T19547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3838'. [ 1320.934386][T19568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1323.362835][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1323.362855][ T29] audit: type=1400 audit(1785255654.007:1645): avc: denied { read write } for pid=16474 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1323.615376][ T29] audit: type=1400 audit(1785255654.257:1646): avc: denied { module_request } for pid=19597 comm="syz.6.3850" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 1323.692174][ T29] audit: type=1400 audit(1785255654.257:1647): avc: denied { sys_module } for pid=19597 comm="syz.6.3850" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 1323.779534][ T29] audit: type=1400 audit(1785255654.397:1648): avc: denied { read } for pid=19593 comm="syz.4.3851" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1323.962037][ T29] audit: type=1400 audit(1785255654.407:1649): avc: denied { module_request } for pid=19597 comm="syz.6.3850" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 1324.014830][ T29] audit: type=1400 audit(1785255654.407:1650): avc: denied { sys_module } for pid=19597 comm="syz.6.3850" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 1324.067709][ T29] audit: type=1400 audit(1785255654.527:1651): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1324.142689][ T29] audit: type=1400 audit(1785255654.597:1652): avc: denied { create } for pid=19603 comm="syz.4.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1324.193065][ T29] audit: type=1400 audit(1785255654.597:1653): avc: denied { create } for pid=19603 comm="syz.4.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 1324.241315][ T29] audit: type=1400 audit(1785255654.597:1654): avc: denied { execmem } for pid=19603 comm="syz.4.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1327.280427][T18351] lo speed is unknown, defaulting to 1000 [ 1328.922624][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1328.922641][ T29] audit: type=1400 audit(1785255659.557:1675): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1329.039101][ T29] audit: type=1400 audit(1785255659.667:1676): avc: denied { create } for pid=19629 comm="syz.1.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1329.067967][T19632] syzkaller0: entered promiscuous mode [ 1329.083721][T19632] syzkaller0: entered allmulticast mode [ 1329.121942][ T29] audit: type=1400 audit(1785255659.677:1677): avc: denied { create } for pid=19629 comm="syz.1.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1329.194450][ T29] audit: type=1400 audit(1785255659.677:1678): avc: denied { create } for pid=19629 comm="syz.1.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1329.285213][ T29] audit: type=1400 audit(1785255659.707:1679): avc: denied { module_request } for pid=19629 comm="syz.1.3859" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 1329.339024][ T29] audit: type=1400 audit(1785255659.707:1680): avc: denied { sys_module } for pid=19629 comm="syz.1.3859" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 1329.396038][ T29] audit: type=1400 audit(1785255659.767:1681): avc: denied { create } for pid=19631 comm="syz.8.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1329.480497][ T29] audit: type=1400 audit(1785255659.917:1682): avc: denied { create } for pid=19633 comm="syz.1.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1329.557171][ T29] audit: type=1400 audit(1785255659.927:1683): avc: denied { create } for pid=19633 comm="syz.1.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1329.628582][ T29] audit: type=1400 audit(1785255660.097:1684): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1329.692381][T19642] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3863'. [ 1329.852563][T19645] syzkaller0: entered promiscuous mode [ 1329.866711][T19645] syzkaller0: entered allmulticast mode [ 1330.280528][T19649] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1333.969263][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 1333.969292][ T29] audit: type=1400 audit(1785255664.607:1752): avc: denied { mounton } for pid=19694 comm="syz.1.3883" path="/786/file1" dev="tmpfs" ino=4602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1334.055148][ T29] audit: type=1400 audit(1785255664.697:1753): avc: denied { create } for pid=19693 comm="syz.6.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1334.112724][ T29] audit: type=1400 audit(1785255664.717:1754): avc: denied { create } for pid=19693 comm="syz.6.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1334.338628][ T29] audit: type=1400 audit(1785255664.977:1755): avc: denied { execmem } for pid=19697 comm="syz.1.