last executing test programs: 21m57.798467719s ago: executing program 0 (id=1042): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000100), 0x4) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0xf1, 0x1, {0x22, 0xf72}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x93, 0x4, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xe8}}]}}}]}}]}}, 0x0) 21m54.673489073s ago: executing program 0 (id=1043): r0 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r0], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) r6 = geteuid() mount$9p_rdma(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x40, &(0x7f0000002300)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@msize={'msize', 0x3d, 0x343e}}, {@timeout={'timeout', 0x3d, 0x7}}], [{@measure}, {@euid_lt}, {@pcr={'pcr', 0x3d, 0x38}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '/dev/sequencer\x00'}}, {@appraise}, {@uid_eq={'uid', 0x3d, r6}}]}}) epoll_create(0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[@ANYBLOB="180000000114010b0025bd7000fedbdf2508080100020000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x181740, 0x0) 21m53.66317417s ago: executing program 0 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000001580)=""/193, 0xc1}], 0x5}, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)='O', 0x1, 0x20000800, &(0x7f0000000280)={0xa, 0x4e03, 0x5, @private2, 0x9}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000140)=0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) 21m52.679338702s ago: executing program 0 (id=1048): socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x200040b4) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001007f00000108000200ac141400080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 21m42.207726876s ago: executing program 0 (id=1069): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000800), 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) fsetxattr(r4, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f00000000c0)='autofs\x00', 0x7, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(0x0, 0xb) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000080)) 21m39.659192034s ago: executing program 0 (id=1073): semop(0x0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(0x0, &(0x7f0000000080)=[{0x1, 0xffff, 0x1400}], 0x1) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/84) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12b4}}, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000100)) sendmsg$xdp(r4, 0x0, 0x8044) 21m24.084085598s ago: executing program 32 (id=1073): semop(0x0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(0x0, &(0x7f0000000080)=[{0x1, 0xffff, 0x1400}], 0x1) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/84) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x12b4}}, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000100)) sendmsg$xdp(r4, 0x0, 0x8044) 12.193304171s ago: executing program 2 (id=3953): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x13}}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000300)=0x793c, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x3}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.188974265s ago: executing program 4 (id=3954): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0x4efe}], 0x0, 0x0, 0x0, 0x0, 0x6}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) io_uring_setup(0x2d58, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) ioctl$TIOCSETD(r7, 0x5423, 0x0) 10.636274728s ago: executing program 2 (id=3957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pread64(r0, &(0x7f0000000100)=""/78, 0x4e, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000001240)=[@ioring_restriction_sqe_flags_required={0x3, 0x2}, @ioring_restriction_sqe_flags_allowed={0x2, 0x9}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) sendfile(r6, r6, 0x0, 0x30) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x100010, r2, 0x10000000) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) 9.666336223s ago: executing program 4 (id=3960): socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs$namespace(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.365273352s ago: executing program 5 (id=3961): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pread64(r0, &(0x7f0000000100)=""/78, 0x4e, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000001240)=[@ioring_restriction_sqe_flags_required={0x3, 0x2}, @ioring_restriction_sqe_flags_allowed={0x2, 0x9}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) sendfile(r6, r6, 0x0, 0x30) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x100010, r2, 0x10000000) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) 8.487370102s ago: executing program 5 (id=3962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffc, 0x8014000, 0x7, 0x8, 0x7, 0x4, 0x0, 0x0, 0x4, 0x1}}, 0x50) 8.485636776s ago: executing program 3 (id=3963): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="0800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000010000000fdfffffffcdbdf25030005000000000002002000ffffffff0000000000000000080012000000010000000000000000000600000000000000f303000000800000ff010000000000000000000000000001fc02000000000000"], 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 7.577729803s ago: executing program 3 (id=3964): mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd2f, 0xa0000000, "af"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1, 0xf4, 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000}]) 6.79940371s ago: executing program 2 (id=3965): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = dup(r0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r2}, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 6.723006591s ago: executing program 1 (id=3966): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x25, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x10000, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1a, 0x6007, @fd_index, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f000001b000)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/110, 0x6e}, {&(0x7f0000000980)=""/120, 0xca}, {&(0x7f0000000a00)=""/195, 0xc3}], 0x5}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x13, 0x8, 0x1, 0x2, @mcast2, @loopback, 0x8000, 0x10, 0x6, 0x6}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x17, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xf, 0x2, 0xad}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(0xffffffffffffffff) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}, @md5sig={0x13, 0x12, "6ff10ff662227a1ee386aead7cbb04f5"}]}}}}}}}, 0x0) 6.557983854s ago: executing program 3 (id=3967): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x13}}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000300)=0x793c, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x3}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.315467885s ago: executing program 1 (id=3968): socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010725bd7000fcdbdfb3030000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0xc0000, 0x143, 0xc}, 0x18) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) r6 = eventfd(0x9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000300)=r6, 0x1) io_uring_enter(r5, 0x2d3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x40, 0x0, 0x10}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 6.314998681s ago: executing program 5 (id=3969): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = dup(r0) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r2}, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 6.111119743s ago: executing program 4 (id=3970): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0x4efe}], 0x0, 0x0, 0x0, 0x0, 0x6}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) io_uring_setup(0x2d58, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0) preadv(r6, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) ioctl$TIOCSETD(r7, 0x5423, 0x0) 6.035554697s ago: executing program 3 (id=3971): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$alg(0x26, 0x5, 0x0) 5.553848667s ago: executing program 4 (id=3972): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r6, r0}, 0xc) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000010000000fdfffffffcdbdf25030005000000000002002000ffffffff0000000000000000080012000000010000000000000000000600000000000000f303000000800000ff010000000000000000000000000001fc02000000000000"], 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 4.787503326s ago: executing program 5 (id=3973): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0x1, 0xffff}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 3.962554424s ago: executing program 5 (id=3974): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r5, r6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 3.209384389s ago: executing program 4 (id=3975): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xd44263be89ee4aba}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x7}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000300000000000000000004000f60030002000000850000008900000018010003696c6c2500000000002020207b1af8ff00000000bfa10000c720030000000007010000f8ffffffb702000008000000b7030000090000008500000006000000183500000400000000000000000000009500000000"], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x2, 0x1d1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0xffffffffffffffff, {[0x0, 0x0, 0x5c, 0x3, 0x3, 0x5, 0x0, 0x3]}}, 0x66) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) recvfrom(r0, 0x0, 0x0, 0x40010001, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) sendmmsg(r4, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r5, 0x2) 3.02592421s ago: executing program 5 (id=3976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffff, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5888, 0x100, 0xfffffffc, 0xbfeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, r1, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x351e, 0x884b, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x81901) mount_setattr(r9, &(0x7f0000001d80)='.\x00', 0x800, &(0x7f0000001dc0)={0xf0, 0x74, 0x20000}, 0x20) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES64=r0, @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x800000007, 0x8000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.900637347s ago: executing program 1 (id=3977): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@overlay={0x101, 0xb, 0x4, 0x8, 0xffffff73, {}, {0x2, 0x4, 0x0, 0x4, 0xca, 0x0, "8f2eb06e"}, 0x1000, 0x3, {}, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB="dc030000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf258300000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4885) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.362743406s ago: executing program 1 (id=3978): r0 = creat(0x0, 0xd931d3864d39dc55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000580)={{0x3, r4, r5, r6, r7, 0x2, 0x9b}, 0xdf2, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6cf}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000280), 0x0) close(r0) sendmsg$NFNL_MSG_ACCT_GET(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x0, 0xea60}}, 0x0) 2.350890428s ago: executing program 2 (id=3979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) r4 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x60000005}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket(0x2a, 0x800000002, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x541b, 0x1000000000000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0xc0245720, &(0x7f0000000180)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.166058037s ago: executing program 4 (id=3980): socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs$namespace(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.754687497s ago: executing program 2 (id=3981): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000001240)=[@ioring_restriction_sqe_flags_required={0x3, 0x2}, @ioring_restriction_sqe_flags_allowed={0x2, 0x9}], 0x2) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) sendfile(r5, r5, 0x0, 0x30) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x100010, r1, 0x10000000) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) 1.751533796s ago: executing program 3 (id=3982): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYRES32=r4, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="0800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r6, r0}, 0xc) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000010000000fdfffffffcdbdf25030005000000000002002000ffffffff0000000000000000080012000000010000000000000000000600000000000000f303000000800000ff010000000000000000000000000001fc02000000000000"], 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 1.361740087s ago: executing program 1 (id=3983): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2], 0x50) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') write(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_clone(0x70001400, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000e40)="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") 15.139393ms ago: executing program 1 (id=3984): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000000)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x18, 0x14001}], 0x1, 0x4044040) 1.381179ms ago: executing program 2 (id=3985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)='O', 0x1, 0x20000800, &(0x7f0000000280)={0xa, 0x4e03, 0x5, @private2, 0x9}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000140)=0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c920"], 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 0s ago: executing program 3 (id=3986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscach']) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x10020000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0x23b}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, 0x0}, 0x5}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000004c00)=""/65, 0x41}, 0xfffffff7}, {{&(0x7f0000004c80)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/26, 0x1a}], 0x2, &(0x7f0000004dc0)}, 0x5}], 0x4, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r8 = shmat(r7, &(0x7f0000fff000/0x1000)=nil, 0x400c) shmdt(r8) shmdt(r8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) kernel console output (not intermixed with test programs): es in process `syz.1.3095'. [ 1498.331546][ T6727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1498.748342][T20889] misc userio: Invalid payload size [ 1498.899345][ T2153] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1498.928843][T20886] Bluetooth: hci5: Frame reassembly failed (-84) [ 1498.969942][ T6727] Bluetooth: hci5: Frame reassembly failed (-84) [ 1499.123385][ T2153] usb 3-1: Using ep0 maxpacket: 16 [ 1499.157233][ T2153] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1499.177317][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1499.217699][ T2153] usb 3-1: Product: syz [ 1499.237984][ T2153] usb 3-1: Manufacturer: syz [ 1499.248058][ T2153] usb 3-1: SerialNumber: syz [ 1499.312619][ T2153] usb 3-1: config 0 descriptor?? [ 1499.585843][T20888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1500.028374][ T2153] delete_channel: no stack [ 1500.278299][T20901] kAFS: No cell specified [ 1500.929576][T13762] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1501.580661][T20914] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1502.476844][T20924] 9pnet_fd: Insufficient options for proto=fd [ 1503.409397][ T2153] usb 3-1: USB disconnect, device number 26 [ 1503.564307][T20932] kAFS: No cell specified [ 1504.243224][ T6727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.797443][T20946] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1504.809509][T20946] bond0: (slave lo): Error: Device can not be enslaved while up [ 1504.906080][T20947] syz.2.3111 (20947): drop_caches: 2 [ 1504.914820][T20947] syz.2.3111 (20947): drop_caches: 2 [ 1505.488425][T20955] dvmrp17: entered allmulticast mode [ 1505.670421][T20955] dvmrp17: left allmulticast mode [ 1506.144176][T20956] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1506.187735][T20956] bond0: (slave lo): Error: Device type is different from other slaves [ 1508.884794][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1508.905729][T20982] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1509.038668][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1509.055715][T20982] bond0: (slave lo): Error: Device can not be enslaved while up [ 1509.084486][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3123'. [ 1509.114806][T20996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3122'. [ 1509.590219][ T3544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1510.365343][T21007] syzkaller0: entered promiscuous mode [ 1510.371125][T21007] syzkaller0: entered allmulticast mode [ 1510.432290][T21005] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 1511.511356][T21015] lo speed is unknown, defaulting to 1000 [ 1511.517812][T21015] lo speed is unknown, defaulting to 1000 [ 