last executing test programs: 31.178902335s ago: executing program 2 (id=314): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 26.409678569s ago: executing program 2 (id=320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000540)={0xb2, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) write(r1, &(0x7f0000001640)="8b", 0x11) 24.800981096s ago: executing program 3 (id=323): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') 23.335645202s ago: executing program 4 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000192c0)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) setxattr$incfs_id(&(0x7f0000019a00)='./cgroup\x00', &(0x7f0000019a40), 0x0, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 22.696400895s ago: executing program 1 (id=327): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000700)=[{0x6, 0x1, 0x2, 0x7fffffff}]}) syz_open_dev$sndpcmc(&(0x7f0000000840), 0x1, 0x2) fsopen(&(0x7f0000000880)='afs\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f00000009c0), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="3c34000000000000040100c910fc0200"/27, @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 22.012525684s ago: executing program 3 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4c010) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002800)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001b800)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0) 21.304567562s ago: executing program 3 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc6, 0x9, 0x5}}}}]}, 0x44}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f00000007c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 21.30425705s ago: executing program 1 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/87, 0x62}, {&(0x7f0000019600)=""/4096, 0x100a}], 0x2, &(0x7f000001a600)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) shmget(0x2, 0x2000, 0x8, &(0x7f000040f000/0x2000)=nil) 20.330476792s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000840) r4 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) 18.70659916s ago: executing program 0 (id=333): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x8, 0x40000021, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) membarrier(0x10, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) syz_emit_ethernet(0x68, &(0x7f00000003c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0xfffffffe, {{0x0, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x4}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r2, 0x3, r3, 0x43, 0x80000}) 17.351946957s ago: executing program 4 (id=334): r0 = syz_open_procfs(0x0, &(0x7f0000003c00)='fd/3\x00') ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 16.816871163s ago: executing program 3 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000340)={{0x0, 0xffffffff, 0x10, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x41000, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x20, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x1}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16.814969382s ago: executing program 0 (id=345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 14.774190664s ago: executing program 3 (id=336): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0xc0841) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0xd0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='9p\x00', 0x800000, 0x0) 14.584164202s ago: executing program 2 (id=337): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = msgget$private(0x0, 0x790) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$lock(r4, 0x5, 0x0) socket(0x18, 0x0, 0x1) 13.24721s ago: executing program 0 (id=338): clock_gettime(0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x3, 0x1, 0x7, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4011) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x100}, &(0x7f0000000280)=0x8) 13.183914687s ago: executing program 2 (id=339): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000003b00)={0x0, 0x21, 0x800000000004}, &(0x7f0000003b40)) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x45facfd65bcc5987) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000003c00)='fd/3\x00') ioctl$VT_RESIZEX(r2, 0x560a, 0x0) write$md_sysfs(0xffffffffffffffff, 0x0, 0x0) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x2, 0x0) write$md_sysfs(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000002c0)={0x980900, 0x3, @value=0x2}) 12.832233948s ago: executing program 1 (id=340): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000003b00)={0x0, 0x21, 0x800000000004}, &(0x7f0000003b40)) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x45facfd65bcc5987) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000003c00)='fd/3\x00') ioctl$VT_RESIZEX(r2, 0x560a, 0x0) write$md_sysfs(0xffffffffffffffff, 0x0, 0x0) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x2, 0x0) write$md_sysfs(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000002c0)={0x980900, 0x3, @value=0x2}) 11.189249463s ago: executing program 0 (id=341): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000000c40)=""/102368, 0x18fe0) sched_setscheduler(0x0, 0x1, &(0x7f0000019c40)=0x20000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x20400, 0x20) 11.091929746s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f000000a0c0)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000023100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000023180)={0xe, 0x6, &(0x7f0000023240)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000023280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000232c0)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000023300)={r4, 0x0, &(0x7f0000023380)=@tcp}, 0x20) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 9.370682478s ago: executing program 2 (id=343): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 9.241536572s ago: executing program 4 (id=344): socket(0x1e, 0x805, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 9.237026418s ago: executing program 1 (id=346): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000240)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000019280), 0x800001d, 0x360) 8.00106847s ago: executing program 1 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="308201103081bea00302012b020101300a06082a85030701010302300e310c300a06035504030c0373797a3020170d3232303531383232333234315a180f32313232303432343232333234315a300e310c300a06035504030c0373797a3066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300a06082a8503070101030203410041320973a4c138d6637d8bf7503fda9f6848c150e3423a9b2b28122aa7c2753165778c3c9e0d56b2f9dc04333eb09ef9744e59b383f29127da5ec733c0c18f41", 0x114, 0xfffffffffffffffe) 6.773316154s ago: executing program 3 (id=348): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) mkdir(0x0, 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6.671921274s ago: executing program 0 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/87, 0x62}, {&(0x7f0000019600)=""/4096, 0x100a}], 0x2, &(0x7f000001a600)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) shmget(0x2, 0x2000, 0x8, &(0x7f000040f000/0x2000)=nil) 6.668926854s ago: executing program 4 (id=350): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = msgget$private(0x0, 0x790) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$lock(r4, 0x5, 0x0) socket(0x18, 0x0, 0x1) 4.885474144s ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019340)=0x400003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f00000196c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a000006"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000193c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 4.88365118s ago: executing program 4 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 0s ago: executing program 4 (id=353): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)="aefdda9d241001005a90f5", 0xb}, {&(0x7f0000000380)="aa1d484e0a4e0000", 0x8}], 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 59.494534][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 59.494550][ T31] audit: type=1400 audit(1794089034.595:129): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.495731][ T31] audit: type=1400 audit(1794089034.595:130): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.497319][ T5608] cgroup: Unknown subsys name 'net' [ 59.498359][ T31] audit: type=1400 audit(1794089034.595:131): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.691971][ T5608] cgroup: Unknown subsys name 'cpuset' [ 59.699911][ T5608] cgroup: Unknown subsys name 'rlimit' [ 59.827832][ T31] audit: type=1400 audit(1794089034.925:132): avc: denied { setattr } for pid=5608 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.828212][ T31] audit: type=1400 audit(1794089034.925:133): avc: denied { create } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.828401][ T31] audit: type=1400 audit(1794089034.925:134): avc: denied { write } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.828625][ T31] audit: type=1400 audit(1794089034.925:135): avc: denied { read } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.841788][ T31] audit: type=1400 audit(1794089034.935:136): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.841827][ T31] audit: type=1400 audit(1794089034.935:137): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.925681][ T5610] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.926670][ T31] audit: type=1400 audit(1794089035.025:138): avc: denied { relabelto } for pid=5610 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.876721][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.878137][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.878475][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.878836][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.883694][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.893098][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.893733][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.900336][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.900583][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.907752][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.907952][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.914879][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.915124][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.919917][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.920714][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.921244][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.921845][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.922113][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.922895][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.930803][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.938504][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.938514][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.940068][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.940647][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.941856][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.942470][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.466930][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.467720][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.492834][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.600796][ T5622] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.731838][ T5621] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.773979][ T5619] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.794242][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 63.860281][ T5629] infiniband rxe0: set active [ 63.860968][ T5629] infiniband rxe0: added rxe_eth0 [ 63.874180][ T5629] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 63.874208][ T5629] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 63.874236][ T5629] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 63.898636][ T5629] RDS/IB: rxe0: added [ 63.903939][ T5629] smc: adding ib device rxe0 with port count 1 [ 63.904002][ T5629] smc: ib device rxe0 port 1 has no pnetid [ 63.920260][ T1226] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.920851][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.963206][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.174277][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.392026][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.561481][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.561565][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.561656][ T5622] bridge_slave_0: entered allmulticast mode [ 64.563710][ T5622] bridge_slave_0: entered promiscuous mode [ 64.601715][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.601785][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.601840][ T5621] bridge_slave_0: entered allmulticast mode [ 64.602507][ T5621] bridge_slave_0: entered promiscuous mode [ 64.610085][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.610195][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.610269][ T5621] bridge_slave_1: entered allmulticast mode [ 64.611230][ T5621] bridge_slave_1: entered promiscuous mode [ 64.662840][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.677810][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.677881][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.677958][ T5622] bridge_slave_1: entered allmulticast mode [ 64.678973][ T5622] bridge_slave_1: entered promiscuous mode [ 64.776878][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.777033][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.777110][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.777388][ T5620] bridge_slave_0: entered allmulticast mode [ 64.779897][ T5620] bridge_slave_0: entered promiscuous mode [ 64.783977][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.786443][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.795250][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.795366][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.795453][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.795528][ T5620] bridge_slave_1: entered allmulticast mode [ 64.796981][ T5620] bridge_slave_1: entered promiscuous mode [ 64.858478][ T5621] team0: Port device team_slave_0 added [ 64.899068][ T5622] team0: Port device team_slave_0 added [ 64.901817][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.904146][ T5621] team0: Port device team_slave_1 added [ 64.904276][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.904398][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.904483][ T5619] bridge_slave_0: entered allmulticast mode [ 64.906142][ T5619] bridge_slave_0: entered promiscuous mode [ 64.908193][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.908267][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.908554][ T5619] bridge_slave_1: entered allmulticast mode [ 64.910599][ T5619] bridge_slave_1: entered promiscuous mode [ 64.913096][ T5622] team0: Port device team_slave_1 added [ 64.930927][ T5630] Bluetooth: hci4: command tx timeout [ 64.932512][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.991077][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.991090][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.991107][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.013578][ T5630] Bluetooth: hci3: command tx timeout [ 65.013651][ T5630] Bluetooth: hci2: command tx timeout [ 65.013699][ T5630] Bluetooth: hci0: command tx timeout [ 65.013744][ T5630] Bluetooth: hci1: command tx timeout [ 65.016588][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.017013][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.017022][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.017039][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.018600][ T5620] team0: Port device team_slave_0 added [ 65.030680][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.030692][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.030708][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.034819][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.046385][ T5620] team0: Port device team_slave_1 added [ 65.065679][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.065691][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.065707][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.072588][ T5629] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.094300][ T5619] team0: Port device team_slave_0 added [ 65.250726][ T5619] team0: Port device team_slave_1 added [ 65.251189][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.251200][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.251219][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.255212][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.255223][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.255241][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.258802][ T5622] hsr_slave_0: entered promiscuous mode [ 65.260344][ T5622] hsr_slave_1: entered promiscuous mode [ 65.390671][ T5621] hsr_slave_0: entered promiscuous mode [ 65.391075][ T5621] hsr_slave_1: entered promiscuous mode [ 65.391365][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 65.391373][ T5621] Cannot create hsr debugfs directory [ 65.397951][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.397960][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.397971][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.444743][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.444756][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.444772][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.535386][ T5620] hsr_slave_0: entered promiscuous mode [ 65.536527][ T5620] hsr_slave_1: entered promiscuous mode [ 65.536818][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 65.536831][ T5620] Cannot create hsr debugfs directory [ 65.604951][ T5619] hsr_slave_0: entered promiscuous mode [ 65.605363][ T5619] hsr_slave_1: entered promiscuous mode [ 65.606115][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 65.606128][ T5619] Cannot create hsr debugfs directory [ 65.854330][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.857478][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.882153][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.884899][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.905275][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.907730][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.908378][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.912689][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.976436][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.976515][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.976798][ T5629] bridge_slave_0: entered allmulticast