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1334.465947][ T29] audit: type=1400 audit(1785255665.107:1756): avc: denied { read write } for pid=16474 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1334.717968][T19701] netlink: 'syz.6.3885': attribute type 1 has an invalid length. [ 1334.823390][ T29] audit: type=1400 audit(1785255665.467:1757): avc: denied { create } for pid=19700 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1334.882899][T19701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1335.023567][T19703] macvlan2: entered promiscuous mode [ 1335.039698][ T29] audit: type=1400 audit(1785255665.677:1758): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1335.099854][T19703] macvlan2: entered allmulticast mode [ 1335.119842][ T29] audit: type=1400 audit(1785255665.757:1759): avc: denied { execmem } for pid=19705 comm="syz.8.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1335.212866][ T29] audit: type=1400 audit(1785255665.787:1760): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1335.238838][T19704] bond2: (slave ip6gretap1): making interface the new active one [ 1335.271098][T19704] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1335.329919][ T29] audit: type=1400 audit(1785255665.847:1761): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1335.767041][T19720] netlink: 'syz.4.3893': attribute type 13 has an invalid length. [ 1336.263868][T19722] syzkaller0: entered promiscuous mode [ 1336.288738][T19722] syzkaller0: entered allmulticast mode [ 1337.057306][T19733] syz.7.3897 (19733): drop_caches: 2 [ 1339.512412][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1339.512430][ T29] audit: type=1400 audit(1785255670.147:1818): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1339.637858][ T29] audit: type=1400 audit(1785255670.277:1819): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1339.706500][ T29] audit: type=1400 audit(1785255670.337:1820): avc: denied { allowed } for pid=19763 comm="syz.7.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 1339.739300][ T29] audit: type=1400 audit(1785255670.337:1821): avc: denied { prog_load } for pid=19763 comm="syz.7.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1339.835304][ T29] audit: type=1400 audit(1785255670.337:1822): avc: denied { create } for pid=19763 comm="syz.7.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 1339.872590][ T29] audit: type=1400 audit(1785255670.337:1823): avc: denied { create } for pid=19763 comm="syz.7.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 1339.921722][ T29] audit: type=1400 audit(1785255670.337:1824): avc: denied { map_create } for pid=19763 comm="syz.7.3906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1339.954713][ T29] audit: type=1400 audit(1785255670.347:1825): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1340.022119][ T29] audit: type=1400 audit(1785255670.407:1826): avc: denied { create } for pid=19764 comm="syz.1.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 1340.057070][ T29] audit: type=1400 audit(1785255670.407:1827): avc: denied { create } for pid=19764 comm="syz.1.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 1342.067691][T19740] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1342.077717][T19740] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1342.328886][T19801] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 1342.367659][T19801] batman_adv: batadv0: Interface activated: macvtap1 [ 1342.407302][T19801] bond2: entered allmulticast mode [ 1342.424654][T19801] ip6gretap1: entered allmulticast mode [ 1342.444641][T19801] ip6gretap1: entered promiscuous mode [ 1342.469417][T19801] bond2: entered promiscuous mode [ 1342.488494][T19801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1342.517144][T19806] : renamed from bond_slave_0 [ 1344.794467][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1344.794483][ T29] audit: type=1400 audit(1785255675.437:1906): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1344.937753][ T29] audit: type=1400 audit(1785255675.577:1907): avc: denied { write } for pid=19839 comm="syz.8.3931" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 1344.940186][T19841] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1344.941363][ T29] audit: type=1400 audit(1785255675.587:1908): avc: denied { create } for pid=19839 comm="syz.8.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 1345.185742][ T29] audit: type=1400 audit(1785255675.827:1909): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1345.300752][ T29] audit: type=1400 audit(1785255675.897:1910): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1345.413385][ T29] audit: type=1400 audit(1785255676.057:1911): avc: denied { read append } for pid=19844 comm="syz.4.3933" name="v4l-subdev7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1345.573283][ T29] audit: type=1400 audit(1785255676.217:1912): avc: denied { execmem } for pid=19846 comm="syz.7.