1512.385148][T21024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1513.064578][T21034] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 1513.929731][T21043] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1513.958967][T21043] bond0: (slave lo): Error: Device can not be enslaved while up [ 1515.601054][ T3544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1515.614109][ T30] audit: type=1804 audit(2000000073.340:1367): pid=21059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3137" name="/newroot/655/file0" dev="tmpfs" ino=3605 res=1 errno=0 [ 1515.652726][T11437] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1515.913288][T11437] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1516.342292][T11437] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1516.438824][T11437] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1516.448051][T11437] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1516.729268][T11437] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1516.757611][T11437] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1516.766803][T11437] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1516.779449][T11437] usb 5-1: Product: syz [ 1516.783612][T11437] usb 5-1: Manufacturer: syz [ 1516.799986][T11437] cdc_wdm 5-1:1.0: skipping garbage [ 1516.806095][T11437] cdc_wdm 5-1:1.0: skipping garbage [ 1516.825557][T11437] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1516.835871][T11437] cdc_wdm 5-1:1.0: Unknown control protocol [ 1517.150853][T21074] lo speed is unknown, defaulting to 1000 [ 1517.164719][T21074] lo speed is unknown, defaulting to 1000 [ 1517.745062][T21078] lo speed is unknown, defaulting to 1000 [ 1517.752077][T21078] lo speed is unknown, defaulting to 1000 [ 1518.707174][ T30] audit: type=1400 audit(2000000077.260:1368): avc: denied { read write } for pid=21053 comm="syz.4.3138" name="cdc-wdm0" dev="devtmpfs" ino=3344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1518.858788][T21086] kAFS: No cell specified [ 1519.049240][ T30] audit: type=1400 audit(2000000077.260:1369): avc: denied { open } for pid=21053 comm="syz.4.3138" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1520.466665][T11437] usb 5-1: USB disconnect, device number 21 [ 1521.191792][T15468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1521.696407][T21118] loop6: detected capacity change from 0 to 2560 [ 1521.706144][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.715104][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.724360][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.732838][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.742017][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.756101][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.769227][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.779223][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.789177][T21118] ldm_validate_partition_table(): Disk read failed. [ 1521.799189][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.812591][T21118] Buffer I/O error on dev loop6, logical block 0, async page read [ 1521.849179][T21118] Dev loop6: unable to read RDB block 0 [ 1521.873409][T21118] loop6: unable to read partition table [ 1521.880104][T21118] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1522.186522][T21127] 9pnet_fd: Insufficient options for proto=fd [ 1524.363325][T21145] netlink: 'syz.5.3154': attribute type 2 has an invalid length. [ 1527.335616][T21161] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1527.347683][T21161] bond0: (slave lo): Error: Device can not be enslaved while up [ 1527.691224][T21160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1527.804707][T21160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1528.702370][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1530.690037][T13198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1532.165000][T21213] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1532.177050][T21213] bond0: (slave lo): Error: Device can not be enslaved while up [ 1532.842116][T21223] cgroup: noprefix used incorrectly [ 1534.153061][T21229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1534.789209][T21227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3170'. [ 1536.449919][ T3544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.410849][T21268] kAFS: No cell specified [ 1537.857784][ T30] audit: type=1326 audit(2000000096.400:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21264 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1537.937361][ T30] audit: type=1326 audit(2000000096.400:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21264 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1538.075993][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 1539.049757][ T30] audit: type=1326 audit(2000000096.400:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21264 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1539.096004][ T30] audit: type=1326 audit(2000000096.400:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21264 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1539.121754][ T30] audit: type=1326 audit(2000000096.400:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21264 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1540.891479][T21296] loop6: detected capacity change from 0 to 524287999 [ 1540.956177][T21296] netlink: 'syz.2.3185': attribute type 12 has an invalid length. [ 1541.583890][ T48] hid_parser_main: 33 callbacks suppressed [ 1541.583909][ T48] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1541.605867][ T48] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1542.210964][ T3544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.247901][T21341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3196'. [ 1545.442917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.452028][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.523739][T21346] overlayfs: overlapping lowerdir path [ 1546.165389][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1546.253317][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1546.262639][T21351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1547.361856][ T6731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.174868][T21370] mkiss: ax0: crc mode is auto. [ 1550.571970][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1550.584121][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1550.623459][T21393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3205'. [ 1550.949967][T21402] ./file0: Can't lookup blockdev [ 1551.408174][T21407] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1551.420233][T21407] bond0: (slave lo): Error: Device can not be enslaved while up [ 1552.844076][T21417] siw: device registration error -23 [ 1553.292016][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1554.741838][T21434] overlayfs: overlapping lowerdir path [ 1555.263400][T21437] ksmbd: Unknown IPC event: 3, ignore. [ 1555.337438][T21437] usb usb8: usbfs: process 21437 (syz.3.3217) did not claim interface 0 before use [ 1556.313590][T21447] SELinux: failed to load policy [ 1558.751306][T17749] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1558.855600][ T6731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1559.194515][T21457] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1559.206596][T21457] bond0: (slave lo): Error: Device type is different from other slaves [ 1559.552312][T21463] kAFS: No cell specified [ 1561.804201][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1561.813288][T21482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1563.201201][T21500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1563.775411][T21503] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1563.787898][T21503] bond0: (slave lo): Error: Device type is different from other slaves [ 1565.042243][ T6731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1565.430423][T21520] kAFS: No cell specified [ 1566.014072][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'. [ 1566.022967][T21527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3242'. [ 1566.101252][T21528] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3241'. [ 1566.119566][T21528] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3241'. [ 1567.430023][T21551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3248'. [ 1568.301578][T21564] kAFS: No cell specified [ 1569.952841][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 1569.961973][T21577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3254'. [ 1570.371884][T13198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1570.628946][T21589] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1570.641039][T21589] bond0: (slave lo): Error: Device can not be enslaved while up [ 1571.830154][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1571.839081][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1572.066373][T21604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1572.654069][ T30] audit: type=1400 audit(2000000131.208:1375): avc: denied { create } for pid=21598 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1572.811214][ T30] audit: type=1400 audit(2000000131.208:1376): avc: denied { write } for pid=21598 comm="syz.3.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1574.504047][T21631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3266'. [ 1575.522853][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.348827][T21642] kAFS: No cell specified [ 1577.920302][T21658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3274'. [ 1578.397313][T21660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3269'. [ 1580.671115][ T6727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1582.978290][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1585.096306][T21713] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1585.108603][T21713] bond0: (slave lo): Error: Device can not be enslaved while up [ 1585.708167][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1586.498424][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1586.507481][T21718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1586.521419][ T6727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1587.692448][T21730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3287'. [ 1589.191059][T21754] kAFS: No cell specified [ 1590.075798][T21766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3297'. [ 1590.087474][T21771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1591.150216][T21779] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1591.318034][T17749] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1591.648650][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'. [ 1591.657574][T21790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3304'. [ 1591.705746][T17749] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1591.958472][T17749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.969926][T17749] usb 4-1: Product: syz [ 1591.975858][T17749] usb 4-1: Manufacturer: syz [ 1592.004899][T17749] usb 4-1: SerialNumber: syz [ 1592.093840][T17749] usb 4-1: config 0 descriptor?? [ 1592.119627][T17749] usb 4-1: interface 1 not found [ 1593.279472][T21805] lo speed is unknown, defaulting to 1000 [ 1593.286428][T21805] lo speed is unknown, defaulting to 1000 [ 1593.479773][T21427] usb 4-1: USB disconnect, device number 27 [ 1593.733829][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3307'. [ 1595.748667][ T30] audit: type=1326 audit(2000000153.848:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1595.846126][T21835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3312'. [ 1596.122698][ T30] audit: type=1326 audit(2000000153.848:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1596.521932][T21843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3313'. [ 1596.896567][ T30] audit: type=1326 audit(2000000153.858:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1596.939239][ T30] audit: type=1326 audit(2000000153.858:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1597.018375][T21846] tc_dump_action: action bad kind [ 1597.044850][T21846] netlink: 'syz.4.3314': attribute type 10 has an invalid length. [ 1597.052830][T21846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3314'. [ 1597.062380][T21846] dummy0: entered promiscuous mode [ 1597.070580][T21846] batman_adv: batadv0: Interface activated: dummy0 [ 1597.120427][T21846] batadv0: mtu less than device minimum [ 1597.128543][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.141539][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.154187][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.166907][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.179626][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.192257][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.204688][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.217281][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.230004][T21846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1597.265514][T21846] batman_adv: batadv0: Interface deactivated: dummy0 [ 1597.272301][T21846] batman_adv: batadv0: Removing interface: dummy0 [ 1597.449314][ T30] audit: type=1326 audit(2000000153.858:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1597.478154][ T30] audit: type=1326 audit(2000000153.858:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1597.504914][ T30] audit: type=1326 audit(2000000153.858:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1597.530615][T21846] bridge0: port 1(dummy0) entered blocking state [ 1597.537059][T21846] bridge0: port 1(dummy0) entered disabled state [ 1597.563809][T21846] dummy0: entered allmulticast mode [ 1597.569589][ T30] audit: type=1326 audit(2000000153.858:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21823 comm="syz.4.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7ffc0000 [ 1598.669853][ T2153] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1598.982065][ T2153] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1598.992466][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.052480][ T2153] usb 2-1: Product: syz [ 1599.082492][ T2153] usb 2-1: Manufacturer: syz [ 1599.098525][ T2153] usb 2-1: SerialNumber: syz [ 1599.146023][ T2153] usb 2-1: config 0 descriptor?? [ 1599.248228][ T2153] usb 2-1: interface 1 not found [ 1599.847891][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.855744][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.208997][T21872] overlayfs: missing 'lowerdir' [ 1600.215274][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3322'. [ 1600.704765][ T2153] usb 2-1: USB disconnect, device number 23 [ 1601.598077][T21892] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 1604.855751][T21928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3334'. [ 1606.860191][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.866600][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.059593][T21929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.169767][ T30] audit: type=1400 audit(2000000165.738:1385): avc: denied { map } for pid=21919 comm="syz.4.3333" path="socket:[71587]" dev="sockfs" ino=71587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1609.879844][ T30] audit: type=1400 audit(2000000168.309:1386): avc: denied { rename } for pid=21938 comm="syz.3.3338" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1610.984333][T21989] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1610.996389][T21989] bond0: (slave lo): Error: Device can not be enslaved while up [ 1611.135365][T21992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1611.740139][T21994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1611.994713][T21996] syz.2.3349: attempt to access beyond end of device [ 1611.994713][T21996] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1612.007567][T21996] syz.2.3349: attempt to access beyond end of device [ 1612.007567][T21996] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1612.020474][T21996] Mount JFS Failure: -5 [ 1612.270773][T22000] syz.2.3349: attempt to access beyond end of device [ 1612.270773][T22000] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1612.284243][T22000] gfs2: error -5 reading superblock [ 1612.662376][T22001] kAFS: No cell specified [ 1613.744081][ T30] audit: type=1400 audit(2000000172.309:1387): avc: denied { write } for pid=22005 comm="syz.1.3352" path="socket:[72085]" dev="sockfs" ino=72085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1613.989402][T22015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1614.637583][T22021] CIFS: Unable to determine destination address [ 1615.471709][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1615.480698][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1617.813974][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3359'. [ 1618.725574][T22058] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1618.738763][T22058] bond0: (slave lo): Error: Device can not be enslaved while up [ 1621.154681][T22088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3365'. [ 