mode [ 65.977875][ T5629] bridge_slave_0: entered promiscuous mode [ 65.984176][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.984242][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.984315][ T5629] bridge_slave_1: entered allmulticast mode [ 65.985373][ T5629] bridge_slave_1: entered promiscuous mode [ 66.025395][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.037310][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.051751][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.051807][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.079360][ T5629] team0: Port device team_slave_0 added [ 66.081162][ T5629] team0: Port device team_slave_1 added [ 66.110157][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.110169][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.110185][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.111759][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.111770][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.111786][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.153781][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.165187][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.170279][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.200468][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.202589][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.210286][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.250354][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.252321][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.273915][ T5629] hsr_slave_0: entered promiscuous mode [ 66.274357][ T5629] hsr_slave_1: entered promiscuous mode [ 66.274637][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 66.274649][ T5629] Cannot create hsr debugfs directory [ 66.376168][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.377838][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.378238][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.381261][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.382482][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.388771][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.391568][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.395334][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.448077][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.501727][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.524875][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.526608][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.548294][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.548778][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.564982][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.567868][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.567972][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.600974][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.603287][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.605236][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.605279][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.638182][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.641824][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.691362][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.713838][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.716520][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.741011][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.746064][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.746724][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.748573][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.752793][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.752862][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.754158][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.754254][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.786613][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.795634][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.848497][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.909094][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.928771][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.928917][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.966511][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.966578][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.009004][ T5625] Bluetooth: hci4: command tx timeout [ 67.067238][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.089847][ T5625] Bluetooth: hci1: command tx timeout [ 67.089875][ T5625] Bluetooth: hci0: command tx timeout [ 67.089892][ T5625] Bluetooth: hci2: command tx timeout [ 67.089908][ T5625] Bluetooth: hci3: command tx timeout [ 67.147491][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.185173][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.185256][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.188514][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.188600][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.201201][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.209783][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.245091][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.245172][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.249318][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.249388][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.640999][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.783892][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.787502][ T5621] veth0_vlan: entered promiscuous mode [ 67.827270][ T5621] veth1_vlan: entered promiscuous mode [ 67.912116][ T5621] veth0_macvtap: entered promiscuous mode [ 67.917358][ T5621] veth1_macvtap: entered promiscuous mode [ 68.004522][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.005562][ T5622] veth0_vlan: entered promiscuous mode [ 68.014555][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.022652][ T5622] veth1_vlan: entered promiscuous mode [ 68.096973][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.101320][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.157349][ T5622] veth0_macvtap: entered promiscuous mode [ 68.180838][ T5622] veth1_macvtap: entered promiscuous mode [ 68.202018][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.209590][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.222645][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.276416][ T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.276434][ T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.302760][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.318064][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.353401][ T5619] veth0_vlan: entered promiscuous mode [ 68.367904][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.375359][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.375374][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.404874][ T242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406511][ T300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406567][ T300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406610][ T300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406653][ T300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.407005][ T5619] veth1_vlan: entered promiscuous mode [ 68.412326][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 68.412337][ T31] audit: type=1400 audit(1794089043.515:157): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.C9X2HH/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.418025][ T31] audit: type=1400 audit(1794089043.515:158): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.418060][ T31] audit: type=1400 audit(1794089043.515:159): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.C9X2HH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.423250][ T31] audit: type=1400 audit(1794089043.515:160): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.430072][ T31] audit: type=1400 audit(1794089043.535:161): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.C9X2HH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.434971][ T31] audit: type=1400 audit(1794089043.535:162): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.C9X2HH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.452013][ T31] audit: type=1400 audit(1794089043.555:163): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.470636][ T31] audit: type=1400 audit(1794089043.565:164): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.475763][ T31] audit: type=1400 audit(1794089043.565:165): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="gadgetfs" ino=7722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.606451][ T31] audit: type=1400 audit(1794089043.695:166): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 68.725332][ T5629] veth0_vlan: entered promiscuous mode [ 68.732729][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.732744][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.745926][ T5621] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.768904][ T5619] veth0_macvtap: entered promiscuous mode [ 68.783270][ T5629] veth1_vlan: entered promiscuous mode [ 68.794010][ T5619] veth1_macvtap: entered promiscuous mode [ 68.811388][ T5620] veth0_vlan: entered promiscuous mode [ 68.847295][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.847314][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.866006][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.868226][ T5620] veth1_vlan: entered promiscuous mode [ 68.889083][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.925006][ T5629] veth0_macvtap: entered promiscuous mode [ 68.939982][ T5629] veth1_macvtap: entered promiscuous mode [ 68.961410][ T5620] veth0_macvtap: entered promiscuous mode [ 68.977623][ T5620] veth1_macvtap: entered promiscuous mode [ 69.002341][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.019965][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.072980][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.099311][ T5630] Bluetooth: hci4: command tx timeout [ 69.113757][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.145646][ T300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.145664][ T300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.179373][ T5625] Bluetooth: hci2: command tx timeout [ 69.179397][ T5625] Bluetooth: hci0: command tx timeout [ 69.179415][ T5625] Bluetooth: hci1: command tx timeout [ 69.179530][ T5630] Bluetooth: hci3: command tx timeout [ 69.232324][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.232336][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.242753][ T242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.243526][ T242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.243664][ T242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.243930][ T242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.251154][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.416040][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.416060][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.510598][ T5826] vivid-000: disconnect [ 69.512003][ T5826] vivid-000: reconnect [ 69.962279][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.991429][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.996024][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.996639][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.997006][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.997214][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.118244][ T339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.118262][ T339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.184772][ T339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.186005][ T339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.230568][ T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.230589][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.325377][ T339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.325397][ T339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.203776][ T4941] Bluetooth: hci4: command tx timeout [ 71.249962][ T4941] Bluetooth: hci3: command tx timeout [ 71.249992][ T4941] Bluetooth: hci1: command tx timeout [ 71.250009][ T4941] Bluetooth: hci0: command tx timeout [ 71.250028][ T4941] Bluetooth: hci2: command tx timeout [ 72.129014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 73.825356][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 73.825373][ T31] audit: type=1400 audit(1794089048.925:192): avc: denied { prog_load } for pid=5850 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.851967][ T31] audit: type=1400 audit(1794089048.955:193): avc: denied { bpf } for pid=5850 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.878809][ T31] audit: type=1400 audit(1794089048.975:194): avc: denied { create } for pid=5850 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.918941][ T31] audit: type=1400 audit(1794089049.015:195): avc: denied { listen } for pid=5850 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.981805][ T31] audit: type=1400 audit(1794089050.085:196): avc: denied { create } for pid=5854 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.012114][ T2340] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.114603][ T31] audit: type=1400 audit(1794089050.215:197): avc: denied { setopt } for pid=5854 comm="syz.0.13" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.143254][ T31] audit: type=1400 audit(1794089050.245:198): avc: denied { read } for pid=5854 comm="syz.0.13" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.866520][ T31] audit: type=1400 audit(1794089050.965:199): avc: denied { connect } for pid=5874 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.997567][ T31] audit: type=1400 audit(1794089051.215:200): avc: denied { mount } for pid=5867 comm="syz.0.15" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.997645][ T31] audit: type=1400 audit(1794089051.225:201): avc: denied { map_read map_write } for pid=5867 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.501172][ T30] cfg80211: failed to load regulatory.db [ 78.750127][ T5891] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 78.937175][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 78.937192][ T31] audit: type=1400 audit(1794089054.035:213): avc: denied { getattr } for pid=5860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.937234][ T31] audit: type=1400 audit(1794089054.035:214): avc: denied { write } for pid=5860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.937269][ T31] audit: type=1400 audit(1794089054.035:215): avc: denied { add_name } for pid=5860 comm="dhcpcd-run-hook" name="resolv.conf.rxe_eth0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.033127][ T31] audit: type=1400 audit(1794089054.135:216): avc: denied { create } for pid=5899 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.074748][ T31] audit: type=1400 audit(1794089054.175:217): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.112865][ T31] audit: type=1400 audit(1794089054.215:218): avc: denied { read write } for pid=5899 comm="syz.1.20" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.112912][ T31] audit: type=1400 audit(1794089054.215:219): avc: denied { open } for pid=5899 comm="syz.1.20" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.112948][ T31] audit: type=1400 audit(1794089054.215:220): avc: denied { ioctl } for pid=5899 comm="syz.1.20" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.212053][ T31] audit: type=1400 audit(1794089054.315:221): avc: denied { write } for pid=5902 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.212710][ T31] audit: type=1400 audit(1794089054.315:222): avc: denied { remove_name } for pid=5902 comm="rm" name="resolv.conf.rxe_eth0.ipv4ll" dev="tmpfs" ino=1865 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.470560][ T5907] fuse: Bad value for 'fd' [ 85.229533][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 85.229547][ T31] audit: type=1400 audit(1794089059.915:233): avc: denied { mount } for pid=5930 comm="syz.3.22" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.229571][ T31] audit: type=1400 audit(1794089059.925:234): avc: denied { search } for pid=5930 comm="syz.3.22" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.229589][ T31] audit: type=1400 audit(1794089059.925:235): avc: denied { search } for pid=5930 comm="syz.3.22" name="per_cpu" dev="tracefs" ino=3926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.229607][ T31] audit: type=1400 audit(1794089059.925:236): avc: denied { search } for pid=5930 comm="syz.3.22" name="cpu0" dev="tracefs" ino=3927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.229625][ T31] audit: type=1400 audit(1794089059.925:237): avc: denied { read } for pid=5930 comm="syz.3.22" name="trace_pipe_raw" dev="tracefs" ino=3930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 85.229643][ T31] audit: type=1400 audit(1794089059.925:238): avc: denied { open } for pid=5930 comm="syz.3.22" path="/5/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 85.262104][ T31] audit: type=1400 audit(1794089060.365:239): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 86.435327][ T31] audit: type=1400 audit(1794089061.535:240): avc: denied { name_bind } for pid=5928 comm="syz.1.28" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.435481][ T31] audit: type=1400 audit(1794089061.535:241): avc: denied { node_bind } for pid=5928 comm="syz.1.28" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 86.628648][ T31] audit: type=1400 audit(1794089061.725:242): avc: denied { mount } for pid=5939 comm="syz.0.24" name="/" dev="autofs" ino=9594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.462096][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 91.462115][ T31] audit: type=1400 audit(1794089066.105:249): avc: denied { create } for pid=5960 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.462153][ T31] audit: type=1400 audit(1794089066.115:250): avc: denied { bind } for pid=5960 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.462175][ T31] audit: type=1400 audit(1794089066.125:251): avc: denied { accept } for pid=5960 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.462192][ T31] audit: type=1400 audit(1794089066.125:252): avc: denied { read } for pid=5960 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.699862][ T31] audit: type=1400 audit(1794089066.795:253): avc: denied { ioctl } for pid=5966 comm="syz.0.37" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.609002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.431217][ T31] audit: type=1400 audit(1794089068.865:254): avc: denied { connect } for pid=5975 comm="syz.2.40" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.431261][ T31] audit: type=1400 audit(1794089068.875:255): avc: denied { write } for pid=5975 comm="syz.2.40" laddr=fe80::12 lport=60 faddr=fe80::15 fport=20137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.448952][ T31] audit: type=1400 audit(1794089070.535:256): avc: denied { read } for pid=5982 comm="syz.4.38" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.448999][ T31] audit: type=1400 audit(1794089070.545:257): avc: denied { open } for pid=5982 comm="syz.4.38" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.013864][ T31] audit: type=1400 audit(1794089072.095:258): avc: denied { read write } for pid=5988 comm="syz.1.42" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.014231][ T31] audit: type=1400 audit(1794089072.095:259): avc: denied { open } for pid=5988 comm="syz.1.42" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.070639][ T31] audit: type=1400 audit(1794089072.155:260): avc: denied { mount } for pid=5988 comm="syz.1.42" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.100370][ T5990] netlink: zone id is out of range [ 97.100412][ T5990] netlink: zone id is out of range [ 97.100432][ T5990] netlink: zone id is out of range [ 97.101028][ T5990] netlink: zone id is out of range [ 97.143020][ T31] audit: type=1400 audit(1794089072.235:261): avc: denied { ioctl } for pid=5982 comm="syz.4.38" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0xc00c642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.160653][ T5990] netlink: set zone limit has 4 unknown bytes [ 98.084551][ T25] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 98.346911][ T31] audit: type=1400 audit(1794089073.445:262): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.717311][ T5996] fido_id[5996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.808989][ T31] audit: type=1400 audit(1794089074.895:263): avc: denied { bind } for pid=6005 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.370035][ T31] audit: type=1400 audit(1794089075.465:264): avc: denied { prog_load } for pid=5992 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.370987][ T31] audit: type=1400 audit(1794089075.475:265): avc: denied { read write } for pid=5993 comm="syz.0.43" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.372370][ T31] audit: type=1400 audit(1794089075.475:266): avc: denied { open } for pid=5993 comm="syz.0.43" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.114276][ T6016] ovs-dp0: entered promiscuous mode [ 101.555617][ T31] audit: type=1400 audit(1794089076.655:267): avc: denied { bind } for pid=6018 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.208381][ T31] audit: type=1400 audit(1794089077.305:268): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.385141][ T31] audit: type=1400 audit(1794089077.485:269): avc: denied { write } for pid=6022 comm="syz.3.50" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.454063][ T31] audit: type=1400 audit(1794089077.555:270): avc: denied { map_create } for pid=6022 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.455172][ T31] audit: type=1400 audit(1794089077.555:271): avc: denied { map_read map_write } for pid=6022 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.514949][ T31] audit: type=1400 audit(1794089077.615:272): avc: denied { prog_run } for pid=6022 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.390254][ T6034] input: syz0 as /devices/virtual/input/input5 [ 105.448916][ T31] audit: type=1400 audit(1794089080.485:273): avc: denied { ioctl } for pid=6031 comm="syz.3.52" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x40045564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.267605][ T31] audit: type=1400 audit(1794089082.365:274): avc: denied { write } for pid=6040 comm="syz.3.54" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.390811][ T6041] kvm [6040]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4c78 [ 107.462269][ T31] audit: type=1400 audit(1794089082.555:275): avc: denied { ioctl } for pid=6047 comm="syz.0.55" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.338206][ T31] audit: type=1400 audit(1794089083.945:276): avc: denied { mounton } for pid=6050 comm="syz.2.56" path="/proc/34/task" dev="proc" ino=9766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 110.314884][ T31] audit: type=1400 audit(1794089084.815:277): avc: denied { bind } for pid=6055 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.314930][ T31] audit: type=1400 audit(1794089084.815:278): avc: denied { name_bind } for pid=6055 comm="syz.4.48" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 110.314963][ T31] audit: type=1400 audit(1794089084.815:279): avc: denied { node_bind } for pid=6055 comm="syz.4.48" saddr=ff05::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 110.444508][ T31] audit: type=1400 audit(1794089085.545:280): avc: denied { open } for pid=6056 comm="syz.1.49" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.362889][ T31] audit: type=1400 audit(1794089086.465:281): avc: denied { ioctl } for pid=6056 comm="syz.1.49" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.467552][ T31] audit: type=1400 audit(1794089086.565:282): avc: denied { create } for pid=6065 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.488245][ T31] audit: type=1400 audit(1794089086.575:283): avc: denied { ioctl } for pid=6065 comm="syz.0.60" path="socket:[9799]" dev="sockfs" ino=9799 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.105774][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 113.088986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.225247][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 113.225260][ T31] audit: type=1400 audit(1794089087.905:285): avc: denied { read } for pid=6075 comm="syz.0.63" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.225295][ T31] audit: type=1400 audit(1794089087.905:286): avc: denied { open } for pid=6075 comm="syz.0.63" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.225326][ T31] audit: type=1400 audit(1794089087.945:287): avc: denied { ioctl } for pid=6075 comm="syz.0.63" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0xc0109207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.339046][ T6089] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 116.429967][ T31] audit: type=1400 audit(1794089091.515:288): avc: denied { shutdown } for pid=6084 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.513089][ T31] audit: type=1400 audit(1794089093.185:289): avc: denied { write } for pid=6093 comm="syz.1.69" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 118.678766][ T31] audit: type=1400 audit(1794089093.775:290): avc: denied { name_bind } for pid=6098 comm="syz.2.71" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 122.532442][ T31] audit: type=1400 audit(1794089097.635:291): avc: denied { create } for pid=6110 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.249090][ T31] audit: type=1400 audit(1794089100.345:292): avc: denied { create } for pid=6128 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.283690][ T31] audit: type=1400 audit(1794089100.385:293): avc: denied { getopt } for pid=6128 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.404195][ T6132] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 127.502221][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.502332][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.449064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.899221][ T6145] veth1_macvtap: left promiscuous mode [ 128.899339][ T6145] macsec0: entered promiscuous mode [ 130.186432][ T31] audit: type=1400 audit(1794089105.285:294): avc: denied { append } for pid=6158 comm="syz.3.86" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 130.226554][ T31] audit: type=1400 audit(1794089105.325:295): avc: denied { open } for pid=6158 comm="syz.3.86" path="/17/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 130.876189][ T6160] ovs-dp0: entered promiscuous mode [ 131.299329][ T6163] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 131.738421][ T31] audit: type=1400 audit(1794089106.835:296): avc: denied { create } for pid=6167 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.925915][ T31] audit: type=1400 audit(1794089108.995:297): avc: denied { write } for pid=6180 comm="syz.4.91" name="route" dev="proc" ino=4026533127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 134.480158][ T31] audit: type=1400 audit(1794089109.125:298): avc: denied { ioctl } for pid=6182 comm="syz.0.87" path="socket:[9916]" dev="sockfs" ino=9916 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.129084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.191911][ T31] audit: type=1400 audit(1794089110.875:299): avc: denied { ioctl } for pid=6190 comm="syz.2.92" path="socket:[9934]" dev="sockfs" ino=9934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.514242][ T31] audit: type=1400 audit(1794089111.615:300): avc: denied { append } for pid=6197 comm="syz.4.94" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.054747][ T6222] netlink: 68 bytes leftover after parsing attributes in process `syz.3.90'. [ 140.499653][ T31] audit: type=1400 audit(1794089115.155:301): avc: denied { write } for pid=6218 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.499722][ T31] audit: type=1400 audit(1794089115.155:302): avc: denied { nlmsg_write } for pid=6218 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.182918][ T6228] futex_wake_op: syz.0.102 tries to shift op by 144; fix this program [ 141.184305][ T6228] futex_wake_op: syz.0.102 tries to shift op by 144; fix this program [ 141.626498][ T31] audit: type=1400 audit(1794089116.725:303): avc: denied { setopt } for pid=6224 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.953538][ T6237] mmap: syz.4.106 (6237) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.025215][ T6237] gadgetfs: bound to dummy_udc driver [ 143.474367][ T25] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 143.476304][ C1] gadgetfs: connected [ 143.556144][ T31] audit: type=1400 audit(1794089118.655:304): avc: denied { write } for pid=6238 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.579534][ T31] audit: type=1400 audit(1794089118.655:305): avc: denied { read write } for pid=6238 comm="syz.2.95" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.581760][ T31] audit: type=1400 audit(1794089118.685:306): avc: denied { open } for pid=6238 comm="syz.2.95" path="/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.749621][ T31] audit: type=1400 audit(1794089118.685:307): avc: denied { ioctl } for pid=6238 comm="syz.2.95" path="/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.903018][ T25] gadgetfs: disconnected [ 144.710392][ C1] gadgetfs: connected [ 144.820965][ T25] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 144.874977][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.875391][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.355015][ C1] gadgetfs: configuration #1 [ 145.425050][ T6235] gadgetfs: suspended from state 3 [ 145.427413][ T5738] usb 1-1: USB disconnect, device number 2 [ 145.450932][ T6235] gadgetfs: disconnected [ 145.520274][ T31] audit: type=1400 audit(1794089120.625:308): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 145.836602][ T6250] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 145.865880][ T6250] : entered promiscuous mode [ 146.273366][ T31] audit: type=1400 audit(1794089121.305:309): avc: denied { write } for pid=6251 comm="syz.1.105" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 146.273403][ T31] audit: type=1400 audit(1794089121.305:310): avc: denied { open } for pid=6251 comm="syz.1.105" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 146.477710][ T31] audit: type=1400 audit(1794089121.565:311): avc: denied { ioctl } for pid=6251 comm="syz.1.105" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x40084d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 148.714288][ T31] audit: type=1400 audit(1794089123.815:312): avc: denied { setopt } for pid=6261 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.736543][ T31] audit: type=1400 audit(1794089123.845:313): avc: denied { bind } for pid=6261 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.739254][ T31] audit: type=1400 audit(1794089123.845:314): avc: denied { name_bind } for pid=6261 comm="syz.1.111" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 148.741270][ T31] audit: type=1400 audit(1794089123.845:315): avc: denied { node_bind } for pid=6261 comm="syz.1.111" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 148.748289][ T31] audit: type=1400 audit(1794089123.845:316): avc: denied { getopt } for pid=6261 comm="syz.1.111" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.749212][ T31] audit: type=1400 audit(1794089123.845:317): avc: denied { connect } for pid=6261 comm="syz.1.111" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.218557][ T6268] ceph: No mds server is up or the cluster is laggy [ 151.504610][ T5765] libceph: connect (1)[c::]:6789 error -101 [ 151.520242][ T5765] libceph: mon0 (1)[c::]:6789 connect error [ 152.948930][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 152.948964][ T31] audit: type=1400 audit(1794089127.995:319): avc: denied { create } for pid=6275 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.949157][ T31] audit: type=1400 audit(1794089128.005:320): avc: denied { setopt } for pid=6275 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.525117][ T31] audit: type=1400 audit(1794089129.255:321): avc: denied { write } for pid=6286 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.644604][ T31] audit: type=1400 audit(1794089130.745:322): avc: denied { mount } for pid=6294 comm="syz.4.110" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 155.645629][ T31] audit: type=1400 audit(1794089130.745:323): avc: denied { search } for pid=6294 comm="syz.4.110" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.645762][ T31] audit: type=1400 audit(1794089130.745:324): avc: denied { search } for pid=6294 comm="syz.4.110" name="usb_gadget" dev="configfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.700303][ T31] audit: type=1400 audit(1794089130.795:325): avc: denied { write search } for pid=6294 comm="syz.4.110" name="usb_gadget" dev="configfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.700357][ T31] audit: type=1400 audit(1794089130.795:326): avc: denied { add_name } for pid=6294 comm="syz.4.110" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.700387][ T31] audit: type=1400 audit(1794089130.795:327): avc: denied { create } for pid=6294 comm="syz.4.110" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 155.744082][ T31] audit: type=1400 audit(1794089130.845:328): avc: denied { write } for pid=6294 comm="syz.4.110" name="functions" dev="configfs" ino=10127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.693850][ T6323] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 159.169106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.579050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.302452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 160.471998][ T6331] ubi0: attaching mtd0 [ 160.489204][ T6331] ubi0: scanning is finished [ 160.489239][ T6331] ubi0: empty MTD device detected [ 161.284422][ T6331] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 162.138993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.679154][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 167.679172][ T31] audit: type=1400 audit(1794089142.715:350): avc: denied { write } for pid=6359 comm="syz.1.128" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 169.780552][ T31] audit: type=1400 audit(1794089144.865:351): avc: denied { create } for pid=6375 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.159374][ T6387] tc action pedit offset 0 out of bounds [ 172.159392][ T6387] tc action pedit offset 0 out of bounds [ 172.159401][ T6387] tc action pedit offset 0 out of bounds [ 172.159409][ T6387] tc action pedit offset 0 out of bounds [ 172.159418][ T6387] tc action pedit offset 0 out of bounds [ 172.159427][ T6387] tc action pedit offset 0 out of bounds [ 172.159435][ T6387] tc action pedit offset 0 out of bounds [ 172.159444][ T6387] tc action pedit offset 0 out of bounds [ 172.159453][ T6387] tc action pedit offset 0 out of bounds [ 172.159462][ T6387] tc action pedit offset 0 out of bounds [ 172.159481][ T6387] 0: reclassify loop, rule prio 0, protocol 800 [ 172.159562][ T31] audit: type=1400 audit(1794089147.255:352): avc: denied { write } for pid=6386 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.331628][ T31] audit: type=1400 audit(1794089147.435:353): avc: denied { write } for pid=6391 comm="syz.0.138" name="functions" dev="configfs" ino=10127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.355278][ T31] audit: type=1400 audit(1794089147.445:354): avc: denied { read } for pid=6391 comm="syz.0.138" name="c_sync" dev="configfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 172.686551][ T6397] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 174.055606][ T6401] netlink: 68 bytes leftover after parsing attributes in process `syz.1.136'. [ 174.516125][ T31] audit: type=1400 audit(1794089149.615:355): avc: denied { read write } for pid=6403 comm="syz.3.141" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.542999][ T31] audit: type=1400 audit(1794089149.645:356): avc: denied { open } for pid=6403 comm="syz.3.141" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.570964][ T31] audit: type=1400 audit(1794089149.675:357): avc: denied { ioctl } for pid=6403 comm="syz.3.141" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.860838][ T6433] futex_wake_op: syz.2.145 tries to shift op by 144; fix this program [ 178.861758][ T6433] futex_wake_op: syz.2.145 tries to shift op by 144; fix this program [ 179.830106][ T31] audit: type=1400 audit(1794089154.935:358): avc: denied { ioctl } for pid=6438 comm="syz.0.149" path="socket:[10554]" dev="sockfs" ino=10554 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.838179][ T31] audit: type=1400 audit(1794089154.935:359): avc: denied { write } for pid=6438 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.924222][ T31] audit: type=1400 audit(1794089155.025:360): avc: denied { read } for pid=6438 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.738270][ T31] audit: type=1400 audit(1794089155.835:361): avc: denied { setopt } for pid=6438 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.795558][ T31] audit: type=1400 audit(1794089156.465:362): avc: denied { create } for pid=6443 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.795603][ T31] audit: type=1400 audit(1794089156.475:363): avc: denied { bind } for pid=6443 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.795631][ T31] audit: type=1400 audit(1794089156.475:364): avc: denied { setopt } for pid=6443 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.795660][ T31] audit: type=1400 audit(1794089156.485:365): avc: denied { accept } for pid=6443 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.795689][ T31] audit: type=1400 audit(1794089156.485:366): avc: denied { read } for pid=6443 comm="syz.3.153" path="socket:[11487]" dev="sockfs" ino=11487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.768997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 185.566502][ T31] audit: type=1400 audit(1794089160.665:367): avc: denied { bind } for pid=6470 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.564037][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 186.564091][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 186.564119][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 186.564139][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 186.564167][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 186.955160][ T6482] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 188.330108][ T73] IPVS: starting estimator thread 0... [ 188.422248][ T6487] IPVS: using max 54 ests per chain, 129600 per kthread [ 188.796876][ T31] audit: type=1400 audit(1794089163.895:368): avc: denied { wake_alarm } for pid=6490 comm="syz.3.166" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.935614][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.935661][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.222911][ T6502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.704482][ T6506] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 196.542488][ T6535] gadgetfs: bound to dummy_udc driver [ 196.892971][ T31] audit: type=1400 audit(1794089171.875:369): avc: denied { audit_write } for pid=6536 comm="syz.4.174" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 196.999633][ T5765] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 197.000801][ C1] gadgetfs: connected [ 197.046642][ T5765] gadgetfs: disconnected [ 197.193863][ C1] gadgetfs: connected [ 197.213634][ T5765] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 197.217097][ T5765] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 197.217167][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.473383][ T6533] gadgetfs: suspended from state 3 [ 197.473547][ T6533] gadgetfs: disconnected [ 197.510028][ T5765] usb 2-1: can't set config #1, error -71 [ 197.598227][ T5765] usb 2-1: USB disconnect, device number 2 [ 199.902311][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 200.172182][ T6563] ======================================================= [ 200.172182][ T6563] WARNING: The mand mount option has been deprecated and [ 200.172182][ T6563] and is ignored by this kernel. Remove the mand [ 200.172182][ T6563] option from the mount to silence this warning. [ 200.172182][ T6563] ======================================================= [ 200.370435][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 200.370460][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 200.395014][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6338 instead [ 200.395029][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x1d9b instead [ 200.395037][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 200.395045][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 200.395053][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 200.395063][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 200.395079][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 200.395095][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 200.395102][ T6563] jffs2: Further such events for this erase block will not be printed [ 200.395296][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 200.395304][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 200.395313][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6338 instead [ 200.395323][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x1d9b instead [ 200.395330][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 200.395339][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 200.395346][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 200.395357][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 200.395374][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 200.395390][ T6563] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 200.395398][ T6563] jffs2: Further such events for this erase block will not be printed [ 200.395610][ T6563] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 200.395616][ T6563] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 200.546680][ T10] usb 4-1: device descriptor read/all, error -71 [ 203.748784][ T6586] netlink: 'syz.3.185': attribute type 2 has an invalid length. [ 203.774796][ T6586] : entered promiscuous mode [ 205.734753][ T6594] tmpfs: Unknown parameter 'ω‘`' [ 205.869746][ T31] audit: type=1400 audit(1794089180.965:370): avc: denied { cmd } for pid=6591 comm="iou-wrk-6594" path="socket:[11884]" dev="sockfs" ino=11884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 207.359309][ T31] audit: type=1400 audit(1794089182.455:371): avc: denied { bind } for pid=6601 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.359679][ T31] audit: type=1400 audit(1794089182.465:372): avc: denied { connect } for pid=6601 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 210.813633][ T31] audit: type=1400 audit(1794089185.915:373): avc: denied { ioctl } for pid=6624 comm="syz.3.195" path="socket:[10864]" dev="sockfs" ino=10864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.816778][ T31] audit: type=1400 audit(1794089185.915:374): avc: denied { setopt } for pid=6624 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.841223][ T31] audit: type=1400 audit(1794089185.915:375): avc: denied { write } for pid=6624 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.858148][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 211.139166][ T31] audit: type=1400 audit(1794089186.205:376): avc: denied { unlink } for pid=6628 comm="syz.1.196" name="#1" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.139246][ T31] audit: type=1400 audit(1794089186.215:377): avc: denied { mount } for pid=6628 comm="syz.1.196" name="/" dev="overlay" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 211.878072][ T6636] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 211.923113][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.936189][ T6636] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 212.779507][ T6636] syz.2.186 (6636) used greatest stack depth: 20056 bytes left [ 214.397363][ T31] audit: type=1400 audit(1794089189.495:378): avc: denied { create } for pid=6648 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.555970][ T31] audit: type=1400 audit(1794089189.655:379): avc: denied { setopt } for pid=6648 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.311256][ T6663] Zero length message leads to an empty skb [ 215.458670][ T31] audit: type=1400 audit(1794089190.555:380): avc: denied { block_suspend } for pid=6656 comm="syz.4.204" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.387343][ T6682] syz.0.209 (6682) used greatest stack depth: 17944 bytes left [ 218.390842][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1095 jiffies old. [ 218.624428][ T31] audit: type=1400 audit(1794089193.715:381): avc: denied { ioctl } for pid=6677 comm="syz.4.208" path="socket:[12092]" dev="sockfs" ino=12092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.423071][ T31] audit: type=1400 audit(1794089194.525:382): avc: denied { write } for pid=6692 comm="syz.2.213" name="subsystems" dev="configfs" ino=3586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.446509][ T31] audit: type=1400 audit(1794089194.525:383): avc: denied { write } for pid=6692 comm="syz.2.213" name="ports" dev="configfs" ino=3587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.841353][ T31] audit: type=1400 audit(1794089194.925:384): avc: denied { write } for pid=6692 comm="syz.2.213" name="subsystems" dev="configfs" ino=10988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.243689][ T31] audit: type=1400 audit(1794089195.325:385): avc: denied { write } for pid=6692 comm="syz.2.213" name="subsystems" dev="configfs" ino=10988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.334543][ T6693] nvmet_tcp: address family 255 not supported [ 220.807426][ T6702] Illegal XDP return value 98 on prog (id 13) dev N/A, expect packet loss! [ 221.308701][ T6706] futex_wake_op: syz.3.215 tries to shift op by 144; fix this program [ 221.309725][ T6706] futex_wake_op: syz.3.215 tries to shift op by 144; fix this program [ 221.793697][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 221.793715][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 221.793725][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6338 instead [ 221.793735][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x1d9b instead [ 221.793743][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 221.793751][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 221.793759][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 221.793770][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 221.793786][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 221.793803][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 221.793811][ T6702] jffs2: Further such events for this erase block will not be printed [ 221.794009][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 221.794018][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 221.794027][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6338 instead [ 221.794036][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x1d9b instead [ 221.794044][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 221.794052][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 221.794060][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 221.794070][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 221.794087][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 221.794103][ T6702] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 221.794111][ T6702] jffs2: Further such events for this erase block will not be printed [ 221.794311][ T6702] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 221.794315][ T6702] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 222.119942][ T6709] bond0: entered promiscuous mode [ 222.119962][ T6709] bond_slave_0: entered promiscuous mode [ 222.120126][ T6709] bond_slave_1: entered promiscuous mode [ 222.122803][ T6709] batadv0: entered promiscuous mode [ 222.125614][ T6709] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 222.147185][ T6709] bond0: left promiscuous mode [ 222.164024][ T6709] bond_slave_0: left promiscuous mode [ 222.164185][ T6709] bond_slave_1: left promiscuous mode [ 222.179997][ T6709] batadv0: left promiscuous mode [ 223.379030][ T31] audit: type=1400 audit(1794089198.485:386): avc: denied { read write } for pid=6719 comm="syz.1.221" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.389450][ T31] audit: type=1400 audit(1794089198.485:387): avc: denied { open } for pid=6719 comm="syz.1.221" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.513034][ T6722] gadgetfs: bound to dummy_udc driver [ 223.779019][ T25] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 223.779346][ C1] gadgetfs: connected [ 223.779611][ T25] gadgetfs: disconnected [ 223.939541][ C1] gadgetfs: connected [ 223.941190][ T25] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 223.942690][ T25] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 223.944458][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.214715][ C1] gadgetfs: configuration #1 [ 224.396989][ T6718] gadgetfs: suspended from state 3 [ 224.397083][ T6718] gadgetfs: disconnected [ 224.434569][ T5737] usb 2-1: USB disconnect, device number 3 [ 226.070795][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 226.070858][ T6740] block nbd0: Unsupported socket: should be TCP or UNIX. [ 229.133232][ T6744] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 229.242503][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.0.226'. [ 229.244874][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.248009][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.735307][ T31] audit: type=1400 audit(1794089204.835:388): avc: denied { append } for pid=6763 comm="syz.4.220" name="virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.339302][ T6772] can0: slcan on ttyS3. [ 233.383907][ T31] audit: type=1400 audit(1794089208.485:389): avc: denied { write } for pid=6771 comm="syz.2.223" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 233.520396][ T6781] netlink: 132732 bytes leftover after parsing attributes in process `syz.2.223'. [ 233.618144][ T31] audit: type=1400 audit(1794089208.715:390): avc: denied { read write } for pid=6782 comm="syz.3.228" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.618430][ T31] audit: type=1400 audit(1794089208.715:391): avc: denied { open } for pid=6782 comm="syz.3.228" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 234.879230][ T6772] can0 (unregistered): slcan off ttyS3. [ 237.956736][ T6813] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 242.370688][ T31] audit: type=1400 audit(1794089217.475:392): avc: denied { kexec_image_load } for pid=6832 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 242.895196][ T31] audit: type=1400 audit(1794089217.885:393): avc: denied { ioctl } for pid=6831 comm="syz.3.244" path="socket:[12317]" dev="sockfs" ino=12317 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.706045][ T6854] ubi0: attaching mtd0 [ 245.720260][ T6854] ubi0: scanning is finished [ 246.262962][ T6854] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 247.073516][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.073885][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.134552][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.134920][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.649015][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 4121 jiffies old. [ 250.497002][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.497050][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.496175][ T6911] ubi0: attaching mtd0 [ 256.508377][ T6911] ubi0: scanning is finished [ 257.061026][ T6911] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 257.423144][ T31] audit: type=1400 audit(1794089232.525:394): avc: denied { execute } for pid=6919 comm="syz.2.262" path="/49/file0" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 257.718892][ T31] audit: type=1400 audit(1794089232.695:395): avc: denied { firmware_load } for pid=6917 comm="syz.0.256" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 258.027197][ T31] audit: type=1400 audit(1794089233.125:396): avc: denied { append } for pid=6919 comm="syz.2.262" name="uprobe_events" dev="tracefs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 258.230931][ T31] audit: type=1400 audit(1794089233.335:397): avc: denied { read } for pid=6924 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.231130][ T31] audit: type=1400 audit(1794089233.335:398): avc: denied { read open } for pid=6924 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.443567][ T31] audit: type=1400 audit(1794089233.545:399): avc: denied { write } for pid=6923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.612605][ T31] audit: type=1400 audit(1794089233.715:400): avc: denied { write } for pid=6935 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.703731][ T31] audit: type=1400 audit(1794089234.805:401): avc: denied { write } for pid=6938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.822258][ T31] audit: type=1400 audit(1794089234.925:402): avc: denied { connect } for pid=6954 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.825545][ T31] audit: type=1400 audit(1794089234.925:403): avc: denied { ioctl } for pid=6954 comm="syz.0.268" path="socket:[13435]" dev="sockfs" ino=13435 ioctlcmd=0x80047437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.627648][ T6970] syzkaller0: entered promiscuous mode [ 261.627669][ T6970] syzkaller0: entered allmulticast mode [ 261.674803][ T6970] tipc: Started in network mode [ 261.674834][ T6970] tipc: Node identity 6ed69704ab97, cluster identity 4711 [ 261.702524][ T6970] tipc: Enabled bearer , priority 0 [ 261.741194][ T6970] tipc: Resetting bearer [ 261.789685][ T6968] tipc: Resetting bearer [ 261.976325][ T6968] tipc: Disabling bearer [ 267.081704][ T7003] netlink: 176 bytes leftover after parsing attributes in process `syz.2.273'. [ 267.360836][ T7006] Bluetooth: MGMT ver 1.23 [ 267.368703][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 267.368735][ T31] audit: type=1400 audit(1794089242.455:405): avc: denied { write } for pid=7001 comm="syz.2.273" path="socket:[13544]" dev="sockfs" ino=13544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.489249][ T5627] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 269.580719][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 271.632043][ T31] audit: type=1400 audit(1794089246.735:406): avc: denied { write } for pid=7022 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.632262][ T31] audit: type=1400 audit(1794089246.735:407): avc: denied { name_connect } for pid=7022 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 272.036094][ T31] audit: type=1400 audit(1794089247.135:408): avc: denied { append } for pid=7028 comm="syz.2.283" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.948969][ T31] audit: type=1400 audit(1794089248.005:409): avc: denied { read } for pid=7036 comm="syz.1.287" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 272.949020][ T31] audit: type=1400 audit(1794089248.005:410): avc: denied { open } for pid=7036 comm="syz.1.287" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 273.241032][ T7044] ip_tables: iptables: counters copy to user failed while replacing table [ 275.000752][ T31] audit: type=1400 audit(1794089249.535:411): avc: denied { ioctl } for pid=7036 comm="syz.1.287" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 275.079603][ T7048] gadgetfs: bound to dummy_udc driver [ 275.381437][ T994] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 275.381793][ C0] gadgetfs: connected [ 275.390340][ T994] gadgetfs: disconnected [ 276.376851][ T31] audit: type=1400 audit(1794089251.475:412): avc: denied { read write } for pid=7053 comm="syz.0.290" name="mouse0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 276.401613][ T31] audit: type=1400 audit(1794089251.475:413): avc: denied { open } for pid=7053 comm="syz.0.290" path="/dev/input/mouse0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 279.993509][ T7079] trusted_key: encrypted_key: key user:syz not found [ 279.997567][ T7079] process 'syz.3.297' launched './file0' with NULL argv: empty string added [ 280.089001][ T31] audit: type=1400 audit(1794089255.095:414): avc: denied { execute_no_trans } for pid=7076 comm="syz.3.297" path="/68/file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.758820][ T31] audit: type=1400 audit(1794089256.855:415): avc: denied { create } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.775941][ T31] audit: type=1400 audit(1794089256.865:416): avc: denied { connect } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.784934][ T31] audit: type=1400 audit(1794089256.895:417): avc: denied { bind } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 281.796815][ T31] audit: type=1400 audit(1794089256.895:418): avc: denied { create } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 281.854778][ T31] audit: type=1400 audit(1794089256.955:419): avc: denied { setopt } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.880148][ T31] audit: type=1400 audit(1794089256.985:420): avc: denied { bind } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.941190][ T31] audit: type=1400 audit(1794089257.045:421): avc: denied { write } for pid=7088 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.441048][ T7100] gadgetfs: bound to dummy_udc driver [ 283.730093][ T5739] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 283.730541][ C0] gadgetfs: connected [ 283.730892][ T5739] gadgetfs: disconnected [ 283.879261][ C0] gadgetfs: connected [ 283.894096][ T5739] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 283.894411][ T5739] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 283.894445][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.195903][ C0] gadgetfs: configuration #1 [ 284.354286][ T7098] gadgetfs: suspended from state 3 [ 284.354439][ T7098] gadgetfs: disconnected [ 284.400033][ T5739] usb 2-1: USB disconnect, device number 5 [ 284.918397][ T7108] Bluetooth: MGMT ver 1.23 [ 287.421765][ T5627] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 287.422140][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 289.888630][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 290.137822][ T7139] bond1: entered promiscuous mode [ 290.145998][ T7139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.259060][ T5739] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 292.401932][ T31] audit: type=1400 audit(1794089267.505:422): avc: denied { write } for pid=7147 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.662376][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.662880][ T5739] usb 4-1: not running at top speed; connect to a high speed hub [ 292.662906][ T5739] usb 4-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 292.694996][ T5739] usb 4-1: config 129 has an invalid interface number: 8 but max is 1 [ 292.695021][ T5739] usb 4-1: config 129 has an invalid interface number: 3 but max is 1 [ 292.695038][ T5739] usb 4-1: config 129 has no interface number 0 [ 292.695052][ T5739] usb 4-1: config 129 has no interface number 1 [ 292.695085][ T5739] usb 4-1: config 129 interface 8 has no altsetting 0 [ 292.735867][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.735893][ T5739] usb 4-1: Product: syz [ 292.735906][ T5739] usb 4-1: Manufacturer: syz [ 292.735919][ T5739] usb 4-1: SerialNumber: syz [ 293.514471][ T31] audit: type=1400 audit(1794089268.615:423): avc: denied { sqpoll } for pid=7145 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 297.186907][ T5739] usb 4-1: Could not set interface, error -71 [ 297.208897][ T5739] usb 4-1: USB disconnect, device number 4 [ 297.533743][ T7180] gadgetfs: bound to dummy_udc driver [ 297.819179][ T5739] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 297.820716][ C0] gadgetfs: connected [ 297.847651][ T5739] gadgetfs: disconnected [ 298.859220][ C0] gadgetfs: connected [ 298.863458][ T5739] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 298.867872][ T5739] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 298.868050][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.051078][ C0] gadgetfs: configuration #1 [ 299.289259][ T7178] gadgetfs: suspended from state 3 [ 299.289380][ T7178] gadgetfs: disconnected [ 299.530275][ T5357] usb 2-1: USB disconnect, device number 6 [ 302.691281][ T7204] x_tables: duplicate entry at hook 1 [ 305.057154][ T7218] syzkaller0: entered promiscuous mode [ 305.057173][ T7218] syzkaller0: entered allmulticast mode [ 305.076448][ T7218] tipc: Started in network mode [ 305.076473][ T7218] tipc: Node identity aa3f9a802545, cluster identity 4711 [ 305.076871][ T7218] tipc: Enabled bearer , priority 0 [ 305.100138][ T7218] tipc: Resetting bearer [ 305.111953][ T7217] tipc: Resetting bearer [ 305.224649][ T7217] tipc: Disabling bearer [ 309.348939][ T31] audit: type=1400 audit(1794089284.425:424): avc: denied { create } for pid=7241 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 312.858502][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.858549][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.089697][ T7277] 9pnet_virtio: no channels available for device mtd0 [ 315.482195][ T31] audit: type=1400 audit(1794089290.185:425): avc: denied { mounton } for pid=7275 comm="syz.3.336" path="/80/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 317.646355][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646375][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646385][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646393][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646402][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646411][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646419][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646428][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646436][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646445][ T7290] tc action pedit 'at' offset 5 out of bounds [ 317.646463][ T7290] 0: reclassify loop, rule prio 0, protocol 800 [ 317.750258][ T7288] syz.0.349 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 317.750281][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.0.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.750295][ T7288] Tainted: [L]=SOFTLOCKUP [ 317.750298][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 317.750304][ T7288] Call Trace: [ 317.750308][ T7288] [ 317.750312][ T7288] dump_stack_lvl+0x100/0x190 [ 317.750333][ T7288] dump_header+0xfb/0x606 [ 317.750352][ T7288] oom_kill_process.cold+0xd/0x380 [ 317.750366][ T7288] out_of_memory+0x343/0x14c0 [ 317.750384][ T7288] ? __pfx_out_of_memory+0x10/0x10 [ 317.750404][ T7288] mem_cgroup_out_of_memory+0xc6/0x130 [ 317.750415][ T7288] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 317.750424][ T7288] ? find_held_lock+0x2b/0x80 [ 317.750438][ T7288] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.750448][ T7288] ? _raw_spin_unlock+0x28/0x50 [ 317.750460][ T7288] try_charge_memcg+0x779/0xf30 [ 317.750478][ T7288] ? __pfx_try_charge_memcg+0x10/0x10 [ 317.750491][ T7288] ? find_held_lock+0x2b/0x80 [ 317.750502][ T7288] ? rcu_read_unlock+0x17/0x60 [ 317.750516][ T7288] ? rcu_read_unlock+0x17/0x60 [ 317.750530][ T7288] ? find_held_lock+0x2b/0x80 [ 317.750541][ T7288] ? rcu_read_unlock+0x17/0x60 [ 317.750558][ T7288] charge_memcg+0x1ae/0x210 [ 317.750573][ T7288] __mem_cgroup_charge+0x2b/0x1c0 [ 317.750590][ T7288] shmem_alloc_and_add_folio+0x451/0xd40 [ 317.750605][ T7288] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 317.750617][ T7288] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 317.750629][ T7288] ? vm_normal_page+0x1d1/0x380 [ 317.750646][ T7288] shmem_get_folio_gfp+0x758/0x1af0 [ 317.750661][ T7288] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 317.750674][ T7288] ? __pfx_follow_page_pte+0x10/0x10 [ 317.750692][ T7288] shmem_write_begin+0x1a4/0x420 [ 317.750705][ T7288] ? __pfx_shmem_write_begin+0x10/0x10 [ 317.750717][ T7288] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 317.750731][ T7288] generic_perform_write+0x292/0xa40 [ 317.750746][ T7288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 317.750762][ T7288] ? __pfx_generic_perform_write+0x10/0x10 [ 317.750779][ T7288] ? file_update_time_flags+0x38c/0x520 [ 317.750797][ T7288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 317.750809][ T7288] shmem_file_write_iter+0x10e/0x140 [ 317.750822][ T7288] __kernel_write_iter+0x2ac/0x930 [ 317.750835][ T7288] ? __pfx___kernel_write_iter+0x10/0x10 [ 317.750845][ T7288] ? __up_read+0x333/0x980 [ 317.750856][ T7288] ? dump_user_range+0x7e0/0xe90 [ 317.750871][ T7288] dump_user_range+0xa0d/0xe90 [ 317.750887][ T7288] ? __pfx_dump_user_range+0x10/0x10 [ 317.750902][ T7288] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 317.750917][ T7288] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 317.750932][ T7288] ? __pfx_writenote+0x10/0x10 [ 317.750948][ T7288] elf_core_dump+0x2d97/0x3d60 [ 317.750969][ T7288] ? __pfx_elf_core_dump+0x10/0x10 [ 317.750981][ T7288] ? kasan_save_stack+0x3f/0x50 [ 317.750991][ T7288] ? kasan_save_stack+0x30/0x50 [ 317.751000][ T7288] ? kasan_save_track+0x14/0x30 [ 317.751010][ T7288] ? __kasan_kmalloc+0xaa/0xb0 [ 317.751019][ T7288] ? coredump_write+0x37b/0x1c20 [ 317.751030][ T7288] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 317.751041][ T7288] ? vfs_coredump+0x9b0/0x1180 [ 317.751053][ T7288] ? asm_exc_page_fault+0x26/0x30 [ 317.751065][ T7288] ? 0xffffffffff600000 [ 317.751091][ T7288] ? lock_acquire+0x1d1/0x380 [ 317.751104][ T7288] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 317.751121][ T7288] ? coredump_write+0xd88/0x1c20 [ 317.751132][ T7288] coredump_write+0xd88/0x1c20 [ 317.751149][ T7288] ? __pfx_coredump_write+0x10/0x10 [ 317.751165][ T7288] ? __pfx_make_vfsuid+0x10/0x10 [ 317.751181][ T7288] do_coredump.constprop.0+0x9bb/0x25e0 [ 317.751195][ T7288] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 317.751220][ T7288] ? __lock_acquire+0x5c0/0x1f40 [ 317.751236][ T7288] ? trace_kmalloc+0xeb/0x110 [ 317.751247][ T7288] ? __kasan_kmalloc+0xaa/0xb0 [ 317.751257][ T7288] ? __kmalloc_noprof+0x350/0x840 [ 317.751275][ T7288] ? lock_acquire+0x1d1/0x380 [ 317.751289][ T7288] ? do_raw_spin_lock+0x128/0x260 [ 317.751298][ T7288] ? find_held_lock+0x2b/0x80 [ 317.751308][ T7288] ? vfs_coredump+0x6f8/0x1180 [ 317.751320][ T7288] ? rcu_is_watching+0x13/0xc0 [ 317.751334][ T7288] vfs_coredump+0x9b0/0x1180 [ 317.751351][ T7288] ? __pfx_vfs_coredump+0x10/0x10 [ 317.751380][ T7288] ? rcu_is_watching+0x13/0xc0 [ 317.751394][ T7288] get_signal+0x1fba/0x22e0 [ 317.751413][ T7288] ? __pfx_get_signal+0x10/0x10 [ 317.751429][ T7288] arch_do_signal_or_restart+0x91/0x7e0 [ 317.751441][ T7288] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.751461][ T7288] irqentry_exit+0x542/0xab0 [ 317.751474][ T7288] asm_exc_page_fault+0x26/0x30 [ 317.751484][ T7288] RIP: 0033:0x7fe65fd9fb21 [ 317.751493][ T7288] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 317.751503][ T7288] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 317.751511][ T7288] RAX: 0000000000000000 RBX: 00007fe660026090 RCX: 00007fe65fd9fb19 [ 317.751518][ T7288] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 317.751524][ T7288] RBP: 00007fe65fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 317.751529][ T7288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.751535][ T7288] R13: 00007fe660026128 R14: 00007fe660026090 R15: 00007ffeb5fea868 [ 317.751549][ T7288] [ 317.751553][ T7288] memory: usage 307200kB, limit 307200kB, failcnt 58770 [ 317.751559][ T7288] memory+swap: usage 352492kB, limit 9007199254740988kB, failcnt 0 [ 317.751566][ T7288] kmem: usage 2620kB, limit 9007199254740988kB, failcnt 0 [ 317.751571][ T7288] Memory cgroup stats for /syz0: [ 317.751682][ T7288] cache 311214080 [ 317.751687][ T7288] rss 675840 [ 317.751690][ T7288] rss_huge 0 [ 317.751694][ T7288] shmem 311201792 [ 317.751697][ T7288] mapped_file 129794048 [ 317.751701][ T7288] dirty 0 [ 317.751704][ T7288] writeback 0 [ 317.751707][ T7288] workingset_refault_anon 8 [ 317.751711][ T7288] workingset_refault_file 2581 [ 317.751715][ T7288] swap 46379008 [ 317.751718][ T7288] swapcached 0 [ 317.751721][ T7288] pgpgin 601002 [ 317.751724][ T7288] pgpgout 525368 [ 317.751728][ T7288] pgfault 212254 [ 317.751731][ T7288] pgmajfault 7 [ 317.751734][ T7288] inactive_anon 246763520 [ 317.751738][ T7288] active_anon 65044480 [ 317.751742][ T7288] inactive_file 0 [ 317.751745][ T7288] active_file 4096 [ 317.751748][ T7288] unevictable 0 [ 317.751752][ T7288] hierarchical_memory_limit 314572800 [ 317.751756][ T7288] hierarchical_memsw_limit 9223372036854771712 [ 317.751760][ T7288] total_cache 311214080 [ 317.751764][ T7288] total_rss 675840 [ 317.751767][ T7288] total_rss_huge 0 [ 317.751770][ T7288] total_shmem 311201792 [ 317.751774][ T7288] total_mapped_file 129794048 [ 317.751778][ T7288] total_dirty 0 [ 317.751781][ T7288] total_writeback 0 [ 317.751784][ T7288] total_workingset_refault_anon 8 [ 317.751788][ T7288] total_workingset_refault_file 2581 [ 317.751792][ T7288] total_swap 46379008 [ 317.751796][ T7288] total_swapcached 0 [ 317.751799][ T7288] total_pgpgin 601002 [ 317.751803][ T7288] total_pgpgout 525368 [ 317.751806][ T7288] total_pgfault 212254 [ 317.751810][ T7288] total_pgmajfault 7 [ 317.751813][ T7288] total_inactive_anon 246763520 [ 317.751817][ T7288] total_active_anon 65044480 [ 317.751821][ T7288] total_inactive_file 0 [ 317.751824][ T7288] total_active_file 4096 [ 317.751828][ T7288] total_unevictable 0 [ 317.751831][ T7288] anon_cost 0 [ 317.751834][ T7288] file_cost 0 [ 317.751838][ T7288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.274,pid=6984,uid=0 [ 317.751954][ T7288] Memory cgroup out of memory: Killed process 6984 (syz.0.274) total-vm:200592kB, anon-rss:1400kB, file-rss:20676kB, shmem-rss:115356kB, UID:0 pgtables:340kB oom_score_adj:1000 [ 320.795444][ T7288] syz.0.349 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 320.795465][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.0.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.795479][ T7288] Tainted: [L]=SOFTLOCKUP [ 320.795482][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 320.795488][ T7288] Call Trace: [ 320.795491][ T7288] [ 320.795495][ T7288] dump_stack_lvl+0x100/0x190 [ 320.795516][ T7288] dump_header+0xfb/0x606 [ 320.795528][ T7288] oom_kill_process.cold+0xd/0x380 [ 320.795542][ T7288] out_of_memory+0x343/0x14c0 [ 320.795560][ T7288] ? __pfx_out_of_memory+0x10/0x10 [ 320.795580][ T7288] mem_cgroup_out_of_memory+0xc6/0x130 [ 320.795591][ T7288] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 320.795600][ T7288] ? find_held_lock+0x2b/0x80 [ 320.795614][ T7288] ? do_raw_spin_unlock+0x145/0x1e0 [ 320.795624][ T7288] ? _raw_spin_unlock+0x28/0x50 [ 320.795636][ T7288] try_charge_memcg+0x779/0xf30 [ 320.795654][ T7288] ? __pfx_try_charge_memcg+0x10/0x10 [ 320.795667][ T7288] ? find_held_lock+0x2b/0x80 [ 320.795677][ T7288] ? rcu_read_unlock+0x17/0x60 [ 320.795691][ T7288] ? rcu_read_unlock+0x17/0x60 [ 320.795705][ T7288] ? find_held_lock+0x2b/0x80 [ 320.795716][ T7288] ? rcu_read_unlock+0x17/0x60 [ 320.795733][ T7288] charge_memcg+0x1ae/0x210 [ 320.795748][ T7288] __mem_cgroup_charge+0x2b/0x1c0 [ 320.795765][ T7288] shmem_alloc_and_add_folio+0x451/0xd40 [ 320.795779][ T7288] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 320.795791][ T7288] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 320.795803][ T7288] ? vm_normal_page+0x1d1/0x380 [ 320.795832][ T7288] shmem_get_folio_gfp+0x758/0x1af0 [ 320.795847][ T7288] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 320.795859][ T7288] ? __pfx_follow_page_pte+0x10/0x10 [ 320.795877][ T7288] shmem_write_begin+0x1a4/0x420 [ 320.795890][ T7288] ? __pfx_shmem_write_begin+0x10/0x10 [ 320.795902][ T7288] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 320.795917][ T7288] generic_perform_write+0x292/0xa40 [ 320.795931][ T7288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 320.795947][ T7288] ? __pfx_generic_perform_write+0x10/0x10 [ 320.795964][ T7288] ? file_update_time_flags+0x38c/0x520 [ 320.795982][ T7288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 320.795993][ T7288] shmem_file_write_iter+0x10e/0x140 [ 320.796007][ T7288] __kernel_write_iter+0x2ac/0x930 [ 320.796019][ T7288] ? __pfx___kernel_write_iter+0x10/0x10 [ 320.796030][ T7288] ? __up_read+0x333/0x980 [ 320.796040][ T7288] ? dump_user_range+0x7e0/0xe90 [ 320.796055][ T7288] dump_user_range+0xa0d/0xe90 [ 320.796071][ T7288] ? __pfx_dump_user_range+0x10/0x10 [ 320.796086][ T7288] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 320.796101][ T7288] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 320.796116][ T7288] ? __pfx_writenote+0x10/0x10 [ 320.796132][ T7288] elf_core_dump+0x2d97/0x3d60 [ 320.796153][ T7288] ? __pfx_elf_core_dump+0x10/0x10 [ 320.796165][ T7288] ? kasan_save_stack+0x3f/0x50 [ 320.796175][ T7288] ? kasan_save_stack+0x30/0x50 [ 320.796184][ T7288] ? kasan_save_track+0x14/0x30 [ 320.796193][ T7288] ? __kasan_kmalloc+0xaa/0xb0 [ 320.796203][ T7288] ? coredump_write+0x37b/0x1c20 [ 320.796213][ T7288] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 320.796224][ T7288] ? vfs_coredump+0x9b0/0x1180 [ 320.796236][ T7288] ? asm_exc_page_fault+0x26/0x30 [ 320.796248][ T7288] ? 