last executing test programs: 30m16.352135156s ago: executing program 3 (id=75): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a7, 0x4) vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 30m11.315523248s ago: executing program 3 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0', 0x5) 30m8.082423909s ago: executing program 3 (id=84): syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) 30m6.155548073s ago: executing program 32 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a7, 0x4) vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 30m6.096846534s ago: executing program 3 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) 30m5.811552026s ago: executing program 4 (id=88): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 30m5.411479055s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003200)=[{&(0x7f0000001800)={0x0, 0x0, 0x1}, 0x0, 0x1}], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800c00018008000300e8030000", 0x54}], 0x1}, 0x0) 30m2.325195708s ago: executing program 3 (id=90): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 30m1.958068157s ago: executing program 4 (id=91): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x2000) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x24181, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x4a8800, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xa, 0x8, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) setregid(0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)={0x10, 0x1b, 0x20, 0x70bd2d, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000001100)=[@cred={{0x1c}}], 0x20, 0x800}, 0x8080) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 30m0.420437263s ago: executing program 1 (id=92): syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) 29m50.874066572s ago: executing program 33 (id=82): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 29m50.588107329s ago: executing program 1 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 29m49.0879677s ago: executing program 4 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0', 0x5) 29m44.617234308s ago: executing program 34 (id=90): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 29m40.619743443s ago: executing program 1 (id=97): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="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", 0xfc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0xc004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(r2, &(0x7f0000001140), 0x0, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000005ac0)=""/114) 29m38.615429325s ago: executing program 4 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) 29m30.634197344s ago: executing program 1 (id=99): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000003200)=[{&(0x7f0000001800)={0x0, 0x0, 0x1}, 0x0, 0x1}], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800c00018008000300e8030000", 0x54}], 0x1}, 0x0) 29m28.280704167s ago: executing program 4 (id=100): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 29m20.461371093s ago: executing program 1 (id=101): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 29m14.261344449s ago: executing program 4 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 29m8.690421389s ago: executing program 1 (id=103): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) write(r0, &(0x7f0000000300)='r:test/event1 ./file0:0x0 +', 0x1b) 28m54.813305265s ago: executing program 35 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 28m50.636486482s ago: executing program 36 (id=103): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) write(r0, &(0x7f0000000300)='r:test/event1 ./file0:0x0 +', 0x1b) 13m41.239340567s ago: executing program 9 (id=1471): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r6}}, 0x48) 13m37.442249782s ago: executing program 9 (id=1477): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x128, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 13m37.267593602s ago: executing program 9 (id=1478): socket$kcm(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000065a000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 13m35.976394819s ago: executing program 9 (id=1481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 13m33.562955365s ago: executing program 9 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000240)) 13m27.914965223s ago: executing program 9 (id=1496): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) 13m12.517798524s ago: executing program 37 (id=1496): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) 6m24.383009943s ago: executing program 8 (id=2220): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r3 = timerfd_create(0x1, 0x0) timerfd_gettime(r3, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100f0ff00080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, 0x0, 0x4004080) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6m22.219319738s ago: executing program 8 (id=2226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, 0x0, 0x48804) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r2, 0x0, 0x3}, 0x50) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) listen(r1, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) 6m18.674885375s ago: executing program 8 (id=2229): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6m16.207111875s ago: executing program 8 (id=2237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, 0x0, 0x0, 0x720, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 6m14.092064446s ago: executing program 8 (id=2239): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m12.353975797s ago: executing program 8 (id=2252): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 5m57.260660601s ago: executing program 38 (id=2252): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) 35.765575486s ago: executing program 6 (id=2985): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 35.504919769s ago: executing program 6 (id=2988): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000100)=""/223, 0xdf}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000b80)=""/208, 0xd0}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f00000005c0)=""/86, 0x56}], 0xa, 0x40, 0x800116d) 35.216367381s ago: executing program 6 (id=2989): fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0000800ffffffffffff080211000008ffffffffffff0000040400030ef9760604732d0004000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xb472}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000280)={{0x8, 0x5, 0x4, 0x0, 'syz1\x00', 0x3ff}, 0x1, 0x100, 0x40, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0}) setns(0xc9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000240)={0xbe, 0x0, 0x1}) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x80002, 0x0) ioctl$SNDCTL_TMR_START(r10, 0x5402) 31.343350435s ago: executing program 6 (id=3004): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 30.585773142s ago: executing program 6 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00172233f60ad0b992422bc1ccddeeff13596dbe"}}]}]}, 0x58}}, 0x0) 30.256671796s ago: executing program 6 (id=3008): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000480)=0x4000000) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xfff8, 0x1, 0x6, 0xffffffff}, {0x4, 0x6, 0xfa, 0x8001}, {0x1000, 0x8a, 0xbf, 0x4}]}) read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd) 14.618398674s ago: executing program 39 (id=3008): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000480)=0x4000000) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xfff8, 0x1, 0x6, 0xffffffff}, {0x4, 0x6, 0xfa, 0x8001}, {0x1000, 0x8a, 0xbf, 0x4}]}) read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd) 11.694308089s ago: executing program 7 (id=3048): openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 10.899314581s ago: executing program 0 (id=3049): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) 9.234194383s ago: executing program 2 (id=3052): openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 9.186773736s ago: executing program 0 (id=3053): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000005c0)=""/231, 0xe7) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) setns(0xc9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 9.058988673s ago: executing program 7 (id=3054): epoll_create1(0x0) eventfd2(0x20, 0x80800) syz_open_dev$loop(0x0, 0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xa, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000100)=0x3) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @local, 0x4e22, 0x800002, 'nq\x00', 0x0, 0x3, 0x63}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000, 0x9}) 7.339752074s ago: executing program 0 (id=3055): openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 6.859356572s ago: executing program 2 (id=3056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 6.264153322s ago: executing program 2 (id=3057): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 5.992980961s ago: executing program 0 (id=3058): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x2002) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0xf) ioctl(r1, 0x400455c8, &(0x7f0000000008)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b40000000000000000000000000000000014e000000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSCTTY(r7, 0x540e, 0x8) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r8, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f00000001c0)={0x30000009}) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x2}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 5.869953406s ago: executing program 5 (id=3059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000003440)={0xa, 0x4e20, 0x1, @empty, 0x7fffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x2c}}, 0x0) 5.445879304s ago: executing program 0 (id=3060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 5.260640563s ago: executing program 5 (id=3061): openat$nullb(0xffffffffffffff9c, 0x0, 0x8102, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4.382902699s ago: executing program 0 (id=3062): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) 4.063352223s ago: executing program 5 (id=3063): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40) 3.999417924s ago: executing program 2 (id=3064): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0d08004508001c006800000009000000010300ac1414aa0d009078fffe0009"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r7, 0x3}, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000300)=0x4) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r9, 0x8010500c, &(0x7f0000000040)) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aab4d9aaaaaab7aaaaaaaaaa08004500001cffff000000029078ac1e0001ac1e010117009078ffffffffd74094af9b2f62aa0cb2ecbd61ae1ab42fc2ff7ae45f80308d4c4be7422720859a58bf286c84af343ad38af68889b6a9eacef11247b3eeb77f9a504f5eafa5e30fadfbaf22011a11e470392879e9"], 0x0) 3.241886816s ago: executing program 5 (id=3065): openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.910623184s ago: executing program 2 (id=3066): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000005c0)=""/231, 0xe7) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) setns(0xc9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 1.936210415s ago: executing program 7 (id=3067): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.465372631s ago: executing program 5 (id=3068): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.336722346s ago: executing program 2 (id=3069): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES32=r3]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000240)=0x1df, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x24058014, &(0x7f0000000500)={0x11, 0x15, r7, 0x1, 0x2}, 0x14) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 1.216194306s ago: executing program 7 (id=3070): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1.017862224s ago: executing program 7 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 237.427336ms ago: executing program 7 (id=3072): openat$nullb(0xffffffffffffff9c, 0x0, 0x8102, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 0s ago: executing program 5 (id=3073): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): rmissive=1 [ 1786.635978][ T31] audit: type=1400 audit(1789228073.656:636): avc: denied { open } for pid=17445 comm="syz.2.2704" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1786.988410][ T31] audit: type=1400 audit(1789228074.016:637): avc: denied { create } for pid=17451 comm="syz.7.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1787.075058][ T31] audit: type=1400 audit(1789228074.086:638): avc: denied { accept } for pid=17451 comm="syz.7.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1788.410261][ T31] audit: type=1400 audit(1789228075.436:639): avc: denied { create } for pid=17464 comm="syz.7.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1788.537375][ T31] audit: type=1400 audit(1789228075.556:640): avc: denied { connect } for pid=17464 comm="syz.7.2709" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1788.591886][ T31] audit: type=1400 audit(1789228075.616:641): avc: denied { write } for pid=17464 comm="syz.7.2709" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1791.024851][T17474] openvswitch: netlink: Duplicate key (type 0). [ 1791.054665][ T31] audit: type=1400 audit(1789228078.076:642): avc: denied { getopt } for pid=17476 comm="syz.5.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1791.055106][ T31] audit: type=1400 audit(1789228078.076:643): avc: denied { connect } for pid=17476 comm="syz.5.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1791.933760][ T31] audit: type=1400 audit(1789228078.956:644): avc: denied { bind } for pid=17476 comm="syz.5.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1791.961965][ T31] audit: type=1400 audit(1789228078.986:645): avc: denied { listen } for pid=17476 comm="syz.5.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1791.962576][ T31] audit: type=1400 audit(1789228078.986:646): avc: denied { read } for pid=17476 comm="syz.5.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1792.134342][ T31] audit: type=1400 audit(1789228079.156:647): avc: denied { write } for pid=17476 comm="syz.5.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1793.011465][ T31] audit: type=1400 audit(1789228080.036:648): avc: denied { setopt } for pid=17493 comm="syz.2.2715" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1793.341532][T17500] usb usb9: usbfs: process 17500 (syz.7.2717) did not claim interface 15 before use [ 1793.453837][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1793.453855][ T31] audit: type=1400 audit(1789228080.476:650): avc: denied { mounton } for pid=17499 comm="syz.7.2717" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1793.721793][T17509] tmpfs: Bad value for 'mpol' [ 1793.755649][T17509] netlink: 'syz.5.2716': attribute type 29 has an invalid length. [ 1794.155747][T17511] tipc: Resetting bearer [ 1794.506742][T17509] nvme_tcp: malformed address passed: .27.0.0.1:4420 Hü[ 1794.978968][ T9393] Bluetooth: hci1: setting up ROME/QCA6390 [ 1795.124641][ T31] audit: type=1400 audit(1789228082.146:651): avc: denied { shutdown } for pid=17514 comm="syz.0.