last executing test programs: 11.520067419s ago: executing program 1 (id=125): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='0', 0x1) 9.916830673s ago: executing program 1 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.193225335s ago: executing program 0 (id=132): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000000), 0xff7b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x24) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r5, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00', 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000380)={r7, 0x0, 0x2}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @p_u16=&(0x7f0000000280)=0x4}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r8 = syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0) syz_usb_disconnect(r8) syz_usb_connect$midi(0x3, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b010003000000109904211040000102030109021200010107901e000400000001033008a74377fff9ab2188fae39b79588bd8da8f65bda88fc2cae477f5e49aa5fc3ad74dc41f371f4ddcd6cd41b85225edfef23f3845862e6bc1ef4d7899b76f6658543bbaf48fe6ea69136a2586428aedce0e113e3e94b846011118e1ef6d1b289653c7d5b3c4348d7bd7937c75dcc62acb18d3"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x143f}}, {0x0, 0x0}]}) 8.188572601s ago: executing program 1 (id=134): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf2) (fail_nth: 2) 8.162214572s ago: executing program 2 (id=135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) (fail_nth: 2) 7.980212416s ago: executing program 3 (id=136): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(r0, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes/file0\x00', 0x503203, 0x110) mq_open(&(0x7f0000000000)='\x00', 0x800, 0x98, &(0x7f00000000c0)={0x0, 0xb04, 0x4, 0x7f}) write(r1, &(0x7f0000000080)='4', 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 7.132298256s ago: executing program 1 (id=138): unshare(0x42000000) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030109023b000101060038090400800302060008052406000005240001000d240f010d00000001"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000004c0)=0x80, 0x800) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x24000815) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f0000000300)=0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd318005c0600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000c"], 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) listen(r0, 0xa) r4 = dup2(r0, r3) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffd, 0x20000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="180010000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="ce04c272f93ad4db40e26cd3f550bb122758f43eb1dfd597934718d999f03463b2323faf40b7ff8778d11cb2953ae1a8893158ae0a3f78b9153efca7bf058e401ceddf418d043196a5d83561e3eb8b44debfc69e3eb2194ad656c35861ce98a47556a19931b6bf513198ede1760994f372143ea0173605c23a9ff487495245b25454c13e0b9a156935ac3e1c4e934262ea85e48bbaa37de3e40bd3ca9d182a6cf126b94078a010f27b0bc7d9bd48b10eef194241cd59f920ef6121c08283655b88d5b440fa218bfae970a2", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 7.107172645s ago: executing program 2 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) (fail_nth: 2) 7.087894203s ago: executing program 3 (id=140): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='0', 0x1) 6.104348516s ago: executing program 2 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.844559809s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.472771669s ago: executing program 3 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 3.753261735s ago: executing program 0 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {0xfff1, 0xfff1}, {0xf, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.536691208s ago: executing program 3 (id=150): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x7, 0x3, '\x00', &(0x7f0000000100)=0x6}) r1 = signalfd(r0, &(0x7f0000000180)={[0x9]}, 0x8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000001c0)={0x4, 0x6, 0x2b56, 0x6, 0x1c, 0x4f15cfb7, 0x10000}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0xf, 0x10000) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x4, &(0x7f0000000080)="40000ab7") 3.341895476s ago: executing program 0 (id=152): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="2f00ba6000000900", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback, 0x2}], 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x14b5, 0x6, 0x1, 0x80}}}}]}, 0x48}}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r7, 0x100000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69700000616300000005000400000000000900020073797a3000000000240007800400028008000640000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 2.91613116s ago: executing program 4 (id=153): r0 = socket$kcm(0xa, 0x922000000003, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) unshare(0x2c020400) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$MRT_PIM(r1, 0x0, 0xcf, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="800100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000020000000000000000ae832ca5c4de0199470fa5a11e2a929a16618337132818f0baa2326c139c633b8930c452063389c4ce", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x1, 0x1, 0x9, 0x1800, 0xffffffffffffffff, 0x5}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x4000) 2.766407578s ago: executing program 2 (id=154): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='0', 0x1) 2.588749855s ago: executing program 4 (id=155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x440, 0x53) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @remote}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) 2.367737943s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.116297119s ago: executing program 1 (id=157): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002, 0x18}, 