0xffffffffff600000 [ 320.796273][ T7288] ? lock_acquire+0x1d1/0x380 [ 320.796287][ T7288] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 320.796304][ T7288] ? coredump_write+0xd88/0x1c20 [ 320.796314][ T7288] coredump_write+0xd88/0x1c20 [ 320.796331][ T7288] ? __pfx_coredump_write+0x10/0x10 [ 320.796348][ T7288] ? __pfx_make_vfsuid+0x10/0x10 [ 320.796363][ T7288] do_coredump.constprop.0+0x9bb/0x25e0 [ 320.796378][ T7288] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 320.796402][ T7288] ? __lock_acquire+0x5c0/0x1f40 [ 320.796417][ T7288] ? trace_kmalloc+0xeb/0x110 [ 320.796428][ T7288] ? __kasan_kmalloc+0xaa/0xb0 [ 320.796439][ T7288] ? __kmalloc_noprof+0x350/0x840 [ 320.796456][ T7288] ? lock_acquire+0x1d1/0x380 [ 320.796471][ T7288] ? do_raw_spin_lock+0x128/0x260 [ 320.796481][ T7288] ? find_held_lock+0x2b/0x80 [ 320.796491][ T7288] ? vfs_coredump+0x6f8/0x1180 [ 320.796503][ T7288] ? rcu_is_watching+0x13/0xc0 [ 320.796518][ T7288] vfs_coredump+0x9b0/0x1180 [ 320.796531][ T7288] ? __pfx_vfs_coredump+0x10/0x10 [ 320.796560][ T7288] ? rcu_is_watching+0x13/0xc0 [ 320.796574][ T7288] get_signal+0x1fba/0x22e0 [ 320.796593][ T7288] ? __pfx_get_signal+0x10/0x10 [ 320.796609][ T7288] arch_do_signal_or_restart+0x91/0x7e0 [ 320.796622][ T7288] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.796641][ T7288] irqentry_exit+0x542/0xab0 [ 320.796655][ T7288] asm_exc_page_fault+0x26/0x30 [ 320.796665][ T7288] RIP: 0033:0x7fe65fd9fb21 [ 320.796674][ T7288] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 320.796684][ T7288] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 320.796692][ T7288] RAX: 0000000000000000 RBX: 00007fe660026090 RCX: 00007fe65fd9fb19 [ 320.796699][ T7288] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 320.796704][ T7288] RBP: 00007fe65fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 320.796710][ T7288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.796716][ T7288] R13: 00007fe660026128 R14: 00007fe660026090 R15: 00007ffeb5fea868 [ 320.796730][ T7288] [ 320.796734][ T7288] memory: usage 307200kB, limit 307200kB, failcnt 66394 [ 320.796740][ T7288] memory+swap: usage 352532kB, limit 9007199254740988kB, failcnt 0 [ 320.796747][ T7288] kmem: usage 2612kB, limit 9007199254740988kB, failcnt 0 [ 320.796752][ T7288] Memory cgroup stats for /syz0: [ 320.796820][ T7288] cache 311349248 [ 320.796825][ T7288] rss 548864 [ 320.796828][ T7288] rss_huge 0 [ 320.796832][ T7288] shmem 311345152 [ 320.796835][ T7288] mapped_file 130015232 [ 320.796839][ T7288] dirty 0 [ 320.796842][ T7288] writeback 0 [ 320.796845][ T7288] workingset_refault_anon 8 [ 320.796849][ T7288] workingset_refault_file 2581 [ 320.796853][ T7288] swap 46419968 [ 320.796856][ T7288] swapcached 0 [ 320.796859][ T7288] pgpgin 601069 [ 320.796863][ T7288] pgpgout 525433 [ 320.796866][ T7288] pgfault 212258 [ 320.796869][ T7288] pgmajfault 7 [ 320.796873][ T7288] inactive_anon 65384448 [ 320.796876][ T7288] active_anon 246509568 [ 320.796880][ T7288] inactive_file 0 [ 320.796883][ T7288] active_file 4096 [ 320.796886][ T7288] unevictable 0 [ 320.796890][ T7288] hierarchical_memory_limit 314572800 [ 320.796894][ T7288] hierarchical_memsw_limit 9223372036854771712 [ 320.796898][ T7288] total_cache 311349248 [ 320.796902][ T7288] total_rss 548864 [ 320.796905][ T7288] total_rss_huge 0 [ 320.796908][ T7288] total_shmem 311345152 [ 320.796912][ T7288] total_mapped_file 130015232 [ 320.796916][ T7288] total_dirty 0 [ 320.796919][ T7288] total_writeback 0 [ 320.796923][ T7288] total_workingset_refault_anon 8 [ 320.796926][ T7288] total_workingset_refault_file 2581 [ 320.796930][ T7288] total_swap 46419968 [ 320.796934][ T7288] total_swapcached 0 [ 320.796937][ T7288] total_pgpgin 601069 [ 320.796941][ T7288] total_pgpgout 525433 [ 320.796944][ T7288] total_pgfault 212258 [ 320.796948][ T7288] total_pgmajfault 7 [ 320.796951][ T7288] total_inactive_anon 65384448 [ 320.796955][ T7288] total_active_anon 246509568 [ 320.796959][ T7288] total_inactive_file 0 [ 320.796962][ T7288] total_active_file 4096 [ 320.796966][ T7288] total_unevictable 0 [ 320.796969][ T7288] anon_cost 0 [ 320.796972][ T7288] file_cost 0 [ 320.796976][ T7288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.349,pid=7288,uid=0 [ 320.797078][ T7288] Memory cgroup out of memory: Killed process 7288 (syz.0.349) total-vm:102416kB, anon-rss:1448kB, file-rss:53828kB, shmem-rss:7744kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 321.053541][ T34] oom_reaper: reaped process 6984 (syz.0.274), now anon-rss:0kB, file-rss:20480kB, shmem-rss:92664kB [ 321.998226][ T7296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.351'. [ 322.317055][ T7291] syz.0.351 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 322.317081][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.0.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.317095][ T7291] Tainted: [L]=SOFTLOCKUP [ 322.317099][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.317105][ T7291] Call Trace: [ 322.317109][ T7291] [ 322.317113][ T7291] dump_stack_lvl+0x100/0x190 [ 322.317133][ T7291] dump_header+0xfb/0x606 [ 322.317146][ T7291] oom_kill_process.cold+0xd/0x380 [ 322.317160][ T7291] out_of_memory+0x343/0x14c0 [ 322.317179][ T7291] ? __pfx_out_of_memory+0x10/0x10 [ 322.317199][ T7291] mem_cgroup_out_of_memory+0xc6/0x130 [ 322.317210][ T7291] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 322.317219][ T7291] ? find_held_lock+0x2b/0x80 [ 322.317234][ T7291] ? do_raw_spin_unlock+0x145/0x1e0 [ 322.317244][ T7291] ? _raw_spin_unlock+0x28/0x50 [ 322.317256][ T7291] try_charge_memcg+0x779/0xf30 [ 322.317273][ T7291] ? __pfx_try_charge_memcg+0x10/0x10 [ 322.317287][ T7291] ? find_held_lock+0x2b/0x80 [ 322.317298][ T7291] ? rcu_read_unlock+0x17/0x60 [ 322.317316][ T7291] ? rcu_read_unlock+0x17/0x60 [ 322.317335][ T7291] obj_cgroup_charge_pages+0x2b/0x1f0 [ 322.317351][ T7291] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 322.317370][ T7291] ? kasan_save_track+0x14/0x30 [ 322.317383][ T7291] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 322.317400][ T7291] ? alloc_buffer_head+0x21/0x140 [ 322.317414][ T7291] alloc_buffer_head+0x21/0x140 [ 322.317424][ T7291] folio_alloc_buffers+0x197/0x8e0 [ 322.317440][ T7291] create_empty_buffers+0x3a/0x5f0 [ 322.317453][ T7291] ? jbd2_journal_stop+0x187/0xf00 [ 322.317466][ T7291] folio_create_buffers+0x13b/0x1a0 [ 322.317479][ T7291] __block_write_begin_int+0x393/0x19c0 [ 322.317494][ T7291] ? lock_acquire+0x1d1/0x380 [ 322.317507][ T7291] ? ext4_page_mkwrite+0x324/0x19e0 [ 322.317521][ T7291] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 322.317538][ T7291] ? __pfx___block_write_begin_int+0x10/0x10 [ 322.317552][ T7291] ? __pfx___might_resched+0x10/0x10 [ 322.317567][ T7291] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 322.317582][ T7291] block_page_mkwrite+0x348/0x460 [ 322.317598][ T7291] ext4_page_mkwrite+0x153f/0x19e0 [ 322.317613][ T7291] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 322.317630][ T7291] do_page_mkwrite+0x17a/0x430 [ 322.317646][ T7291] do_fault+0x659/0x1890 [ 322.317655][ T7291] ? __pfx_filemap_map_pages+0x10/0x10 [ 322.317672][ T7291] ? __pfx_do_fault+0x10/0x10 [ 322.317680][ T7291] ? rcu_read_unlock+0x2d/0xb0 [ 322.317692][ T7291] ? rcu_read_unlock+0x2d/0xb0 [ 322.317708][ T7291] __handle_mm_fault+0x1858/0x2f40 [ 322.317723][ T7291] ? __pfx___handle_mm_fault+0x10/0x10 [ 322.317735][ T7291] ? __pfx_mt_find+0x10/0x10 [ 322.317757][ T7291] ? find_vma+0xbf/0x140 [ 322.317772][ T7291] ? __pfx_find_vma+0x10/0x10 [ 322.317789][ T7291] handle_mm_fault+0x363/0xa30 [ 322.317804][ T7291] do_user_addr_fault+0x745/0x12f0 [ 322.317825][ T7291] exc_page_fault+0x6f/0xd0 [ 322.317837][ T7291] asm_exc_page_fault+0x26/0x30 [ 322.317847][ T7291] RIP: 0033:0x7fe65fc74812 [ 322.317857][ T7291] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 43 84 fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 322.317866][ T7291] RSP: 002b:00007ffeb5fea8c0 EFLAGS: 00010202 [ 322.317875][ T7291] RAX: 0000000000011008 RBX: 00007fe660b55720 RCX: 0000000000000000 [ 322.317882][ T7291] RDX: 0000001b34013000 RSI: 0000000000000008 RDI: 00007fe660b55720 [ 322.317888][ T7291] RBP: 000000000000040e R08: 00007fe660010000 R09: 00007fe660026128 [ 322.317894][ T7291] R10: 0000000000000007 R11: 000000000000000d R12: ffffffff89faef53 [ 322.317900][ T7291] R13: 00007fe660026128 R14: 00000000000000ad R15: fffffffffffef000 [ 322.317908][ T7291] ? netlink_sendmsg+0x1a3/0x10c0 [ 322.317929][ T7291] [ 322.317933][ T7291] memory: usage 307200kB, limit 307200kB, failcnt 69177 [ 322.317939][ T7291] memory+swap: usage 352536kB, limit 9007199254740988kB, failcnt 0 [ 322.317945][ T7291] kmem: usage 3084kB, limit 9007199254740988kB, failcnt 0 [ 322.317951][ T7291] Memory cgroup stats for /syz0: [ 322.318021][ T7291] cache 310620160 [ 322.318025][ T7291] rss 794624 [ 322.318029][ T7291] rss_huge 0 [ 322.318032][ T7291] shmem 310562816 [ 322.318036][ T7291] mapped_file 51335168 [ 322.318039][ T7291] dirty 4096 [ 322.318043][ T7291] writeback 0 [ 322.318046][ T7291] workingset_refault_anon 8 [ 322.318050][ T7291] workingset_refault_file 5147 [ 322.318054][ T7291] swap 46424064 [ 322.318057][ T7291] swapcached 0 [ 322.318060][ T7291] pgpgin 618638 [ 322.318064][ T7291] pgpgout 543120 [ 322.318067][ T7291] pgfault 213162 [ 322.318071][ T7291] pgmajfault 14 [ 322.318074][ T7291] inactive_anon 191164416 [ 322.318078][ T7291] active_anon 120193024 [ 322.318082][ T7291] inactive_file 49152 [ 322.318085][ T7291] active_file 4096 [ 322.318089][ T7291] unevictable 0 [ 322.318092][ T7291] hierarchical_memory_limit 314572800 [ 322.318096][ T7291] hierarchical_memsw_limit 9223372036854771712 [ 322.318100][ T7291] total_cache 310620160 [ 322.318104][ T7291] total_rss 794624 [ 322.318107][ T7291] total_rss_huge 0 [ 322.318111][ T7291] total_shmem 310562816 [ 322.318114][ T7291] total_mapped_file 51335168 [ 322.318118][ T7291] total_dirty 4096 [ 322.318121][ T7291] total_writeback 0 [ 322.318125][ T7291] total_workingset_refault_anon 8 [ 322.318129][ T7291] total_workingset_refault_file 5147 [ 322.318132][ T7291] total_swap 46424064 [ 322.318136][ T7291] total_swapcached 0 [ 322.318139][ T7291] total_pgpgin 618638 [ 322.318143][ T7291] total_pgpgout 543120 [ 322.318146][ T7291] total_pgfault 213162 [ 322.318150][ T7291] total_pgmajfault 14 [ 322.318153][ T7291] total_inactive_anon 191164416 [ 322.318157][ T7291] total_active_anon 120193024 [ 322.318161][ T7291] total_inactive_file 49152 [ 322.318164][ T7291] total_active_file 4096 [ 322.318168][ T7291] total_unevictable 0 [ 322.318172][ T7291] anon_cost 0 [ 322.318175][ T7291] file_cost 0 [ 322.318178][ T7291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.345,pid=7233,uid=0 [ 322.318272][ T7291] Memory cgroup out of memory: Killed process 7233 (syz.0.345) total-vm:104464kB, anon-rss:1448kB, file-rss:53828kB, shmem-rss:5888kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 427.308729][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 428.677423][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7233/2:b..l.. P6984/1:b..l.. P7250/1:b..l.. P6950/3:b..l.. P5622/1:b..l.. P5629/1:b..l.. P2340/1:b..l.. P5621/1:b..l.. [ 428.695315][ C1] rcu: (detected by 1, t=10637 jiffies, g=24421, q=363 ncpus=2) [ 428.703002][ C1] task:syz-executor state:R running task stack:23192 pid:5621 tgid:5621 ppid:5615 task_flags:0x400140 flags:0x00080000 [ 428.716435][ C1] Call Trace: [ 428.719698][ C1] [ 428.722603][ C1] __schedule+0x125e/0x6990 [ 428.727080][ C1] ? find_held_lock+0x2b/0x80 [ 428.731725][ C1] ? page_table_check_set+0x39e/0x630 [ 428.737071][ C1] ? __pfx___schedule+0x10/0x10 [ 428.741901][ C1] ? find_held_lock+0x2b/0x80 [ 428.746558][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 428.751909][ C1] preempt_schedule+0x57/0xd0 [ 428.756554][ C1] preempt_schedule_thunk+0x16/0x40 [ 428.761736][ C1] _raw_spin_unlock+0x3e/0x50 [ 428.766389][ C1] copy_page_range+0x1db5/0x5a00 [ 428.771320][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 428.776585][ C1] ? mas_wr_store_entry+0xa4/0x1d50 [ 428.781760][ C1] ? lock_acquire+0x1d1/0x380 [ 428.786408][ C1] ? dup_mmap+0xb09/0x2180 [ 428.790796][ C1] ? find_held_lock+0x2b/0x80 [ 428.795456][ C1] ? dup_mmap+0xc65/0x2180 [ 428.799843][ C1] ? dup_mmap+0xc65/0x2180 [ 428.804226][ C1] ? down_write+0x141/0x1f0 [ 428.808700][ C1] ? up_write+0x2dc/0x5b0 [ 428.813037][ C1] dup_mmap+0x1515/0x2180 [ 428.817355][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 428.822009][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 428.827793][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 428.833573][ C1] ? do_raw_spin_lock+0x128/0x260 [ 428.838572][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 428.844347][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 428.849518][ C1] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 428.855387][ C1] ? mm_init+0xc17/0xeb0 [ 428.859617][ C1] copy_process+0x7c5c/0x88e0 [ 428.864272][ C1] ? __pfx_copy_process+0x10/0x10 [ 428.869269][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.874607][ C1] ? __pfx_pgd_none+0x10/0x10 [ 428.879272][ C1] kernel_clone+0x176/0x9d0 [ 428.883751][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 428.888758][ C1] ? __might_fault+0xc5/0x140 [ 428.893406][ C1] ? find_held_lock+0x2b/0x80 [ 428.898053][ C1] ? __might_fault+0xc5/0x140 [ 428.902700][ C1] __do_sys_clone+0xd9/0x120 [ 428.907273][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 428.912451][ C1] do_syscall_64+0x123/0x790 [ 428.917024][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.922885][ C1] RIP: 0033:0x7f2f335c8592 [ 428.927267][ C1] RSP: 002b:00007fffd69139a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 428.935665][ C1] RAX: ffffffffffffffda RBX: 00007fffd69139a0 RCX: 00007f2f335c8592 [ 428.943605][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 428.951545][ C1] RBP: 00007fffd6913b2c R08: 0000000000000000 R09: 0000000000000001 [ 428.959486][ C1] R10: 00005555659fb7d0 R11: 0000000000000246 R12: 0000000000000001 [ 428.967451][ C1] R13: 00000000000927c0 R14: 000000000004c796 R15: 00007fffd6913b80 [ 428.975399][ C1] [ 428.978388][ C1] task:kworker/0:3 state:R running task stack:24056 pid:2340 tgid:2340 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 428.991905][ C1] Workqueue: events_power_efficient gc_worker [ 428.997949][ C1] Call Trace: [ 429.001222][ C1] [ 429.004130][ C1] __schedule+0x125e/0x6990 [ 429.008619][ C1] ? find_held_lock+0x2b/0x80 [ 429.013273][ C1] ? find_held_lock+0x2b/0x80 [ 429.017924][ C1] ? find_held_lock+0x2b/0x80 [ 429.022575][ C1] ? __queue_work+0x534/0x16f0 [ 429.027311][ C1] ? __pfx___schedule+0x10/0x10 [ 429.032130][ C1] ? mark_held_locks+0x40/0x70 [ 429.036879][ C1] preempt_schedule_irq+0x4e/0x90 [ 429.041872][ C1] irqentry_exit+0x33f/0xab0 [ 429.046435][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.052396][ C1] RIP: 0010:gc_worker+0x2bf/0x1a10 [ 429.057475][ C1] Code: 00 00 48 c7 c7 88 61 6b 92 e8 7d d2 e1 f7 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 0b e2 06 f8 58 48 85 db 0f 85 2d 13 00 00 5c e7 06 f8 8b 1d 96 cc 63 08 89 dd 31 ff 83 e5 01 89 ee e8 b8 [ 429.077058][ C1] RSP: 0018:ffffc90007ab7b28 EFLAGS: 00000293 [ 429.083103][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 429.091044][ C1] RDX: ffff88802eca4b00 RSI: ffffffff8a07a2bb RDI: 0000000000000007 [ 429.098985][ C1] RBP: ffff88814ae00000 R08: 0000000000000000 R09: 0000000000000000 [ 429.106939][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 429.114882][ C1] R13: 0000000000000000 R14: 0000000000040000 R15: 0000000000007db5 [ 429.122840][ C1] ? gc_worker+0x109b/0x1a10 [ 429.127414][ C1] ? gc_worker+0x109b/0x1a10 [ 429.131985][ C1] ? __pfx_gc_worker+0x10/0x10 [ 429.136737][ C1] ? process_one_work+0x906/0x1b10 [ 429.141819][ C1] ? process_one_work+0x906/0x1b10 [ 429.146901][ C1] process_one_work+0xac7/0x1b10 [ 429.151812][ C1] ? __pfx_process_one_work+0x10/0x10 [ 429.157164][ C1] ? lock_acquire+0x1d1/0x380 [ 429.161827][ C1] ? __pfx_gc_worker+0x10/0x10 [ 429.166559][ C1] worker_thread+0x5ef/0xe50 [ 429.171121][ C1] ? __pfx_worker_thread+0x10/0x10 [ 429.176217][ C1] ? kthread+0x13a/0x450 [ 429.180436][ C1] ? __pfx_worker_thread+0x10/0x10 [ 429.185515][ C1] kthread+0x373/0x450 [ 429.189550][ C1] ? __pfx_kthread+0x10/0x10 [ 429.194108][ C1] ret_from_fork+0x730/0xd60 [ 429.198671][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 429.203759][ C1] ? __switch_to+0x800/0x10e0 [ 429.208403][ C1] ? __pfx_kthread+0x10/0x10 [ 429.212961][ C1] ret_from_fork_asm+0x1a/0x30 [ 429.217706][ C1] [ 429.220695][ C1] task:syz-executor state:R running task stack:23080 pid:5629 tgid:5629 ppid:5614 task_flags:0x440940 flags:0x00080000 [ 429.234138][ C1] Call Trace: [ 429.237387][ C1] [ 429.240291][ C1] __schedule+0x125e/0x6990 [ 429.244765][ C1] ? lru_gen_add_folio+0x22a/0x970 [ 429.249852][ C1] ? move_folios_to_lru+0xb8a/0x2fb0 [ 429.255121][ C1] ? __pfx___schedule+0x10/0x10 [ 429.259950][ C1] ? mark_held_locks+0x40/0x70 [ 429.264709][ C1] preempt_schedule_irq+0x4e/0x90 [ 429.269716][ C1] irqentry_exit+0x33f/0xab0 [ 429.274277][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.280224][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 429.285392][ C1] Code: 05 4f 4e d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e 50 81 10 0f 82 c9 02 00 00 8b 35 3e 80 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 4d d1 13 0f 85 09 03 00 00 48 83 c4 [ 429.304966][ C1] RSP: 0000:ffffc90004336c38 EFLAGS: 00000206 [ 429.311001][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 429.318940][ C1] RDX: 0000000000000000 RSI: ffffffff8e602977 RDI: ffffffff8c835980 [ 429.326877][ C1] RBP: ffffffff8ffeafe0 R08: 00000000fe374129 R09: 0000000000000007 [ 429.334834][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 429.342774][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.350726][ C1] evict_folios+0x1ab/0x1790 [ 429.355294][ C1] ? evict_folios+0x19a/0x1790 [ 429.360048][ C1] ? __pfx_evict_folios+0x10/0x10 [ 429.365042][ C1] ? do_user_addr_fault+0x59c/0x12f0 [ 429.370299][ C1] ? asm_exc_page_fault+0x26/0x30 [ 429.375302][ C1] ? blk_mq_flush_plug_list+0x145/0x600 [ 429.380825][ C1] try_to_shrink_lruvec+0x32e/0x7b0 [ 429.386004][ C1] ? __pfx_mlock_drain_local+0x2/0x10 [ 429.391358][ C1] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 429.397051][ C1] shrink_lruvec+0x313/0x22e0 [ 429.401700][ C1] ? xa_load+0x149/0x2c0 [ 429.405916][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 429.410842][ C1] ? xa_load+0x153/0x2c0 [ 429.415057][ C1] ? __pfx_xa_load+0x10/0x10 [ 429.419618][ C1] ? __pfx_shrink_lruvec+0x10/0x10 [ 429.424701][ C1] ? do_shrink_slab+0xb67/0x1200 [ 429.429606][ C1] ? find_held_lock+0x2b/0x80 [ 429.434252][ C1] ? do_shrink_slab+0xcd9/0x1200 [ 429.439158][ C1] ? lock_acquire+0x1d1/0x380 [ 429.443808][ C1] ? shrink_slab+0x68b/0x12d0 [ 429.448460][ C1] ? __pfx___might_resched+0x10/0x10 [ 429.453714][ C1] ? page_counter_calculate_protection+0x348/0x730 [ 429.460190][ C1] ? shrink_node+0x74f/0x4410 [ 429.464833][ C1] shrink_node+0x74f/0x4410 [ 429.469310][ C1] ? __pfx_shrink_node+0x10/0x10 [ 429.474217][ C1] ? queue_work_on+0x11b/0x1e0 [ 429.478949][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.484115][ C1] ? queue_work_on+0x141/0x1e0 [ 429.488848][ C1] ? do_try_to_free_pages+0x2da/0x1500 [ 429.494274][ C1] do_try_to_free_pages+0x2da/0x1500 [ 429.499533][ C1] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 429.505396][ C1] ? psi_group_change+0x457/0xb10 [ 429.510393][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 429.516780][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 429.521947][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.527114][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 429.532280][ C1] try_charge_memcg+0x505/0xf30 [ 429.537103][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 429.542456][ C1] ? find_held_lock+0x2b/0x80 [ 429.547100][ C1] ? rcu_read_unlock+0x17/0x60 [ 429.551845][ C1] ? rcu_read_unlock+0x17/0x60 [ 429.556578][ C1] ? find_held_lock+0x2b/0x80 [ 429.561223][ C1] ? rcu_read_unlock+0x17/0x60 [ 429.565961][ C1] charge_memcg+0x1ae/0x210 [ 429.570436][ C1] __mem_cgroup_charge+0x2b/0x1c0 [ 429.575432][ C1] filemap_add_folio+0xe7/0x640 [ 429.580257][ C1] ? __pfx_filemap_add_folio+0x10/0x10 [ 429.585689][ C1] ? filemap_alloc_folio_noprof+0x66/0x80 [ 429.591377][ C1] page_cache_ra_unbounded+0x37a/0x990 [ 429.596815][ C1] do_page_cache_ra+0x10f/0x160 [ 429.601639][ C1] page_cache_ra_order+0xc05/0xed0 [ 429.606732][ C1] filemap_fault+0x1ae2/0x3150 [ 429.611496][ C1] ? __pfx_filemap_fault+0x10/0x10 [ 429.616573][ C1] ? __pte_offset_map+0x9a/0x470 [ 429.621484][ C1] ? find_held_lock+0x2b/0x80 [ 429.626129][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 429.631557][ C1] __do_fault+0x10b/0x440 [ 429.635859][ C1] do_fault+0xb3f/0x1890 [ 429.640068][ C1] ? __pfx_do_fault+0x10/0x10 [ 429.644709][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 429.649440][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 429.654190][ C1] __handle_mm_fault+0x1858/0x2f40 [ 429.659274][ C1] ? lock_vma_under_rcu+0x11d/0x590 [ 429.664440][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.669868][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 429.675039][ C1] handle_mm_fault+0x363/0xa30 [ 429.679772][ C1] do_user_addr_fault+0x59c/0x12f0 [ 429.684859][ C1] exc_page_fault+0x6f/0xd0 [ 429.689343][ C1] asm_exc_page_fault+0x26/0x30 [ 429.694171][ C1] RIP: 0033:0x7fe65fc6cd31 [ 429.698552][ C1] RSP: 002b:00007ffeb5feabd0 EFLAGS: 00010202 [ 429.704594][ C1] RAX: 0000001b33a24000 RBX: 0000000000000110 RCX: 000000000004e9d0 [ 429.712548][ C1] RDX: 0000000003f89675 RSI: 00007ffeb5feac60 RDI: 00007fe660c50010 [ 429.720492][ C1] RBP: 00007ffeb5feac0c R08: 000e9a707f7db7bd R09: 0000000000000001 [ 429.728431][ C1] R10: 000000000000f0a2 R11: 0000000000000246 R12: 0000000000001388 [ 429.736369][ C1] R13: 00000000000927c0 R14: 000000000004e95b R15: 00007ffeb5feac60 [ 429.744317][ C1] [ 429.747311][ C1] task:syz-executor state:R running task stack:21896 pid:5622 tgid:5622 ppid:5617 task_flags:0x400140 flags:0x00080000 [ 429.760754][ C1] Call Trace: [ 429.764010][ C1] [ 429.766919][ C1] __schedule+0x125e/0x6990 [ 429.771397][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 429.776565][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 429.781738][ C1] ? __pfx___schedule+0x10/0x10 [ 429.786558][ C1] ? mark_held_locks+0x40/0x70 [ 429.791295][ C1] preempt_schedule_irq+0x4e/0x90 [ 429.796305][ C1] irqentry_exit+0x33f/0xab0 [ 429.800865][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.806813][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 429.811985][ C1] Code: 05 4f 4e d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e 50 81 10 0f 82 c9 02 00 00 8b 35 3e 80 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 4d d1 13 0f 85 09 03 00 00 48 83 c4 [ 429.831578][ C1] RSP: 0018:ffffc900043274b8 EFLAGS: 00000206 [ 429.837625][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 429.845563][ C1] RDX: 0000000000000000 RSI: ffffffff8e602977 RDI: ffffffff8c835980 [ 429.853502][ C1] RBP: ffffffff8ffeafe0 R08: 00000000980022a5 R09: 0000000000000007 [ 429.861441][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 429.869382][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.877328][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 429.883369][ C1] ? __page_table_check_zero+0x27f/0x410 [ 429.888974][ C1] page_ext_get+0x36/0x1a0 [ 429.893360][ C1] ? page_ext_get+0x25/0x1a0 [ 429.897928][ C1] __reset_page_owner+0x2f/0x230 [ 429.902848][ C1] free_unref_folios+0xa6a/0x17e0 [ 429.907856][ C1] ? folios_put_refs+0x51d/0xaa0 [ 429.912767][ C1] ? folios_put_refs+0x51d/0xaa0 [ 429.917676][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 429.923453][ C1] folios_put_refs+0x585/0xaa0 [ 429.928191][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 429.933446][ C1] ? mark_held_locks+0x40/0x70 [ 429.938182][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 429.943358][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 429.949655][ C1] shmem_undo_range+0x707/0x1640 [ 429.954573][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 429.959921][ C1] ? lock_acquire+0x1d1/0x380 [ 429.964579][ C1] ? unwind_next_frame+0xbd/0x2090 [ 429.969660][ C1] ? lock_acquire+0x1d1/0x380 [ 429.974327][ C1] ? do_raw_spin_lock+0x128/0x260 [ 429.979330][ C1] shmem_evict_inode+0x3b1/0xc10 [ 429.984237][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 429.989661][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 429.995697][ C1] ? lock_acquire+0x1d1/0x380 [ 430.000345][ C1] ? find_held_lock+0x2b/0x80 [ 430.004989][ C1] ? evict+0x37e/0xad0 [ 430.009034][ C1] ? evict+0x37e/0xad0 [ 430.013097][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 430.018524][ C1] evict+0x3c2/0xad0 [ 430.022406][ C1] ? __pfx_evict+0x10/0x10 [ 430.026806][ C1] ? lock_acquire+0x1d1/0x380 [ 430.031479][ C1] ? iput.part.0+0x981/0x1050 [ 430.036192][ C1] iput.part.0+0x989/0x1050 [ 430.040691][ C1] iput+0x30/0x40 [ 430.044314][ C1] filename_unlinkat+0x466/0x770 [ 430.049230][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 430.054667][ C1] ? do_getname+0x191/0x390 [ 430.059162][ C1] __x64_sys_unlink+0x46/0x70 [ 430.063811][ C1] do_syscall_64+0x123/0x790 [ 430.068372][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.074246][ C1] RIP: 0033:0x7f29c319ec07 [ 430.078627][ C1] RSP: 002b:00007ffe9b6bf168 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 430.087014][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f29c319ec07 [ 430.094957][ C1] RDX: 00007ffe9b6bf190 RSI: 00007ffe9b6bf220 RDI: 00007ffe9b6bf220 [ 430.102896][ C1] RBP: 00007ffe9b6bf220 R08: 00007ffe9b6c0220 R09: 00000000ffffffff [ 430.110833][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe9b6c02b0 [ 430.118778][ C1] R13: 00007f29c3236fb3 R14: 000000000004cc7c R15: 00007ffe9b6c02f0 [ 430.126738][ C1] [ 430.129761][ C1] task:syz.2.267 state:R running task stack:18248 pid:6950 tgid:6950 ppid:5619 task_flags:0xc00640 flags:0x00080001 [ 430.143198][ C1] Call Trace: [ 430.146455][ C1] [ 430.149362][ C1] __schedule+0x125e/0x6990 [ 430.153838][ C1] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 430.159545][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 430.164736][ C1] ? irqentry_exit+0x202/0xab0 [ 430.169474][ C1] ? __pfx___schedule+0x10/0x10 [ 430.174294][ C1] ? filemap_map_pages+0x183d/0x1f10 [ 430.179559][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 430.184912][ C1] preempt_schedule+0x57/0xd0 [ 430.189559][ C1] preempt_schedule_thunk+0x16/0x40 [ 430.194731][ C1] _raw_spin_unlock+0x3e/0x50 [ 430.199375][ C1] filemap_map_pages+0x183d/0x1f10 [ 430.204464][ C1] ? __pte_offset_map+0x9a/0x470 [ 430.209373][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 430.214820][ C1] ? __pte_offset_map+0x1e9/0x470 [ 430.219817][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 430.225248][ C1] do_fault+0xa76/0x1890 [ 430.229463][ C1] ? __pfx_do_fault+0x10/0x10 [ 430.234121][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 430.238854][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 430.243600][ C1] __handle_mm_fault+0x1858/0x2f40 [ 430.248682][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.254111][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 430.259377][ C1] handle_mm_fault+0x363/0xa30 [ 430.264114][ C1] __get_user_pages+0x7ca/0x1d50 [ 430.269025][ C1] ? lock_acquire+0x1d1/0x380 [ 430.273673][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 430.279021][ C1] get_dump_page+0x27e/0x3d0 [ 430.283583][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 430.288684][ C1] ? dump_user_range+0x7e0/0xe90 [ 430.293591][ C1] ? copy_mc_enhanced_fast_string+0x6/0xf [ 430.299285][ C1] dump_user_range+0x19c/0xe90 [ 430.304024][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 430.309289][ C1] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 430.315442][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 430.322014][ C1] ? __pfx_writenote+0x10/0x10 [ 430.326751][ C1] elf_core_dump+0x2d97/0x3d60 [ 430.331493][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 430.336572][ C1] ? kasan_save_stack+0x3f/0x50 [ 430.341389][ C1] ? kasan_save_stack+0x30/0x50 [ 430.346206][ C1] ? kasan_save_track+0x14/0x30 [ 430.351022][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 430.355753][ C1] ? coredump_write+0x37b/0x1c20 [ 430.360666][ C1] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 430.366354][ C1] ? vfs_coredump+0x9b0/0x1180 [ 430.371085][ C1] ? asm_exc_page_fault+0x26/0x30 [ 430.376079][ C1] ? 0xffffffffff600000 [ 430.380214][ C1] ? lock_acquire+0x1d1/0x380 [ 430.384875][ C1] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 430.390590][ C1] ? coredump_write+0xd88/0x1c20 [ 430.395495][ C1] coredump_write+0xd88/0x1c20 [ 430.400230][ C1] ? __pfx_coredump_write+0x10/0x10 [ 430.405399][ C1] ? __pfx_make_vfsuid+0x10/0x10 [ 430.410324][ C1] do_coredump.constprop.0+0x9bb/0x25e0 [ 430.415840][ C1] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 430.421799][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 430.426717][ C1] ? trace_kmalloc+0xeb/0x110 [ 430.431378][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 430.436110][ C1] ? __kmalloc_noprof+0x350/0x840 [ 430.441119][ C1] ? lock_acquire+0x1d1/0x380 [ 430.445768][ C1] ? do_raw_spin_lock+0x128/0x260 [ 430.450758][ C1] ? find_held_lock+0x2b/0x80 [ 430.455402][ C1] ? vfs_coredump+0x6f8/0x1180 [ 430.460139][ C1] ? rcu_is_watching+0x13/0xc0 [ 430.464907][ C1] vfs_coredump+0x9b0/0x1180 [ 430.469482][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 430.474488][ C1] ? rcu_is_watching+0x13/0xc0 [ 430.479221][ C1] get_signal+0x1fba/0x22e0 [ 430.483699][ C1] ? __pfx_get_signal+0x10/0x10 [ 430.488534][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 430.494047][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 430.500176][ C1] irqentry_exit+0x542/0xab0 [ 430.504738][ C1] asm_exc_page_fault+0x26/0x30 [ 430.509556][ C1] RIP: 0033:0x7fa2ebc54db7 [ 430.513937][ C1] RSP: 002b:00007fa2ecccb1a0 EFLAGS: 00010206 [ 430.519980][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa2ebd9fb19 [ 430.527929][ C1] RDX: 00007fa2ecccb1c0 RSI: 00007fa2ecccb2f0 RDI: 000000000000000b [ 430.535880][ C1] RBP: 00007fa2ebe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 430.543832][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 430.551772][ C1] R13: 00007fa2ec026038 R14: 00007fa2ec025fa0 R15: 00007fffc31533d8 [ 430.559718][ C1] [ 430.562726][ C1] task:syz.2.339 state:R running task stack:22568 pid:7250 tgid:7250 ppid:5619 task_flags:0xc00640 flags:0x00080000 [ 430.576158][ C1] Call Trace: [ 430.579406][ C1] [ 430.582313][ C1] __schedule+0x125e/0x6990 [ 430.586791][ C1] ? do_raw_spin_lock+0x128/0x260 [ 430.591783][ C1] ? __pfx___schedule+0x10/0x10 [ 430.596602][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 430.601956][ C1] preempt_schedule+0x57/0xd0 [ 430.606614][ C1] preempt_schedule_thunk+0x16/0x40 [ 430.611794][ C1] _raw_spin_unlock+0x3e/0x50 [ 430.616472][ C1] follow_page_pte+0x505/0x1050 [ 430.621314][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 430.626575][ C1] follow_pmd_mask+0x862/0x10d0 [ 430.631408][ C1] ? __pfx_follow_pmd_mask+0x10/0x10 [ 430.636683][ C1] ? __pfx___might_resched+0x10/0x10 [ 430.641948][ C1] ? check_vma_flags+0x3c4/0x640 [ 430.646867][ C1] __get_user_pages+0x679/0x1d50 [ 430.651779][ C1] ? lock_acquire+0x1d1/0x380 [ 430.656428][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 430.661773][ C1] get_dump_page+0x27e/0x3d0 [ 430.666335][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 430.671425][ C1] ? dump_user_range+0x7e0/0xe90 [ 430.676332][ C1] ? copy_mc_enhanced_fast_string+0x8/0xf [ 430.682025][ C1] dump_user_range+0x19c/0xe90 [ 430.686763][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 430.692019][ C1] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 430.698151][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 430.704708][ C1] ? __pfx_writenote+0x10/0x10 [ 430.709444][ C1] elf_core_dump+0x2d97/0x3d60 [ 430.714188][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 430.719266][ C1] ? kasan_save_stack+0x3f/0x50 [ 430.724084][ C1] ? kasan_save_stack+0x30/0x50 [ 430.728901][ C1] ? kasan_save_track+0x14/0x30 [ 430.733724][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 430.738468][ C1] ? coredump_write+0x37b/0x1c20 [ 430.743386][ C1] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 430.749073][ C1] ? vfs_coredump+0x9b0/0x1180 [ 430.753805][ C1] ? asm_exc_page_fault+0x26/0x30 [ 430.758803][ C1] ? 0xffffffffff600000 [ 430.762948][ C1] ? lock_acquire+0x1d1/0x380 [ 430.767600][ C1] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 430.773291][ C1] ? coredump_write+0xd88/0x1c20 [ 430.778201][ C1] coredump_write+0xd88/0x1c20 [ 430.782937][ C1] ? __pfx_coredump_write+0x10/0x10 [ 430.788107][ C1] ? __pfx_make_vfsuid+0x10/0x10 [ 430.793024][ C1] do_coredump.constprop.0+0x9bb/0x25e0 [ 430.798541][ C1] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 430.804510][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 430.809420][ C1] ? trace_kmalloc+0xeb/0x110 [ 430.814067][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 430.818801][ C1] ? __kmalloc_noprof+0x350/0x840 [ 430.823799][ C1] ? lock_acquire+0x1d1/0x380 [ 430.828447][ C1] ? do_raw_spin_lock+0x128/0x260 [ 430.833437][ C1] ? find_held_lock+0x2b/0x80 [ 430.838092][ C1] ? vfs_coredump+0x6f8/0x1180 [ 430.842828][ C1] ? rcu_is_watching+0x13/0xc0 [ 430.847563][ C1] vfs_coredump+0x9b0/0x1180 [ 430.852125][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 430.857132][ C1] ? rcu_is_watching+0x13/0xc0 [ 430.861867][ C1] get_signal+0x1fba/0x22e0 [ 430.866346][ C1] ? __pfx_get_signal+0x10/0x10 [ 430.871169][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 430.876684][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 430.882811][ C1] irqentry_exit+0x542/0xab0 [ 430.887383][ C1] asm_exc_page_fault+0x26/0x30 [ 430.892210][ C1] RIP: 0033:0x7fa2ebc54db7 [ 430.896605][ C1] RSP: 002b:00007fa2ecccb1a0 EFLAGS: 00010206 [ 430.902638][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa2ebd9fb19 [ 430.910578][ C1] RDX: 00007fa2ecccb1c0 RSI: 00007fa2ecccb2f0 RDI: 000000000000000b [ 430.918528][ C1] RBP: 00007fa2ebe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 430.926465][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 430.934403][ C1] R13: 00007fa2ec026038 R14: 00007fa2ec025fa0 R15: 00007fffc31533d8 [ 430.942351][ C1] [ 430.945342][ C1] task:syz.0.274 state:R running task stack:19384 pid:6984 tgid:6984 ppid:5629 task_flags:0x40064c flags:0x0008000b [ 430.958774][ C1] Call Trace: [ 430.962030][ C1] [ 430.964945][ C1] __schedule+0x125e/0x6990 [ 430.969437][ C1] ? __pfx___schedule+0x10/0x10 [ 430.974267][ C1] ? find_held_lock+0x2b/0x80 [ 430.978912][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 430.984267][ C1] preempt_schedule+0x57/0xd0 [ 430.988912][ C1] preempt_schedule_thunk+0x16/0x40 [ 430.994085][ C1] _raw_spin_unlock+0x3e/0x50 [ 430.998733][ C1] __zap_vma_range+0x1679/0x46c0 [ 431.003662][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 431.008920][ C1] ? look_up_lock_class+0x64/0x120 [ 431.014011][ C1] ? lock_acquire+0x1d1/0x380 [ 431.018666][ C1] ? unmap_vmas+0x1c5/0x5f0 [ 431.023140][ C1] ? find_held_lock+0x2b/0x80 [ 431.027785][ C1] ? unmap_vmas+0x234/0x5f0 [ 431.032261][ C1] unmap_vmas+0x294/0x5f0 [ 431.036565][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 431.041389][ C1] ? mas_next_slot+0xc05/0x13a0 [ 431.046230][ C1] exit_mmap+0x1ef/0xa40 [ 431.050441][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 431.055173][ C1] ? rcu_is_watching+0x13/0xc0 [ 431.059916][ C1] ? uprobe_clear_state+0x49/0x250 [ 431.065022][ C1] ? find_held_lock+0x2b/0x80 [ 431.069670][ C1] ? uprobe_clear_state+0x5f/0x250 [ 431.074767][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 431.080377][ C1] __mmput+0x12a/0x410 [ 431.084428][ C1] mmput+0x62/0x70 [ 431.088119][ C1] do_exit+0x80c/0x2a00 [ 431.092248][ C1] ? __pfx_do_exit+0x10/0x10 [ 431.096813][ C1] do_group_exit+0xd5/0x2a0 [ 431.101298][ C1] get_signal+0x1f58/0x22e0 [ 431.105779][ C1] ? __pfx_get_signal+0x10/0x10 [ 431.110601][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 431.116120][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 431.122263][ C1] irqentry_exit+0x542/0xab0 [ 431.126827][ C1] asm_exc_page_fault+0x26/0x30 [ 431.131644][ C1] RIP: 0033:0x7fe65fc54db7 [ 431.136037][ C1] RSP: 002b:00007fe660c301a0 EFLAGS: 00010206 [ 431.142070][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fe65fd9fb19 [ 431.150020][ C1] RDX: 00007fe660c301c0 RSI: 00007fe660c302f0 RDI: 000000000000000b [ 431.157962][ C1] RBP: 00007fe65fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 431.165900][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.173838][ C1] R13: 00007fe660026038 R14: 00007fe660025fa0 R15: 00007ffeb5fea868 [ 431.181795][ C1] [ 431.184795][ C1] task:syz.0.345 state:R running task stack:21128 pid:7233 tgid:7233 ppid:5629 task_flags:0xc00640 flags:0x0008000a [ 431.198223][ C1] Call Trace: [ 431.201471][ C1] [ 431.204373][ C1] __schedule+0x125e/0x6990 [ 431.208871][ C1] ? __pfx___schedule+0x10/0x10 [ 431.213717][ C1] ? mark_held_locks+0x40/0x70 [ 431.218455][ C1] preempt_schedule_irq+0x4e/0x90 [ 431.223458][ C1] irqentry_exit+0x33f/0xab0 [ 431.228019][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.233967][ C1] RIP: 0010:lock_release+0x19e/0x310 [ 431.239224][ C1] Code: ff 65 0f c1 05 db 90 d1 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d 47 d1 13 0f 85 4d 01 00 00 48 83 c4 [ 431.258805][ C1] RSP: 0018:ffffc900033d69d8 EFLAGS: 00000206 [ 431.264856][ C1] RAX: 0000000000000046 RBX: ffffffff8ffeafe0 RCX: ffffc900033d69e4 [ 431.272796][ C1] RDX: 0000000000000000 RSI: ffffffff8e602977 RDI: ffffffff8c835980 [ 431.280746][ C1] RBP: ffffffff8254896b R08: 0000000000000000 R09: 0000000000000001 [ 431.288696][ C1] R10: ffffffff926ab25f R11: 0000000000000001 R12: ffff88807af94b00 [ 431.296635][ C1] R13: dffffc0000000000 R14: 0000000000000202 R15: 0000000000000004 [ 431.304578][ C1] ? filemap_map_pages+0x114b/0x1f10 [ 431.309855][ C1] filemap_map_pages+0x1150/0x1f10 [ 431.314945][ C1] ? __pte_offset_map+0x9a/0x470 [ 431.319861][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 431.325295][ C1] ? __pte_offset_map+0x1e9/0x470 [ 431.330294][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 431.335737][ C1] do_fault+0xa76/0x1890 [ 431.339948][ C1] ? __pfx_do_fault+0x10/0x10 [ 431.344592][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 431.349324][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 431.354062][ C1] __handle_mm_fault+0x1858/0x2f40 [ 431.359153][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 431.364603][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 431.369873][ C1] handle_mm_fault+0x363/0xa30 [ 431.374608][ C1] __get_user_pages+0x7ca/0x1d50 [ 431.379520][ C1] ? lock_acquire+0x1d1/0x380 [ 431.384170][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 431.389528][ C1] get_dump_page+0x27e/0x3d0 [ 431.394092][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 431.399186][ C1] ? dump_user_range+0x7e0/0xe90 [ 431.404098][ C1] dump_user_range+0x19c/0xe90 [ 431.408835][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 431.414102][ C1] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 431.420228][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 431.426796][ C1] ? __pfx_writenote+0x10/0x10 [ 431.431539][ C1] elf_core_dump+0x2d97/0x3d60 [ 431.436280][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 431.441364][ C1] ? rcu_is_watching+0x13/0xc0 [ 431.446097][ C1] ? __schedule+0x1270/0x6990 [ 431.450751][ C1] ? 