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1795.166532][ T31] audit: type=1400 audit(1789228082.186:652): avc: denied { ioctl } for pid=17514 comm="syz.0.2719" path="socket:[89316]" dev="sockfs" ino=89316 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 ü[ 1795.761118][T17523] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 1795.944496][T17523] bond2: entered promiscuous mode [ 1795.944711][T17523] 8021q: adding VLAN 0 to HW filter on device bond2 Hü[ 1797.347975][T14409] Bluetooth: hci1: command 0xfc00 tx timeout [ 1797.350036][ T9393] Bluetooth: hci1: Reading QCA version information failed (-110) [ 1797.350069][ T9393] Bluetooth: hci1: Retry BT power ON:0 [ 1797.495464][ T31] audit: type=1400 audit(1789228084.516:653): avc: denied { map } for pid=17541 comm="syz.0.2725" path="/244/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1797.648547][T17556] FAULT_INJECTION: forcing a failure. [ 1797.648547][T17556] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.648579][T17556] CPU: 1 UID: 0 PID: 17556 Comm: syz.5.2728 Tainted: G L syzkaller #0 PREEMPT(full) ü[ 1797.648604][T17556] Tainted: [L]=SOFTLOCKUP [ 1797.648611][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1797.648622][T17556] Call Trace: [ 1797.648629][T17556] [ 1797.648637][T17556] dump_stack_lvl+0x100/0x190 [ 1797.648669][T17556] should_fail_ex.cold+0x5/0xa [ 1797.648697][T17556] should_failslab+0xc2/0x120 [ 1797.648720][T17556] __kmalloc_noprof+0xfc/0x840 [ 1797.648741][T17556] ? tomoyo_encode2+0xfb/0x3c0 [ 1797.648767][T17556] tomoyo_encode2+0xfb/0x3c0 [ 1797.648792][T17556] tomoyo_encode+0x29/0x50 [ 1797.648813][T17556] tomoyo_realpath_from_path+0x18c/0x690 [ 1797.648840][T17556] tomoyo_path_number_perm+0x23c/0x580 [ 1797.648875][T17556] ? tomoyo_path_number_perm+0x22e/0x580 [ 1797.648906][T17556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1797.648945][T17556] ? __lock_acquire+0x5c0/0x1f40 [ 1797.648976][T17556] ? __fget_files+0x34/0x3d0 [ 1797.648999][T17556] ? find_held_lock+0x2b/0x80 [ 1797.649024][T17556] ? hook_file_ioctl_common+0x140/0x440 [ 1797.649053][T17556] ? __fget_files+0x21f/0x3d0 [ 1797.649079][T17556] security_file_ioctl+0xd3/0x230 [ 1797.649100][T17556] __x64_sys_ioctl+0xb7/0x210 [ 1797.649120][T17556] do_syscall_64+0x123/0x790 [ 1797.649148][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.649165][T17556] RIP: 0033:0x7fcb1399e159 [ 1797.649181][T17556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.649197][T17556] RSP: 002b:00007fcb1483b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.649216][T17556] RAX: ffffffffffffffda RBX: 00007fcb13c25fa0 RCX: 00007fcb1399e159 [ 1797.649228][T17556] RDX: 0000200000000080 RSI: 00000000c00c642d RDI: 0000000000000003 [ 1797.649239][T17556] RBP: 00007fcb1483b090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.649250][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.649261][T17556] R13: 00007fcb13c26038 R14: 00007fcb13c25fa0 R15: 00007ffed2e8bdc8 [ 1797.649286][T17556] [ 1797.649303][T17556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1797.914130][T16009] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1798.077693][T16009] usb 1-1: device descriptor read/64, error -71 [ 1798.653384][T16009] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1798.827912][T16009] usb 1-1: device descriptor read/64, error -71 [ 1798.947956][T16009] usb usb1-port1: attempt power cycle [ 1799.004909][ T31] audit: type=1400 audit(1789228086.026:654): avc: denied { shutdown } for pid=17566 comm="syz.2.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1799.177225][ T31] audit: type=1400 audit(1789228086.196:655): avc: denied { setopt } for pid=17566 comm="syz.2.2733" lport=51916 faddr=::ffff:172.30.0.3 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1799.307913][T16009] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1799.329457][T16009] usb 1-1: device descriptor read/8, error -71 [ 1799.627231][T16009] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1799.706351][T16009] usb 1-1: device descriptor read/8, error -71 [ 1799.745779][T17535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1799.797190][T14409] Bluetooth: hci1: command 0xfc00 tx timeout [ 1799.798484][ T9393] Bluetooth: hci1: Reading QCA version information failed (-110) [ 1799.798535][ T9393] Bluetooth: hci1: Retry BT power ON:1 [ 1799.833996][T16009] usb usb1-port1: unable to enumerate USB device Hüü[ 1800.501678][T17579] netlink: 'syz.6.2737': attribute type 1 has an invalid length. [ 1801.069131][ T31] audit: type=1400 audit(1789228088.096:656): avc: denied { bind } for pid=17580 comm="syz.2.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1801.229373][T17579] bond1: entered promiscuous mode [ 1801.234062][ T31] audit: type=1400 audit(1789228088.256:657): avc: denied { getopt } for pid=17580 comm="syz.2.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1801.234578][T17579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1801.938389][T17603] FAULT_INJECTION: forcing a failure. [ 1801.938389][T17603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.938444][T17603] CPU: 0 UID: 0 PID: 17603 Comm: syz.0.2742 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.938469][T17603] Tainted: [L]=SOFTLOCKUP [ 1801.938475][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1801.938485][T17603] Call Trace: [ 1801.938492][T17603] [ 1801.938498][T17603] dump_stack_lvl+0x100/0x190 [ 1801.938521][T17603] should_fail_ex.cold+0x5/0xa [ 1801.938538][T17603] _copy_from_user+0x2e/0xd0 [ 1801.938550][T17603] move_addr_to_kernel+0x65/0x170 [ 1801.938570][T17603] copy_msghdr_from_user+0x3f0/0x4c0 [ 1801.938587][T17603] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1801.938604][T17603] ? _kstrtoull+0x103/0x200 [ 1801.938619][T17603] ? _kstrtoull+0x144/0x200 [ 1801.938632][T17603] ? __pfx__kstrtoull+0x10/0x10 [ 1801.938645][T17603] ? irqentry_exit+0x24d/0xa10 [ 1801.938660][T17603] ? lockdep_hardirqs_on+0x7d/0x110 [ 1801.938676][T17603] ___sys_sendmsg+0x106/0x1e0 [ 1801.938694][T17603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1801.938716][T17603] ? __fget_files+0x34/0x3d0 [ 1801.938740][T17603] __sys_sendmmsg+0x20c/0x440 [ 1801.938755][T17603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1801.938767][T17603] ? ksys_write+0x190/0x250 [ 1801.938791][T17603] ? fput+0x7c/0x100 [ 1801.938805][T17603] ? ksys_write+0x1ac/0x250 [ 1801.938818][T17603] ? __pfx_ksys_write+0x10/0x10 [ 1801.938832][T17603] __x64_sys_sendmmsg+0x9c/0x100 [ 1801.938845][T17603] ? lockdep_hardirqs_on+0x7d/0x110 [ 1801.938859][T17603] do_syscall_64+0x123/0x790 [ 1801.938875][T17603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.938887][T17603] RIP: 0033:0x7f6ad859e159 [ 1801.938897][T17603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 Hü[ 1801.938908][T17603] RSP: 002b:00007f6ad9428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1801.938920][T17603] RAX: ffffffffffffffda RBX: 00007f6ad8826180 RCX: 00007f6ad859e159 [ 1801.938928][T17603] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1801.938935][T17603] RBP: 00007f6ad9428090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.938941][T17603] R10: 0000000020004004 R11: 0000000000000246 R12: 0000000000000001 [ 1801.938948][T17603] R13: 00007f6ad8826218 R14: 00007f6ad8826180 R15: 00007fff908bb498 [ 1801.938963][T17603] [ 1802.229800][T14409] Bluetooth: hci1: command 0xfc00 tx timeout [ 1802.229939][ T9393] Bluetooth: hci1: Reading QCA version information failed (-110) [ 1802.229984][ T9393] Bluetooth: hci1: Retry BT power ON:2 [ 1802.254163][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1802.254185][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2741'. [ 1802.254279][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2741'. ü[ 1803.288642][T17612] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1803.610625][ T31] audit: type=1400 audit(1789228090.636:658): avc: denied { open } for pid=17616 comm="syz.2.2749" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1803.731662][ T31] audit: type=1400 audit(1789228090.756:659): avc: denied { ioctl } for pid=17616 comm="syz.2.2749" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1803.807988][T17622] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 1803.828396][ T31] audit: type=1326 audit(1789228090.856:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.2.2749" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8642b9e159 code=0x0 [ 1804.480274][T17622] bond3: entered promiscuous mode [ 1804.480665][T17622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1804.628432][T14409] Bluetooth: hci1: command 0xfc00 tx timeout [ 1804.628491][ T9393] Bluetooth: hci1: Reading QCA version information failed (-110) [ 1805.457298][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1805.590658][ T25] usb 3-1: device descriptor read/64, error -71 [ 1806.357006][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1806.414588][T17651] ======================================================= [ 1806.414588][T17651] WARNING: The mand mount option has been deprecated and [ 1806.414588][T17651] and is ignored by this kernel. Remove the mand [ 1806.414588][T17651] option from the mount to silence this warning. [ 1806.414588][T17651] ======================================================= [ 1806.414621][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.414768][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.414888][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.415001][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.415107][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.415229][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.454674][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.454826][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.515915][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.516131][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.516347][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.516542][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.516731][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.526819][ T25] usb 3-1: device descriptor read/64, error -71 [ 1806.567059][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.597184][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.597503][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.597710][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.597926][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.598131][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.598341][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.598677][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.621001][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.621214][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.621403][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.621582][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.621770][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.621967][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.625866][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.638519][ T25] usb usb3-port1: attempt power cycle [ 1806.755962][ T31] audit: type=1400 audit(1789228093.776:661): avc: denied { setopt } for pid=17645 comm="syz.6.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1806.830034][T15739] svc: failed to register nfsdv3 RPC service (errno 110). [ 1806.875967][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.876093][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.876214][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.876383][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.876492][T17651] tmpfs: Unknown parameter 'ĉœ&Ùže+ðKQ¾¿ñ' [ 1806.942648][ T31] audit: type=1400 audit(1789228093.966:662): avc: denied { execute } for pid=17655 comm="syz.0.2757" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1807.297968][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1807.319637][ T25] usb 3-1: device descriptor read/8, error -71 [ 1807.697324][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1808.140829][ T25] usb 3-1: device descriptor read/8, error -71 [ 1808.233384][T17666] Cannot find set identified by id 0 to match [ 1808.248099][ T25] usb usb3-port1: unable to enumerate USB device [ 1808.478348][T17671] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1808.478609][T17671] FAULT_INJECTION: forcing a failure. [ 1808.478609][T17671] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.478648][T17671] CPU: 0 UID: 0 PID: 17671 Comm: syz.2.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.478677][T17671] Tainted: [L]=SOFTLOCKUP [ 1808.478685][T17671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1808.478697][T17671] Call Trace: [ 1808.478704][T17671] [ 1808.478712][T17671] dump_stack_lvl+0x100/0x190 [ 1808.478736][T17671] should_fail_ex.cold+0x5/0xa [ 1808.478754][T17671] should_failslab+0xc2/0x120 [ 1808.478770][T17671] __kvmalloc_node_noprof+0x113/0x9b0 [ 1808.478785][T17671] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 1808.478801][T17671] __nf_hook_entries_try_shrink+0x164/0x400 [ 1808.478816][T17671] __nf_unregister_net_hook+0x1d2/0x6a0 [ 1808.478830][T17671] nf_unregister_net_hooks+0x11b/0x170 [ 1808.478843][T17671] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 1808.478862][T17671] nf_ct_netns_do_put+0x168/0x2f0 [ 1808.478874][T17671] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 1808.478891][T17671] nf_ct_netns_put+0x39/0x90 [ 1808.478903][T17671] cleanup_entry+0x1a2/0x3b0 [ 1808.478916][T17671] ? __pfx_cleanup_entry+0x10/0x10 [ 1808.478929][T17671] ? kasan_quarantine_put+0x104/0x240 [ 1808.478950][T17671] ? translate_table+0xbd8/0x1770 [ 1808.478962][T17671] ? kfree+0x22b/0x6d0 [ 1808.478979][T17671] ? xt_check_table_hooks+0x206/0x330 [ 1808.478995][T17671] translate_table+0xd53/0x1770 [ 1808.479015][T17671] ? __pfx_translate_table+0x10/0x10 [ 1808.479032][T17671] do_ip6t_set_ctl+0x689/0xd00 [ 1808.479045][T17671] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1808.479060][T17671] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1808.479075][T17671] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1808.479088][T17671] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1808.479107][T17671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1808.479128][T17671] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1808.479143][T17671] nf_setsockopt+0x8d/0xf0 [ 1808.479157][T17671] ipv6_setsockopt+0x135/0x170 [ 1808.479172][T17671] rawv6_setsockopt+0xee/0x5a0 [ 1808.479189][T17671] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1808.479207][T17671] ? selinux_socket_setsockopt+0x6a/0x80 [ 1808.479225][T17671] ? sock_common_setsockopt+0x2e/0xf0 [ 1808.479244][T17671] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1808.479261][T17671] do_sock_setsockopt+0xf3/0x1d0 [ 1808.479279][T17671] __sys_setsockopt+0x195/0x220 [ 1808.479296][T17671] __x64_sys_setsockopt+0xbd/0x160 [ 1808.479309][T17671] ? do_syscall_64+0xae/0x790 [ 1808.479324][T17671] ? lockdep_hardirqs_on+0x7d/0x110 [ 1808.479339][T17671] do_syscall_64+0x123/0x790 [ 1808.479356][T17671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.479368][T17671] RIP: 0033:0x7f8642b9e159 [ 1808.479379][T17671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.479390][T17671] RSP: 002b:00007f8643a51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1808.479402][T17671] RAX: ffffffffffffffda RBX: 00007f8642e26180 RCX: 00007f8642b9e159 [ 1808.479410][T17671] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 1808.479416][T17671] RBP: 00007f8642c3503b R08: 00000000000006d0 R09: 0000000000000000 [ 1808.479423][T17671] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 1808.479430][T17671] R13: 00007f8642e26218 R14: 00007f8642e26180 R15: 00007ffd8a025048 [ 1808.479445][T17671] [ 1809.223471][T17674] netlink: 'syz.2.2763': attribute type 1 has an invalid length. [ 1809.289901][T17674] bond1: entered promiscuous mode [ 1809.298156][T17674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1809.341842][T17678] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 1809.344591][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2764'. [ 