1621.890217][T22093] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1621.924445][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1621.934225][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1622.093628][T22107] ksmbd: Unknown IPC event: 3, ignore. [ 1622.141245][T22107] usb usb8: usbfs: process 22107 (syz.3.3368) did not claim interface 0 before use [ 1622.629707][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1622.638594][T22109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1624.529187][T22131] kAFS: No cell specified [ 1625.168873][T22143] netlink: 'syz.3.3374': attribute type 21 has an invalid length. [ 1625.209199][T22143] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3374'. [ 1625.262600][T22143] netlink: 'syz.3.3374': attribute type 4 has an invalid length. [ 1625.469393][T22143] netlink: 'syz.3.3374': attribute type 5 has an invalid length. [ 1625.617856][T22143] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3374'. [ 1627.259240][T22181] random: crng reseeded on system resumption [ 1627.819308][T21427] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1627.992479][T21427] usb 6-1: Using ep0 maxpacket: 8 [ 1628.033085][T21427] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 1628.048819][T21427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.216700][T21427] usb 6-1: Product: syz [ 1628.223357][T21427] usb 6-1: Manufacturer: syz [ 1628.228744][T21427] usb 6-1: SerialNumber: syz [ 1628.369282][T21427] usb 6-1: config 0 descriptor?? [ 1629.016098][T21427] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1629.472342][T22211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1630.288109][T21427] usb 6-1: USB disconnect, device number 13 [ 1631.281284][T11437] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1631.609198][T11437] usb 3-1: device descriptor read/64, error -71 [ 1631.740534][T22223] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1631.763878][ T30] audit: type=1400 audit(2000000190.319:1388): avc: denied { write } for pid=22222 comm="syz.3.3386" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1631.899357][T11437] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1632.029230][T11437] usb 3-1: device descriptor read/64, error -71 [ 1632.141806][T11437] usb usb3-port1: attempt power cycle [ 1633.399133][T11437] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1633.679448][T11437] usb 3-1: device not accepting address 29, error -71 [ 1634.035422][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 1634.658447][T22281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1635.078661][T22291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1635.534677][T22299] loop6: detected capacity change from 0 to 524287999 [ 1635.729220][T22300] netlink: 'syz.4.3398': attribute type 12 has an invalid length. [ 1636.367436][T22308] vivid-000: ================= START STATUS ================= [ 1636.375211][T22308] vivid-000: Radio HW Seek Mode: Bounded [ 1636.382283][T22308] vivid-000: Radio Programmable HW Seek: false [ 1636.388551][T22308] vivid-000: RDS Rx I/O Mode: Block I/O [ 1636.394319][T22308] vivid-000: Generate RBDS Instead of RDS: false [ 1636.400798][T22308] vivid-000: RDS Reception: true [ 1636.405837][T22308] vivid-000: RDS Program Type: 0 inactive [ 1636.411707][T22308] vivid-000: RDS PS Name: inactive [ 1636.417007][T22308] vivid-000: RDS Radio Text: inactive [ 1636.426871][T22308] vivid-000: RDS Traffic Announcement: false inactive [ 1636.433801][T22308] vivid-000: RDS Traffic Program: false inactive [ 1636.440314][T22308] vivid-000: RDS Music: false inactive [ 1636.445932][T22308] vivid-000: ================== END STATUS ================== [ 1637.219323][ T30] audit: type=1400 audit(2000000195.039:1389): avc: denied { write } for pid=22303 comm="syz.5.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1637.238697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.482835][T22312] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 1638.359994][T22328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1639.059140][T21427] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1639.289160][T21427] usb 5-1: Using ep0 maxpacket: 32 [ 1639.398102][T21427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.429174][T21427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.438990][ T30] audit: type=1400 audit(2000000197.969:1390): avc: denied { ioctl } for pid=22333 comm="syz.3.3405" path="socket:[73504]" dev="sockfs" ino=73504 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1639.439017][T21427] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1640.451232][ T30] audit: type=1800 audit(2000000198.589:1391): pid=22354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3408" name="bus" dev="overlay" ino=2451 res=0 errno=0 [ 1640.501140][T21427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.611253][T21427] usb 5-1: config 0 descriptor?? [ 1640.641263][T21427] usb 5-1: can't set config #0, error -71 [ 1640.666436][T21427] usb 5-1: USB disconnect, device number 22 [ 1641.192956][T22368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3410'. [ 1643.618465][T22395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1644.003189][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1644.012242][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1647.045408][T22434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3423'. [ 1648.843027][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3425'. [ 1648.852183][T22440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3425'. [ 1650.242197][T22471] kAFS: No cell specified [ 1650.967446][T22482] kAFS: No cell specified [ 1656.500897][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1656.570324][T22532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1657.547666][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1658.274714][T22542] lo speed is unknown, defaulting to 1000 [ 1658.287562][T22542] lo speed is unknown, defaulting to 1000 [ 1660.249195][T22545] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1660.255785][T22545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1660.378307][T22545] vhci_hcd vhci_hcd.0: Device attached [ 1660.550059][ T2153] vhci_hcd: vhci_device speed not set [ 1660.724844][ T2153] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 1661.416936][T22589] lo speed is unknown, defaulting to 1000 [ 1661.549503][T22589] lo speed is unknown, defaulting to 1000 [ 1661.911080][T22572] vhci_hcd: connection reset by peer [ 1661.926660][ T13] vhci_hcd: stop threads [ 1661.937265][ T13] vhci_hcd: release socket [ 1661.945468][ T13] vhci_hcd: disconnect device [ 1663.515707][T22618] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1665.776249][T22656] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1665.788286][T22656] bond0: (slave lo): Error: Device can not be enslaved while up [ 1666.106134][T22658] ptrace attach of "./syz-executor exec"[11201] was attempted by "./syz-executor exec"[22658] [ 1666.140326][ T2153] vhci_hcd: vhci_device speed not set [ 1666.196603][T22658] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3463'. [ 1666.459474][T22661] kAFS: No cell specified [ 1667.190039][T22672] siw: device registration error -23 [ 1667.512632][ T30] audit: type=1326 audit(2000000226.029:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.751905][ T30] audit: type=1326 audit(2000000226.029:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.776135][ T30] audit: type=1400 audit(2000000226.029:1394): avc: denied { ioctl } for pid=22671 comm="syz.1.3468" path="socket:[74339]" dev="sockfs" ino=74339 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1667.801057][ T30] audit: type=1326 audit(2000000226.029:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.829177][ T30] audit: type=1326 audit(2000000226.029:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.855804][ T30] audit: type=1326 audit(2000000226.029:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.901218][ T30] audit: type=1326 audit(2000000226.029:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.930175][ T30] audit: type=1326 audit(2000000226.029:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1667.954944][ T30] audit: type=1326 audit(2000000226.029:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec7c18d550 code=0x7ffc0000 [ 1668.007938][ T30] audit: type=1326 audit(2000000226.029:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22671 comm="syz.1.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1668.340373][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.346758][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.608038][T22714] netlink: 'syz.1.3472': attribute type 21 has an invalid length. [ 1670.616009][T22714] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1670.626658][T22714] netlink: 'syz.1.3472': attribute type 21 has an invalid length. [ 1670.634517][T22714] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1670.974335][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 1670.983483][T22723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3475'. [ 1671.595565][T22722] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1671.607539][T22722] bond0: (slave lo): Error: Device can not be enslaved while up [ 1671.899458][T22737] kAFS: No cell specified [ 1673.839770][T22765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1673.851300][T22765] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1674.189291][T22759] delete_channel: no stack [ 1674.236792][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1674.236803][ T30] audit: type=1400 audit(2000000232.339:1406): avc: denied { bind } for pid=22759 comm="syz.4.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1675.058181][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1675.067168][T22777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1675.217961][T22778] CIFS: Unable to determine destination address [ 1677.146890][T22797] 9pnet_fd: Insufficient options for proto=fd [ 1677.330875][T22802] mkiss: ax0: crc mode is auto. [ 1677.348005][ T30] audit: type=1326 audit(2000000235.899:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.3.3492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff990d8ebe9 code=0x0 [ 1678.831423][T22814] kAFS: No cell specified [ 1682.120751][T22855] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1682.132842][T22855] bond0: (slave lo): Error: Device can not be enslaved while up [ 1683.180102][T22860] 9pnet_virtio: no channels available for device syz [ 1684.361562][T22876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1685.298958][T22887] kAFS: No cell specified [ 1685.722898][T22891] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1685.733172][T22884] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1686.100184][T22899] kAFS: No cell specified [ 1686.379649][T22902] net_ratelimit: 10 callbacks suppressed [ 1686.379664][T22902] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1686.610819][T22915] 9pnet_fd: Insufficient options for proto=fd [ 1687.506242][T22927] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1687.518285][T22927] bond0: (slave lo): Error: Device can not be enslaved while up [ 1688.373208][T22932] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1688.385276][T22932] bond0: (slave lo): Error: Device can not be enslaved while up [ 1688.966138][T22937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3515'. [ 1689.779294][T22947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1689.788202][T22947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1690.554288][T22951] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1692.142367][T22972] kAFS: No cell specified [ 1693.312166][T22986] PKCS7: Unknown OID: [5] (bad) [ 1693.319795][T22986] PKCS7: Only support pkcs7_signedData type [ 1693.590101][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1694.255723][ T30] audit: type=1400 audit(2000000252.812:1408): avc: denied { append } for pid=23004 comm="syz.4.3528" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1694.311697][ T30] audit: type=1400 audit(2000000252.812:1409): avc: denied { map } for pid=23004 comm="syz.4.3528" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1694.385041][T21060] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1694.514098][ T30] audit: type=1400 audit(2000000252.812:1410): avc: denied { execute } for pid=23004 comm="syz.4.3528" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1694.569948][T21060] usb 4-1: Using ep0 maxpacket: 32 [ 1694.590671][T21060] usb 4-1: config 0 has no interfaces? [ 1694.609406][T21060] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1694.619126][T21060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.649362][T21060] usb 4-1: Product: syz [ 1694.804376][T21060] usb 4-1: Manufacturer: syz [ 1694.812306][ T30] audit: type=1400 audit(2000000252.942:1411): avc: denied { ioctl } for pid=23004 comm="syz.4.3528" path="socket:[75912]" dev="sockfs" ino=75912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1695.073580][T23016] lo speed is unknown, defaulting to 1000 [ 1695.087404][T23016] lo speed is unknown, defaulting to 1000 [ 1695.425406][T21060] usb 4-1: SerialNumber: syz [ 1695.622252][T21060] usb 4-1: config 0 descriptor?? [ 1695.645295][T21060] usb 4-1: can't set config #0, error -71 [ 1695.730799][T21060] usb 4-1: USB disconnect, device number 28 [ 1695.967262][T23027] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1698.604593][T23053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3535'. [ 1698.616308][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3535'. [ 1698.639191][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'. [ 1700.709208][T23078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1701.239053][T23079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1701.249142][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1701.826120][T21427] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1702.040627][T21427] usb 5-1: Using ep0 maxpacket: 16 [ 1702.064321][T21427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.096960][T21427] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.113914][T21427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1702.332880][T21427] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1702.349142][T21427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.367198][T21427] usb 5-1: config 0 descriptor?? [ 1702.811573][T23088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.820183][T23088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.656664][T21427] hid (null): bogus close delimiter [ 1703.695421][T21427] hid (null): invalid report_count 18947 [ 1703.705771][T21427] hid (null): report_id 0 is invalid [ 1704.467848][ T30] audit: type=1400 audit(2000000262.962:1412): avc: denied { write } for pid=23086 comm="syz.4.3543" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1704.971712][ T2153] usb 5-1: USB disconnect, device number 23 [ 1706.024511][T23151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1707.256157][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1707.265211][T23161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1707.642765][T23166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1708.512440][T23173] syz.3.3554 (23173): drop_caches: 2 [ 1708.520971][T23173] syz.3.3554 (23173): drop_caches: 2 [ 1708.976748][T23179] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1708.988789][T23179] bond0: (slave lo): Error: Device type is different from other slaves [ 1711.070282][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1711.079314][T23198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1712.167751][T23211] netlink: 'syz.4.3558': attribute type 10 has an invalid length. [ 1712.577425][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1712.587789][T23211] dummy0: left allmulticast mode [ 1712.845524][T23219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1712.879544][T23211] bridge0: port 1(dummy0) entered disabled state [ 1713.355675][T23211] bridge_slave_1: left allmulticast mode [ 1713.361477][T23211] bridge_slave_1: left promiscuous mode [ 1713.369290][T23211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.513488][T23246] kAFS: No cell specified [ 1714.758447][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1714.767462][T23247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1715.085914][T23230] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1715.098181][T23230] bond0: (slave lo): Error: Device can not be enslaved while up [ 1715.919511][T23265] kAFS: No cell specified [ 1719.577907][T23354] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1719.577931][T23354] bond0: (slave lo): Error: Device can not be enslaved while up [ 1720.386103][T23343] lo speed is unknown, defaulting to 1000 [ 1720.393815][T23343] lo speed is unknown, defaulting to 1000 [ 1720.740254][T23368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1721.931487][T23373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 1721.940436][T23373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3585'. [ 1722.671768][T23387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1722.681909][T23387] batman_adv: batadv0: Adding interface: gretap1 [ 