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1345.763418][ T29] audit: type=1400 audit(1785255676.407:1913): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1345.855041][ T29] audit: type=1400 audit(1785255676.487:1914): avc: denied { read } for pid=19852 comm="syz.8.3936" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1345.932814][ T29] audit: type=1400 audit(1785255676.547:1915): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1346.000438][T19855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1346.007667][T19855] IPv6: NLM_F_CREATE should be set when creating new route [ 1346.198309][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.206655][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.399273][T19855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.444686][T19855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.925323][T19863] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1346.963345][T14076] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.986632][T14076] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.031343][T14076] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.072547][T14076] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.847641][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 1349.847671][ T29] audit: type=1400 audit(1785255680.487:1981): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1350.073897][ T29] audit: type=1400 audit(1785255680.717:1982): avc: denied { execmem } for pid=19907 comm="syz.8.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1350.426269][ T29] audit: type=1400 audit(1785255681.007:1983): avc: denied { read } for pid=19907 comm="syz.8.3955" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1350.940833][ T29] audit: type=1400 audit(1785255681.587:1984): avc: denied { read write } for pid=17269 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1351.192233][ T29] audit: type=1400 audit(1785255681.827:1985): avc: denied { create } for pid=19913 comm="syz.8.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1351.278425][ T29] audit: type=1400 audit(1785255681.887:1986): avc: denied { execmem } for pid=19913 comm="syz.8.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1351.440070][ T29] audit: type=1400 audit(1785255682.077:1987): avc: denied { read write } for pid=16578 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1351.668961][ T29] audit: type=1400 audit(1785255682.307:1988): avc: denied { execmem } for pid=19916 comm="syz.1.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1351.749193][ T29] audit: type=1400 audit(1785255682.317:1989): avc: denied { execmem } for pid=19916 comm="syz.1.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1351.877509][ T29] audit: type=1400 audit(1785255682.517:1990): avc: denied { bpf } for pid=19918 comm="syz.7.3957" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1457.847221][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1457.854228][ C0] rcu: 1-...!: (2 ticks this GP) idle=bb94/0/0x1 softirq=101220/101225 fqs=6 [ 1457.864559][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19910/1:b..l [ 1457.872565][ C0] rcu: (detected by 0, t=10502 jiffies, g=129921, q=147 ncpus=2) [ 1457.880365][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1457.880390][ C1] NMI backtrace for cpu 1 [ 1457.880404][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.880423][ C1] Tainted: [L]=SOFTLOCKUP [ 1457.880428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1457.880435][ C1] RIP: 0010:check_preemption_disabled+0x23/0xe0 [ 1457.880460][ C1] Code: 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d d5 15 a9 08 65 f7 05 c6 15 a9 08 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b <5d> 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea 65 4c 8b 25 8e 15 a9 [ 1457.880472][ C1] RSP: 0018:ffffc90000a08cf0 EFLAGS: 00000086 [ 1457.880484][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 1457.880492][ C1] RDX: 0000000000000000 RSI: ffffffff8c401500 RDI: ffffffff8c401540 [ 1457.880500][ C1] RBP: ffffffff9b933ea8 R08: 0000000000000001 R09: 0000000000000000 [ 1457.880509][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1457.880517][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1457.880525][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1457.880539][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1457.880548][ C1] CR2: 00007fe509955690 CR3: 000000007d640000 CR4: 00000000003526f0 [ 1457.880557][ C1] Call Trace: [ 1457.880563][ C1] [ 1457.880570][ C1] rcu_is_watching+0x12/0xc0 [ 1457.880592][ C1] lock_acquire+0x301/0x370 [ 1457.880608][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1457.880628][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1457.880648][ C1] ? debug_object_deactivate+0x135/0x3b0 [ 1457.880667][ C1] debug_object_deactivate+0x135/0x3b0 [ 1457.880684][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1457.880703][ C1] ? timerqueue_linked_add+0x260/0x430 [ 1457.880723][ C1] __hrtimer_run_queues+0x2e9/0x9c0 [ 1457.880747][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1457.880764][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1457.880786][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1457.880800][ C1] [ 1457.880805][ C1] [ 1457.880810][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1457.880826][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1457.880840][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1457.880852][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 1457.880862][ C1] RAX: 000000000848a84f RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 1457.880872][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1457.880880][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 1457.880889][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 1457.880898][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1457.880909][ C1] ? ct_kernel_exit+0x125/0x180 [ 1457.880925][ C1] default_idle+0x9/0x10 [ 1457.880940][ C1] default_idle_call+0x6c/0xb0 [ 1457.880956][ C1] do_idle+0x3a7/0x5b0 [ 1457.880974][ C1] ? __pfx_do_idle+0x10/0x10 [ 1457.880995][ C1] cpu_startup_entry+0x4f/0x60 [ 1457.881013][ C1] start_secondary+0x21d/0x2d0 [ 1457.881029][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1457.881048][ C1] common_startup_64+0x13e/0x158 [ 1457.881072][ C1] [ 1457.881384][ C0] task:syz.8.3955 state:R running task stack:23464 pid:19910 tgid:19910 ppid:17269 task_flags:0x400640 flags:0x00080000 [ 1458.221394][ C0] Call Trace: [ 1458.224664][ C0] [ 1458.227587][ C0] __schedule+0x125c/0x6730 [ 1458.232088][ C0] ? lock_acquire+0x1b9/0x370 [ 1458.236773][ C0] ? __pfx___schedule+0x10/0x10 [ 1458.241614][ C0] ? mark_held_locks+0x40/0x70 [ 1458.246375][ C0] preempt_schedule_irq+0x50/0x90 [ 1458.251389][ C0] irqentry_exit+0x205/0xa00 [ 1458.255974][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1458.261943][ C0] RIP: 0010:lock_is_held_type+0x17/0x140 [ 1458.267569][ C0] Code: 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 0d ba 9a 67 05 b8 ff ff ff ff 85 c9 0f 84 ed 00 00 00 <65> 8b 15 d2 75 a9 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 [ 1458.287168][ C0] RSP: 0018:ffffc900038e6d28 EFLAGS: 00000202 [ 1458.293224][ C0] RAX: 00000000ffffffff RBX: ffff888075d9761e RCX: 0000000000000001 [ 1458.301184][ C0] RDX: ffff88807d4aca80 RSI: 00000000ffffffff RDI: ffff88802d2d36b8 [ 1458.309142][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000300 [ 1458.317100][ C0] R10: 0000000000000300 R11: 0000000000000000 R12: ffffc900038e6e68 [ 1458.325058][ C0] R13: ffffc900038e6d70 R14: ffff88802d2d36b8 R15: 0000000000000300 [ 1458.333029][ C0] mt_find+0x2f3/0x8e0 [ 1458.337097][ C0] ? __pfx_mt_find+0x10/0x10 [ 1458.341696][ C0] find_vma+0xbf/0x140 [ 1458.345758][ C0] ? __pfx_find_vma+0x10/0x10 [ 1458.350430][ C0] ? generic_perform_write+0x722/0xa40 [ 1458.356325][ C0] gup_vma_lookup+0x20/0x170 [ 1458.360911][ C0] __get_user_pages+0x241/0x32a0 [ 1458.365857][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1458.371238][ C0] get_dump_page+0x27e/0x3d0 [ 1458.375824][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 1458.380954][ C0] ? dump_user_range+0x65e/0xad0 [ 1458.385895][ C0] dump_user_range+0x18d/0xad0 [ 1458.390657][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1458.395945][ C0] ? __pfx_writenote+0x10/0x10 [ 1458.400705][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 1458.405645][ C0] elf_core_dump+0x2d68/0x3d20 [ 1458.410419][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1458.415525][ C0] ? kasan_save_stack+0x3f/0x50 [ 1458.420366][ C0] ? kasan_save_stack+0x30/0x50 [ 1458.425204][ C0] ? kasan_save_track+0x14/0x30 [ 1458.430045][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1458.434801][ C0] ? vfs_coredump+0x22a6/0x56f0 [ 1458.439645][ C0] ? get_signal+0x1f2a/0x21e0 [ 1458.444315][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1458.450032][ C0] ? 0xffffffffff600000 [ 1458.454219][ C0] ? vfs_coredump+0x294b/0x56f0 [ 1458.459064][ C0] vfs_coredump+0x294b/0x56f0 [ 1458.463744][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1458.468767][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1458.473724][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 1458.478491][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1458.484115][ C0] ? arch_stack_walk+0xa6/0xf0 [ 1458.488886][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 1458.493733][ C0] ? stack_trace_save+0x8e/0xc0 [ 1458.498576][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1458.503942][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 1458.509445][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 1458.515094][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1458.521088][ C0] ? rcu_is_watching+0x12/0xc0 [ 1458.525854][ C0] get_signal+0x1f2a/0x21e0 [ 1458.530371][ C0] ? __pfx_get_signal+0x10/0x10 [ 1458.535223][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1458.540764][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1458.546925][ C0] irqentry_exit+0x402/0xa00 [ 1458.551512][ C0] asm_exc_page_fault+0x26/0x30 [ 1458.556351][ C0] RIP: 0033:0x7fdc8699dea1 [ 1458.560751][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1458.566804][ C0] RAX: 0000000000000000 RBX: 00007fdc86c25fa0 RCX: 00007fdc8699de99 [ 1458.574760][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1458.582721][ C0] RBP: 00007fdc86a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1458.590696][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1458.598655][ C0] R13: 00007fdc86c26038 R14: 00007fdc86c25fa0 R15: 00007ffe2723c7e8 [ 1458.606627][ C0] [ 