1810.547257][T14409] Bluetooth: hci6: command 0x1003 tx timeout [ 1810.547344][ T9393] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1811.434229][T17697] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 1811.482830][T17697] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 1811.597179][T16009] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1811.737374][T16009] usb 6-1: device descriptor read/64, error -71 [ 1811.988117][T16009] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1812.243266][T16009] usb 6-1: device descriptor read/64, error -71 [ 1812.361657][T16009] usb usb6-port1: attempt power cycle [ 1813.260699][T16009] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1813.281470][T16009] usb 6-1: device descriptor read/8, error -71 [ 1813.316933][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'. [ 1813.362311][ T31] audit: type=1400 audit(1789228100.386:663): avc: denied { sqpoll } for pid=17716 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1813.380832][T17714] netlink: 'syz.6.2773': attribute type 1 has an invalid length. [ 1813.409253][T17717] nbd: must specify at least one socket [ 1813.491050][T17721] bond2: (slave veth0_to_bond): making interface the new active one [ 1813.536576][T17721] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1813.547455][T16009] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1813.567770][T16009] usb 6-1: device descriptor read/8, error -71 [ 1813.667262][T13046] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1813.709984][ T31] audit: type=1400 audit(1789228100.716:664): avc: denied { watch } for pid=17715 comm="syz.7.2775" path="/533" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1813.796180][T16009] usb usb6-port1: unable to enumerate USB device [ 1814.207175][T13046] usb 1-1: Using ep0 maxpacket: 32 [ 1814.207741][T13046] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1814.208577][T13046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.218323][T13046] usb 1-1: config 0 descriptor?? [ 1814.261867][T13046] as10x_usb: device has been detected [ 1814.265183][T13046] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1814.298904][T13046] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1814.393096][T13046] as10x_usb: error during firmware upload part1 [ 1814.393509][T13046] Registered device nBox DVB-T Dongle [ 1814.479791][ T6923] usb 1-1: USB disconnect, device number 29 [ 1814.740733][ T6923] Unregistered device nBox DVB-T Dongle [ 1814.757803][ T6923] as10x_usb: device has been disconnected [ 1815.962098][ T31] audit: type=1400 audit(1789228102.986:665): avc: denied { bind } for pid=17745 comm="syz.0.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1816.002969][ T31] audit: type=1400 audit(1789228103.016:666): avc: denied { write } for pid=17745 comm="syz.0.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1816.287397][T17755] mmap: syz.6.2787 (17755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1819.549641][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2797'. [ 1820.906274][T17786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1822.675567][ T31] audit: type=1400 audit(1789228109.696:667): avc: denied { write } for pid=17789 comm="syz.6.2799" name="instances" dev="tracefs" ino=4185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1822.746966][ T31] audit: type=1400 audit(1789228109.766:668): avc: denied { add_name } for pid=17789 comm="syz.6.2799" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1822.805607][ T31] audit: type=1400 audit(1789228109.816:669): avc: denied { create } for pid=17789 comm="syz.6.2799" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 1823.084520][T17799] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1823.092825][T10449] IPVS: starting estimator thread 0... [ 1823.177247][T16009] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1823.187293][T17810] IPVS: using max 44 ests per chain, 105600 per kthread [ 1823.351888][T16009] usb 1-1: Using ep0 maxpacket: 32 [ 1823.353617][T16009] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1823.355045][T16009] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1823.355065][T16009] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1823.355085][T16009] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1823.355099][T16009] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1823.355112][T16009] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1823.355127][T16009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1823.356668][T16009] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1823.356690][T16009] usb 1-1: Product: syz [ 1823.356704][T16009] usb 1-1: Manufacturer: syz [ 1823.356718][T16009] usb 1-1: SerialNumber: syz [ 1823.460850][T16009] usb 1-1: config 0 descriptor?? [ 1823.463934][T16009] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1823.465416][T16009] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1824.155167][T17809] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1824.170443][ T5714] usb 1-1: USB disconnect, device number 30 [ 1824.173304][ T5714] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1824.383071][ T31] audit: type=1400 audit(1789228111.406:670): avc: denied { unmount } for pid=15862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1825.754807][T17827] xt_hashlimit: size too large, truncated to 1048576 [ 1826.084308][ T31] audit: type=1400 audit(1789228113.086:671): avc: denied { create } for pid=17832 comm="syz.2.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1826.084483][ T31] audit: type=1400 audit(1789228113.086:672): avc: denied { write } for pid=17832 comm="syz.2.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1828.695012][T17851] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1831.715275][ T31] audit: type=1400 audit(1789228118.736:673): avc: denied { connect } for pid=17878 comm="syz.6.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1831.740333][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2823'. [ 1831.746641][ T31] audit: type=1400 audit(1789228118.766:674): avc: denied { mounton } for pid=17881 comm="syz.0.2824" path="/265/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1831.785808][ T31] audit: type=1400 audit(1789228118.806:675): avc: denied { create } for pid=17878 comm="syz.6.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1832.195191][ T31] audit: type=1400 audit(1789228119.196:676): avc: denied { mount } for pid=17880 comm="syz.2.2825" name="/" dev="rpc_pipefs" ino=91458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1832.453481][T17892] xt_hashlimit: size too large, truncated to 1048576 [ 1832.813836][T17903] binder: 17900:17903 ioctl 4018620d 0 returned -22 [ 1833.114028][ T5714] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1833.438800][ T5714] usb 1-1: device descriptor read/64, error -71 [ 1833.698598][ T5714] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1833.967266][ T5714] usb 1-1: device descriptor read/64, error -71 [ 1834.077897][ T5714] usb usb1-port1: attempt power cycle [ 1834.303589][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2837'. [ 1834.994306][ T5714] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1835.096934][ T5714] usb 1-1: device descriptor read/8, error -71 [ 1835.327208][ T5714] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1835.358164][ T5714] usb 1-1: device descriptor read/8, error -71 [ 1835.478686][ T5714] usb usb1-port1: unable to enumerate USB device [ 1835.636997][ T31] audit: type=1400 audit(1789228122.656:677): avc: denied { module_load } for pid=17940 comm="syz.5.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1835.679755][T17944] Invalid ELF header type: 3 != 1 [ 1835.947244][T16009] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1836.110322][T16009] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1836.110761][T16009] usb 6-1: not running at top speed; connect to a high speed hub [ 1836.110787][T16009] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1836.111601][T16009] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.111619][T16009] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1836.111661][T16009] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1836.113298][T16009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.113316][T16009] usb 6-1: Product: syz [ 1836.113329][T16009] usb 6-1: Manufacturer: syz [ 1836.113343][T16009] usb 6-1: SerialNumber: syz [ 1836.213640][T17956] xt_hashlimit: size too large, truncated to 1048576 [ 1836.482856][T16009] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 1836.482881][T16009] usb 6-1: 1:1 : sample bitwidth 190 in over sample bytes 3 [ 1836.482901][T16009] usb 6-1: 1:1 : unsupported format bits 0xc86b167e [ 1836.482924][T16009] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1836.527651][T16009] usb 6-1: unit 2 not found! [ 1836.527673][T16009] usb 6-1: unit 0 not found! [ 1836.616910][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 1836.637611][T17962] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 1836.657388][T16009] usb 6-1: USB disconnect, device number 72 [ 1836.756799][T17963] bond1: (slave veth0_to_bond): Releasing active interface [ 1836.787919][T16640] udevd[16640]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1836.830260][T17963] bond4: (slave veth0_to_bond): making interface the new active one [ 1836.835679][T17963] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1837.115233][T17968] Cannot find set identified by id 0 to match ü[ 1839.856531][T18008] xt_hashlimit: size too large, truncated to 1048576 [ 1840.484789][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1840.547780][T18014] netlink: 'syz.7.2862': attribute type 1 has an invalid length. [ 1840.892367][T18018] bond1: (slave veth0_to_bond): making interface the new active one [ 1840.893108][T18018] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1841.206455][T18029] warn_alloc: 1 callbacks suppressed [ 1841.206468][T18029] syz.5.2865: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1841.206506][T18029] CPU: 1 UID: 0 PID: 18029 Comm: syz.5.2865 Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.206523][T18029] Tainted: [L]=SOFTLOCKUP [ 1841.206528][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1841.206536][T18029] Call Trace: [ 1841.206541][T18029] [ 1841.206547][T18029] dump_stack_lvl+0x100/0x190 [ 1841.206568][T18029] warn_alloc.cold+0x9e/0xb2 [ 1841.206581][T18029] ? __pfx_warn_alloc+0x10/0x10 [ 1841.206602][T18029] ? avc_has_extended_perms+0x33a/0x1080 [ 1841.206626][T18029] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1841.206643][T18029] ? rcu_is_watching+0x13/0xc0 [ 1841.206658][T18029] ? trace_contention_end+0x126/0x160 [ 1841.206674][T18029] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1841.206692][T18029] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1841.206709][T18029] ? __pfx___mutex_lock+0x10/0x10 [ 1841.206725][T18029] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1841.206739][T18029] ? tomoyo_path_number_perm+0x188/0x580 [ 1841.206762][T18029] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1841.206778][T18029] __vmalloc_node_noprof+0xad/0xf0 [ 1841.206793][T18029] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1841.206810][T18029] dvb_dvr_do_ioctl+0x15d/0x270 [ 1841.206829][T18029] dvb_usercopy+0x167/0x340 [ 1841.206845][T18029] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1841.206865][T18029] ? __pfx_dvb_usercopy+0x10/0x10 [ 1841.206880][T18029] ? __fget_files+0x34/0x3d0 [ 1841.206901][T18029] ? selinux_file_ioctl+0x13b/0x290 [ 1841.206914][T18029] ? selinux_file_ioctl+0xb6/0x290 [ 1841.206927][T18029] dvb_dvr_ioctl+0x29/0x40 [ 1841.206942][T18029] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1841.206959][T18029] __x64_sys_ioctl+0x18e/0x210 [ 1841.206971][T18029] do_syscall_64+0x123/0x790 [ 1841.206987][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.206999][T18029] RIP: 0033:0x7fcb1399e159 [ 1841.207009][T18029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.207020][T18029] RSP: 002b:00007fcb1481a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1841.207031][T18029] RAX: ffffffffffffffda RBX: 00007fcb13c26090 RCX: 00007fcb1399e159 [ 1841.207038][T18029] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1841.207045][T18029] RBP: 00007fcb13a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1841.207052][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1841.207059][T18029] R13: 00007fcb13c26128 R14: 00007fcb13c26090 R15: 00007ffed2e8bdc8 [ 1841.207073][T18029] [ 1841.207226][T18029] Mem-Info: [ 1841.207236][T18029] active_anon:12648 inactive_anon:5113 isolated_anon:0 [ 1841.207236][T18029] active_file:5257 inactive_file:20725 isolated_file:0 [ 1841.207236][T18029] unevictable:0 dirty:452 writeback:0 [ 1841.207236][T18029] slab_reclaimable:8481 slab_unreclaimable:104739 [ 1841.207236][T18029] mapped:35441 shmem:8777 pagetables:1733 [ 1841.207236][T18029] sec_pagetables:0 bounce:0 [ 1841.207236][T18029] kernel_misc_reclaimable:0 [ 1841.207236][T18029] free:248214 free_pcp:18867 free_cma:0 [ 1841.207280][T18029] Node 0 active_anon:50452kB inactive_anon:20452kB active_file:21028kB inactive_file:82148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121156kB dirty:1804kB writeback:0kB shmem:35108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13900kB pagetables:6736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1841.207327][T18029] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20608kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1841.207369][T18029] Node 0 DMA free:10508kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1841.207418][T18029] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 1841.207447][T18029] Node 0 DMA32 free:239780kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:50452kB inactive_anon:20452kB active_file:21028kB inactive_file:82148kB unevictable:0kB writepending:1804kB zspages:312kB present:3129332kB managed:2530164kB mlocked:0kB bounce:0kB free_pcp:35928kB local_pcp:24772kB free_cma:0kB [ 1841.207492][T18029] lowmem_reserve[]: 0 0 0 0 0 [ 1841.207519][T18029] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.207562][T18029] lowmem_reserve[]: 0 0 0 0 0 [ 1841.207590][T18029] Node 1 Normal free:742568kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB writepending:4kB zspages:1364kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:39296kB local_pcp:7052kB free_cma:0kB [ 1841.207639][T18029] lowmem_reserve[]: 0 0 0 0 0 [ 1841.207667][T18029] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (U) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10508kB [ 1841.207788][T18029] Node 0 DMA32: 1*4kB (U) 472*8kB (UM) 1227*16kB (UME) 1421*32kB (UME) 1031*64kB (UME) 390*128kB (UME) 105*256kB (UME) 33*512kB (UM) 11*1024kB (M) 0*2048kB 0*4096kB = 239828kB [ 1841.207903][T18029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1841.207979][T18029] Node 1 Normal: 193*4kB (UME) 179*8kB (UME) 172*16kB (UME) 170*32kB (UME) 117*64kB (UME) 62*128kB (UME) 46*256kB (UME) 21*512kB (UME) 2*1024kB (UM) 12*2048kB (ME) 163*4096kB (UM) = 742620kB [ 1841.302678][T18029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1841.302812][T18029] Node 0 hugepages_total=526 hugepages_free=526 hugepages_surp=0 hugepages_size=2048kB [ 1841.341631][T18029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1841.341651][T18029] Node 1 hugepages_total=1521 hugepages_free=1521 hugepages_surp=0 hugepages_size=2048kB [ 1841.341666][T18029] 35049 total pagecache pages [ 1841.341673][T18029] 144 pages in swap cache [ 1841.341679][T18029] Free swap = 122684kB [ 1841.341686][T18029] Total swap = 124996kB [ 1841.341694][T18029] 2097051 pages