1722.688248][T23387] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.714061][T23387] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1723.129124][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1723.138151][T23419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1723.339361][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1723.360591][T23414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1725.279186][T23441] lo speed is unknown, defaulting to 1000 [ 1725.285577][T23441] lo speed is unknown, defaulting to 1000 [ 1725.663766][T23480] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1725.675805][T23480] bond0: (slave lo): Error: Device can not be enslaved while up [ 1728.630449][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'. [ 1728.737576][T23498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1728.744104][T23498] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1728.910758][T23498] vhci_hcd vhci_hcd.0: Device attached [ 1729.162397][T11437] vhci_hcd: vhci_device speed not set [ 1729.482413][T11437] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 1729.733502][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.739861][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.275547][T23500] vhci_hcd: connection reset by peer [ 1730.294262][T15470] vhci_hcd: stop threads [ 1730.298544][T15470] vhci_hcd: release socket [ 1730.996399][T15470] vhci_hcd: disconnect device [ 1731.064015][T23537] netlink: 'syz.3.3600': attribute type 21 has an invalid length. [ 1731.072638][T23537] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1731.083561][T23537] netlink: 'syz.3.3600': attribute type 21 has an invalid length. [ 1731.091818][T23537] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1731.457218][T23544] netlink: 'syz.4.3601': attribute type 1 has an invalid length. [ 1731.465170][T23544] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1734.574599][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'. [ 1734.583743][T23564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'. [ 1734.659153][T23577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1734.701637][T23577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1734.860519][T11437] vhci_hcd: vhci_device speed not set [ 1734.935068][T23580] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1735.721552][T23586] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1737.690627][T23614] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1737.702644][T23614] bond0: (slave lo): Error: Device can not be enslaved while up [ 1738.710523][T23628] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1738.736168][T23627] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1739.946603][T23648] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1739.994145][T23648] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1740.351887][T23651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3622'. [ 1740.733627][ T30] audit: type=1400 audit(2000000299.292:1413): avc: denied { write } for pid=23653 comm="syz.3.3624" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1741.060618][ T30] audit: type=1400 audit(2000000299.292:1414): avc: denied { open } for pid=23653 comm="syz.3.3624" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1741.656662][T23671] kAFS: No cell specified [ 1742.617320][T23687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1742.626439][T23687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1744.734269][T23715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1746.436832][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1746.446527][T23735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1746.765494][ T30] audit: type=1400 audit(2000000305.288:1415): avc: denied { map } for pid=23704 comm="syz.3.3634" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1749.027423][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1749.036430][T23765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1750.734599][T23790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1751.494435][T23788] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1753.765160][T23833] lo speed is unknown, defaulting to 1000 [ 1753.800447][T23833] lo speed is unknown, defaulting to 1000 [ 1754.697534][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 1754.708710][T23866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3660'. [ 1755.212418][T23870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3661'. [ 1755.223443][T23870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3661'. [ 1756.444052][T23881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3663'. [ 1757.034171][T23886] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3664'. [ 1758.074530][T23903] lo speed is unknown, defaulting to 1000 [ 1758.095492][T23903] lo speed is unknown, defaulting to 1000 [ 1759.819740][T23961] Invalid source name [ 1759.823801][T23961] UBIFS error (pid: 23961): cannot open "./file0", error -22 [ 1759.855316][T23961] binder: 23955:23961 ioctl 40046210 0 returned -14 [ 1759.881185][T23961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 1760.273309][T23968] kAFS: No cell specified [ 1761.361517][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1761.370408][T23978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1761.421097][T23986] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4118 sclass=netlink_xfrm_socket pid=23986 comm=syz.1.3673 [ 1761.492932][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3675'. [ 1761.879085][T17749] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1762.492203][T17749] usb 2-1: config 0 has no interfaces? [ 1762.706014][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1762.715191][T24009] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1762.725225][T17749] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1762.924343][T17749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.932509][T23999] ceph: No mds server is up or the cluster is laggy [ 1763.179884][T17749] usb 2-1: Product: syz [ 1763.184092][T17749] usb 2-1: Manufacturer: syz [ 1763.188730][T17749] usb 2-1: SerialNumber: syz [ 1763.230817][T17749] usb 2-1: config 0 descriptor?? [ 1763.770168][T23986] : entered promiscuous mode [ 1764.666296][T24036] fuse: Bad value for 'fd' [ 1765.510894][T10693] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 1765.732518][T10693] hid-generic 0001:0000:0000.0009: hidraw0: HID va0000.00 Device [syz1] on syz0 [ 1766.025628][T24056] kAFS: No cell specified [ 1766.255389][T24055] fido_id[24055]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1766.264221][T11437] usb 2-1: USB disconnect, device number 24 [ 1766.486478][T24069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3685'. [ 1766.920363][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1766.940331][T24065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1766.971239][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1766.980311][T24068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1768.889980][ T30] audit: type=1400 audit(2000000327.328:1416): avc: denied { listen } for pid=24096 comm="syz.3.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1769.719946][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3695'. [ 1769.822099][T24109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3695'. [ 1770.406534][T24118] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 1772.689674][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1773.891922][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1774.307438][T24165] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1774.319538][T24165] bond0: (slave lo): Error: Device can not be enslaved while up [ 1774.872614][T24173] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1774.885052][T24173] bond0: (slave lo): Error: Device can not be enslaved while up [ 1775.540912][T24175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1776.819046][T11437] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1777.541045][T11437] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1777.554874][T11437] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 1777.571340][T11437] usb 6-1: config 253 has an invalid interface number: 210 but max is 0 [ 1777.655397][T24203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1778.041974][T11437] usb 6-1: config 253 has no interface number 0 [ 1778.051469][T11437] usb 6-1: config 253 interface 210 has no altsetting 0 [ 1778.064322][T11437] usb 6-1: config 253 has an invalid interface number: 210 but max is 0 [ 1778.088528][T11437] usb 6-1: config 253 has no interface number 0 [ 1778.231476][T24206] kAFS: No cell specified [ 1778.257702][T11437] usb 6-1: config 253 interface 210 has no altsetting 0 [ 1778.485234][T11437] usb 6-1: config 253 has an invalid interface number: 210 but max is 0 [ 1778.523347][T11437] usb 6-1: config 253 has no interface number 0 [ 1778.618393][T11437] usb 6-1: config 253 interface 210 has no altsetting 0 [ 1778.775410][T11437] usb 6-1: config 253 has an invalid interface number: 210 but max is 0 [ 1779.279299][T11437] usb 6-1: config 253 has no interface number 0 [ 1779.299167][T11437] usb 6-1: config 253 interface 210 has no altsetting 0 [ 1779.314131][T11437] usb 6-1: unable to read config index 4 descriptor/start: -71 [ 1779.345210][T11437] usb 6-1: can't read configurations, error -71 [ 1781.529065][T24252] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1782.159692][T24252] bond0: (slave lo): Error: Device type is different from other slaves [ 1782.706851][T24271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1784.712627][T24293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1785.100422][T24294] 9pnet_fd: Insufficient options for proto=fd [ 1786.511080][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 1786.520193][T24312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3733'. [ 1788.230810][T24335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3737'. [ 1789.053819][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'. [ 1789.062850][T24341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3740'. [ 1789.512025][T24347] dvmrp1: entered allmulticast mode [ 1789.575546][T24347] dvmrp1: left allmulticast mode [ 1789.810556][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1790.881830][T24370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3739'. [ 1791.171305][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.177614][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.847759][T24400] 9pnet_fd: Insufficient options for proto=fd [ 1796.420290][T24433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3755'. [ 1797.800067][ T30] audit: type=1326 audit(2000000356.358:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1797.929189][ T30] audit: type=1326 audit(2000000356.358:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1797.952663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1798.188997][ T30] audit: type=1326 audit(2000000356.358:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1798.387289][T24469] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1798.399383][T24469] bond0: (slave lo): Error: Device type is different from other slaves [ 1798.961465][ T30] audit: type=1326 audit(2000000356.358:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85eb38ec23 code=0x7ffc0000 [ 1798.997016][ T30] audit: type=1326 audit(2000000356.358:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85eb38ec23 code=0x7ffc0000 [ 1799.034340][ T30] audit: type=1326 audit(2000000356.358:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1799.058761][ T30] audit: type=1326 audit(2000000356.368:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1799.199070][ T30] audit: type=1326 audit(2000000356.368:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1799.229443][ T30] audit: type=1326 audit(2000000356.368:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1799.311322][T24480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3763'. [ 1799.673591][ T30] audit: type=1326 audit(2000000356.368:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24450 comm="syz.5.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f85eb38ebe9 code=0x7ffc0000 [ 1800.799082][T24491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3766'. [ 1801.047215][T24510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1801.499134][T24520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1803.886121][T24548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3776'. [ 1804.708679][T24554] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3778'. [ 1805.165502][T24559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3780'. [ 1805.444179][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1805.453179][T24560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1806.314570][T24575] overlayfs: failed to clone lowerpath [ 1806.675296][T24581] overlayfs: failed to resolve './file0': -2 [ 1808.990829][T24608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1809.139263][T24610] kAFS: No cell specified [ 1810.123472][T24624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3795'. [ 1810.958825][T24618] 9pnet_fd: Insufficient options for proto=fd [ 1812.200198][T24646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3798'. [ 1812.824236][T24652] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1812.842608][T24652] bond0: (slave lo): Error: Device type is different from other slaves [ 1813.460609][T24636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1813.473843][T24636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1814.450898][T24671] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1814.458243][T24673] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1814.817916][T24680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3805'. [ 1814.939569][T24682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1815.837108][T24690] overlayfs: failed to clone lowerpath [ 1816.953220][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 1816.962131][T24701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3811'. [ 1817.004883][T24702] 9pnet_fd: Insufficient options for proto=fd [ 1818.875284][T24719] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1821.095478][T24749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1821.199414][T24751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1821.606844][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1821.615919][T24754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1822.907967][T24765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1822.916915][T24765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1823.102745][T24774] siw: device registration error -23 [ 1823.350236][T24779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1824.100439][T24786] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1824.112462][T24786] bond0: (slave lo): Error: Device can not be enslaved while up [ 1824.502366][T24784] overlayfs: failed to resolve './file0': -2 [ 1824.636444][T24791] 9pnet_fd: Insufficient options for proto=fd [ 1826.232087][ T2153] hid-generic 0001:0000:0000.000A: unknown main item tag 0x0 [ 1826.362763][ T2153] hid-generic 0001:0000:0000.000A: hidraw0: HID va0000.00 Device [syz1] on syz0 [ 1826.950088][T24820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3833'. [ 1827.639935][T24806] fido_id[24806]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1828.392534][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 1828.401454][T24827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3835'. [ 1829.307829][T24839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1830.378026][T24847] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1830.532932][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1830.554629][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1831.235346][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3843'. [ 1832.288430][T24880] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1832.300381][T24880] bond0: (slave lo): Error: Device type is different from other slaves [ 1832.350233][T24878] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1832.362196][T24878] bond0: (slave lo): Error: Device can not be enslaved while up [ 1832.669311][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1832.669343][ T30] audit: type=1400 audit(2000000391.168:1484): avc: denied { search } for pid=24876 comm="syz.5.3847" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1832.996808][ T30] audit: type=1400 audit(2000000391.178:1485): avc: denied { unmount } for pid=24876 comm="syz.5.3847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1834.201132][T24903] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3853'. [ 1835.231467][T24900] ceph: No mds server is up or the cluster is laggy [ 1836.272912][ T30] audit: type=1400 audit(2000000394.748:1486): avc: denied { setattr } for pid=24918 comm="syz.2.3856" name="midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1836.302225][T24921] 9pnet_fd: Insufficient options for proto=fd [ 1837.189790][T24933] kAFS: No cell specified [ 1837.694671][T24944] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1837.706657][T24944] bond0: (slave lo): Error: Device type is different from other slaves [ 1838.152247][T24950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1838.209193][T24950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3863'. [ 1839.612962][T24963] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1839.626339][T24963] bond0: (slave lo): Error: Device can not be enslaved while up [ 1839.853873][T24986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3867'. [ 1843.465665][T25026] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1843.477709][T25026] bond0: (slave lo): Error: Device type is different from other slaves [ 1843.831671][T25035] kAFS: No cell specified [ 1843.911856][T25036] 9pnet_fd: Insufficient options for proto=fd [ 1844.220071][T25047] kAFS: No cell specified [ 1844.385056][T25049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1844.802959][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1844.811927][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1846.165945][T11437] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1846.835150][T11437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.535220][T11437] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1847.567103][T11437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.621337][T11437] usb 2-1: config 0 descriptor?? [ 1848.794527][T25111] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1848.881386][T25115] kAFS: No cell specified [ 1849.550755][T25111] bond0: (slave lo): Error: Device can not be enslaved while up [ 1849.595293][T25118] 9pnet_fd: Insufficient options for proto=fd [ 1850.729490][T11437] usbhid 2-1:0.0: can't add hid device: -71 [ 1850.792344][T11437] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1850.869445][T11437] usb 2-1: USB disconnect, device number 25 [ 1852.058013][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1852.066940][T25155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1852.828872][T25164] netlink: 'syz.1.3895': attribute type 21 has an invalid length. [ 1852.839605][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.845953][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.858730][T25164] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1852.870513][T25164] netlink: 'syz.1.3895': attribute type 21 has an invalid length. [ 1852.920470][T25164] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1854.965809][T25194] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1854.977846][T25194] bond0: (slave lo): Error: Device can not be enslaved while up [ 1855.380943][T25201] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1855.392901][T25201] bond0: (slave lo): Error: Device type is different from other slaves [ 1855.588660][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1856.006412][T25202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1856.285552][T25213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3912'. [ 1856.614705][T25219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3915'. [ 1856.853700][T25229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3916'. [ 1857.808307][T25230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25230 comm=syz.3.3919 [ 1857.922116][ T30] audit: type=1326 audit(2000000416.468:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6738ebe9 code=0x7fc00000 [ 1857.962222][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1857.968311][ T30] audit: type=1326 audit(2000000416.478:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fad6738ebe9 code=0x7fc00000 [ 1857.972443][T25242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1858.244345][ T30] audit: type=1326 audit(2000000416.478:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6738ebe9 code=0x7fc00000 [ 1859.302016][ T30] audit: type=1326 audit(2000000416.478:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6738ebe9 code=0x7fc00000 [ 1859.325802][ T30] audit: type=1326 audit(2000000416.478:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6738ebe9 code=0x7fc00000 [ 1859.485348][T25259] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1860.166080][ T30] audit: type=1326 audit(2000000416.478:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25218 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6738ebe9 code=0x7fc00000 [ 1861.277199][T25282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3926'. [ 1863.066250][T25300] syz.5.3934 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1863.076287][T25300] CPU: 1 UID: 0 PID: 25300 Comm: syz.5.3934 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1863.076302][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1863.076309][T25300] Call Trace: [ 1863.076313][T25300] [ 1863.076317][T25300] dump_stack_lvl+0x16c/0x1f0 [ 1863.076338][T25300] dump_header+0x101/0x930 [ 1863.076352][T25300] oom_kill_process+0x272/0xa40 [ 1863.076362][T25300] ? __lock_acquire+0x62e/0x1ce0 [ 1863.076380][T25300] out_of_memory+0x350/0x1700 [ 1863.076395][T25300] ? __pfx_out_of_memory+0x10/0x10 [ 1863.076410][T25300] mem_cgroup_out_of_memory+0x118/0x130 [ 1863.076427][T25300] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1863.076444][T25300] ? do_raw_spin_unlock+0x172/0x230 [ 1863.076458][T25300] try_charge_memcg+0x72b/0xd50 [ 1863.076472][T25300] ? __pfx_try_charge_memcg+0x10/0x10 [ 1863.076483][T25300] ? find_held_lock+0x11/0x80 [ 1863.076497][T25300] ? rcu_read_unlock+0x17/0x60 [ 1863.076512][T25300] charge_memcg+0x8a/0x230 [ 1863.076523][T25300] __mem_cgroup_charge+0x2b/0x1e0 [ 1863.076537][T25300] shmem_alloc_and_add_folio+0x514/0xc20 [ 1863.076558][T25300] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1863.076577][T25300] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1863.076591][T25300] shmem_get_folio_gfp+0x67f/0x1600 [ 1863.076604][T25300] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1863.076616][T25300] ? filemap_map_pages+0xf58/0x1670 [ 1863.076629][T25300] shmem_fault+0x1fe/0xa30 [ 1863.076640][T25300] ? __pfx_shmem_fault+0x10/0x10 [ 1863.076653][T25300] ? __pfx_filemap_map_pages+0x10/0x10 [ 1863.076677][T25300] ? __pfx_filemap_map_pages+0x10/0x10 [ 1863.076687][T25300] __do_fault+0x10d/0x490 [ 1863.076700][T25300] ? __pfx_filemap_map_pages+0x10/0x10 [ 1863.076710][T25300] do_pte_missing+0xf50/0x3ba0 [ 1863.076726][T25300] ? find_held_lock+0x2b/0x80 [ 1863.076739][T25300] ? __handle_mm_fault+0x14fd/0x2a50 [ 1863.076757][T25300] __handle_mm_fault+0x152a/0x2a50 [ 1863.076778][T25300] ? __pfx___handle_mm_fault+0x10/0x10 [ 1863.076795][T25300] ? __pte_offset_map_lock+0x174/0x310 [ 1863.076808][T25300] ? find_held_lock+0x2b/0x80 [ 1863.076825][T25300] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1863.076843][T25300] handle_mm_fault+0x589/0xd10 [ 1863.076869][T25300] __get_user_pages+0x551/0x34a0 [ 1863.076888][T25300] ? __pfx___get_user_pages+0x10/0x10 [ 1863.076906][T25300] populate_vma_page_range+0x267/0x3f0 [ 1863.076922][T25300] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1863.076937][T25300] ? __pfx_find_vma_intersection+0x10/0x10 [ 1863.076951][T25300] ? do_mmap+0x69c/0x1210 [ 1863.076965][T25300] __mm_populate+0x1d8/0x380 [ 1863.076981][T25300] ? __pfx___mm_populate+0x10/0x10 [ 1863.076997][T25300] ? up_write+0x1b2/0x520 [ 1863.077009][T25300] vm_mmap_pgoff+0x37f/0x470 [ 1863.077023][T25300] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1863.077040][T25300] ? __x64_sys_futex+0x1e0/0x4c0 [ 1863.077059][T25300] ? __x64_sys_futex+0x1e9/0x4c0 [ 1863.077078][T25300] ksys_mmap_pgoff+0x7d/0x5c0 [ 1863.077090][T25300] ? xfd_validate_state+0x61/0x180 [ 1863.077102][T25300] __x64_sys_mmap+0x125/0x190 [ 1863.077115][T25300] do_syscall_64+0xcd/0x4c0 [ 1863.077126][T25300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.077137][T25300] RIP: 0033:0x7f85eb38ebe9 [ 1863.077146][T25300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1863.077156][T25300] RSP: 002b:00007f85ec142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1863.077167][T25300] RAX: ffffffffffffffda RBX: 00007f85eb5b5fa0 RCX: 00007f85eb38ebe9 [ 1863.077177][T25300] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1863.077183][T25300] RBP: 00007f85eb411e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1863.077189][T25300] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1863.077195][T25300] R13: 00007f85eb5b6038 R14: 00007f85eb5b5fa0 R15: 00007fffdb421ac8 [ 1863.077216][T25300] [ 1863.077236][T25300] memory: usage 307200kB, limit 307200kB, failcnt 17173 [ 1863.462271][T25300] memory+swap: usage 334468kB, limit 9007199254740988kB, failcnt 0 [ 1863.470186][T25300] kmem: usage 9364kB, limit 9007199254740988kB, failcnt 0 [ 1863.477286][T25300] Memory cgroup stats for /syz5: [ 1863.477482][T25300] cache 300511232 [ 1863.486041][T25300] rss 4247552 [ 1863.489330][T25300] rss_huge 0 [ 1863.492508][T25300] shmem 300511232 [ 1863.496121][T25300] mapped_file 4218880 [ 1863.500092][T25300] dirty 0 [ 1863.503007][T25300] writeback 0 [ 1863.506272][T25300] workingset_refault_anon 176 [ 1863.510945][T25300] workingset_refault_file 0 [ 1863.515431][T25300] swap 27922432 [ 1863.518871][T25300] swapcached 102400 [ 1863.522683][T25300] pgpgin 951113 [ 1863.526124][T25300] pgpgout 878727 [ 1863.529660][T25300] pgfault 1057953 [ 1863.533274][T25300] pgmajfault 131 [ 1863.536799][T25300] inactive_anon 119500800 [ 1863.541126][T25300] active_anon 185253888 [ 1863.545261][T25300] inactive_file 0 [ 1863.548875][T25300] active_file 0 [ 1863.552335][T25300] unevictable 0 [ 1863.555773][T25300] hierarchical_memory_limit 314572800 [ 1863.561171][T25300] hierarchical_memsw_limit 9223372036854771712 [ 1863.567318][T25300] total_cache 300511232 [ 1863.571511][T25300] total_rss 4247552 [ 1863.575302][T25300] total_rss_huge 0 [ 1863.579019][T25300] total_shmem 300511232 [ 1863.583160][T25300] total_mapped_file 4218880 [ 1863.587653][T25300] total_dirty 0 [ 1863.591119][T25300] total_writeback 0 [ 1863.594908][T25300] total_workingset_refault_anon 176 [ 1863.600120][T25300] total_workingset_refault_file 0 [ 1863.605134][T25300] total_swap 27922432 [ 1863.609112][T25300] total_swapcached 102400 [ 1863.613432][T25300] total_pgpgin 951113 [ 1863.617394][T25300] total_pgpgout 878727 [ 1863.621465][T25300] total_pgfault 1057953 [ 1863.625601][T25300] total_pgmajfault 131 [ 1863.629671][T25300] total_inactive_anon 119500800 [ 1863.634508][T25300] total_active_anon 185253888 [ 1863.639188][T25300] total_inactive_file 0 [ 1863.643326][T25300] total_active_file 0 [ 1863.647295][T25300] total_unevictable 0 [ 1863.651322][T25300] anon_cost 0 [ 1863.654596][T25300] file_cost 0 [ 1863.657865][T25300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3934,pid=25299,uid=0 [ 1863.674392][T25300] Memory cgroup out of memory: Killed process 25299 (syz.5.3934) total-vm:101828kB, anon-rss:1084kB, file-rss:22696kB, shmem-rss:4096kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1863.964457][T25305] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1863.976441][T25305] bond0: (slave lo): Error: Device can not be enslaved while up [ 1864.194869][T25307] syz.5.3936 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1864.205336][T25307] CPU: 1 UID: 0 PID: 25307 Comm: syz.5.3936 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1864.205361][T25307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1864.205372][T25307] Call Trace: [ 1864.205379][T25307] [ 1864.205386][T25307] dump_stack_lvl+0x16c/0x1f0 [ 1864.205419][T25307] dump_header+0x101/0x930 [ 1864.205442][T25307] oom_kill_process+0x272/0xa40 [ 1864.205460][T25307] ? __lock_acquire+0x62e/0x1ce0 [ 1864.205488][T25307] out_of_memory+0x350/0x1700 [ 1864.205510][T25307] ? __pfx_out_of_memory+0x10/0x10 [ 1864.205534][T25307] mem_cgroup_out_of_memory+0x118/0x130 [ 1864.205557][T25307] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1864.205585][T25307] ? do_raw_spin_unlock+0x172/0x230 [ 1864.205607][T25307] try_charge_memcg+0x72b/0xd50 [ 1864.205630][T25307] ? __pfx_try_charge_memcg+0x10/0x10 [ 1864.205647][T25307] ? find_held_lock+0x11/0x80 [ 1864.205668][T25307] ? rcu_read_unlock+0x17/0x60 [ 1864.205696][T25307] charge_memcg+0x8a/0x230 [ 1864.205717][T25307] __mem_cgroup_charge+0x2b/0x1e0 [ 1864.205738][T25307] shmem_alloc_and_add_folio+0x514/0xc20 [ 1864.205774][T25307] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1864.205807][T25307] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1864.205828][T25307] shmem_get_folio_gfp+0x67f/0x1600 [ 1864.205853][T25307] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1864.205873][T25307] ? filemap_map_pages+0xf58/0x1670 [ 1864.205897][T25307] shmem_fault+0x1fe/0xa30 [ 1864.205917][T25307] ? __pfx_shmem_fault+0x10/0x10 [ 1864.205940][T25307] ? __pfx_filemap_map_pages+0x10/0x10 [ 1864.205967][T25307] ? __pfx_filemap_map_pages+0x10/0x10 [ 1864.205984][T25307] __do_fault+0x10d/0x490 [ 1864.206006][T25307] ? __pfx_filemap_map_pages+0x10/0x10 [ 1864.206023][T25307] do_pte_missing+0xf50/0x3ba0 [ 1864.206051][T25307] ? find_held_lock+0x2b/0x80 [ 1864.206083][T25307] ? __handle_mm_fault+0x14fd/0x2a50 [ 1864.206115][T25307] __handle_mm_fault+0x152a/0x2a50 [ 1864.206151][T25307] ? __pfx___handle_mm_fault+0x10/0x10 [ 1864.206182][T25307] ? __pte_offset_map_lock+0x174/0x310 [ 1864.206205][T25307] ? find_held_lock+0x2b/0x80 [ 1864.206236][T25307] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1864.206269][T25307] handle_mm_fault+0x589/0xd10 [ 1864.206303][T25307] __get_user_pages+0x551/0x34a0 [ 1864.206339][T25307] ? __pfx___get_user_pages+0x10/0x10 [ 1864.206372][T25307] populate_vma_page_range+0x267/0x3f0 [ 1864.206399][T25307] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1864.206424][T25307] ? __pfx_find_vma_intersection+0x10/0x10 [ 1864.206450][T25307] ? do_mmap+0x69c/0x1210 [ 1864.206476][T25307] __mm_populate+0x1d8/0x380 [ 1864.206503][T25307] ? __pfx___mm_populate+0x10/0x10 [ 1864.206530][T25307] ? up_write+0x1b2/0x520 [ 1864.206552][T25307] vm_mmap_pgoff+0x37f/0x470 [ 1864.206579][T25307] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1864.206599][T25307] ? __fget_files+0x204/0x3c0 [ 1864.206627][T25307] ? __x64_sys_futex+0x1e0/0x4c0 [ 1864.206654][T25307] ? __x64_sys_futex+0x1e9/0x4c0 [ 1864.206685][T25307] ksys_mmap_pgoff+0x7d/0x5c0 [ 1864.206708][T25307] ? xfd_validate_state+0x61/0x180 [ 1864.206724][T25307] ? __sys_setsockopt+0x1c0/0x230 [ 1864.206753][T25307] __x64_sys_mmap+0x125/0x190 [ 1864.206775][T25307] do_syscall_64+0xcd/0x4c0 [ 1864.206795][T25307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.206813][T25307] RIP: 0033:0x7f85eb38ebe9 [ 1864.206828][T25307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1864.206846][T25307] RSP: 002b:00007f85ec142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1864.206865][T25307] RAX: ffffffffffffffda RBX: 00007f85eb5b5fa0 RCX: 00007f85eb38ebe9 [ 1864.206877][T25307] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1864.206888][T25307] RBP: 00007f85eb411e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1864.206900][T25307] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1864.206911][T25307] R13: 00007f85eb5b6038 R14: 00007f85eb5b5fa0 R15: 00007fffdb421ac8 [ 1864.206938][T25307] [ 1864.206963][T25307] memory: usage 307200kB, limit 307200kB, failcnt 17263 [ 1864.606582][T25307] memory+swap: usage 334468kB, limit 9007199254740988kB, failcnt 0 [ 1864.614648][T25307] kmem: usage 9364kB, limit 9007199254740988kB, failcnt 0 [ 1864.621882][T25307] Memory cgroup stats for /syz5: [ 1864.622100][T25307] cache 300638208 [ 1864.630861][T25307] rss 4243456 [ 1864.634232][T25307] rss_huge 0 [ 1864.637483][T25307] shmem 300638208 [ 1864.641246][T25307] mapped_file 4345856 [ 1864.645314][T25307] dirty 0 [ 1864.648335][T25307] writeback 0 [ 1864.651710][T25307] workingset_refault_anon 176 [ 1864.656456][T25307] workingset_refault_file 0 [ 1864.661035][T25307] swap 27922432 [ 1864.664621][T25307] swapcached 102400 [ 1864.668508][T25307] pgpgin 952209 [ 1864.672115][T25307] pgpgout 879794 [ 1864.675734][T25307] pgfault 1059110 [ 1864.679467][T25307] pgmajfault 131 [ 1864.683111][T25307] inactive_anon 119500800 [ 1864.687523][T25307] active_anon 185483264 [ 1864.691790][T25307] inactive_file 0 [ 1864.695484][T25307] active_file 0 [ 1864.699107][T25307] unevictable 0 [ 1864.702641][T25307] hierarchical_memory_limit 314572800 [ 1864.708090][T25307] hierarchical_memsw_limit 9223372036854771712 [ 1864.714341][T25307] total_cache 300638208 [ 1864.718566][T25307] total_rss 4243456 [ 1864.722507][T25307] total_rss_huge 0 [ 1864.726314][T25307] total_shmem 300638208 [ 1864.730579][T25307] total_mapped_file 4345856 [ 1864.735145][T25307] total_dirty 0 [ 1864.738679][T25307] total_writeback 0 [ 1864.742676][T25307] total_workingset_refault_anon 176 [ 1864.747958][T25307] total_workingset_refault_file 0 [ 1864.753096][T25307] total_swap 27922432 [ 1864.757161][T25307] total_swapcached 102400 [ 1864.761622][T25307] total_pgpgin 952209 [ 1864.765685][T25307] total_pgpgout 879794 [ 1864.770982][T25307] total_pgfault 1059110 [ 1864.775206][T25307] total_pgmajfault 131 [ 1864.779376][T25307] total_inactive_anon 119500800 [ 1864.784313][T25307] total_active_anon 185483264 [ 1864.789162][T25307] total_inactive_file 