1458.609632][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g129921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1458.620956][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1458.630957][ C0] rcu: RCU grace-period kthread stack dump: [ 1458.636839][ C0] task:rcu_preempt state:R running task stack:27400 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1458.650323][ C0] Call Trace: [ 1458.653591][ C0] [ 1458.656514][ C0] __schedule+0x125c/0x6730 [ 1458.661031][ C0] ? __pfx___schedule+0x10/0x10 [ 1458.665868][ C0] ? find_held_lock+0x2b/0x80 [ 1458.670543][ C0] ? schedule+0x225/0x2c0 [ 1458.674868][ C0] schedule+0xdd/0x2c0 [ 1458.678929][ C0] schedule_timeout+0x127/0x280 [ 1458.683776][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1458.689144][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1458.694426][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1458.700224][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1458.705677][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1458.710433][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1458.715713][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1458.720649][ C0] ? rcu_is_watching+0x12/0xc0 [ 1458.725407][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1458.731202][ C0] rcu_gp_kthread+0x179/0x230 [ 1458.736044][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1458.741230][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1458.747026][ C0] ? __kthread_parkme+0x18c/0x230 [ 1458.752054][ C0] ? kthread+0x13a/0x450 [ 1458.756298][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1458.761493][ C0] kthread+0x370/0x450 [ 1458.765560][ C0] ? __pfx_kthread+0x10/0x10 [ 1458.770154][ C0] ret_from_fork+0x72b/0xd50 [ 1458.774749][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1458.779862][ C0] ? __switch_to+0x800/0x10f0 [ 1458.784530][ C0] ? __pfx_kthread+0x10/0x10 [ 1458.789116][ C0] ret_from_fork_asm+0x1a/0x30 [ 1458.793888][ C0] [ 1458.796894][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1458.803217][ C0] CPU: 0 UID: 0 PID: 14076 Comm: kworker/u8:28 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.814412][ C0] Tainted: [L]=SOFTLOCKUP [ 1458.818723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1458.828766][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1458.835267][ C0] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 1458.841934][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 1458.861527][ C0] RSP: 0018:ffffc900063d7858 EFLAGS: 00000293 [ 1458.867581][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fdc702 [ 1458.875541][ C0] RDX: ffff8880615dca80 RSI: ffffffff81fdc6dc RDI: ffff8880615dca80 [ 1458.883498][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1458.891454][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1458.899411][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1458.907369][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1458.916288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1458.922860][ C0] CR2: 0000200000039030 CR3: 000000000e994000 CR4: 00000000003526f0 [ 1458.930820][ C0] Call Trace: [ 1458.934084][ C0] [ 1458.937008][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1458.942038][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1458.948355][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1458.953728][ C0] ? __pfx___text_poke+0x10/0x10 [ 1458.958656][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1458.963678][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1458.968785][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1458.974670][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1458.980383][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1458.986267][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1458.992499][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1458.998733][ C0] ? find_held_lock+0x2b/0x80 [ 1459.003413][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1459.009385][ C0] jump_label_update+0x37a/0x550 [ 1459.014314][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1459.020285][ C0] static_key_enable+0x1a/0x20 [ 1459.025039][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 1459.030316][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1459.036203][ C0] ? rcu_is_watching+0x12/0xc0 [ 1459.040965][ C0] process_one_work+0xa23/0x1940 [ 1459.045909][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1459.051277][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1459.057161][ C0] worker_thread+0x5ef/0xe50 [ 1459.061749][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1459.066855][ C0] ? kthread+0x13a/0x450 [ 1459.071091][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1459.076188][ C0] kthread+0x370/0x450 [ 1459.080244][ C0] ? __pfx_kthread+0x10/0x10 [ 1459.084822][ C0] ret_from_fork+0x72b/0xd50 [ 1459.089409][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1459.094515][ C0] ? __switch_to+0x800/0x10f0 [ 1459.099179][ C0] ? __pfx_kthread+0x10/0x10 [ 1459.103760][ C0] ret_from_fork_asm+0x1a/0x30 [ 1459.108533][ C0]