RAM [ 1841.341701][T18029] 0 pages HighMem/MovableOnly [ 1841.341707][T18029] 432876 pages reserved [ 1841.341714][T18029] 0 pages cma reserved ü[ 1844.233563][T18044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1844.233580][T18044] block device autoloading is deprecated and will be removed. [ 1845.643285][ T31] audit: type=1400 audit(1789228132.666:678): avc: denied { ioctl } for pid=18040 comm="syz.2.2869" path="socket:[91731]" dev="sockfs" ino=91731 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1845.851657][ T5714] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1846.027295][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 1846.047887][ T5714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1846.049011][ T5714] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1846.089176][ T5714] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1846.089277][ T5714] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1846.089360][ T5714] usb 6-1: config 14 has no interface number 0 [ 1846.108603][ T5714] usb 6-1: config 14 has no interface number 1 [ 1846.314657][ T5714] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1846.314688][ T5714] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1846.314713][ T5714] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1846.314737][ T5714] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1846.314773][ T5714] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1846.314795][ T5714] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1846.314820][ T5714] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1846.314836][ T5714] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1846.424193][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.424220][ T5714] usb 6-1: Product: syz [ 1846.424234][ T5714] usb 6-1: Manufacturer: syz [ 1846.424249][ T5714] usb 6-1: SerialNumber: syz [ 1847.700125][ T5714] legousbtower 6-1:14.57: interrupt endpoints not found [ 1847.750252][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.750441][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.481230][ T5714] legousbtower 6-1:14.228: get version request failed: -71 [ 1848.481312][ T5714] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1848.506310][ T5714] usb 6-1: USB disconnect, device number 73 [ 1850.145226][ T31] audit: type=1400 audit(1789228137.166:679): avc: denied { ioctl } for pid=18085 comm="syz.5.2885" path="/561/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 ü[ 1854.617993][ T31] audit: type=1400 audit(1789228141.646:680): avc: denied { create } for pid=18106 comm="syz.2.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1854.619795][ T31] audit: type=1400 audit(1789228141.646:681): avc: denied { ioctl } for pid=18106 comm="syz.2.2891" path="socket:[91822]" dev="sockfs" ino=91822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1854.622175][ T31] audit: type=1400 audit(1789228141.646:682): avc: denied { setopt } for pid=18106 comm="syz.2.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1854.622714][ T31] audit: type=1400 audit(1789228141.646:683): avc: denied { write } for pid=18106 comm="syz.2.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1854.658651][T18109] Cannot find set identified by id 0 to match [ 1856.880104][ T31] audit: type=1400 audit(1789228143.906:684): avc: denied { read } for pid=18123 comm="syz.2.2898" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1856.880341][ T31] audit: type=1400 audit(1789228143.906:685): avc: denied { open } for pid=18123 comm="syz.2.2898" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1856.934399][ T31] audit: type=1400 audit(1789228143.956:686): avc: denied { ioctl } for pid=18123 comm="syz.2.2898" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1856.957294][ T6868] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1856.976564][ T31] audit: type=1400 audit(1789228143.996:687): avc: denied { map } for pid=18123 comm="syz.2.2898" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1856.980178][T18124] binder: BINDER_SET_CONTEXT_MGR already set [ 1856.980189][T18124] binder: 18123:18124 ioctl 4018620d 200000004a80 returned -16 [ 1857.127154][ T6868] usb 7-1: Using ep0 maxpacket: 32 [ 1857.140300][ T6868] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1857.140337][ T6868] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1857.145239][ T6868] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1857.145262][ T6868] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1857.145278][ T6868] usb 7-1: config 14 has no interface number 0 [ 1857.145292][ T6868] usb 7-1: config 14 has no interface number 1 [ 1857.145335][ T6868] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1857.145354][ T6868] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1857.145374][ T6868] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1857.145396][ T6868] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1857.145418][ T6868] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1857.145439][ T6868] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1857.145459][ T6868] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1857.145472][ T6868] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1857.155735][ T6868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.155758][ T6868] usb 7-1: Product: syz [ 1857.155772][ T6868] usb 7-1: Manufacturer: syz [ 1857.155784][ T6868] usb 7-1: SerialNumber: syz [ 1857.435554][ T31] audit: type=1400 audit(1789228144.456:688): avc: denied { mount } for pid=18125 comm="syz.2.2899" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1857.438259][ T9393] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1857.700762][ T6868] legousbtower 7-1:14.57: interrupt endpoints not found [ 1858.473021][ T6868] legousbtower 7-1:14.228: get version request failed: -71 [ 1858.473097][ T6868] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 1858.520206][ T6868] usb 7-1: USB disconnect, device number 50 [ 1860.573988][T18141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=18141 comm=syz.5.2896 [ 1860.669453][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057435400: rx timeout, send abort [ 1860.691604][ T31] audit: type=1400 audit(1789228147.716:689): avc: denied { read } for pid=4950 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1860.691880][ T31] audit: type=1400 audit(1789228147.716:690): avc: denied { search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1860.692327][ T31] audit: type=1400 audit(1789228147.716:691): avc: denied { write search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1860.692530][ T31] audit: type=1400 audit(1789228147.716:692): avc: denied { add_name } for pid=4950 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1860.692791][ T31] audit: type=1400 audit(1789228147.716:693): avc: denied { create } for pid=4950 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1860.695376][ T31] audit: type=1400 audit(1789228147.716:694): avc: denied { append open } for pid=4950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1860.699457][ T31] audit: type=1400 audit(1789228147.716:695): avc: denied { getattr } for pid=4950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1860.829535][T13046] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1860.997190][T13046] usb 8-1: Using ep0 maxpacket: 32 [ 1861.011527][T13046] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1861.016812][T13046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.016840][T13046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.016869][T13046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.046021][T13046] usb 8-1: config 0 descriptor?? [ 1861.169520][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057435800: rx timeout, send abort [ 1861.171795][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057435400: abort rx timeout. Force session deactivation [ 1861.677503][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057435800: abort rx timeout. Force session deactivation [ 1861.785347][T13046] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 1861.785368][T13046] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 1862.703579][T13046] ft260 0003:0403:6030.0006: failed to retrieve chip version [ 1862.703867][T13046] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 1862.711125][T13046] usb 8-1: USB disconnect, device number 60 ü[ 1865.491218][T18174] binder: BINDER_SET_CONTEXT_MGR already set [ 1865.491234][T18174] binder: 18173:18174 ioctl 4018620d 200000004a80 returned -16 [ 1866.061898][ T25] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1867.054582][T15739] svc: failed to register nfsaclv3 RPC service (errno 110). [ 1867.054605][T15739] failed to unregister udp with rpcbind [ 1867.054745][T15739] svc: failed to register nfsdv3 RPC service (errno 97). [ 1867.054768][T15739] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1867.054779][T15739] failed to unregister udp with rpcbind [ 1867.107182][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 1867.107763][ T25] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1867.127182][ T25] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 1867.127206][ T25] usb 8-1: config 0 has no interface number 0 [ 1867.127239][ T25] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1867.127259][ T25] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1867.284533][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.284560][ T25] usb 8-1: Product: syz [ 1867.284576][ T25] usb 8-1: Manufacturer: syz [ 1867.284590][ T25] usb 8-1: SerialNumber: syz [ 1867.528044][ T25] usb 8-1: config 0 descriptor?? [ 1867.528633][T18178] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1867.528719][T18178] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1867.732714][T18178] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1867.732800][T18178] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1867.995961][ T25] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1867.995991][ T25] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1867.996176][ T25] asix 8-1:0.251: probe with driver asix failed with error -5 [ 1868.063759][ T25] usb 8-1: USB disconnect, device number 61 ü[ 1868.308533][T13046] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1868.473876][T13046] usb 7-1: Using ep0 maxpacket: 32 [ 1868.486650][T13046] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1868.486691][T13046] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1868.504663][T13046] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1868.504687][T13046] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1868.504705][T13046] usb 7-1: config 14 has no interface number 0 [ 1868.504720][T13046] usb 7-1: config 14 has no interface number 1 [ 1868.504766][T13046] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1868.504787][T13046] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1868.504809][T13046] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1868.504831][T13046] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1868.504853][T13046] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1868.504874][T13046] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1868.504920][T13046] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1868.504936][T13046] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1868.506727][T13046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.506746][T13046] usb 7-1: Product: syz [ 1868.506758][T13046] usb 7-1: Manufacturer: syz [ 1868.506771][T13046] usb 7-1: SerialNumber: syz [ 1868.905794][T18199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1869.814696][T13046] legousbtower 7-1:14.57: interrupt endpoints not found [ 1870.037850][T13046] legousbtower 7-1:14.228: get version request failed: -71 [ 1870.037978][T13046] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 1870.083333][T13046] usb 7-1: USB disconnect, device number 51 ü[ 1871.530177][T18221] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1871.532120][T18221] FAULT_INJECTION: forcing a failure. [ 1871.532120][T18221] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.532167][T18221] CPU: 1 UID: 0 PID: 18221 Comm: syz.0.2928 Tainted: G L syzkaller #0 PREEMPT(full) [ 1871.532193][T18221] Tainted: [L]=SOFTLOCKUP [ 1871.532200][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1871.532209][T18221] Call Trace: [ 1871.532215][T18221] [ 1871.532220][T18221] dump_stack_lvl+0x100/0x190 [ 1871.532241][T18221] should_fail_ex.cold+0x5/0xa [ 1871.532258][T18221] should_failslab+0xc2/0x120 [ 1871.532274][T18221] __kvmalloc_node_noprof+0x113/0x9b0 [ 1871.532288][T18221] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 1871.532305][T18221] __nf_hook_entries_try_shrink+0x164/0x400 [ 1871.532320][T18221] __nf_unregister_net_hook+0x1d2/0x6a0 [ 1871.532334][T18221] nf_unregister_net_hooks+0x11b/0x170 [ 1871.532347][T18221] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 1871.532365][T18221] nf_ct_netns_do_put+0x168/0x2f0 [ 1871.532378][T18221] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 1871.532395][T18221] nf_ct_netns_put+0x39/0x90 [ 1871.532408][T18221] cleanup_entry+0x1a2/0x3b0 [ 1871.532421][T18221] ? __pfx_cleanup_entry+0x10/0x10 [ 1871.532434][T18221] ? kasan_quarantine_put+0x95/0x240 [ 1871.532448][T18221] ? translate_table+0xbd8/0x1770 [ 1871.532460][T18221] ? kfree+0x22b/0x6d0 [ 1871.532474][T18221] ? xt_check_table_hooks+0x206/0x330 [ 1871.532490][T18221] translate_table+0xd53/0x1770 [ 1871.532508][T18221] ? __pfx_translate_table+0x10/0x10 [ 1871.532527][T18221] do_ip6t_set_ctl+0x689/0xd00 [ 1871.532539][T18221] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1871.532553][T18221] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1871.532569][T18221] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1871.532581][T18221] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1871.532599][T18221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1871.532620][T18221] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1871.532636][T18221] nf_setsockopt+0x8d/0xf0 [ 1871.532651][T18221] ipv6_setsockopt+0x135/0x170 [ 1871.532666][T18221] rawv6_setsockopt+0xee/0x5a0 [ 1871.532683][T18221] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1871.532702][T18221] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1871.532720][T18221] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1871.532737][T18221] do_sock_setsockopt+0xf3/0x1d0 [ 1871.532754][T18221] __sys_setsockopt+0x195/0x220 [ 1871.532769][T18221] __x64_sys_setsockopt+0xbd/0x160 [ 1871.532781][T18221] ? do_syscall_64+0xae/0x790 [ 1871.532795][T18221] ? lockdep_hardirqs_on+0x7d/0x110 [ 1871.532810][T18221] do_syscall_64+0x123/0x790 [ 1871.532826][T18221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.532838][T18221] RIP: 0033:0x7f6ad859e159 [ 1871.532849][T18221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.532860][T18221] RSP: 002b:00007f6ad9449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1871.532872][T18221] RAX: ffffffffffffffda RBX: 00007f6ad8826090 RCX: 00007f6ad859e159 [ 1871.532880][T18221] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 1871.532887][T18221] RBP: 00007f6ad863503b R08: 00000000000006d0 R09: 0000000000000000 [ 1871.532894][T18221] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 1871.532900][T18221] R13: 00007f6ad8826128 R14: 00007f6ad8826090 R15: 00007fff908bb498 [ 1871.532915][T18221] [ 1876.757324][T13046] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1877.227297][T13046] usb 1-1: Using ep0 maxpacket: 32 [ 1877.231292][T13046] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1877.231319][T13046] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1877.232022][T13046] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1877.232035][T13046] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1877.232047][T13046] usb 1-1: config 14 has no interface number 0 [ 1877.232056][T13046] usb 1-1: config 14 has no interface number 1 [ 1877.232090][T13046] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1877.232111][T13046] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1877.232134][T13046] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1877.232159][T13046] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1877.232184][T13046] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1877.232208][T13046] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1877.232233][T13046] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1877.232247][T13046] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1877.236504][T13046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.236521][T13046] usb 1-1: Product: syz [ 1877.236530][T13046] usb 1-1: Manufacturer: syz [ 1877.236539][T13046] usb 1-1: SerialNumber: syz [ 1877.854681][T13046] legousbtower 1-1:14.57: interrupt endpoints not found [ 1878.843525][T13046] legousbtower 1-1:14.228: get version request failed: -71 [ 1878.843656][T13046] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 1878.865505][T13046] usb 1-1: USB disconnect, device number 35 ü[ 1880.186394][T18265] PKCS7: Unsupported SignedData version ü[ 1883.106568][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2949'. [ 1883.409948][ T31] audit: type=1400 audit(1789228170.436:696): avc: denied { read write } for pid=6773 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1883.413275][ T31] audit: type=1400 audit(1789228170.436:697): avc: denied { open } for pid=6773 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1883.413565][ T31] audit: type=1400 audit(1789228170.436:698): avc: denied { ioctl } for pid=6773 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1883.467641][ T31] audit: type=1400 audit(1789228170.476:699): avc: denied { create } for pid=18283 comm="syz.0.