0 [ 1864.793397][T25307] total_active_file 0 [ 1864.797461][T25307] total_unevictable 0 [ 1864.801573][T25307] anon_cost 0 [ 1864.804935][T25307] file_cost 0 [ 1864.808299][T25307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3936,pid=25303,uid=0 [ 1864.823451][T25307] Memory cgroup out of memory: Killed process 25303 (syz.5.3936) total-vm:101828kB, anon-rss:1084kB, file-rss:22568kB, shmem-rss:4224kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1864.914762][T25310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3935'. [ 1865.351004][ T30] audit: type=1326 audit(2000000423.901:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1865.409026][ T30] audit: type=1326 audit(2000000423.901:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1865.433072][ T30] audit: type=1326 audit(2000000423.901:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1865.479007][ T30] audit: type=1326 audit(2000000423.901:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1865.534637][ T30] audit: type=1326 audit(2000000423.901:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1865.976029][ T30] audit: type=1326 audit(2000000423.901:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1866.523456][ T30] audit: type=1326 audit(2000000423.901:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.4.3938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336238ebe9 code=0x7fc00000 [ 1867.612282][T25347] kAFS: No cell specified [ 1868.363702][T25359] netlink: 'syz.2.3947': attribute type 8 has an invalid length. [ 1868.750534][T25367] overlayfs: failed to clone lowerpath [ 1869.365078][T25371] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1869.377273][T25371] bond0: (slave lo): Error: Device can not be enslaved while up [ 1869.473125][T25373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3950'. [ 1870.872448][T25382] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1870.884510][T25382] bond0: (slave lo): Error: Device type is different from other slaves [ 1870.994690][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 1872.487328][ T5220] udevd[5220]: worker [22260] terminated by signal 33 (Unknown signal 33) [ 1872.496155][ T5220] udevd[5220]: worker [22260] failed while handling '/devices/virtual/block/loop4' [ 1872.756062][T25430] syz.5.3961 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1872.767191][T25430] CPU: 0 UID: 0 PID: 25430 Comm: syz.5.3961 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1872.767214][T25430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1872.767224][T25430] Call Trace: [ 1872.767230][T25430] [ 1872.767236][T25430] dump_stack_lvl+0x16c/0x1f0 [ 1872.767266][T25430] dump_header+0x101/0x930 [ 1872.767286][T25430] oom_kill_process+0x272/0xa40 [ 1872.767302][T25430] ? __lock_acquire+0x62e/0x1ce0 [ 1872.767328][T25430] out_of_memory+0x350/0x1700 [ 1872.767348][T25430] ? __pfx_out_of_memory+0x10/0x10 [ 1872.767370][T25430] mem_cgroup_out_of_memory+0x118/0x130 [ 1872.767390][T25430] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1872.767416][T25430] ? do_raw_spin_unlock+0x172/0x230 [ 1872.767437][T25430] try_charge_memcg+0x72b/0xd50 [ 1872.767459][T25430] ? __pfx_try_charge_memcg+0x10/0x10 [ 1872.767478][T25430] ? __rcu_read_unlock+0x2bc/0x620 [ 1872.767494][T25430] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1872.767518][T25430] obj_cgroup_charge_pages+0x22/0x1f0 [ 1872.767536][T25430] obj_cgroup_charge_account+0x5c/0xa0 [ 1872.767554][T25430] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 1872.767574][T25430] ? kasan_unpoison+0x27/0x60 [ 1872.767599][T25430] __kvmalloc_node_noprof+0x506/0x620 [ 1872.767615][T25430] ? seq_read_iter+0x826/0x12c0 [ 1872.767634][T25430] ? seq_read_iter+0x826/0x12c0 [ 1872.767647][T25430] seq_read_iter+0x826/0x12c0 [ 1872.767659][T25430] ? rcu_is_watching+0x12/0xc0 [ 1872.767676][T25430] ? irqentry_exit+0x3b/0x90 [ 1872.767698][T25430] ? lockdep_hardirqs_on+0x7c/0x110 [ 1872.767727][T25430] kernfs_fop_read_iter+0x40f/0x5a0 [ 1872.767746][T25430] copy_splice_read+0x618/0xba0 [ 1872.767765][T25430] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1872.767783][T25430] ? __pfx_copy_splice_read+0x10/0x10 [ 1872.767799][T25430] ? lockdep_hardirqs_on+0x7c/0x110 [ 1872.767825][T25430] ? look_up_lock_class+0x59/0x150 [ 1872.767852][T25430] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1872.767870][T25430] ? __pfx_copy_splice_read+0x10/0x10 [ 1872.767883][T25430] do_splice_read+0x282/0x370 [ 1872.767900][T25430] splice_direct_to_actor+0x2a1/0xa30 [ 1872.767917][T25430] ? __pfx_direct_splice_actor+0x10/0x10 [ 1872.767937][T25430] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1872.767953][T25430] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1872.767974][T25430] ? rcu_is_watching+0x12/0xc0 [ 1872.767996][T25430] do_splice_direct+0x174/0x240 [ 1872.768012][T25430] ? __pfx_do_splice_direct+0x10/0x10 [ 1872.768029][T25430] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1872.768049][T25430] ? rw_verify_area+0xcf/0x6c0 [ 1872.768075][T25430] do_sendfile+0xb06/0xe50 [ 1872.768092][T25430] ? __pfx_do_sendfile+0x10/0x10 [ 1872.768106][T25430] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1872.768124][T25430] ? rcu_is_watching+0x12/0xc0 [ 1872.768141][T25430] ? irqentry_exit+0x3b/0x90 [ 1872.768165][T25430] __x64_sys_sendfile64+0x1d8/0x220 [ 1872.768184][T25430] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1872.768204][T25430] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1872.768225][T25430] do_syscall_64+0xcd/0x4c0 [ 1872.768239][T25430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.768254][T25430] RIP: 0033:0x7f85eb38ebe9 [ 1872.768266][T25430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1872.768280][T25430] RSP: 002b:00007f85ec121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1872.768295][T25430] RAX: ffffffffffffffda RBX: 00007f85eb5b6090 RCX: 00007f85eb38ebe9 [ 1872.768304][T25430] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 1872.768312][T25430] RBP: 00007f85eb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1872.768325][T25430] R10: 0000000000000030 R11: 0000000000000246 R12: 0000000000000000 [ 1872.768333][T25430] R13: 00007f85eb5b6128 R14: 00007f85eb5b6090 R15: 00007fffdb421ac8 [ 1872.768353][T25430] [ 1872.768358][T25430] memory: usage 307200kB, limit 307200kB, failcnt 17323 [ 1873.147531][T25430] memory+swap: usage 334468kB, limit 9007199254740988kB, failcnt 0 [ 1873.155419][T25430] kmem: usage 13536kB, limit 9007199254740988kB, failcnt 0 [ 1873.162649][T25430] Memory cgroup stats for /syz5: [ 1873.162894][T25430] cache 296292352 [ 1873.171434][T25430] rss 4308992 [ 1873.174692][T25430] rss_huge 0 [ 1873.177860][T25430] shmem 296292352 [ 1873.181485][T25430] mapped_file 0 [ 1873.184915][T25430] dirty 0 [ 1873.187830][T25430] writeback 0 [ 1873.191136][T25430] workingset_refault_anon 189 [ 1873.195785][T25430] workingset_refault_file 0 [ 1873.200278][T25430] swap 27922432 [ 1873.203711][T25430] swapcached 102400 [ 1873.207491][T25430] pgpgin 952772 [ 1873.210941][T25430] pgpgout 881402 [ 1873.214457][T25430] pgfault 1060192 [ 1873.218060][T25430] pgmajfault 136 [ 1873.221617][T25430] inactive_anon 118599680 [ 1873.225918][T25430] active_anon 182091776 [ 1873.230066][T25430] inactive_file 0 [ 1873.233671][T25430] active_file 0 [ 1873.237101][T25430] unevictable 0 [ 1873.240545][T25430] hierarchical_memory_limit 314572800 [ 1873.245902][T25430] hierarchical_memsw_limit 9223372036854771712 [ 1873.252052][T25430] total_cache 296292352 [ 1873.256179][T25430] total_rss 4308992 [ 1873.259977][T25430] total_rss_huge 0 [ 1873.263670][T25430] total_shmem 296292352 [ 1873.267800][T25430] total_mapped_file 0 [ 1873.271782][T25430] total_dirty 0 [ 1873.275213][T25430] total_writeback 0 [ 1873.279015][T25430] total_workingset_refault_anon 189 [ 1873.284184][T25430] total_workingset_refault_file 0 [ 1873.289197][T25430] total_swap 27922432 [ 1873.293150][T25430] total_swapcached 102400 [ 1873.297451][T25430] total_pgpgin 952772 [ 1873.301432][T25430] total_pgpgout 881402 [ 1873.305471][T25430] total_pgfault 1060192 [ 1873.309623][T25430] total_pgmajfault 136 [ 1873.313664][T25430] total_inactive_anon 118599680 [ 1873.318483][T25430] total_active_anon 182091776 [ 1873.323154][T25430] total_inactive_file 0 [ 1873.327281][T25430] total_active_file 0 [ 1873.331290][T25430] total_unevictable 0 [ 1873.335243][T25430] anon_cost 0 [ 1873.338498][T25430] file_cost 0 [ 1873.341780][T25430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3961,pid=25428,uid=0 [ 1873.356942][T25430] Memory cgroup out of memory: Killed process 25428 (syz.5.3961) total-vm:101960kB, anon-rss:1084kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1873.467233][T25433] syz.5.3962 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1873.486477][T25433] CPU: 0 UID: 0 PID: 25433 Comm: syz.5.3962 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1873.486502][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1873.486512][T25433] Call Trace: [ 1873.486518][T25433] [ 1873.486525][T25433] dump_stack_lvl+0x16c/0x1f0 [ 1873.486558][T25433] dump_header+0x101/0x930 [ 1873.486581][T25433] oom_kill_process+0x272/0xa40 [ 1873.486599][T25433] ? __lock_acquire+0x62e/0x1ce0 [ 1873.486629][T25433] out_of_memory+0x350/0x1700 [ 1873.486653][T25433] ? __pfx_out_of_memory+0x10/0x10 [ 1873.486680][T25433] mem_cgroup_out_of_memory+0x118/0x130 [ 1873.486705][T25433] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1873.486735][T25433] ? do_raw_spin_unlock+0x172/0x230 [ 1873.486759][T25433] try_charge_memcg+0x72b/0xd50 [ 1873.486784][T25433] ? __pfx_try_charge_memcg+0x10/0x10 [ 1873.486803][T25433] ? memory_min_write+0xa1/0xe0 [ 1873.486832][T25433] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1873.486862][T25433] obj_cgroup_charge_pages+0x22/0x1f0 [ 1873.486884][T25433] __memcg_kmem_charge_page+0xc2/0x2e0 [ 1873.486907][T25433] memcg_charge_kernel_stack+0xc3/0x1f0 [ 1873.486934][T25433] copy_process+0x2ca3/0x7690 [ 1873.486969][T25433] ? __pfx_copy_process+0x10/0x10 [ 1873.487001][T25433] ? _copy_from_user+0x59/0xd0 [ 1873.487024][T25433] kernel_clone+0xfc/0x930 [ 1873.487049][T25433] ? __pfx_kernel_clone+0x10/0x10 [ 1873.487078][T25433] ? __lock_acquire+0xb97/0x1ce0 [ 1873.487111][T25433] __do_sys_clone3+0x212/0x290 [ 1873.487135][T25433] ? __pfx___do_sys_clone3+0x10/0x10 [ 1873.487194][T25433] do_syscall_64+0xcd/0x4c0 [ 1873.487213][T25433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.487230][T25433] RIP: 0033:0x7f85eb3c3449 [ 1873.487245][T25433] Code: d7 08 00 48 8d 3d 5c d7 08 00 e8 02 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 1873.487261][T25433] RSP: 002b:00007fffdb421998 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 1873.487279][T25433] RAX: ffffffffffffffda RBX: 00007f85eb345850 RCX: 00007f85eb3c3449 [ 1873.487291][T25433] RDX: 00007f85eb345850 RSI: 0000000000000058 RDI: 00007fffdb4219e0 [ 1873.487302][T25433] RBP: 00007f85ec1426c0 R08: 00007f85ec1426c0 R09: 00007fffdb421ac7 [ 1873.487312][T25433] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 1873.487323][T25433] R13: 000000000000000b R14: 00007fffdb4219e0 R15: 00007fffdb421ac8 [ 1873.487347][T25433] [ 1873.487354][T25433] memory: usage 307200kB, limit 307200kB, failcnt 17434 [ 1873.761226][T25433] memory+swap: usage 334368kB, limit 9007199254740988kB, failcnt 0 [ 1873.769957][T25433] kmem: usage 9300kB, limit 9007199254740988kB, failcnt 0 [ 1873.777984][T25433] Memory cgroup stats for /syz5: [ 1873.778719][T25433] cache 296292352 [ 1873.999729][T25433] rss 4157440 [ 1874.213352][T25433] rss_huge 0 [ 1874.221750][T25433] shmem 296292352 [ 1874.240133][T25433] mapped_file 0 [ 1874.248970][T25433] dirty 0 [ 1874.253047][T25433] writeback 0 [ 1874.256984][T25433] workingset_refault_anon 189 [ 1874.262111][T25433] workingset_refault_file 0 [ 1874.266830][T25433] swap 27922432 [ 1874.270891][T25433] swapcached 102400 [ 1874.274971][T25433] pgpgin 952786 [ 1874.320055][T25433] pgpgout 881453 [ 1874.477208][T25433] pgfault 1060238 [ 1874.480908][T25433] pgmajfault 136 [ 1874.485947][T25433] inactive_anon 118599680 [ 1874.502890][T25433] active_anon 181952512 [ 1874.507259][T25433] inactive_file 0 [ 1874.515256][T25433] active_file 0 [ 1874.523146][T25433] unevictable 0 [ 1874.527974][T25433] hierarchical_memory_limit 314572800 [ 1874.653477][T25440] overlayfs: failed to resolve './file0': -2 [ 1874.741709][ T30] audit: type=1400 audit(2000000433.191:1500): avc: denied { audit_write } for pid=25437 comm="syz.3.3964" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1874.969378][T25433] hierarchical_memsw_limit 9223372036854771712 [ 1874.983173][T25433] total_cache 296292352 [ 1874.999905][ T30] audit: type=1107 audit(2000000433.191:1501): pid=25437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯' [ 1875.013798][T25433] total_rss 4157440 [ 1875.018078][T25433] total_rss_huge 0 [ 1875.024044][T25433] total_shmem 296292352 [ 1875.030907][T25433] total_mapped_file 0 [ 1875.037056][T25433] total_dirty 0 [ 1875.042052][T25433] total_writeback 0 [ 1875.047293][T25433] total_workingset_refault_anon 189 [ 1875.053873][T25433] total_workingset_refault_file 0 [ 1875.061946][T25433] total_swap 27922432 [ 1875.066025][T25433] total_swapcached 102400 [ 1875.073579][T25433] total_pgpgin 952786 [ 1875.077844][T25433] total_pgpgout 881453 [ 1875.083384][T25433] total_pgfault 1060238 [ 1875.087852][T25433] total_pgmajfault 136 [ 1875.094740][T25433] total_inactive_anon 118599680 [ 1875.101116][T25433] total_active_anon 181952512 [ 1875.108513][T25433] total_inactive_file 0 [ 1875.115149][T25433] total_active_file 0 [ 1875.139218][T25433] total_unevictable 0 [ 1875.187182][T25433] anon_cost 0 [ 1875.199789][T25433] file_cost 0 [ 1875.206262][T25433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3962,pid=25433,uid=0 [ 1875.226420][T25433] Memory cgroup out of memory: Killed process 25433 (syz.5.3962) total-vm:103876kB, anon-rss:956kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1875.974741][ T30] audit: type=1326 audit(2000000434.511:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1876.100095][ T30] audit: type=1326 audit(2000000434.511:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1876.252239][T25464] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1876.264178][T25464] bond0: (slave lo): Error: Device type is different from other slaves [ 1876.318594][ T30] audit: type=1326 audit(2000000434.511:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1876.534920][ T30] audit: type=1326 audit(2000000434.511:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7c18ebe9 code=0x7ffc0000 [ 1877.068555][ T30] audit: type=1326 audit(2000000434.511:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec7c190b07 code=0x7ffc0000 [ 1877.162261][ T30] audit: type=1326 audit(2000000434.511:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fec7c190a7c code=0x7ffc0000 [ 1877.271767][T25477] syz.5.3973 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1877.281604][T25477] CPU: 0 UID: 0 PID: 25477 Comm: syz.5.3973 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1877.281619][T25477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1877.281626][T25477] Call Trace: [ 1877.281631][T25477] [ 1877.281636][T25477] dump_stack_lvl+0x16c/0x1f0 [ 1877.281656][T25477] dump_header+0x101/0x930 [ 1877.281671][T25477] oom_kill_process+0x272/0xa40 [ 1877.281683][T25477] ? __lock_acquire+0x62e/0x1ce0 [ 1877.281702][T25477] out_of_memory+0x350/0x1700 [ 1877.281716][T25477] ? __pfx_out_of_memory+0x10/0x10 [ 1877.281732][T25477] mem_cgroup_out_of_memory+0x118/0x130 [ 1877.281748][T25477] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1877.281766][T25477] ? do_raw_spin_unlock+0x172/0x230 [ 1877.281780][T25477] try_charge_memcg+0x72b/0xd50 [ 1877.281795][T25477] ? __pfx_try_charge_memcg+0x10/0x10 [ 1877.281807][T25477] ? find_held_lock+0x11/0x80 [ 1877.281824][T25477] ? rcu_read_unlock+0x17/0x60 [ 1877.281840][T25477] charge_memcg+0x8a/0x230 [ 1877.281852][T25477] __mem_cgroup_charge+0x2b/0x1e0 [ 1877.281866][T25477] shmem_alloc_and_add_folio+0x514/0xc20 [ 1877.281887][T25477] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1877.281907][T25477] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1877.281921][T25477] shmem_get_folio_gfp+0x67f/0x1600 [ 1877.281935][T25477] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1877.281947][T25477] ? filemap_map_pages+0xf58/0x1670 [ 1877.281960][T25477] shmem_fault+0x1fe/0xa30 [ 1877.281972][T25477] ? __pfx_shmem_fault+0x10/0x10 [ 1877.281985][T25477] ? __pfx_filemap_map_pages+0x10/0x10 [ 1877.282000][T25477] ? __pfx_filemap_map_pages+0x10/0x10 [ 1877.282010][T25477] __do_fault+0x10d/0x490 [ 1877.282023][T25477] ? __pfx_filemap_map_pages+0x10/0x10 [ 1877.282034][T25477] do_pte_missing+0xf50/0x3ba0 [ 1877.282058][T25477] ? find_held_lock+0x2b/0x80 [ 1877.282076][T25477] ? __handle_mm_fault+0x14fd/0x2a50 [ 1877.282095][T25477] __handle_mm_fault+0x152a/0x2a50 [ 1877.282116][T25477] ? __pfx___handle_mm_fault+0x10/0x10 [ 1877.282134][T25477] ? __pte_offset_map_lock+0x174/0x310 [ 1877.282147][T25477] ? find_held_lock+0x2b/0x80 [ 