0xffffffffff600000 [ 431.454904][ C1] ? lock_acquire+0x1d1/0x380 [ 431.459553][ C1] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 431.465245][ C1] ? coredump_write+0xd88/0x1c20 [ 431.470150][ C1] coredump_write+0xd88/0x1c20 [ 431.474888][ C1] ? __pfx_coredump_write+0x10/0x10 [ 431.480058][ C1] ? __pfx_make_vfsuid+0x10/0x10 [ 431.484968][ C1] do_coredump.constprop.0+0x9bb/0x25e0 [ 431.490484][ C1] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 431.496442][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 431.501352][ C1] ? trace_kmalloc+0xeb/0x110 [ 431.505997][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 431.510734][ C1] ? __kmalloc_noprof+0x350/0x840 [ 431.515755][ C1] ? lock_acquire+0x1d1/0x380 [ 431.520405][ C1] ? do_raw_spin_lock+0x128/0x260 [ 431.525394][ C1] ? find_held_lock+0x2b/0x80 [ 431.530038][ C1] ? vfs_coredump+0x6f8/0x1180 [ 431.534771][ C1] ? rcu_is_watching+0x13/0xc0 [ 431.539506][ C1] vfs_coredump+0x9b0/0x1180 [ 431.544068][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 431.549085][ C1] ? rcu_is_watching+0x13/0xc0 [ 431.553820][ C1] get_signal+0x1fba/0x22e0 [ 431.558305][ C1] ? __pfx_get_signal+0x10/0x10 [ 431.563143][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 431.568668][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 431.574810][ C1] irqentry_exit+0x542/0xab0 [ 431.579373][ C1] asm_exc_page_fault+0x26/0x30 [ 431.584202][ C1] RIP: 0033:0x7fe65fd9fb21 [ 431.588592][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 431.594633][ C1] RAX: 0000000000000000 RBX: 00007fe660026090 RCX: 00007fe65fd9fb19 [ 431.602583][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 431.610521][ C1] RBP: 00007fe65fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 431.618460][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.626399][ C1] R13: 00007fe660026128 R14: 00007fe660026090 R15: 00007ffeb5fea868 [ 431.634344][ C1] [ 431.637336][ C1] rcu: rcu_preempt kthread starved for 10932 jiffies! g24421 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 431.648317][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 431.658263][ C1] rcu: RCU grace-period kthread stack dump: [ 431.664121][ C1] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 431.677554][ C1] Call Trace: [ 431.680812][ C1] [ 431.683714][ C1] __schedule+0x125e/0x6990 [ 431.688189][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 431.693115][ C1] ? __pfx___schedule+0x10/0x10 [ 431.697931][ C1] ? find_held_lock+0x2b/0x80 [ 431.702576][ C1] ? schedule+0x225/0x2c0 [ 431.706875][ C1] schedule+0xdd/0x2c0 [ 431.710911][ C1] schedule_timeout+0x127/0x280 [ 431.715747][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 431.721103][ C1] ? __pfx_process_timeout+0x10/0x10 [ 431.726371][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 431.732143][ C1] ? prepare_to_swait_event+0xdf/0x4f0 [ 431.737586][ C1] rcu_gp_fqs_loop+0x1a9/0x930 [ 431.742332][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 431.747600][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 431.752509][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 431.757690][ C1] rcu_gp_kthread+0x179/0x260 [ 431.762355][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 431.767525][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.773312][ C1] ? __kthread_parkme+0x18f/0x230 [ 431.778321][ C1] ? kthread+0x13a/0x450 [ 431.782531][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 431.787702][ C1] kthread+0x373/0x450 [ 431.791753][ C1] ? __pfx_kthread+0x10/0x10 [ 431.796323][ C1] ret_from_fork+0x730/0xd60 [ 431.800885][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 431.805976][ C1] ? __switch_to+0x800/0x10e0 [ 431.810628][ C1] ? __pfx_kthread+0x10/0x10 [ 431.815216][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.819958][ C1] [ 431.822962][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 431.829254][ C1] CPU: 1 UID: 0 PID: 7291 Comm: syz.0.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.839989][ C1] Tainted: [L]=SOFTLOCKUP [ 431.844295][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 431.854319][ C1] RIP: 0010:write_comp_data+0x9d/0xb0 [ 431.859669][ C1] Code: 00 00 4a 8d 04 d5 28 00 00 00 49 39 c3 72 1b 48 83 c1 01 48 89 0a 48 89 7c 02 e0 4c 89 44 02 e8 4c 89 4c 02 f0 4a 89 74 d2 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 [ 431.879273][ C1] RSP: 0000:ffffc900032e7070 EFLAGS: 00000293 [ 431.885312][ C1] RAX: 0000000000000000 RBX: ffff88813fe41e42 RCX: ffff888030464b00 [ 431.893261][ C1] RDX: 0000000000000000 RSI: ffffffff8bea6f86 RDI: 0000000000000007 [ 431.901200][ C1] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000002 [ 431.909152][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 431.917092][ C1] R13: dffffc0000000000 R14: 0000000000000023 R15: ffffffff90185e68 [ 431.925030][ C1] FS: 000055558a746500(0000) GS:ffff888122575000(0000) knlGS:0000000000000000 [ 431.933938][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.940492][ C1] CR2: 0000001b34012ff8 CR3: 000000007f7b6000 CR4: 00000000003526f0 [ 431.948442][ C1] Call Trace: [ 431.951690][ C1] [ 431.954600][ C1] __radix_tree_lookup+0x76/0x2b0 [ 431.959612][ C1] shrink_slab+0x8ff/0x12d0 [ 431.964123][ C1] ? shrink_slab+0x68b/0x12d0 [ 431.968780][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 431.973701][ C1] ? __pfx___might_resched+0x10/0x10 [ 431.978955][ C1] ? page_counter_calculate_protection+0x348/0x730 [ 431.985432][ C1] shrink_node+0x7c1/0x4410 [ 431.989916][ C1] ? __pfx_shrink_node+0x10/0x10 [ 431.994834][ C1] ? queue_work_on+0x11b/0x1e0 [ 431.999576][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 432.004744][ C1] ? queue_work_on+0x141/0x1e0 [ 432.009479][ C1] ? do_try_to_free_pages+0x2da/0x1500 [ 432.014905][ C1] do_try_to_free_pages+0x2da/0x1500 [ 432.020164][ C1] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 432.026024][ C1] ? psi_group_change+0x457/0xb10 [ 432.031019][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 432.037403][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 432.042569][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 432.047738][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 432.052915][ C1] try_charge_memcg+0x505/0xf30 [ 432.057751][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 432.063094][ C1] ? find_held_lock+0x2b/0x80 [ 432.067739][ C1] ? rcu_read_unlock+0x17/0x60 [ 432.072485][ C1] ? rcu_read_unlock+0x17/0x60 [ 432.077225][ C1] obj_cgroup_charge_pages+0x2b/0x1f0 [ 432.082567][ C1] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 432.088523][ C1] ? kasan_save_track+0x14/0x30 [ 432.093342][ C1] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 432.098786][ C1] ? alloc_buffer_head+0x21/0x140 [ 432.103793][ C1] alloc_buffer_head+0x21/0x140 [ 432.108611][ C1] folio_alloc_buffers+0x197/0x8e0 [ 432.113705][ C1] create_empty_buffers+0x3a/0x5f0 [ 432.118788][ C1] ? jbd2_journal_stop+0x187/0xf00 [ 432.123882][ C1] folio_create_buffers+0x13b/0x1a0 [ 432.129064][ C1] __block_write_begin_int+0x393/0x19c0 [ 432.134579][ C1] ? lock_acquire+0x1d1/0x380 [ 432.139237][ C1] ? ext4_page_mkwrite+0x324/0x19e0 [ 432.144404][ C1] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 432.150270][ C1] ? __pfx___block_write_begin_int+0x10/0x10 [ 432.156231][ C1] ? __pfx___might_resched+0x10/0x10 [ 432.161485][ C1] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 432.167353][ C1] block_page_mkwrite+0x348/0x460 [ 432.172364][ C1] ext4_page_mkwrite+0x153f/0x19e0 [ 432.177447][ C1] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 432.182877][ C1] do_page_mkwrite+0x17a/0x430 [ 432.187623][ C1] do_fault+0x659/0x1890 [ 432.191833][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 432.197264][ C1] ? __pfx_do_fault+0x10/0x10 [ 432.201916][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 432.206648][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 432.211384][ C1] __handle_mm_fault+0x1858/0x2f40 [ 432.216467][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.221892][ C1] ? __pfx_mt_find+0x10/0x10 [ 432.226471][ C1] ? find_vma+0xbf/0x140 [ 432.230695][ C1] ? __pfx_find_vma+0x10/0x10 [ 432.235354][ C1] handle_mm_fault+0x363/0xa30 [ 432.240105][ C1] do_user_addr_fault+0x745/0x12f0 [ 432.245193][ C1] exc_page_fault+0x6f/0xd0 [ 432.249677][ C1] asm_exc_page_fault+0x26/0x30 [ 432.254505][ C1] RIP: 0033:0x7fe65fc74812 [ 432.258895][ C1] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 43 84 fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 432.278493][ C1] RSP: 002b:00007ffeb5fea8c0 EFLAGS: 00010202 [ 432.284534][ C1] RAX: 0000000000011008 RBX: 00007fe660b55720 RCX: 0000000000000000 [ 432.292473][ C1] RDX: 0000001b34013000 RSI: 0000000000000008 RDI: 00007fe660b55720 [ 432.300413][ C1] RBP: 000000000000040e R08: 00007fe660010000 R09: 00007fe660026128 [ 432.308352][ C1] R10: 0000000000000007 R11: 000000000000000d R12: ffffffff89faef53 [ 432.316298][ C1] R13: 00007fe660026128 R14: 00000000000000ad R15: fffffffffffef000 [ 432.324244][ C1] ? netlink_sendmsg+0x1a3/0x10c0 [ 432.329255][ C1] [ 432.338242][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.338286][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.671299][ T34] oom_reaper: reaped process 7233 (syz.0.345), now anon-rss:0kB, file-rss:53760kB, shmem-rss:5888kB [ 433.126866][ T7293] syz.0.351 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 433.126891][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.0.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.126906][ T7293] Tainted: [L]=SOFTLOCKUP [ 433.126909][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 433.126915][ T7293] Call Trace: [ 433.126919][ T7293] [ 433.126923][ T7293] dump_stack_lvl+0x100/0x190 [ 433.126944][ T7293] dump_header+0xfb/0x606 [ 433.126957][ T7293] oom_kill_process.cold+0xd/0x380 [ 433.126970][ T7293] out_of_memory+0x343/0x14c0 [ 433.126989][ T7293] ? __pfx_out_of_memory+0x10/0x10 [ 433.127009][ T7293] mem_cgroup_out_of_memory+0xc6/0x130 [ 433.127020][ T7293] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 433.127030][ T7293] ? find_held_lock+0x2b/0x80 [ 433.127044][ T7293] ? do_raw_spin_unlock+0x145/0x1e0 [ 433.127054][ T7293] ? _raw_spin_unlock+0x28/0x50 [ 433.127067][ T7293] try_charge_memcg+0x779/0xf30 [ 433.127084][ T7293] ? __pfx_try_charge_memcg+0x10/0x10 [ 433.127098][ T7293] ? find_held_lock+0x2b/0x80 [ 433.127108][ T7293] ? rcu_read_unlock+0x17/0x60 [ 433.127122][ T7293] ? rcu_read_unlock+0x17/0x60 [ 433.127137][ T7293] ? find_held_lock+0x2b/0x80 [ 433.127148][ T7293] ? rcu_read_unlock+0x17/0x60 [ 433.127165][ T7293] charge_memcg+0x1ae/0x210 [ 433.127180][ T7293] __mem_cgroup_charge+0x2b/0x1c0 [ 433.127197][ T7293] shmem_alloc_and_add_folio+0x451/0xd40 [ 433.127212][ T7293] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 433.127224][ T7293] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 433.127236][ T7293] ? vm_normal_page+0x1d1/0x380 [ 433.127253][ T7293] shmem_get_folio_gfp+0x758/0x1af0 [ 433.127268][ T7293] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 433.127281][ T7293] ? __pfx_follow_page_pte+0x10/0x10 [ 433.127298][ T7293] shmem_write_begin+0x1a4/0x420 [ 433.127311][ T7293] ? __pfx_shmem_write_begin+0x10/0x10 [ 433.127323][ T7293] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 433.127338][ T7293] generic_perform_write+0x292/0xa40 [ 433.127353][ T7293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 433.127369][ T7293] ? __pfx_generic_perform_write+0x10/0x10 [ 433.127385][ T7293] ? file_update_time_flags+0x38c/0x520 [ 433.127403][ T7293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 433.127415][ T7293] shmem_file_write_iter+0x10e/0x140 [ 433.127429][ T7293] __kernel_write_iter+0x2ac/0x930 [ 433.127441][ T7293] ? __pfx___kernel_write_iter+0x10/0x10 [ 433.127452][ T7293] ? __up_read+0x333/0x980 [ 433.127462][ T7293] ? dump_user_range+0x7e0/0xe90 [ 433.127478][ T7293] dump_user_range+0xa0d/0xe90 [ 433.127493][ T7293] ? __pfx_dump_user_range+0x10/0x10 [ 433.127509][ T7293] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 433.127524][ T7293] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 433.127539][ T7293] ? __pfx_writenote+0x10/0x10 [ 433.127555][ T7293] elf_core_dump+0x2d97/0x3d60 [ 433.127577][ T7293] ? __pfx_elf_core_dump+0x10/0x10 [ 433.127589][ T7293] ? kasan_save_stack+0x3f/0x50 [ 433.127598][ T7293] ? kasan_save_stack+0x30/0x50 [ 433.127608][ T7293] ? kasan_save_track+0x14/0x30 [ 433.127617][ T7293] ? __kasan_kmalloc+0xaa/0xb0 [ 433.127627][ T7293] ? coredump_write+0x37b/0x1c20 [ 433.127637][ T7293] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 433.127649][ T7293] ? vfs_coredump+0x9b0/0x1180 [ 433.127660][ T7293] ? asm_exc_page_fault+0x26/0x30 [ 433.127672][ T7293] ? 0xffffffffff600000 [ 433.127698][ T7293] ? lock_acquire+0x1d1/0x380 [ 433.127712][ T7293] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 433.127728][ T7293] ? coredump_write+0xd88/0x1c20 [ 433.127739][ T7293] coredump_write+0xd88/0x1c20 [ 433.127756][ T7293] ? __pfx_coredump_write+0x10/0x10 [ 433.127773][ T7293] ? __pfx_make_vfsuid+0x10/0x10 [ 433.127789][ T7293] do_coredump.constprop.0+0x9bb/0x25e0 [ 433.127808][ T7293] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 433.127833][ T7293] ? __lock_acquire+0x5c0/0x1f40 [ 433.127848][ T7293] ? trace_kmalloc+0xeb/0x110 [ 433.127859][ T7293] ? __kasan_kmalloc+0xaa/0xb0 [ 433.127870][ T7293] ? __kmalloc_noprof+0x350/0x840 [ 433.127888][ T7293] ? lock_acquire+0x1d1/0x380 [ 433.127902][ T7293] ? do_raw_spin_lock+0x128/0x260 [ 433.127911][ T7293] ? find_held_lock+0x2b/0x80 [ 433.127922][ T7293] ? vfs_coredump+0x6f8/0x1180 [ 433.127934][ T7293] ? rcu_is_watching+0x13/0xc0 [ 433.127948][ T7293] vfs_coredump+0x9b0/0x1180 [ 433.127962][ T7293] ? __pfx_vfs_coredump+0x10/0x10 [ 433.127990][ T7293] ? rcu_is_watching+0x13/0xc0 [ 433.128004][ T7293] get_signal+0x1fba/0x22e0 [ 433.128023][ T7293] ? __pfx_get_signal+0x10/0x10 [ 433.128040][ T7293] arch_do_signal_or_restart+0x91/0x7e0 [ 433.128052][ T7293] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 433.128071][ T7293] irqentry_exit+0x542/0xab0 [ 433.128085][ T7293] asm_exc_page_fault+0x26/0x30 [ 433.128095][ T7293] RIP: 0033:0x7fe65fd9fb21 [ 433.128104][ T7293] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 433.128114][ T7293] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 433.128123][ T7293] RAX: 0000000000000000 RBX: 00007fe660025fa0 RCX: 00007fe65fd9fb19 [ 433.128129][ T7293] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 433.128135][ T7293] RBP: 00007fe65fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 433.128141][ T7293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.128147][ T7293] R13: 00007fe660026038 R14: 00007fe660025fa0 R15: 00007ffeb5fea868 [ 433.128161][ T7293] [ 433.128165][ T7293] memory: usage 307200kB, limit 307200kB, failcnt 234252 [ 433.128172][ T7293] memory+swap: usage 352536kB, limit 9007199254740988kB, failcnt 0 [ 433.128178][ T7293] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 433.128184][ T7293] Memory cgroup stats for /syz0: [ 433.128249][ T7293] cache 310804480 [ 433.128253][ T7293] rss 618496 [ 433.128257][ T7293] rss_huge 0 [ 433.128260][ T7293] shmem 310800384 [ 433.128263][ T7293] mapped_file 37543936 [ 433.128267][ T7293] dirty 0 [ 433.128270][ T7293] writeback 0 [ 433.128273][ T7293] workingset_refault_anon 8 [ 433.128277][ T7293] workingset_refault_file 5191 [ 433.128281][ T7293] swap 46424064 [ 433.128284][ T7293] swapcached 0 [ 433.128288][ T7293] pgpgin 618742 [ 433.128291][ T7293] pgpgout 543222 [ 433.128295][ T7293] pgfault 213165 [ 433.128298][ T7293] pgmajfault 16 [ 433.128301][ T7293] inactive_anon 190988288 [ 433.128305][ T7293] active_anon 120430592 [ 433.128309][ T7293] inactive_file 0 [ 433.128312][ T7293] active_file 4096 [ 433.128316][ T7293] unevictable 0 [ 433.128319][ T7293] hierarchical_memory_limit 314572800 [ 433.128323][ T7293] hierarchical_memsw_limit 9223372036854771712 [ 433.128327][ T7293] total_cache 310804480 [ 433.128331][ T7293] total_rss 618496 [ 433.128334][ T7293] total_rss_huge 0 [ 433.128338][ T7293] total_shmem 310800384 [ 433.128341][ T7293] total_mapped_file 37543936 [ 433.128345][ T7293] total_dirty 0 [ 433.128349][ T7293] total_writeback 0 [ 433.128352][ T7293] total_workingset_refault_anon 8 [ 433.128356][ T7293] total_workingset_refault_file 5191 [ 433.128360][ T7293] total_swap 46424064 [ 433.128363][ T7293] total_swapcached 0 [ 433.128367][ T7293] total_pgpgin 618742 [ 433.128371][ T7293] total_pgpgout 543222 [ 433.128374][ T7293] total_pgfault 213165 [ 433.128378][ T7293] total_pgmajfault 16 [ 433.128381][ T7293] total_inactive_anon 190988288 [ 433.128385][ T7293] total_active_anon 120430592 [ 433.128389][ T7293] total_inactive_file 0 [ 433.128393][ T7293] total_active_file 4096 [ 433.128396][ T7293] total_unevictable 0 [ 433.128400][ T7293] anon_cost 0 [ 433.128403][ T7293] file_cost 0 [ 433.128407][ T7293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.351,pid=7293,uid=0 [ 433.128453][ T7293] Memory cgroup out of memory: Killed process 7293 (syz.0.351) total-vm:104332kB, anon-rss:1444kB, file-rss:53828kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 SYZFAIL: failed to send rpc fd=3 want=216 sent=0 n=-1 (errno 32: Broken pipe) [ 434.689794][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.689847][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.827259][ T270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.921944][ T270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.071327][ T270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.221747][ T270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.477357][ T270] bridge_slave_1: left allmulticast mode [ 438.477390][ T270] bridge_slave_1: left promiscuous mode [ 438.478314][ T270] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.505871][ T270] bridge_slave_0: left allmulticast mode [ 438.505895][ T270] bridge_slave_0: left promiscuous mode [ 438.506086][ T270] bridge0: port 1(bridge_slave_0) entered disabled state