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1883.521496][ T31] audit: type=1400 audit(1789228170.546:700): avc: denied { read } for pid=18283 comm="syz.0.2951" name="demux0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1883.521539][ T31] audit: type=1400 audit(1789228170.546:701): avc: denied { open } for pid=18283 comm="syz.0.2951" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1883.542488][ T31] audit: type=1400 audit(1789228170.556:702): avc: denied { create } for pid=18283 comm="syz.0.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1883.549507][ T31] audit: type=1400 audit(1789228170.556:703): avc: denied { create } for pid=18283 comm="syz.0.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1883.558982][ T31] audit: type=1400 audit(1789228170.586:704): avc: denied { create } for pid=18283 comm="syz.0.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1883.679146][T18287] FAULT_INJECTION: forcing a failure. [ 1883.679146][T18287] name failslab, interval 1, probability 0, space 0, times 0 [ 1883.679177][T18287] CPU: 0 UID: 0 PID: 18287 Comm: syz.7.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1883.679202][T18287] Tainted: [L]=SOFTLOCKUP [ 1883.679209][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1883.679220][T18287] Call Trace: [ 1883.679227][T18287] [ 1883.679235][T18287] dump_stack_lvl+0x100/0x190 [ 1883.679264][T18287] should_fail_ex.cold+0x5/0xa [ 1883.679290][T18287] should_failslab+0xc2/0x120 [ 1883.679321][T18287] __kmalloc_noprof+0xfc/0x840 [ 1883.679339][T18287] ? rcu_is_watching+0x13/0xc0 [ 1883.679363][T18287] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1883.679389][T18287] tomoyo_realpath_from_path+0xb6/0x690 [ 1883.679416][T18287] tomoyo_path_number_perm+0x23c/0x580 [ 1883.679443][T18287] ? tomoyo_path_number_perm+0x22e/0x580 [ 1883.679471][T18287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1883.679507][T18287] ? __lock_acquire+0x5c0/0x1f40 [ 1883.679538][T18287] ? __fget_files+0x34/0x3d0 [ 1883.679559][T18287] ? find_held_lock+0x2b/0x80 [ 1883.679582][T18287] ? hook_file_ioctl_common+0x140/0x440 [ 1883.679610][T18287] ? __fget_files+0x21f/0x3d0 [ 1883.679636][T18287] security_file_ioctl+0xd3/0x230 [ 1883.679656][T18287] __x64_sys_ioctl+0xb7/0x210 [ 1883.679677][T18287] do_syscall_64+0x123/0x790 [ 1883.679703][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.679721][T18287] RIP: 0033:0x7f040e39e159 [ 1883.679737][T18287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.679753][T18287] RSP: 002b:00007f040f281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1883.679772][T18287] RAX: ffffffffffffffda RBX: 00007f040e625fa0 RCX: 00007f040e39e159 [ 1883.679783][T18287] RDX: 0000000000000000 RSI: 000000008038550a RDI: 0000000000000003 [ 1883.679794][T18287] RBP: 00007f040f281090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.679808][T18287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.679819][T18287] R13: 00007f040e626038 R14: 00007f040e625fa0 R15: 00007ffc38e2a0d8 [ 1883.679844][T18287] [ 1883.681966][T18287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1883.721929][ T31] audit: type=1400 audit(1789228170.736:705): avc: denied { execmem } for pid=18286 comm="syz.6.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1884.277657][T18293] syz.0.2955: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1884.277744][T18293] CPU: 0 UID: 0 PID: 18293 Comm: syz.0.2955 Tainted: G L syzkaller #0 PREEMPT(full) [ 1884.277773][T18293] Tainted: [L]=SOFTLOCKUP [ 1884.277780][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1884.277790][T18293] Call Trace: [ 1884.277794][T18293] [ 1884.277800][T18293] dump_stack_lvl+0x100/0x190 [ 1884.277822][T18293] warn_alloc.cold+0x9e/0xb2 [ 1884.277836][T18293] ? __pfx_warn_alloc+0x10/0x10 [ 1884.277857][T18293] ? avc_has_extended_perms+0x33a/0x1080 [ 1884.277882][T18293] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1884.277898][T18293] ? rcu_is_watching+0x13/0xc0 [ 1884.277913][T18293] ? trace_contention_end+0x126/0x160 [ 1884.277928][T18293] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1884.277951][T18293] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1884.277980][T18293] ? __pfx___mutex_lock+0x10/0x10 [ 1884.278007][T18293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1884.278032][T18293] ? tomoyo_path_number_perm+0x188/0x580 [ 1884.278073][T18293] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1884.278100][T18293] __vmalloc_node_noprof+0xad/0xf0 [ 1884.278123][T18293] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1884.278147][T18293] dvb_dvr_do_ioctl+0x15d/0x270 [ 1884.278168][T18293] dvb_usercopy+0x167/0x340 [ 1884.278183][T18293] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1884.278200][T18293] ? __pfx_dvb_usercopy+0x10/0x10 [ 1884.278221][T18293] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1884.278240][T18293] dvb_dvr_ioctl+0x29/0x40 [ 1884.278255][T18293] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1884.278271][T18293] __x64_sys_ioctl+0x18e/0x210 [ 1884.278284][T18293] do_syscall_64+0x123/0x790 [ 1884.278300][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.278312][T18293] RIP: 0033:0x7f6ad859e159 [ 1884.278322][T18293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.278333][T18293] RSP: 002b:00007f6ad9449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1884.278347][T18293] RAX: ffffffffffffffda RBX: 00007f6ad8826090 RCX: 00007f6ad859e159 [ 1884.278367][T18293] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1884.278380][T18293] RBP: 00007f6ad863503b R08: 0000000000000000 R09: 0000000000000000 [ 1884.278392][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1884.278403][T18293] R13: 00007f6ad8826128 R14: 00007f6ad8826090 R15: 00007fff908bb498 [ 1884.278430][T18293] [ 1884.282321][T18293] Mem-Info: [ 1884.299260][T18293] active_anon:21036 inactive_anon:5101 isolated_anon:0 [ 1884.299260][T18293] active_file:5332 inactive_file:21059 isolated_file:0 [ 1884.299260][T18293] unevictable:0 dirty:173 writeback:0 [ 1884.299260][T18293] slab_reclaimable:8658 slab_unreclaimable:106632 [ 1884.299260][T18293] mapped:31033 shmem:17128 pagetables:1635 [ 1884.299260][T18293] sec_pagetables:0 bounce:0 [ 1884.299260][T18293] kernel_misc_reclaimable:0 [ 1884.299260][T18293] free:223076 free_pcp:32685 free_cma:0 [ 1884.299311][T18293] Node 0 active_anon:84004kB inactive_anon:20404kB active_file:21328kB inactive_file:83484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103524kB dirty:688kB writeback:0kB shmem:68512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13788kB pagetables:6344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1884.299358][T18293] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20608kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1884.299401][T18293] Node 0 DMA free:10504kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:124kB free_cma:0kB [ 1884.299446][T18293] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 1884.307471][T18293] Node 0 DMA32 free:140400kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:83204kB inactive_anon:20404kB active_file:21328kB inactive_file:83484kB unevictable:0kB writepending:688kB zspages:312kB present:3129332kB managed:2530164kB mlocked:0kB bounce:0kB free_pcp:90792kB local_pcp:53396kB free_cma:0kB [ 1884.307523][T18293] lowmem_reserve[]: 0 0 0 0 0 [ 1884.307552][T18293] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1884.307599][T18293] lowmem_reserve[]: 0 0 0 0 0 [ 1884.307627][T18293] Node 1 Normal free:741900kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB writepending:4kB zspages:1364kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:39872kB local_pcp:17312kB free_cma:0kB [ 1884.307674][T18293] lowmem_reserve[]: 0 0 0 0 0 [ 1884.307700][T18293] Node 0 DMA: 2*4kB (M) 0*8kB 2*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (U) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10504kB [ 1884.307815][T18293] Node 0 DMA32: 2846*4kB (UME) 1585*8kB (UME) 588*16kB (UME) 499*32kB (UME) 607*64kB (UME) 172*128kB (UME) 64*256kB (UME) 3*512kB (UM) 8*1024kB (M) 0*2048kB 1*4096kB (M) = 140512kB [ 1884.307940][T18293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1884.308016][T18293] Node 1 Normal: 75*4kB (UME) 78*8kB (UME) 51*16kB (UM) 68*32kB (UME) 27*64kB (UME) 16*128kB (UME) 4*256kB (UE) 24*512kB (UME) 26*1024kB (UM) 13*2048kB (UME) 163*4096kB (UM) = 741900kB [ 1884.308148][T18293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1884.308162][T18293] Node 0 hugepages_total=526 hugepages_free=526 hugepages_surp=0 hugepages_size=2048kB [ 1884.308175][T18293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1884.308187][T18293] Node 1 hugepages_total=1521 hugepages_free=1521 hugepages_surp=0 hugepages_size=2048kB [ 1884.308200][T18293] 43529 total pagecache pages [ 1884.308206][T18293] 144 pages in swap cache [ 1884.308212][T18293] Free swap = 122684kB [ 1884.308217][T18293] Total swap = 124996kB [ 1884.308224][T18293] 2097051 pages RAM [ 1884.308230][T18293] 0 pages HighMem/MovableOnly [ 1884.308235][T18293] 432876 pages reserved [ 1884.308241][T18293] 0 pages cma reserved [ 1885.777718][T18304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1886.428300][T18310] FAULT_INJECTION: forcing a failure. [ 1886.428300][T18310] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.428328][T18310] CPU: 0 UID: 0 PID: 18310 Comm: syz.2.2961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1886.428344][T18310] Tainted: [L]=SOFTLOCKUP [ 1886.428348][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1886.428355][T18310] Call Trace: [ 1886.428360][T18310] [ 1886.428364][T18310] dump_stack_lvl+0x100/0x190 [ 1886.428387][T18310] should_fail_ex.cold+0x5/0xa [ 1886.428403][T18310] should_failslab+0xc2/0x120 [ 1886.428418][T18310] __kmalloc_cache_noprof+0x91/0x6d0 [ 1886.428434][T18310] ? __kasan_kmalloc+0xaa/0xb0 [ 1886.428449][T18310] ? omfs_init_fs_context+0x49/0x320 [ 1886.428469][T18310] omfs_init_fs_context+0x49/0x320 [ 1886.428488][T18310] alloc_fs_context+0x60c/0xf40 [ 1886.428507][T18310] __x64_sys_fsopen+0xed/0x220 [ 1886.428519][T18310] do_syscall_64+0x123/0x790 [ 1886.428535][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.428548][T18310] RIP: 0033:0x7f8642b9e159 [ 1886.428562][T18310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.428573][T18310] RSP: 002b:00007f8643a93028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1886.428585][T18310] RAX: ffffffffffffffda RBX: 00007f8642e25fa0 RCX: 00007f8642b9e159 [ 1886.428593][T18310] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 1886.428600][T18310] RBP: 00007f8643a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.428607][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.428613][T18310] R13: 00007f8642e26038 R14: 00007f8642e25fa0 R15: 00007ffd8a025048 [ 1886.428627][T18310] [ 1886.826450][T18314] FAULT_INJECTION: forcing a failure. [ 1886.826450][T18314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.826482][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.6.2962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1886.826506][T18314] Tainted: [L]=SOFTLOCKUP [ 1886.826513][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1886.826524][T18314] Call Trace: [ 1886.826529][T18314] [ 1886.826538][T18314] dump_stack_lvl+0x100/0x190 [ 1886.826570][T18314] should_fail_ex.cold+0x5/0xa [ 1886.826595][T18314] _copy_from_user+0x2e/0xd0 [ 1886.826616][T18314] memdup_user+0x6b/0xe0 [ 1886.826646][T18314] strndup_user+0x78/0xe0 [ 1886.826676][T18314] __do_sys_fsconfig+0x7ec/0xcb0 [ 1886.826697][T18314] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1886.826715][T18314] ? fput+0x7c/0x100 [ 1886.826748][T18314] do_syscall_64+0x123/0x790 [ 1886.826775][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.826794][T18314] RIP: 0033:0x7f205ad9e159 [ 1886.826809][T18314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.826826][T18314] RSP: 002b:00007f205bd50028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1886.826845][T18314] RAX: ffffffffffffffda RBX: 00007f205b025fa0 RCX: 00007f205ad9e159 [ 1886.826857][T18314] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 0000000000000003 [ 1886.826869][T18314] RBP: 00007f205bd50090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.826880][T18314] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1886.826891][T18314] R13: 00007f205b026038 R14: 00007f205b025fa0 R15: 00007ffc8492f688 [ 1886.826916][T18314] [ 1888.506588][ T31] kauditd_printk_skb: 72 callbacks suppressed [ 1888.506605][ T31] audit: type=1400 audit(1789228175.526:778): avc: denied { unmount } for pid=6773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1888.551163][ T31] audit: type=1326 audit(1789228175.576:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18325 comm="syz.5.2967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1888.551198][ T31] audit: type=1326 audit(1789228175.576:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18325 comm="syz.5.2967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1888.551229][ T31] audit: type=1326 audit(1789228175.576:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18325 comm="syz.5.2967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1888.607635][ T31] audit: type=1400 audit(1789228175.616:782): avc: denied { setopt } for pid=18334 comm="syz.2.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1888.609689][ T31] audit: type=1400 audit(1789228175.636:783): avc: denied { setopt } for pid=18334 comm="syz.2.