1877.282164][T25477] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1877.282183][T25477] handle_mm_fault+0x589/0xd10 [ 1877.282202][T25477] __get_user_pages+0x551/0x34a0 [ 1877.282222][T25477] ? __pfx___get_user_pages+0x10/0x10 [ 1877.282241][T25477] populate_vma_page_range+0x267/0x3f0 [ 1877.282257][T25477] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1877.282272][T25477] ? __pfx_find_vma_intersection+0x10/0x10 [ 1877.282287][T25477] ? do_mmap+0x69c/0x1210 [ 1877.282302][T25477] __mm_populate+0x1d8/0x380 [ 1877.282318][T25477] ? __pfx___mm_populate+0x10/0x10 [ 1877.282334][T25477] ? up_write+0x1b2/0x520 [ 1877.282346][T25477] vm_mmap_pgoff+0x37f/0x470 [ 1877.282361][T25477] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1877.282378][T25477] ? __x64_sys_futex+0x1e0/0x4c0 [ 1877.282395][T25477] ? __x64_sys_futex+0x1e9/0x4c0 [ 1877.282413][T25477] ksys_mmap_pgoff+0x7d/0x5c0 [ 1877.282426][T25477] ? xfd_validate_state+0x61/0x180 [ 1877.282436][T25477] ? __task_pid_nr_ns+0x17c/0x500 [ 1877.282448][T25477] __x64_sys_mmap+0x125/0x190 [ 1877.282460][T25477] do_syscall_64+0xcd/0x4c0 [ 1877.282472][T25477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.282483][T25477] RIP: 0033:0x7f85eb38ebe9 [ 1877.282492][T25477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1877.282503][T25477] RSP: 002b:00007f85ec142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1877.282514][T25477] RAX: ffffffffffffffda RBX: 00007f85eb5b5fa0 RCX: 00007f85eb38ebe9 [ 1877.282521][T25477] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1877.282527][T25477] RBP: 00007f85eb411e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1877.282534][T25477] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1877.282540][T25477] R13: 00007f85eb5b6038 R14: 00007f85eb5b5fa0 R15: 00007fffdb421ac8 [ 1877.282554][T25477] [ 1877.282560][T25477] memory: usage 307200kB, limit 307200kB, failcnt 17469 [ 1877.671166][T25477] memory+swap: usage 332420kB, limit 9007199254740988kB, failcnt 0 [ 1877.679040][T25477] kmem: usage 9376kB, limit 9007199254740988kB, failcnt 0 [ 1877.686127][T25477] Memory cgroup stats for /syz5: [ 1877.686206][T25477] cache 298405888 [ 1877.694720][T25477] rss 4243456 [ 1877.697970][T25477] rss_huge 0 [ 1877.701148][T25477] shmem 298405888 [ 1877.704754][T25477] mapped_file 2113536 [ 1877.708705][T25477] dirty 0 [ 1877.711641][T25477] writeback 0 [ 1877.714895][T25477] workingset_refault_anon 189 [ 1877.719551][T25477] workingset_refault_file 0 [ 1877.724019][T25477] swap 27922432 [ 1877.727445][T25477] swapcached 102400 [ 1877.731275][T25477] pgpgin 953374 [ 1877.734700][T25477] pgpgout 881504 [ 1877.738212][T25477] pgfault 1060986 [ 1877.741834][T25477] pgmajfault 136 [ 1877.745346][T25477] inactive_anon 118599680 [ 1877.749676][T25477] active_anon 184152064 [ 1877.753804][T25477] inactive_file 0 [ 1877.757410][T25477] active_file 0 [ 1877.760871][T25477] unevictable 0 [ 1877.764295][T25477] hierarchical_memory_limit 314572800 [ 1877.769651][T25477] hierarchical_memsw_limit 9223372036854771712 [ 1877.775767][T25477] total_cache 298405888 [ 1877.779919][T25477] total_rss 4243456 [ 1877.783698][T25477] total_rss_huge 0 [ 1877.787381][T25477] total_shmem 298405888 [ 1877.791525][T25477] total_mapped_file 2113536 [ 1877.795992][T25477] total_dirty 0 [ 1877.799447][T25477] total_writeback 0 [ 1877.803226][T25477] total_workingset_refault_anon 189 [ 1877.808387][T25477] total_workingset_refault_file 0 [ 1877.813411][T25477] total_swap 27922432 [ 1877.817357][T25477] total_swapcached 102400 [ 1877.821666][T25477] total_pgpgin 953374 [ 1877.825622][T25477] total_pgpgout 881504 [ 1877.829692][T25477] total_pgfault 1060986 [ 1877.833822][T25477] total_pgmajfault 136 [ 1877.837859][T25477] total_inactive_anon 118599680 [ 1877.842694][T25477] total_active_anon 184152064 [ 1877.847334][T25477] total_inactive_file 0 [ 1877.851480][T25477] total_active_file 0 [ 1877.855425][T25477] total_unevictable 0 [ 1877.859381][T25477] anon_cost 0 [ 1877.862633][T25477] file_cost 0 [ 1877.865886][T25477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3973,pid=25476,uid=0 [ 1877.880709][T25477] Memory cgroup out of memory: Killed process 25476 (syz.5.3973) total-vm:101828kB, anon-rss:1084kB, file-rss:22440kB, shmem-rss:2048kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1877.922391][ T30] audit: type=1326 audit(2000000434.511:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fec7c1909b4 code=0x7ffc0000 [ 1877.966173][ T30] audit: type=1326 audit(2000000434.511:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.1.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fec7c1909b4 code=0x7ffc0000 [ 1878.067664][T25479] syz.5.3974 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1878.077481][T25479] CPU: 0 UID: 0 PID: 25479 Comm: syz.5.3974 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1878.077496][T25479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1878.077502][T25479] Call Trace: [ 1878.077507][T25479] [ 1878.077511][T25479] dump_stack_lvl+0x16c/0x1f0 [ 1878.077532][T25479] dump_header+0x101/0x930 [ 1878.077547][T25479] oom_kill_process+0x272/0xa40 [ 1878.077558][T25479] ? __lock_acquire+0x62e/0x1ce0 [ 1878.077577][T25479] out_of_memory+0x350/0x1700 [ 1878.077591][T25479] ? __pfx_out_of_memory+0x10/0x10 [ 1878.077607][T25479] mem_cgroup_out_of_memory+0x118/0x130 [ 1878.077623][T25479] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1878.077641][T25479] ? do_raw_spin_unlock+0x172/0x230 [ 1878.077655][T25479] try_charge_memcg+0x72b/0xd50 [ 1878.077670][T25479] ? __pfx_try_charge_memcg+0x10/0x10 [ 1878.077681][T25479] ? find_held_lock+0x11/0x80 [ 1878.077695][T25479] ? rcu_read_unlock+0x17/0x60 [ 1878.077711][T25479] charge_memcg+0x8a/0x230 [ 1878.077723][T25479] __mem_cgroup_charge+0x2b/0x1e0 [ 1878.077737][T25479] shmem_alloc_and_add_folio+0x514/0xc20 [ 1878.077758][T25479] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1878.077777][T25479] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1878.077791][T25479] shmem_get_folio_gfp+0x67f/0x1600 [ 1878.077805][T25479] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1878.077817][T25479] ? filemap_map_pages+0xf58/0x1670 [ 1878.077834][T25479] shmem_fault+0x1fe/0xa30 [ 1878.077846][T25479] ? __pfx_shmem_fault+0x10/0x10 [ 1878.077858][T25479] ? __pfx_filemap_map_pages+0x10/0x10 [ 1878.077874][T25479] ? __pfx_filemap_map_pages+0x10/0x10 [ 1878.077885][T25479] __do_fault+0x10d/0x490 [ 1878.077897][T25479] ? __pfx_filemap_map_pages+0x10/0x10 [ 1878.077908][T25479] do_pte_missing+0xf50/0x3ba0 [ 1878.077925][T25479] ? find_held_lock+0x2b/0x80 [ 1878.077938][T25479] ? __handle_mm_fault+0x14fd/0x2a50 [ 1878.077956][T25479] __handle_mm_fault+0x152a/0x2a50 [ 1878.077977][T25479] ? __pfx___handle_mm_fault+0x10/0x10 [ 1878.077995][T25479] ? __pte_offset_map_lock+0x174/0x310 [ 1878.078009][T25479] ? find_held_lock+0x2b/0x80 [ 1878.078026][T25479] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1878.078050][T25479] handle_mm_fault+0x589/0xd10 [ 1878.078077][T25479] __get_user_pages+0x551/0x34a0 [ 1878.078097][T25479] ? __pfx___get_user_pages+0x10/0x10 [ 1878.078116][T25479] populate_vma_page_range+0x267/0x3f0 [ 1878.078132][T25479] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1878.078147][T25479] ? __pfx_find_vma_intersection+0x10/0x10 [ 1878.078162][T25479] ? do_mmap+0x69c/0x1210 [ 1878.078177][T25479] __mm_populate+0x1d8/0x380 [ 1878.078192][T25479] ? __pfx___mm_populate+0x10/0x10 [ 1878.078209][T25479] ? up_write+0x1b2/0x520 [ 1878.078221][T25479] vm_mmap_pgoff+0x37f/0x470 [ 1878.078236][T25479] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1878.078253][T25479] ? __x64_sys_futex+0x1e0/0x4c0 [ 1878.078269][T25479] ? __x64_sys_futex+0x1e9/0x4c0 [ 1878.078287][T25479] ksys_mmap_pgoff+0x7d/0x5c0 [ 1878.078300][T25479] ? xfd_validate_state+0x61/0x180 [ 1878.078309][T25479] ? __task_pid_nr_ns+0x17c/0x500 [ 1878.078321][T25479] __x64_sys_mmap+0x125/0x190 [ 1878.078333][T25479] do_syscall_64+0xcd/0x4c0 [ 1878.078345][T25479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.078356][T25479] RIP: 0033:0x7f85eb38ebe9 [ 1878.078366][T25479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1878.078376][T25479] RSP: 002b:00007f85ec142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1878.078387][T25479] RAX: ffffffffffffffda RBX: 00007f85eb5b5fa0 RCX: 00007f85eb38ebe9 [ 1878.078394][T25479] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1878.078400][T25479] RBP: 00007f85eb411e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1878.078407][T25479] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1878.078413][T25479] R13: 00007f85eb5b6038 R14: 00007f85eb5b5fa0 R15: 00007fffdb421ac8 [ 1878.078427][T25479] [ 1878.078431][T25479] memory: usage 307200kB, limit 307200kB, failcnt 17502 [ 1878.467345][T25479] memory+swap: usage 334468kB, limit 9007199254740988kB, failcnt 0 [ 1878.475259][T25479] kmem: usage 9388kB, limit 9007199254740988kB, failcnt 0 [ 1878.482974][T25479] Memory cgroup stats for /syz5: [ 1878.483050][T25479] cache 300613632 [ 1878.491584][T25479] rss 4243456 [ 1878.494843][T25479] rss_huge 0 [ 1878.498011][T25479] shmem 300613632 [ 1878.501635][T25479] mapped_file 4321280 [ 1878.505589][T25479] dirty 0 [ 1878.508491][T25479] writeback 0 [ 1878.511767][T25479] workingset_refault_anon 189 [ 1878.516407][T25479] workingset_refault_file 0 [ 1878.520886][T25479] swap 27922432 [ 1878.524311][T25479] swapcached 102400 [ 1878.528083][T25479] pgpgin 954465 [ 1878.531537][T25479] pgpgout 882056 [ 1878.535061][T25479] pgfault 1062137 [ 1878.538665][T25479] pgmajfault 136 [ 1878.542208][T25479] inactive_anon 118599680 [ 1878.546505][T25479] active_anon 186359808 [ 1878.550655][T25479] inactive_file 0 [ 1878.554259][T25479] active_file 0 [ 1878.557689][T25479] unevictable 0 [ 1878.561152][T25479] hierarchical_memory_limit 314572800 [ 1878.566494][T25479] hierarchical_memsw_limit 9223372036854771712 [ 1878.572643][T25479] total_cache 300613632 [ 1878.576763][T25479] total_rss 4243456 [ 1878.580547][T25479] total_rss_huge 0 [ 1878.584233][T25479] total_shmem 300613632 [ 1878.588352][T25479] total_mapped_file 4321280 [ 1878.592842][T25479] total_dirty 0 [ 1878.596267][T25479] total_writeback 0 [ 1878.600062][T25479] total_workingset_refault_anon 189 [ 1878.605294][T25479] total_workingset_refault_file 0 [ 1878.610627][T25479] total_swap 27922432 [ 1878.614669][T25479] total_swapcached 102400 [ 1878.619191][T25479] total_pgpgin 954465 [ 1878.623140][T25479] total_pgpgout 882056 [ 1878.627171][T25479] total_pgfault 1062137 [ 1878.631324][T25479] total_pgmajfault 136 [ 1878.635358][T25479] total_inactive_anon 118599680 [ 1878.640185][T25479] total_active_anon 186359808 [ 1878.644828][T25479] total_inactive_file 0 [ 1878.648982][T25479] total_active_file 0 [ 1878.652931][T25479] total_unevictable 0 [ 1878.656878][T25479] anon_cost 0 [ 1878.660144][T25479] file_cost 0 [ 1878.663397][T25479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3974,pid=25478,uid=0 [ 1878.678205][T25479] Memory cgroup out of memory: Killed process 25478 (syz.5.3974) total-vm:101828kB, anon-rss:1084kB, file-rss:22440kB, shmem-rss:4096kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1878.771816][T25482] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1879.540616][T25494] netlink: 'syz.5.3976': attribute type 21 has an invalid length. [ 1879.548557][T25494] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1879.600939][T25494] netlink: 'syz.5.3976': attribute type 21 has an invalid length. [ 1879.620167][T25494] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1881.540738][T25524] overlayfs: missing 'workdir' [ 1882.089524][T25531] syz.3.3986 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1882.099126][T25531] CPU: 1 UID: 0 PID: 25531 Comm: syz.3.3986 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1882.099141][T25531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1882.099148][T25531] Call Trace: [ 1882.099152][T25531] [ 1882.099157][T25531] dump_stack_lvl+0x16c/0x1f0 [ 1882.099177][T25531] dump_header+0x101/0x930 [ 1882.099192][T25531] oom_kill_process+0x272/0xa40 [ 1882.099203][T25531] ? __lock_acquire+0x62e/0x1ce0 [ 1882.099222][T25531] out_of_memory+0x350/0x1700 [ 1882.099237][T25531] ? __pfx_out_of_memory+0x10/0x10 [ 1882.099253][T25531] mem_cgroup_out_of_memory+0x118/0x130 [ 1882.099268][T25531] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1882.099286][T25531] ? do_raw_spin_unlock+0x172/0x230 [ 1882.099301][T25531] try_charge_memcg+0x72b/0xd50 [ 1882.099315][T25531] ? __pfx_try_charge_memcg+0x10/0x10 [ 1882.099327][T25531] ? find_held_lock+0x11/0x80 [ 1882.099341][T25531] ? rcu_read_unlock+0x17/0x60 [ 1882.099357][T25531] charge_memcg+0x8a/0x230 [ 1882.099368][T25531] __mem_cgroup_charge+0x2b/0x1e0 [ 1882.099382][T25531] shmem_alloc_and_add_folio+0x514/0xc20 [ 1882.099404][T25531] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1882.099424][T25531] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1882.099437][T25531] shmem_get_folio_gfp+0x67f/0x1600 [ 1882.099451][T25531] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1882.099464][T25531] ? filemap_map_pages+0xf58/0x1670 [ 1882.099477][T25531] shmem_fault+0x1fe/0xa30 [ 1882.099489][T25531] ? __pfx_shmem_fault+0x10/0x10 [ 1882.099502][T25531] ? __pfx_filemap_map_pages+0x10/0x10 [ 1882.099517][T25531] ? __pfx_filemap_map_pages+0x10/0x10 [ 1882.099527][T25531] __do_fault+0x10d/0x490 [ 1882.099541][T25531] ? __pfx_filemap_map_pages+0x10/0x10 [ 1882.099551][T25531] do_pte_missing+0xf50/0x3ba0 [ 1882.099569][T25531] ? find_held_lock+0x2b/0x80 [ 1882.099582][T25531] ? __handle_mm_fault+0x14fd/0x2a50 [ 1882.099601][T25531] __handle_mm_fault+0x152a/0x2a50 [ 1882.099621][T25531] ? __pfx___handle_mm_fault+0x10/0x10 [ 1882.099639][T25531] ? __pte_offset_map_lock+0x174/0x310 [ 1882.099653][T25531] ? find_held_lock+0x2b/0x80 [ 1882.099670][T25531] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1882.099688][T25531] handle_mm_fault+0x589/0xd10 [ 1882.099708][T25531] __get_user_pages+0x551/0x34a0 [ 1882.099728][T25531] ? __pfx___get_user_pages+0x10/0x10 [ 1882.099746][T25531] populate_vma_page_range+0x267/0x3f0 [ 1882.099763][T25531] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1882.099777][T25531] ? __pfx_find_vma_intersection+0x10/0x10 [ 1882.099792][T25531] ? do_mmap+0x69c/0x1210 [ 1882.099807][T25531] __mm_populate+0x1d8/0x380 [ 1882.099823][T25531] ? __pfx___mm_populate+0x10/0x10 [ 1882.099839][T25531] ? up_write+0x1b2/0x520 [ 1882.099852][T25531] vm_mmap_pgoff+0x37f/0x470 [ 1882.099867][T25531] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1882.099880][T25531] ? sched_setaffinity+0xe0/0x400 [ 1882.099897][T25531] ? __x64_sys_futex+0x1e0/0x4c0 [ 1882.099913][T25531] ? __x64_sys_futex+0x1e9/0x4c0 [ 1882.099932][T25531] ksys_mmap_pgoff+0x7d/0x5c0 [ 1882.099945][T25531] ? xfd_validate_state+0x61/0x180 [ 1882.099957][T25531] __x64_sys_mmap+0x125/0x190 [ 1882.099970][T25531] do_syscall_64+0xcd/0x4c0 [ 1882.099981][T25531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.099992][T25531] RIP: 0033:0x7ff990d8ebe9 [ 1882.100001][T25531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1882.100012][T25531] RSP: 002b:00007ff991b3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1882.100022][T25531] RAX: ffffffffffffffda RBX: 00007ff990fb5fa0 RCX: 00007ff990d8ebe9 [ 1882.100029][T25531] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1882.100039][T25531] RBP: 00007ff990e11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1882.100045][T25531] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1882.100051][T25531] R13: 00007ff990fb6038 R14: 00007ff990fb5fa0 R15: 00007ffea9a248d8 [ 1882.100066][T25531] [ 1882.100082][T25531] memory: usage 307200kB, limit 307200kB, failcnt 39810 [ 1882.489935][T25531] memory+swap: usage 332752kB, limit 9007199254740988kB, failcnt 0 [ 1882.497825][T25531] kmem: usage 11844kB, limit 9007199254740988kB, failcnt 0 [ 1882.505100][T25531] Memory cgroup stats for /syz3: [ 1882.505212][T25531] cache 298545152 [ 1882.513773][T25531] rss 3870720 [ 1882.517046][T25531] rss_huge 0 [ 1882.520278][T25531] shmem 298287104 [ 1882.523904][T25531] mapped_file 10969088 [ 1882.527957][T25531] dirty 258048 [ 1882.531465][T25531] writeback 0 [ 1882.534758][T25531] workingset_refault_anon 1392 [ 1882.539539][T25531] workingset_refault_file 341 [ 1882.544213][T25531] swap 26165248 [ 1882.547653][T25531] swapcached 28672 [ 1882.551388][T25531] pgpgin 1182440 [ 1882.554935][T25531] pgpgout 1108601 [ 1882.558551][T25531] pgfault 1360912 [ 1882.562208][T25531] pgmajfault 1325 [ 1882.565833][T25531] inactive_anon 147406848 [ 1882.570198][T25531] active_anon 154779648 [ 1882.574353][T25531] inactive_file 258048 [ 1882.578410][T25531] active_file 0 [ 1882.581928][T25531] unevictable 0 [ 1882.585375][T25531] hierarchical_memory_limit 314572800 [ 1882.590746][T25531] hierarchical_memsw_limit 9223372036854771712 [ 1882.596890][T25531] total_cache 298545152 [ 1882.601045][T25531] total_rss 3870720 [ 1882.604838][T25531] total_rss_huge 0 [ 1882.608542][T25531] total_shmem 298287104 [ 1882.612981][T25531] total_mapped_file 10969088 [ 1882.617564][T25531] total_dirty 