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1888.612884][ T31] audit: type=1326 audit(1789228175.636:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18325 comm="syz.5.2967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1888.612930][ T31] audit: type=1326 audit(1789228175.636:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18325 comm="syz.5.2967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1888.613271][ T31] audit: type=1326 audit(1789228175.636:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18325 comm="syz.5.2967" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1888.634132][ T31] audit: type=1400 audit(1789228175.656:787): avc: denied { bind } for pid=18334 comm="syz.2.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1888.956280][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2970'. [ 1889.808544][ T6923] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1889.981367][ T6923] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.002389][ T6923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.002418][ T6923] usb 3-1: Product: syz [ 1890.002434][ T6923] usb 3-1: Manufacturer: syz [ 1890.002449][ T6923] usb 3-1: SerialNumber: syz [ 1890.413975][T18375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1890.417621][T18375] bond2: left promiscuous mode [ 1890.420616][T18375] bond3: left promiscuous mode [ 1890.431749][T18375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1890.581366][T18374] Cannot find set identified by id 0 to match [ 1890.673253][ T6921] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 ü[ 1891.257460][T16009] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1891.374613][T18357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1891.449049][ T6923] usb 3-1: USB disconnect, device number 9 [ 1891.460348][T16009] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1891.460384][T16009] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1891.468823][T16009] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.468860][T16009] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1891.468881][T16009] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 36 [ 1891.480431][T16009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.480455][T16009] usb 1-1: Product: syz [ 1891.480469][T16009] usb 1-1: Manufacturer: syz [ 1891.480481][T16009] usb 1-1: SerialNumber: syz [ 1891.484461][T16009] usb 1-1: config 0 descriptor?? [ 1891.485006][T18380] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1891.485100][T18380] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1891.579203][ C0] usb 1-1: NFC: Urb failure (status -71) [ 1891.615969][ C0] usb 1-1: NFC: Urb failure (status -71) [ 1891.621978][T16009] usb 1-1: NFC: Unable to get FW version [ 1891.657882][T16009] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -71 [ 1891.741932][T18380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.742267][T18380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.749863][ T6921] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1891.750046][ T6921] ath9k_htc: Failed to initialize the device [ 1891.763459][ T6923] usb 3-1: ath9k_htc: USB layer deinitialized [ 1891.791589][T16009] usb 1-1: USB disconnect, device number 36 [ 1893.653149][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1893.653166][ T31] audit: type=1400 audit(1789228180.676:822): avc: denied { write } for pid=18411 comm="syz.0.2995" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1893.663948][T18415] Cannot find set identified by id 0 to match [ 1893.751128][ T31] audit: type=1400 audit(1789228180.776:823): avc: denied { associate } for pid=18410 comm="syz.7.2994" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1893.758362][ T31] audit: type=1400 audit(1789228180.776:824): avc: denied { write } for pid=18410 comm="syz.7.2994" name="pfkey" dev="proc" ino=4026535476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 ü[ 1894.657216][ T31] audit: type=1400 audit(1789228181.346:825): avc: denied { watch } for pid=18422 comm="syz.5.2998" path="/589/bus" dev="tmpfs" ino=3291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1894.657269][ T31] audit: type=1400 audit(1789228181.356:826): avc: denied { watch_sb watch_reads } for pid=18422 comm="syz.5.2998" path="/589/bus" dev="tmpfs" ino=3291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1894.768480][ T31] audit: type=1400 audit(1789228181.796:827): avc: denied { bind } for pid=18428 comm="syz.0.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1895.263863][ T6921] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1895.270820][T18392] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1895.602854][ T6921] usb 8-1: New USB device found, idVendor=0403, idProduct=c7d0, bcdDevice=10.75 [ 1895.632530][ T6921] usb 8-1: config 14 has an invalid interface number: 55 but max is 0 [ 1895.632557][ T6921] usb 8-1: config 14 has no interface number 0 [ 1895.632582][ T6921] usb 8-1: config 14 interface 55 has no altsetting 0 [ 1895.721285][T18392] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1895.759897][T18392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.759945][T18392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.839858][ T6921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.839885][ T6921] usb 8-1: Product: syz [ 1895.839899][ T6921] usb 8-1: Manufacturer: syz [ 1895.839913][ T6921] usb 8-1: SerialNumber: syz [ 1895.955329][T18392] usb 1-1: config 0 descriptor?? [ 1896.022456][T18392] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 1896.136554][ T31] audit: type=1326 audit(1789228183.156:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.2.3003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8642b9e159 code=0x7ffc0000 [ 1896.136602][ T31] audit: type=1326 audit(1789228183.156:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.2.3003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8642b9e159 code=0x7ffc0000 [ 1896.146383][ T31] audit: type=1326 audit(1789228183.166:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.2.3003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8642b9e159 code=0x7ffc0000 [ 1896.146444][ T31] audit: type=1326 audit(1789228183.166:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.2.3003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8642b9e159 code=0x7ffc0000 [ 1896.411346][ T6923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1896.519892][T16009] usb 1-1: USB disconnect, device number 37 [ 1896.589641][ T6923] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1896.616644][ T6923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.616669][ T6923] usb 3-1: Product: syz [ 1896.616683][ T6923] usb 3-1: Manufacturer: syz [ 1896.616696][ T6923] usb 3-1: SerialNumber: syz [ 1896.798202][T13046] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1896.974009][ T6921] ftdi_sio 8-1:14.55: FTDI USB Serial Device converter detected [ 1896.981120][ T6921] ftdi_sio ttyUSB0: unknown device type: 0x1075 [ 1896.988296][ T6921] usb 8-1: USB disconnect, device number 62 [ 1896.990991][ T6921] ftdi_sio 8-1:14.55: device disconnected [ 1897.279128][ T6921] usb 3-1: USB disconnect, device number 10 [ 1897.884162][T13046] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1897.884301][T13046] ath9k_htc: Failed to initialize the device [ 1897.885127][ T6921] usb 3-1: ath9k_htc: USB layer deinitialized [ 1898.532066][T18476] warn_alloc: 1 callbacks suppressed [ 1898.532099][T18476] syz.5.3013: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1898.535257][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.5.3013 Tainted: G L syzkaller #0 PREEMPT(full) [ 1898.535287][T18476] Tainted: [L]=SOFTLOCKUP [ 1898.535293][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1898.535300][T18476] Call Trace: [ 1898.535305][T18476] [ 1898.535310][T18476] dump_stack_lvl+0x100/0x190 [ 1898.535332][T18476] warn_alloc.cold+0x9e/0xb2 [ 1898.535346][T18476] ? __pfx_warn_alloc+0x10/0x10 [ 1898.535364][T18476] ? lockdep_hardirqs_on+0x7d/0x110 [ 1898.535389][T18476] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1898.535405][T18476] ? rcu_is_watching+0x13/0xc0 [ 1898.535420][T18476] ? trace_contention_end+0x126/0x160 [ 1898.535435][T18476] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1898.535453][T18476] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1898.535471][T18476] ? __pfx___mutex_lock+0x10/0x10 [ 1898.535486][T18476] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1898.535501][T18476] ? tomoyo_path_number_perm+0x188/0x580 [ 1898.535525][T18476] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1898.535541][T18476] __vmalloc_node_noprof+0xad/0xf0 [ 1898.535557][T18476] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1898.535576][T18476] dvb_dvr_do_ioctl+0x15d/0x270 [ 1898.535595][T18476] dvb_usercopy+0x167/0x340 [ 1898.535611][T18476] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1898.535628][T18476] ? __pfx_dvb_usercopy+0x10/0x10 [ 1898.535644][T18476] ? __fget_files+0x34/0x3d0 [ 1898.535665][T18476] ? selinux_file_ioctl+0x13b/0x290 [ 1898.535679][T18476] ? selinux_file_ioctl+0xb6/0x290 [ 1898.535692][T18476] dvb_dvr_ioctl+0x29/0x40 [ 1898.535707][T18476] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1898.535725][T18476] __x64_sys_ioctl+0x18e/0x210 [ 1898.535738][T18476] do_syscall_64+0x123/0x790 [ 1898.535754][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.535765][T18476] RIP: 0033:0x7fcb1399e159 [ 1898.535776][T18476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.535786][T18476] RSP: 002b:00007fcb1481a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1898.535798][T18476] RAX: ffffffffffffffda RBX: 00007fcb13c26090 RCX: 00007fcb1399e159 [ 1898.535805][T18476] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1898.535812][T18476] RBP: 00007fcb13a3503b R08: 0000000000000000 R09: 0000000000000000 [ 1898.535819][T18476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.535826][T18476] R13: 00007fcb13c26128 R14: 00007fcb13c26090 R15: 00007ffed2e8bdc8 [ 1898.535840][T18476] [ 1898.536335][T18476] Mem-Info: [ 1898.536380][T18476] active_anon:4363 inactive_anon:5107 isolated_anon:0 [ 1898.536380][T18476] active_file:5349 inactive_file:21156 isolated_file:0 [ 1898.536380][T18476] unevictable:0 dirty:476 writeback:0 [ 1898.536380][T18476] slab_reclaimable:8483 slab_unreclaimable:104812 [ 1898.536380][T18476] mapped:30844 shmem:428 pagetables:1690 [ 1898.536380][T18476] sec_pagetables:0 bounce:0 [ 1898.536380][T18476] kernel_misc_reclaimable:0 [ 1898.536380][T18476] free:255286 free_pcp:18920 free_cma:0 [ 1898.536445][T18476] Node 0 active_anon:17312kB inactive_anon:20428kB active_file:21396kB inactive_file:83872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102768kB dirty:1900kB writeback:0kB shmem:1712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13880kB pagetables:6564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1898.536492][T18476] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20608kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1898.536587][T18476] Node 0 DMA free:10504kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:124kB free_cma:0kB [ 1898.536667][T18476] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 1898.536754][T18476] Node 0 DMA32 free:266724kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17312kB inactive_anon:20428kB active_file:21396kB inactive_file:83872kB unevictable:0kB writepending:1900kB zspages:312kB present:3129332kB managed:2530164kB mlocked:0kB bounce:0kB free_pcp:37432kB local_pcp:19260kB free_cma:0kB [ 1898.536836][T18476] lowmem_reserve[]: 0 0 0 0 0 [ 1898.536918][T18476] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1898.536997][T18476] lowmem_reserve[]: 0 0 0 0 0 [ 1898.543699][T18476] Node 1 Normal free:743916kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB writepending:4kB zspages:1364kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:38000kB local_pcp:16384kB free_cma:0kB [ 1898.543753][T18476] lowmem_reserve[]: 0 0 0 0 0 [ 1898.543784][T18476] Node 0 DMA: 2*4kB (M) 0*8kB 2*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (M) 1*512kB (U) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10504kB [ 1898.543908][T18476] Node 0 DMA32: 1187*4kB (UM) 2329*8kB (UM) 2045*16kB (UME) 1679*32kB (UME) 973*64kB (UME) 361*128kB (UME) 99*256kB (UME) 15*512kB (UM) 11*1024kB (M) 0*2048kB 1*4096kB (M) = 266692kB [ 1898.544039][T18476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1898.544116][T18476] Node 1 Normal: 75*4kB (UME) 78*8kB (UME) 49*16kB (UM) 68*32kB (UME) 27*64kB (UME) 24*128kB (UME) 8*256kB (UME) 24*512kB (UME) 26*1024kB (UM) 13*2048kB (UME) 163*4096kB (UM) = 743916kB [ 1898.544405][T18476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1898.544420][T18476] Node 0 hugepages_total=526 hugepages_free=526 hugepages_surp=0 hugepages_size=2048kB [ 1898.544435][T18476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1898.544449][T18476] Node 1 hugepages_total=1521 hugepages_free=1521 hugepages_surp=0 hugepages_size=2048kB [ 1898.544463][T18476] 27081 total pagecache pages [ 1898.544470][T18476] 152 pages in swap cache [ 1898.544476][T18476] Free swap = 122684kB [ 1898.544484][T18476] Total swap = 124996kB [ 1898.544491][T18476] 2097051 pages RAM [ 1898.544497][T18476] 0 pages HighMem/MovableOnly [ 1898.544504][T18476] 432876 pages reserved [ 1898.544511][T18476] 0 pages cma reserved [ 1899.563406][ T31] kauditd_printk_skb: 145 callbacks suppressed [ 1899.563423][ T31] audit: type=1326 audit(1789228186.556:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18475 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1899.993513][ T31] audit: type=1326 audit(1789228187.016:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1899.993677][ T31] audit: type=1326 audit(1789228187.016:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1900.069432][ T31] audit: type=1326 audit(1789228187.056:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ad855e98e code=0x7ffc0000 [ 1900.069486][ T31] audit: type=1326 audit(1789228187.056:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ad855e98e code=0x7ffc0000 [ 1900.069526][ T31] audit: type=1326 audit(1789228187.056:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1900.069564][ T31] audit: type=1326 audit(1789228187.056:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1900.385481][ T31] audit: type=1326 audit(1789228187.366:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1900.385527][ T31] audit: type=1326 audit(1789228187.366:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1900.471584][ T31] audit: type=1326 audit(1789228187.496:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18471 comm="syz.0.3014" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad859e159 code=0x7ffc0000 [ 1904.080465][ T6923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1904.517641][ T6923] usb 3-1: Using ep0 maxpacket: 32 [ 1904.520108][ T6923] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1904.521251][ T6923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.554777][ T6923] usb 3-1: config 0 descriptor?? [ 1904.651219][ T6923] as10x_usb: device has been detected [ 1904.651785][ T6923] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1904.685695][ T6923] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1904.702964][ T6923] as10x_usb: error during firmware upload part1 [ 1904.703369][ T6923] Registered device nBox DVB-T Dongle [ 1904.838552][ T6923] usb 3-1: USB disconnect, device number 11 [ 1904.949139][ T6923] Unregistered device nBox DVB-T Dongle [ 1904.960183][ T6923] as10x_usb: device has been disconnected [ 1905.968140][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1905.968157][ T31] audit: type=1400 audit(1789228192.996:1013): avc: denied { name_bind } for pid=18520 comm="syz.5.3028" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1905.968443][ T31] audit: type=1400 audit(1789228192.996:1014): avc: denied { node_bind } for pid=18520 comm="syz.5.3028" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1905.973091][ T31] audit: type=1400 audit(1789228192.996:1015): avc: denied { ioctl } for pid=18520 comm="syz.5.3028" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1906.161982][ T31] audit: type=1400 audit(1789228193.186:1016): avc: denied { ioctl } for pid=18519 comm="syz.0.3027" path="socket:[96534]" dev="sockfs" ino=96534 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1908.822941][ T31] audit: type=1400 audit(1789228195.846:1017): avc: denied { setopt } for pid=18540 comm="syz.7.3034" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1909.188708][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.188780][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1912.237592][T18554] Cannot find set identified by id 0 to match [ 1912.538102][ T31] audit: type=1400 audit(1789228199.566:1018): avc: denied { read write } for pid=18558 comm="syz.2.3041" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1912.541488][ T31] audit: type=1400 audit(1789228199.566:1019): avc: denied { open } for pid=18558 comm="syz.2.3041" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1912.545928][T18560] FAULT_INJECTION: forcing a failure. [ 1912.545928][T18560] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.545959][T18560] CPU: 0 UID: 0 PID: 18560 Comm: syz.2.3041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.545985][T18560] Tainted: [L]=SOFTLOCKUP [ 1912.545992][T18560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1912.546002][T18560] Call Trace: [ 1912.546009][T18560] [ 1912.546017][T18560] dump_stack_lvl+0x100/0x190 [ 1912.546050][T18560] should_fail_ex.cold+0x5/0xa [ 1912.546076][T18560] should_failslab+0xc2/0x120 [ 1912.546100][T18560] __kmalloc_noprof+0xfc/0x840 [ 1912.546120][T18560] ? __lock_acquire+0x5c0/0x1f40 [ 1912.546139][T18560] ? mtd_kmalloc_up_to+0x152/0x190 [ 1912.546163][T18560] mtd_kmalloc_up_to+0x152/0x190 [ 1912.546184][T18560] mtdchar_write+0x195/0x5d0 [ 1912.546211][T18560] ? get_pid_task+0x2a/0x250 [ 1912.546237][T18560] ? __pfx_mtdchar_write+0x10/0x10 [ 1912.546262][T18560] ? get_pid_task+0xfc/0x250 [ 1912.546285][T18560] ? get_pid_task+0xfc/0x250 [ 1912.546313][T18560] ? avc_policy_seqno+0x9/0x20 [ 1912.546336][T18560] ? selinux_file_permission+0x8f/0x6d0 [ 1912.546360][T18560] ? bpf_lsm_file_permission+0x9/0x10 [ 1912.546383][T18560] ? security_file_permission+0x76/0x210 [ 1912.546406][T18560] ? rw_verify_area+0xce/0x6d0 [ 1912.546436][T18560] vfs_write+0x2aa/0x1050 [ 1912.546456][T18560] ? __pfx_mtdchar_write+0x10/0x10 [ 1912.546481][T18560] ? lock_acquire+0x1d1/0x380 [ 1912.546499][T18560] ? __fget_files+0x34/0x3d0 [ 1912.546522][T18560] ? __pfx_vfs_write+0x10/0x10 [ 1912.546539][T18560] ? find_held_lock+0x2b/0x80 [ 1912.546563][T18560] ? __fget_files+0x215/0x3d0 [ 1912.546591][T18560] ? __fget_files+0x215/0x3d0 [ 1912.546615][T18560] ? __fget_files+0x21f/0x3d0 [ 1912.546642][T18560] ksys_write+0x12a/0x250 [ 1912.546660][T18560] ? __pfx_ksys_write+0x10/0x10 [ 1912.546713][T18560] do_syscall_64+0x123/0x790 [ 1912.546739][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.546758][T18560] RIP: 0033:0x7f8642b9e159 [ 1912.546775][T18560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.546791][T18560] RSP: 002b:00007f8643a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1912.546810][T18560] RAX: ffffffffffffffda RBX: 00007f8642e25fa0 RCX: 00007f8642b9e159 [ 1912.546846][T18560] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 1912.546858][T18560] RBP: 00007f8643a93090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.546869][T18560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.546879][T18560] R13: 00007f8642e26038 R14: 00007f8642e25fa0 R15: 00007ffd8a025048 [ 1912.546905][T18560] [ 1912.941605][ T31] audit: type=1400 audit(1789228199.966:1020): avc: denied { read } for pid=18563 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1912.941886][ T31] audit: type=1400 audit(1789228199.966:1021): avc: denied { open } for pid=18563 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1913.005674][ T31] audit: type=1400 audit(1789228200.026:1022): avc: denied { ioctl } for pid=18563 comm="syz-executor" path="socket:[96643]" dev="sockfs" ino=96643 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1913.038148][T14409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1913.043120][T14409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1913.046605][T14409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1913.072410][T14409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1913.074588][T14409] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1913.110419][ T31] audit: type=1400 audit(1789228200.136:1023): avc: denied { mounton } for pid=18563 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1913.231902][ T31] audit: type=1400 audit(1789228200.256:1024): avc: denied { module_request } for pid=18563 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1913.424552][ T31] audit: type=1400 audit(1789228200.446:1025): avc: denied { sys_module } for pid=18563 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1915.110456][T14409] Bluetooth: hci6: command tx timeout [ 1915.317370][T18579] warn_alloc: 2 callbacks suppressed [ 1915.317383][T18579] syz.0.3046: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1915.317421][T18579] CPU: 1 UID: 0 PID: 18579 Comm: syz.0.3046 Tainted: G L syzkaller #0 PREEMPT(full) [ 1915.317438][T18579] Tainted: [L]=SOFTLOCKUP [ 1915.317443][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1915.317450][T18579] Call Trace: [ 1915.317455][T18579] [ 1915.317461][T18579] dump_stack_lvl+0x100/0x190 [ 1915.317481][T18579] warn_alloc.cold+0x9e/0xb2 [ 1915.317496][T18579] ? __pfx_warn_alloc+0x10/0x10 [ 1915.317518][T18579] ? avc_has_extended_perms+0x33a/0x1080 [ 1915.317547][T18579] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1915.317563][T18579] ? rcu_is_watching+0x13/0xc0 [ 1915.317580][T18579] ? trace_contention_end+0x126/0x160 [ 1915.317596][T18579] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1915.317613][T18579] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1915.317631][T18579] ? __pfx___mutex_lock+0x10/0x10 [ 1915.317647][T18579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1915.317661][T18579] ? tomoyo_path_number_perm+0x188/0x580 [ 1915.317685][T18579] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1915.317702][T18579] __vmalloc_node_noprof+0xad/0xf0 [ 1915.317717][T18579] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1915.317735][T18579] dvb_dvr_do_ioctl+0x15d/0x270 [ 1915.317755][T18579] dvb_usercopy+0x167/0x340 [ 1915.317772][T18579] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1915.317790][T18579] ? __pfx_dvb_usercopy+0x10/0x10 [ 1915.317805][T18579] ? __fget_files+0x34/0x3d0 [ 1915.317824][T18579] ? selinux_file_ioctl+0x13b/0x290 [ 1915.317836][T18579] ? selinux_file_ioctl+0xb6/0x290 [ 1915.317854][T18579] dvb_dvr_ioctl+0x29/0x40 [ 1915.317869][T18579] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1915.317885][T18579] __x64_sys_ioctl+0x18e/0x210 [ 1915.317897][T18579] do_syscall_64+0x123/0x790 [ 1915.317913][T18579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.317925][T18579] RIP: 0033:0x7f6ad859e159 [ 1915.317935][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1915.317946][T18579] RSP: 002b:00007f6ad946a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1915.317957][T18579] RAX: ffffffffffffffda RBX: 00007f6ad8825fa0 RCX: 00007f6ad859e159 [ 1915.317964][T18579] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1915.317971][T18579] RBP: 00007f6ad863503b R08: 0000000000000000 R09: 0000000000000000 [ 1915.317978][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1915.317985][T18579] R13: 00007f6ad8826038 R14: 00007f6ad8825fa0 R15: 00007fff908bb498 [ 1915.318000][T18579] [ 1915.334961][T18579] Mem-Info: [ 1915.334977][T18579] active_anon:7801 inactive_anon:5089 isolated_anon:0 [ 1915.334977][T18579] active_file:5349 inactive_file:21607 isolated_file:0 [ 1915.334977][T18579] unevictable:0 dirty:248 writeback:0 [ 1915.334977][T18579] slab_reclaimable:8476 slab_unreclaimable:106503 [ 1915.334977][T18579] mapped:39041 shmem:3296 pagetables:1708 [ 1915.334977][T18579] sec_pagetables:0 bounce:0 [ 1915.334977][T18579] kernel_misc_reclaimable:0 [ 1915.334977][T18579] free:250177 free_pcp:6479 free_cma:0 [ 1915.335017][T18579] Node 0 active_anon:31064kB inactive_anon:20356kB active_file:21396kB inactive_file:85676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119172kB dirty:984kB writeback:0kB shmem:13184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13988kB pagetables:6636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1915.335051][T18579] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36992kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1915.335081][T18579] Node 0 DMA free:10752kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1915.335129][T18579] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 1915.335154][T18579] Node 0 DMA32 free:244904kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31064kB inactive_anon:20356kB active_file:21396kB inactive_file:85676kB unevictable:0kB writepending:984kB zspages:312kB present:3129332kB managed:2530164kB mlocked:0kB bounce:0kB free_pcp:25916kB local_pcp:16632kB free_cma:0kB [ 1915.335183][T18579] lowmem_reserve[]: 0 0 0 0 0 [ 1915.335201][T18579] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1915.335228][T18579] lowmem_reserve[]: 0 0 0 0 0 [ 1915.335246][T18579] Node 1 Normal free:745052kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:752kB unevictable:0kB writepending:8kB zspages:1364kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1915.335275][T18579] lowmem_reserve[]: 0 0 0 0 0 [ 1915.335292][T18579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UE) = 10752kB [ 1915.335353][T18579] Node 0 DMA32: 1143*4kB (ME) 891*8kB (UME) 1739*16kB (UME) 1196*32kB (UME) 1024*64kB (UME) 365*128kB (UME) 110*256kB (UME) 22*512kB (UM) 11*1024kB (M) 2*2048kB (U) 0*4096kB = 244836kB [ 1915.335448][T18579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1915.335501][T18579] Node 1 Normal: 189*4kB (UME) 175*8kB (UME) 169*16kB (UME) 167*32kB (UME) 120*64kB (UME) 89*128kB (UME) 44*256kB (UME) 34*512kB (UME) 25*1024kB (UM) 15*2048kB (UME) 154*4096kB (M) = 745052kB [ 1915.335589][T18579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1915.335598][T18579] Node 0 hugepages_total=526 hugepages_free=526 hugepages_surp=0 hugepages_size=2048kB [ 1915.335606][T18579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1915.335614][T18579] Node 1 hugepages_total=1521 hugepages_free=1521 hugepages_surp=0 hugepages_size=2048kB [ 1915.335623][T18579] 30400 total pagecache pages [ 1915.335627][T18579] 152 pages in swap cache [ 1915.335632][T18579] Free swap = 122684kB [ 1915.335636][T18579] Total swap = 124996kB [ 1915.335641][T18579] 2097051 pages RAM [ 1915.335645][T18579] 0 pages HighMem/MovableOnly [ 1915.335650][T18579] 432876 pages reserved [ 1915.335654][T18579] 0 pages cma reserved [ 1917.191349][T14409] Bluetooth: hci6: command tx timeout [ 1919.267258][T14409] Bluetooth: hci6: command tx timeout [ 1920.145805][T18563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.145937][T18563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.146062][T18563] bridge_slave_0: entered allmulticast mode [ 1920.158002][T18563] bridge_slave_0: entered promiscuous mode [ 1920.240821][T18563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.242347][T18563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.242457][T18563] bridge_slave_1: entered allmulticast mode [ 1920.250729][T18563] bridge_slave_1: entered promiscuous mode [ 1920.458999][T18563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1920.463863][T18563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1920.593641][T18563] team0: Port device team_slave_0 added [ 1920.600310][T18563] team0: Port device team_slave_1 added [ 1920.693958][T18563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.693971][T18563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.693986][T18563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.695324][T18563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.695337][T18563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.695358][T18563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.938607][T18563] hsr_slave_0: entered promiscuous mode [ 1920.939619][T18563] hsr_slave_1: entered promiscuous mode [ 1920.950080][T18563] debugfs: 'hsr0' already exists in 'hsr' [ 1920.950099][T18563] Cannot create hsr debugfs directory ü[ 1921.347190][T14409] Bluetooth: hci6: command tx timeout [ 1921.378282][ T31] audit: type=1400 audit(1789228208.406:1026): avc: denied { bind } for pid=18626 comm="syz.5.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1921.378499][ T31] audit: type=1400 audit(1789228208.406:1027): avc: denied { name_bind } for pid=18626 comm="syz.5.3059" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1921.380504][ T31] audit: type=1400 audit(1789228208.406:1028): avc: denied { node_bind } for pid=18626 comm="syz.5.3059" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1922.972083][ T31] audit: type=1326 audit(1789228209.986:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1922.976390][ T31] audit: type=1326 audit(1789228209.996:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1923.048856][ T31] audit: type=1326 audit(1789228210.076:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1923.049229][ T31] audit: type=1326 audit(1789228210.076:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1923.052463][ T31] audit: type=1326 audit(1789228210.076:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1923.054798][ T31] audit: type=1326 audit(1789228210.076:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1923.055207][ T31] audit: type=1326 audit(1789228210.076:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.5.3063" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1399e159 code=0x7ffc0000 [ 1926.735140][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 1926.735161][ T31] audit: type=1400 audit(1789228213.736:1072): avc: denied { write } for pid=18670 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1926.735202][ T31] audit: type=1400 audit(1789228213.736:1073): avc: denied { remove_name } for pid=18670 comm="rm" name="resolv.conf.eth16.link" dev="tmpfs" ino=17265 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1926.735236][ T31] audit: type=1400 audit(1789228213.736:1074): avc: denied { unlink } for pid=18670 comm="rm" name="resolv.conf.eth16.link" dev="tmpfs" ino=17265 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1927.023984][ T31] audit: type=1400 audit(1789228214.046:1075): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1927.166922][T18671] syzkaller0: entered promiscuous mode [ 1927.166945][T18671] syzkaller0: entered allmulticast mode [ 1929.248766][T18696] ceph: No mds server is up or the cluster is laggy [ 1930.422198][ T31] audit: type=1400 audit(1789228217.446:1076): avc: denied { write } for pid=18681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1930.849605][T18711] binder: 18710:18711 ioctl 4018620d 0 returned -22 [ 1931.052429][ T31] audit: type=1400 audit(1789228218.076:1077): avc: denied { connect } for pid=18712 comm="syz.5.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1931.156948][ T31] audit: type=1400 audit(1789228218.176:1078): avc: denied { write } for pid=18714 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1932.334349][T18563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1932.359108][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1932.367494][T18563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1932.396348][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1932.401135][T18563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1932.430964][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1932.440740][T18563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1932.470534][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1932.713975][T18563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1932.741440][T18563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1932.776450][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.776548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1932.783420][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.783508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1933.099123][ T31] audit: type=1400 audit(1789228220.126:1079): avc: denied { write } for pid=18724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1933.392865][ T31] audit: type=1400 audit(1789228220.416:1080): avc: denied { write } for pid=18745 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1933.762057][T18563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1933.886633][T18563] veth0_vlan: entered promiscuous mode [ 1933.932603][T18563] veth1_vlan: entered promiscuous mode [ 1934.020320][ T31] audit: type=1400 audit(1789228221.046:1081): avc: denied { write } for pid=18751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1934.044653][T18563] veth0_macvtap: entered promiscuous mode [ 1934.093411][T18563] veth1_macvtap: entered promiscuous mode [ 1934.211750][T18563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1934.235252][T18563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1934.277354][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.277416][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.277443][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.277470][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.505383][ T31] audit: type=1400 audit(1789228221.526:1082): avc: denied { write } for pid=18766 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1934.808166][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.808187][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.907082][T16712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.907106][T16712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.936494][ T31] audit: type=1400 audit(1789228221.956:1083): avc: denied { mounton } for pid=18563 comm="syz-executor" path="/root/syzkaller.hISmwH/syz-tmp" dev="sda1" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1934.967189][ T31] audit: type=1400 audit(1789228221.996:1084): avc: denied { mount } for pid=18563 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1934.970626][ T31] audit: type=1400 audit(1789228221.996:1085): avc: denied { mounton } for pid=18563 comm="syz-executor" path="/root/syzkaller.hISmwH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1934.971462][ T31] audit: type=1400 audit(1789228221.996:1086): avc: denied { mounton } for pid=18563 comm="syz-executor" path="/root/syzkaller.hISmwH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1935.056727][ T31] audit: type=1400 audit(1789228222.076:1087): avc: denied { mounton } for pid=18563 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1935.056773][ T31] audit: type=1400 audit(1789228222.076:1088): avc: denied { mount } for pid=18563 comm="syz-executor" name="/" dev="gadgetfs" ino=16407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1938.210683][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1938.210700][ T31] audit: type=1400 audit(1789228225.236:1095): avc: denied { write } for pid=18798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1938.442718][ T31] audit: type=1400 audit(1789228225.466:1096): avc: denied { write } for pid=18809 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1939.140343][ T31] audit: type=1400 audit(1789228226.166:1097): avc: denied { write } for pid=18811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1939.373415][ T31] audit: type=1400 audit(1789228226.396:1098): avc: denied { write } for pid=18822 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.008490][ T31] audit: type=1400 audit(1789228227.036:1099): avc: denied { write } for pid=18824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.155055][ T31] audit: type=1400 audit(1789228227.176:1100): avc: denied { write } for pid=18835 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.792727][ T31] audit: type=1400 audit(1789228227.816:1101): avc: denied { write } for pid=18837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1940.928123][ T31] audit: type=1400 audit(1789228227.956:1102): avc: denied { write } for pid=18848 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1941.251584][ T31] audit: type=1400 audit(1789228228.276:1103): avc: denied { write } for pid=18850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1941.560593][ T31] audit: type=1400 audit(1789228228.586:1104): avc: denied { write } for pid=18861 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1970.632394][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.632566][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2032.069710][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2032.069893][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.277153][ T9393] Bluetooth: hci6: command 0x0406 tx timeout [ 2046.787222][ T32] INFO: task syz.6.3008:18456 blocked for more than 143 seconds. [ 2046.787250][ T32] Tainted: G L syzkaller #0 [ 2046.787261][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2046.787269][ T32] task:syz.6.3008 state:D stack:27304 pid:18456 tgid:18455 ppid:6773 task_flags:0x400040 flags:0x00080002 [ 2046.787331][ T32] Call Trace: [ 2046.787338][ T32] [ 2046.787350][ T32] __schedule+0x1259/0x6920 [ 2046.787379][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 2046.787406][ T32] ? irqentry_exit+0x24d/0xa10 [ 2046.787433][ T32] ? lock_acquire+0x1d1/0x380 [ 2046.787452][ T32] ? __pfx___schedule+0x10/0x10 [ 2046.787472][ T32] ? find_held_lock+0x2b/0x80 [ 2046.787499][ T32] ? schedule+0x225/0x2c0 [ 2046.787525][ T32] schedule+0xdd/0x2c0 [ 2046.787546][ T32] schedule_preempt_disabled+0x13/0x30 [ 2046.787568][ T32] __mutex_lock+0xccb/0x1bd0 [ 2046.787593][ T32] ? nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2046.787622][ T32] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 2046.787646][ T32] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2046.787671][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 2046.787697][ T32] ? kmalloc_reserve+0xf9/0x350 [ 2046.787725][ T32] ? skb_put+0x138/0x180 [ 2046.787751][ T32] ? __nlmsg_put+0x152/0x1c0 [ 2046.787789][ T32] ? nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2046.787814][ T32] nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2046.787842][ T32] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 2046.787866][ T32] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 2046.787895][ T32] genl_family_rcv_msg_doit+0x214/0x300 [ 2046.787922][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2046.787945][ T32] ? genl_get_cmd+0x3e7/0x760 [ 2046.787975][ T32] ? __radix_tree_lookup+0x217/0x2b0 [ 2046.788003][ T32] genl_rcv_msg+0x560/0x800 [ 2046.788028][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2046.788051][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 2046.788070][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 2046.788097][ T32] ? ref_tracker_free+0xc4/0x6c0 [ 2046.788121][ T32] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 2046.788150][ T32] netlink_rcv_skb+0x159/0x420 [ 2046.788176][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2046.788201][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2046.788231][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2046.788265][ T32] genl_rcv+0x28/0x40 [ 2046.788284][ T32] netlink_unicast+0x585/0x850 [ 2046.788309][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 2046.788336][ T32] netlink_sendmsg+0x8b0/0xda0 [ 2046.788361][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2046.788384][ T32] ? selinux_socket_sendmsg+0x198/0x2f0 [ 2046.788419][ T32] ____sys_sendmsg+0xa4d/0xbe0 [ 2046.788444][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2046.788465][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2046.788502][ T32] ? plist_check_list+0x1b8/0x280 [ 2046.788521][ T32] ? plist_del+0x308/0x510 [ 2046.788541][ T32] ___sys_sendmsg+0x190/0x1e0 [ 2046.788570][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 2046.788598][ T32] ? futex_wake+0x220/0x5e0 [ 2046.788636][ T32] ? find_held_lock+0x2b/0x80 [ 2046.788677][ T32] __sys_sendmsg+0x160/0x210 [ 2046.790397][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 2046.790434][ T32] do_syscall_64+0x123/0x790 [ 2046.790461][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.790481][ T32] RIP: 0033:0x7f205ad9e159 [ 2046.790497][ T32] RSP: 002b:00007f205bd50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2046.790516][ T32] RAX: ffffffffffffffda RBX: 00007f205b025fa0 RCX: 00007f205ad9e159 [ 2046.790529][ T32] RDX: 0000000004004990 RSI: 0000200000000040 RDI: 0000000000000004 [ 2046.790542][ T32] RBP: 00007f205ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 2046.790554][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2046.790565][ T32] R13: 00007f205b026038 R14: 00007f205b025fa0 R15: 00007ffc8492f688 [ 2046.790592][ T32] [ 2046.790608][ T32] [ 2046.790608][ T32] Showing all locks held in the system: [ 2046.790619][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 2046.790633][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2046.790722][ T32] locks held by syz.8.2252/15739: 2, on CPU#0: [ 2046.790736][ T32] #0: ffff8880285e20e8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 2046.790783][ T32] #1: ffffffff8f2893c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 2046.790832][ T32] locks held by syz.6.3008/18456: 2, on CPU#0: [ 2046.790845][ T32] #0: ffffffff90d80da8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2046.790889][ T32] #1: ffffffff8f2893c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 2046.790940][ T32] [ 2046.790945][ T32] ============================================= [ 2046.790945][ T32] [ 2046.790953][ T32] NMI backtrace for cpu 1 [ 2046.790967][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2046.790991][ T32] Tainted: [L]=SOFTLOCKUP [ 2046.790998][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2046.791009][ T32] Call Trace: [ 2046.791015][ T32] [ 2046.791023][ T32] dump_stack_lvl+0x100/0x190 [ 2046.791051][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2046.791080][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2046.791102][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 2046.791125][ T32] sys_info+0x141/0x190 [ 2046.791151][ T32] watchdog+0xcb1/0x1030 [ 2046.791182][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2046.791205][ T32] ? __pfx_watchdog+0x10/0x10 [ 2046.791226][ T32] ? __kthread_parkme+0x18f/0x230 [ 2046.791252][ T32] ? kthread+0x13a/0x450 [ 2046.791274][ T32] ? __pfx_watchdog+0x10/0x10 [ 2046.791293][ T32] kthread+0x373/0x450 [ 2046.791317][ T32] ? __pfx_kthread+0x10/0x10 [ 2046.791343][ T32] ret_from_fork+0x730/0xd60 [ 2046.791364][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2046.791386][ T32] ? __switch_to+0x800/0x10f0 [ 2046.791412][ T32] ? __pfx_kthread+0x10/0x10 [ 2046.791439][ T32] ret_from_fork_asm+0x1a/0x30 [ 2046.791470][ T32] [ 2046.791477][ T32] Sending NMI from CPU 1 to CPUs 0: [ 2046.791500][ C0] NMI backtrace for cpu 0 [ 2046.791513][ C0] CPU: 0 UID: 0 PID: 5359 Comm: getty Tainted: G L syzkaller #0 PREEMPT(full) [ 2046.791533][ C0] Tainted: [L]=SOFTLOCKUP [ 2046.791538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2046.791546][ C0] RIP: 0010:kasan_check_range+0xff/0x1e0 [ 2046.791568][ C0] Code: 39 c2 74 1d 80 38 00 74 f2 ba 01 00 00 00 48 85 c0 74 2c 41 83 e2 07 49 39 c1 75 15 45 3a 11 7d 10 ba 01 00 00 00 5b 5d 89 d0 <41> 5c c3 cc cc cc cc 41 0f b6 d0 e8 e1 e6 ff ff 83 f0 01 89 c2 5b [ 2046.791582][ C0] RSP: 0018:ffffc9000300fc80 EFLAGS: 00000246 [ 2046.791594][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff85a80ee9 [ 2046.791603][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880385db030 [ 2046.791611][ C0] RBP: ffff8880385db030 R08: 0000000000000001 R09: ffffed10070bb606 [ 2046.791620][ C0] R10: ffff8880385db037 R11: 0000000000000000 R12: ffff8880385db000 [ 2046.791630][ C0] R13: 0000000000000001 R14: ffff88806193b2e0 R15: 0000000000000000 [ 2046.791639][ C0] FS: 00007f2d7bbecc80(0000) GS:ffff888123b5c000(0000) knlGS:0000000000000000 [ 2046.791655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2046.791672][ C0] CR2: 00005647046b7be0 CR3: 0000000074e1f000 CR4: 00000000003526f0 [ 2046.791682][ C0] Call Trace: [ 2046.791687][ C0] [ 2046.791693][ C0] ldsem_up_read+0x29/0x90 [ 2046.791711][ C0] file_tty_write.isra.0+0x5ea/0x890 [ 2046.791730][ C0] vfs_write+0x6af/0x1050 [ 2046.791744][ C0] ? __pfx_tty_write+0x10/0x10 [ 2046.791760][ C0] ? __pfx_vfs_write+0x10/0x10 [ 2046.791772][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 2046.791793][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 2046.791813][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 2046.791829][ C0] ? irqentry_exit+0x24d/0xa10 [ 2046.791848][ C0] ksys_write+0x12a/0x250 [ 2046.791861][ C0] ? __pfx_ksys_write+0x10/0x10 [ 2046.791877][ C0] do_syscall_64+0x123/0x790 [ 2046.791895][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.791909][ C0] RIP: 0033:0x7f2d7bd3c407 [ 2046.791920][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2046.791932][ C0] RSP: 002b:00007ffe930a5d80 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 2046.791945][ C0] RAX: ffffffffffffffda RBX: 00007f2d7bbecc80 RCX: 00007f2d7bd3c407 [ 2046.791954][ C0] RDX: 0000000000000001 RSI: 00007f2d7bf37c06 RDI: 0000000000000001 [ 2046.791963][ C0] RBP: 00007f2d7bf37c06 R08: 0000000000000000 R09: 0000000000000000 [ 2046.791971][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2046.791980][ C0] R13: 00007f2d7bbecc08 R14: 0000000000000002 R15: 0000000000000002 [ 2046.791994][ C0] [ 2046.794148][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2047.657066][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2047.667735][ T32] Tainted: [L]=SOFTLOCKUP [ 2047.672047][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2047.682086][ T32] Call Trace: [ 2047.685358][ T32] [ 2047.688272][ T32] dump_stack_lvl+0x100/0x190 [ 2047.693044][ T32] vpanic+0x553/0x970 [ 2047.697019][ T32] ? __pfx_vpanic+0x10/0x10 [ 2047.701529][ T32] panic+0xd1/0xe0 [ 2047.705261][ T32] ? __pfx_panic+0x10/0x10 [ 2047.709696][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 2047.715854][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 2047.722088][ T32] ? watchdog.cold+0x1ec/0x234 [ 2047.726853][ T32] watchdog.cold+0x1fd/0x234 [ 2047.731447][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2047.737257][ T32] ? __pfx_watchdog+0x10/0x10 [ 2047.741924][ T32] ? __kthread_parkme+0x18f/0x230 [ 2047.746939][ T32] ? kthread+0x13a/0x450 [ 2047.751196][ T32] ? __pfx_watchdog+0x10/0x10 [ 2047.755893][ T32] kthread+0x373/0x450 [ 2047.759965][ T32] ? __pfx_kthread+0x10/0x10 [ 2047.764551][ T32] ret_from_fork+0x730/0xd60 [ 2047.769153][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2047.774264][ T32] ? __switch_to+0x800/0x10f0 [ 2047.778933][ T32] ? __pfx_kthread+0x10/0x10 [ 2047.783538][ T32] ret_from_fork_asm+0x1a/0x30 [ 2047.788299][ T32] [ 2047.791493][ T32] Kernel Offset: disabled [ 2047.795808][ T32] Rebooting in 86400 seconds..