258048 [ 1882.621460][T25531] total_writeback 0 [ 1882.625261][T25531] total_workingset_refault_anon 1392 [ 1882.630567][T25531] total_workingset_refault_file 341 [ 1882.635753][T25531] total_swap 26165248 [ 1882.639781][T25531] total_swapcached 28672 [ 1882.644021][T25531] total_pgpgin 1182440 [ 1882.648080][T25531] total_pgpgout 1108601 [ 1882.652370][T25531] total_pgfault 1360912 [ 1882.656508][T25531] total_pgmajfault 1325 [ 1882.660656][T25531] total_inactive_anon 147406848 [ 1882.665489][T25531] total_active_anon 154779648 [ 1882.670162][T25531] total_inactive_file 258048 [ 1882.674734][T25531] total_active_file 0 [ 1882.678698][T25531] total_unevictable 0 [ 1882.682670][T25531] anon_cost 0 [ 1882.685941][T25531] file_cost 0 [ 1882.689256][T25531] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1568,pid=13638,uid=0 [ 1882.704120][T25531] Memory cgroup out of memory: Killed process 13638 (syz.3.1568) total-vm:101960kB, anon-rss:1108kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 1914.089353][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.095652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1988.028821][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1988.035765][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25535/1:b..l P25533/1:b..l [ 1988.045425][ C1] rcu: (detected by 1, t=10502 jiffies, g=97549, q=207 ncpus=2) [ 1988.053109][ C1] task:syz.2.3985 state:R running task stack:26024 pid:25533 tgid:25532 ppid:5843 task_flags:0x400140 flags:0x00004002 [ 1988.067253][ C1] Call Trace: [ 1988.070508][ C1] [ 1988.073423][ C1] __schedule+0x1190/0x5de0 [ 1988.077913][ C1] ? __pfx___schedule+0x10/0x10 [ 1988.082750][ C1] ? mark_held_locks+0x49/0x80 [ 1988.087491][ C1] preempt_schedule_irq+0x51/0x90 [ 1988.092487][ C1] irqentry_exit+0x36/0x90 [ 1988.096877][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1988.102824][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 1988.108080][ C1] Code: 0f c1 05 38 3e 3e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 4d fc 3d 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1988.127653][ C1] RSP: 0018:ffffc90003d56c60 EFLAGS: 00000206 [ 1988.133688][ C1] RAX: 0b381b73fef22d00 RBX: ffffffff8e5c1160 RCX: ffffc90003d56c6c [ 1988.141630][ C1] RDX: 0000000000000001 RSI: ffffffff8de293c0 RDI: ffffffff8c161100 [ 1988.149576][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1988.157514][ C1] R10: 0000000000000001 R11: 00000000000061ed R12: ffffffff816ae8a4 [ 1988.165452][ C1] R13: 0000000000000202 R14: ffff88803fc04880 R15: 0000000000000002 [ 1988.173391][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1988.178568][ C1] unwind_next_frame+0x3f9/0x20a0 [ 1988.183568][ C1] ? arch_stack_walk+0x73/0x100 [ 1988.188390][ C1] __unwind_start+0x45f/0x7f0 [ 1988.193043][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1988.199168][ C1] arch_stack_walk+0x73/0x100 [ 1988.203815][ C1] ? stack_trace_save+0x8e/0xc0 [ 1988.208637][ C1] stack_trace_save+0x8e/0xc0 [ 1988.213283][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1988.218629][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1988.223539][ C1] save_stack+0x160/0x1f0 [ 1988.227837][ C1] ? __pfx_save_stack+0x10/0x10 [ 1988.232658][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1988.237570][ C1] __set_page_owner+0x91/0x550 [ 1988.242303][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1988.247642][ C1] ? bad_range+0x261/0x4c0 [ 1988.252030][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1988.257205][ C1] post_alloc_hook+0x1c0/0x230 [ 1988.261943][ C1] get_page_from_freelist+0x132b/0x38e0 [ 1988.267462][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 1988.272716][ C1] ? rcu_is_watching+0x12/0xc0 [ 1988.277459][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1988.283319][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1988.288235][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1988.294530][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1988.299531][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1988.304881][ C1] ? find_held_lock+0x2b/0x80 [ 1988.309538][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1988.314453][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1988.320317][ C1] ? policy_nodemask+0xea/0x4e0 [ 1988.325144][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1988.329974][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1988.335326][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1988.340679][ C1] shmem_alloc_folio+0x135/0x160 [ 1988.345601][ C1] shmem_alloc_and_add_folio+0x499/0xc20 [ 1988.351219][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1988.357360][ C1] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1988.363227][ C1] shmem_get_folio_gfp+0x67f/0x1600 [ 1988.368400][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1988.374014][ C1] ? filemap_map_pages+0xf58/0x1670 [ 1988.379186][ C1] shmem_fault+0x1fe/0xa30 [ 1988.383574][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1988.388484][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1988.393922][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1988.399350][ C1] __do_fault+0x10d/0x490 [ 1988.403650][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1988.409075][ C1] do_pte_missing+0xf50/0x3ba0 [ 1988.413811][ C1] ? find_held_lock+0x2b/0x80 [ 1988.418459][ C1] ? __handle_mm_fault+0x14fd/0x2a50 [ 1988.423717][ C1] __handle_mm_fault+0x152a/0x2a50 [ 1988.428805][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1988.434252][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1988.439687][ C1] ? find_held_lock+0x2b/0x80 [ 1988.444345][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1988.450387][ C1] handle_mm_fault+0x589/0xd10 [ 1988.455147][ C1] __get_user_pages+0x551/0x34a0 [ 1988.460068][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1988.465420][ C1] populate_vma_page_range+0x267/0x3f0 [ 1988.470860][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1988.476812][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1988.482600][ C1] ? do_mmap+0x69c/0x1210 [ 1988.486911][ C1] __mm_populate+0x1d8/0x380 [ 1988.491492][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1988.496585][ C1] ? up_write+0x1b2/0x520 [ 1988.500886][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1988.505450][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1988.510543][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1988.515453][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1988.520370][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1988.525018][ C1] ? xfd_validate_state+0x61/0x180 [ 1988.530095][ C1] ? __task_pid_nr_ns+0x17c/0x500 [ 1988.535091][ C1] __x64_sys_mmap+0x125/0x190 [ 1988.539738][ C1] do_syscall_64+0xcd/0x4c0 [ 1988.544216][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.550079][ C1] RIP: 0033:0x7fad6738ebe9 [ 1988.554467][ C1] RSP: 002b:00007fad6824d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1988.562847][ C1] RAX: ffffffffffffffda RBX: 00007fad675b5fa0 RCX: 00007fad6738ebe9 [ 1988.570801][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1988.578745][ C1] RBP: 00007fad67411e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1988.586687][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1988.594634][ C1] R13: 00007fad675b6038 R14: 00007fad675b5fa0 R15: 00007ffeea956df8 [ 1988.602591][ C1] [ 1988.605589][ C1] task:syz.1.3984 state:R running task stack:26360 pid:25535 tgid:25527 ppid:5844 task_flags:0x400140 flags:0x00004002 [ 1988.619027][ C1] Call Trace: [ 1988.622287][ C1] [ 1988.625191][ C1] __schedule+0x1190/0x5de0 [ 1988.629687][ C1] ? __pfx___schedule+0x10/0x10 [ 1988.634517][ C1] ? mark_held_locks+0x49/0x80 [ 1988.639259][ C1] preempt_schedule_irq+0x51/0x90 [ 1988.644267][ C1] irqentry_exit+0x36/0x90 [ 1988.648657][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1988.654607][ C1] RIP: 0010:stack_access_ok+0x7e/0x200 [ 1988.660038][ C1] Code: 85 52 01 00 00 48 89 da 48 8b 4b 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 0b 01 00 00 <8b> 13 85 d2 74 23 49 39 ef 77 1e 48 39 e9 76 19 4a 8d 54 25 00 49 [ 1988.679617][ C1] RSP: 0018:ffffc90003cd6c68 EFLAGS: 00000246 [ 1988.685741][ C1] RAX: 0000000000000000 RBX: ffffc90003cd6d68 RCX: ffffc90003cd8000 [ 1988.693692][ C1] RDX: 1ffff9200079adad RSI: ffffc90003cd6e00 RDI: ffffc90003cd6d68 [ 1988.701633][ C1] RBP: ffffc90003cd6e00 R08: ffffffff913f7dea R09: 0000000000000000 [ 1988.709573][ C1] R10: 0000000000000001 R11: 00000000000061ed R12: 0000000000000008 [ 1988.717512][ C1] R13: ffffc90003cd6d78 R14: ffffc90003cd6d70 R15: ffffc90003cd0000 [ 1988.725461][ C1] unwind_next_frame+0xcfe/0x20a0 [ 1988.730455][ C1] ? arch_stack_walk+0x73/0x100 [ 1988.735278][ C1] __unwind_start+0x45f/0x7f0 [ 1988.739924][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1988.746060][ C1] arch_stack_walk+0x73/0x100 [ 1988.750709][ C1] ? arch_stack_walk+0x73/0x100 [ 1988.755530][ C1] stack_trace_save+0x8e/0xc0 [ 1988.760178][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1988.765521][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1988.770432][ C1] save_stack+0x160/0x1f0 [ 1988.774731][ C1] ? __pfx_save_stack+0x10/0x10 [ 1988.779552][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1988.784464][ C1] __set_page_owner+0x91/0x550 [ 1988.789197][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1988.794537][ C1] ? bad_range+0x261/0x4c0 [ 1988.798932][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1988.804110][ C1] post_alloc_hook+0x1c0/0x230 [ 1988.808888][ C1] get_page_from_freelist+0x132b/0x38e0 [ 1988.814431][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 1988.819701][ C1] ? rcu_is_watching+0x12/0xc0 [ 1988.824450][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1988.830324][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1988.835247][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1988.841550][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1988.846555][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1988.851902][ C1] ? find_held_lock+0x2b/0x80 [ 1988.856560][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1988.861476][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1988.867341][ C1] ? policy_nodemask+0xea/0x4e0 [ 1988.872163][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1988.876987][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1988.882334][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1988.887679][ C1] shmem_alloc_folio+0x135/0x160 [ 1988.892592][ C1] shmem_alloc_and_add_folio+0x499/0xc20 [ 1988.898208][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1988.904338][ C1] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1988.910207][ C1] shmem_get_folio_gfp+0x67f/0x1600 [ 1988.915376][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1988.920981][ C1] ? filemap_map_pages+0xf58/0x1670 [ 1988.926150][ C1] shmem_fault+0x1fe/0xa30 [ 1988.930547][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1988.935456][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1988.940893][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1988.946336][ C1] __do_fault+0x10d/0x490 [ 1988.950639][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1988.956066][ C1] do_pte_missing+0xf50/0x3ba0 [ 1988.960806][ C1] ? find_held_lock+0x2b/0x80 [ 1988.965454][ C1] ? __handle_mm_fault+0x14fd/0x2a50 [ 1988.970713][ C1] __handle_mm_fault+0x152a/0x2a50 [ 1988.975802][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1988.981234][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1988.986666][ C1] ? find_held_lock+0x2b/0x80 [ 1988.991319][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1988.997366][ C1] handle_mm_fault+0x589/0xd10 [ 1989.002111][ C1] __get_user_pages+0x551/0x34a0 [ 1989.007037][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1989.012392][ C1] populate_vma_page_range+0x267/0x3f0 [ 1989.017844][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1989.023795][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1989.029577][ C1] ? do_mmap+0x69c/0x1210 [ 1989.033879][ C1] __mm_populate+0x1d8/0x380 [ 1989.038440][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1989.043523][ C1] ? up_write+0x1b2/0x520 [ 1989.047823][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1989.052388][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1989.057471][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1989.062382][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1989.067294][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1989.071941][ C1] ? xfd_validate_state+0x61/0x180 [ 1989.077025][ C1] __x64_sys_mmap+0x125/0x190 [ 1989.081676][ C1] do_syscall_64+0xcd/0x4c0 [ 1989.086151][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.092013][ C1] RIP: 0033:0x7fec7c18ebe9 [ 1989.096397][ C1] RSP: 002b:00007fec7cf25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1989.104776][ C1] RAX: ffffffffffffffda RBX: 00007fec7c3b6090 RCX: 00007fec7c18ebe9 [ 1989.112719][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1989.120659][ C1] RBP: 00007fec7c211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1989.128599][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1989.136544][ C1] R13: 00007fec7c3b6128 R14: 00007fec7c3b6090 R15: 00007ffe243412e8 [ 1989.144499][ C1] [ 1989.147496][ C1] rcu: rcu_preempt kthread starved for 10569 jiffies! g97549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1989.158662][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1989.168602][ C1] rcu: RCU grace-period kthread stack dump: [ 1989.174459][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1989.187898][ C1] Call Trace: [ 1989.191151][ C1] [ 1989.194058][ C1] __schedule+0x1190/0x5de0 [ 1989.198546][ C1] ? __pfx___schedule+0x10/0x10 [ 1989.203373][ C1] ? find_held_lock+0x2b/0x80 [ 1989.208024][ C1] ? schedule+0x2d7/0x3a0 [ 1989.212328][ C1] schedule+0xe7/0x3a0 [ 1989.216382][ C1] schedule_timeout+0x123/0x290 [ 1989.221204][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1989.226547][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1989.231805][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1989.237584][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1989.243017][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1989.247750][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1989.253002][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1989.258175][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1989.263078][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1989.267899][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1989.273677][ C1] rcu_gp_kthread+0x270/0x380 [ 1989.278321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1989.283486][ C1] ? rcu_is_watching+0x12/0xc0 [ 1989.288219][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1989.293389][ C1] ? __kthread_parkme+0x19e/0x250 [ 1989.298394][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1989.303559][ C1] kthread+0x3c5/0x780 [ 1989.307597][ C1] ? __pfx_kthread+0x10/0x10 [ 1989.312154][ C1] ? rcu_is_watching+0x12/0xc0 [ 1989.316889][ C1] ? __pfx_kthread+0x10/0x10 [ 1989.321448][ C1] ret_from_fork+0x5d4/0x6f0 [ 1989.326005][ C1] ? __pfx_kthread+0x10/0x10 [ 1989.330562][ C1] ret_from_fork_asm+0x1a/0x30 [ 1989.335301][ C1] [ 1989.338291][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1989.344576][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1989.349752][ C0] NMI backtrace for cpu 0 [ 1989.349763][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1989.349779][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1989.349787][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1989.349807][ C0] Code: 3c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 62 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1989.349819][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 1989.349830][ C0] RAX: 0000000009b30e05 RBX: 0000000000000000 RCX: ffffffff8b92ac29 [ 1989.349839][ C0] RDX: 0000000000000000 RSI: ffffffff8de4e7b1 RDI: ffffffff8c161100 [ 1989.349847][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 1989.349856][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 1989.349864][ C0] R13: ffffffff8e2977c0 R14: ffffffff90aaff90 R15: 0000000000000000 [ 1989.349873][ C0] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 1989.349886][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1989.349895][ C0] CR2: 00007f336ad4d137 CR3: 000000007ab1c000 CR4: 00000000003526f0 [ 1989.349904][ C0] Call Trace: [ 1989.349910][ C0] [ 1989.349914][ C0] default_idle+0x13/0x20 [ 1989.349927][ C0] default_idle_call+0x6d/0xb0 [ 1989.349940][ C0] do_idle+0x391/0x510 [ 1989.349958][ C0] ? __pfx_do_idle+0x10/0x10 [ 1989.349974][ C0] ? do_idle+0x2e5/0x510 [ 1989.349991][ C0] cpu_startup_entry+0x4f/0x60 [ 1989.350007][ C0] rest_init+0x16b/0x2b0 [ 1989.350021][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1989.350036][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1989.350053][ C0] start_kernel+0x3ee/0x4d0 [ 1989.350070][ C0] x86_64_start_reservations+0x18/0x30 [ 1989.350086][ C0] x86_64_start_kernel+0x130/0x190 [ 1989.350101][ C0] common_startup_64+0x13e/0x148 [ 1989.350121][ C0]