0x50) (fail_nth: 2) 1.891687521s ago: executing program 4 (id=158): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.704419487s ago: executing program 2 (id=159): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/connector\x00') r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000400)=0xa7) ppoll(&(0x7f0000000500)=[{r10, 0x200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x69, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xa32, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x29}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f0000000280)={r14, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x19, 0xc, "faf98317e5a114996acc96e3dfd42038bd3fe37d58128b25f5ab60c9e6d680f985881a7beda9d69098c8b534464c5111fd8a0f3500000200", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc06000000000000000000000000000000000200", [0x2002, 0x6]}}) ioctl$BLKRRPART(r13, 0x125f, 0x0) r15 = dup(r12) syz_ublk_setup_queues(r15, r11, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1, 0x0, 0x7e, 0x10) 1.620885879s ago: executing program 4 (id=160): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) open$dir(&(0x7f0000000500)='./file0/file0\x00', 0x410082, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0xe6a41, 0xa1) 1.376727285s ago: executing program 0 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x200, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x4000000) 1.224769549s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 936.382054ms ago: executing program 3 (id=163): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @empty, 0x8001}, 0x1c) r3 = socket$kcm(0x2, 0x5, 0x84) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@loopback, @multicast1, 0x0}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1ffffffffffffe92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x4}, {0x2, 0x1000, 0x0, 0x8}], 0x10, 0x8000000}, 0x96) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, 0x0, 0x0) 468.096069ms ago: executing program 0 (id=164): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x80000, 0x103) uname(&(0x7f0000000180)=""/224) mkdirat(0xffffffffffffff9c, 0x0, 0x172) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff05, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) connect$rds(r3, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) write(r0, &(0x7f0000000000)='3', 0x4e) 179.87814ms ago: executing program 4 (id=165): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x200000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8008804}, 0x4040) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x3f9, @local, 0x8}}, 0x0, 0x0, 0x35, 0x0, "5759e423bcc187b07570f5ee4f0e3004af60ab61fc58dc57b93654cdfb1bc60b39fa9edd5facd61798f0912a232b6dc2055bdc61a219c003a0850f0352c5cd98a806769b14278dfd20f4e9a41abb2663"}, 0xd8) 441.935µs ago: executing program 1 (id=166): syz_io_uring_setup(0x5a8a, &(0x7f0000000780)={0x0, 0xc389, 0x4, 0x1, 0x154}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x200, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x4000000) 0s ago: executing program 2 (id=167): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 72.862079][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 72.862378][ T30] audit: type=1400 audit(1788440477.939:129): avc: denied { mounton } for pid=5590 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.872793][ T30] audit: type=1400 audit(1788440477.959:130): avc: denied { mount } for pid=5590 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.879297][ T5590] cgroup: Unknown subsys name 'net' [ 72.882286][ T30] audit: type=1400 audit(1788440477.959:131): avc: denied { unmount } for pid=5590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.026001][ T5590] cgroup: Unknown subsys name 'cpuset' [ 73.035681][ T5590] cgroup: Unknown subsys name 'rlimit' [ 73.148945][ T30] audit: type=1400 audit(1788440478.229:132): avc: denied { setattr } for pid=5590 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.172819][ T30] audit: type=1400 audit(1788440478.229:133): avc: denied { create } for pid=5590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.172869][ T30] audit: type=1400 audit(1788440478.229:134): avc: denied { write } for pid=5590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.172905][ T30] audit: type=1400 audit(1788440478.229:135): avc: denied { read } for pid=5590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.332225][ T5592] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 73.333943][ T30] audit: type=1400 audit(1788440478.419:136): avc: denied { relabelto } for pid=5592 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 73.336886][ T30] audit: type=1400 audit(1788440478.419:137): avc: denied { write } for pid=5592 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.410255][ T30] audit: type=1400 audit(1788440478.489:138): avc: denied { read } for pid=5590 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.372877][ T5590] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.657618][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.667851][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.668311][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.668314][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.676889][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.678146][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.679737][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.680422][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.680764][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.680917][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.681120][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.682228][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.682425][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.682881][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.683477][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.684385][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.685144][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.687177][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.688147][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.688957][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.689799][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.699295][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.701540][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.703821][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.718788][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.291939][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.292101][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.293328][ T5603] bridge_slave_0: entered allmulticast mode [ 78.295924][ T5603] bridge_slave_0: entered promiscuous mode [ 78.299733][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.299816][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.300131][ T5603] bridge_slave_1: entered allmulticast mode [ 78.301517][ T5603] bridge_slave_1: entered promiscuous mode [ 78.329812][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.333224][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.358958][ T5603] team0: Port device team_slave_0 added [ 78.414300][ T5603] team0: Port device team_slave_1 added [ 78.478350][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.478502][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.478858][ T5604] bridge_slave_0: entered allmulticast mode [ 78.481203][ T5604] bridge_slave_0: entered promiscuous mode [ 78.528098][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.528700][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.528726][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.530218][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.530325][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.530482][ T5604] bridge_slave_1: entered allmulticast mode [ 78.539120][ T5604] bridge_slave_1: entered promiscuous mode [ 78.604973][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.605604][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.605632][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.623518][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.623688][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.623772][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.624767][ T5600] bridge_slave_0: entered allmulticast mode [ 78.627800][ T5600] bridge_slave_0: entered promiscuous mode [ 78.688741][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.688984][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.690101][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.692189][ T5600] bridge_slave_1: entered allmulticast mode [ 78.695019][ T5600] bridge_slave_1: entered promiscuous mode [ 78.720055][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.720207][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.720329][ T5601] bridge_slave_0: entered allmulticast mode [ 78.721785][ T5601] bridge_slave_0: entered promiscuous mode [ 78.725216][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.725290][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.725703][ T5601] bridge_slave_1: entered allmulticast mode [ 78.727187][ T5601] bridge_slave_1: entered promiscuous mode [ 78.773673][ T5607] Bluetooth: hci4: command tx timeout [ 78.773817][ T5607] Bluetooth: hci2: command tx timeout [ 78.773882][ T5607] Bluetooth: hci3: command tx timeout [ 78.773939][ T5607] Bluetooth: hci0: command tx timeout [ 78.775625][ T5616] Bluetooth: hci1: command tx timeout [ 78.801095][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.833837][ T5604] team0: Port device team_slave_0 added [ 78.858349][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.879661][ T5604] team0: Port device team_slave_1 added [ 78.893832][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.894076][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.894155][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.894261][ T5602] bridge_slave_0: entered allmulticast mode [ 78.896569][ T5602] bridge_slave_0: entered promiscuous mode [ 78.900690][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.900810][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.901406][ T5602] bridge_slave_1: entered allmulticast mode [ 78.903380][ T5602] bridge_slave_1: entered promiscuous mode [ 78.923794][ T5603] hsr_slave_0: entered promiscuous mode [ 78.924839][ T5603] hsr_slave_1: entered promiscuous mode [ 78.943823][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.980840][ T5601] team0: Port device team_slave_0 added [ 79.000207][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.000274][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.000894][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.033016][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.048146][ T5601] team0: Port device team_slave_1 added [ 79.060002][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.060031][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.060372][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.071675][ T5600] team0: Port device team_slave_0 added [ 79.075313][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.106827][ T5600] team0: Port device team_slave_1 added [ 79.128952][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.128978][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.130411][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.176201][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.176217][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.176239][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.213645][ T5602] team0: Port device team_slave_0 added [ 79.229620][ T5604] hsr_slave_0: entered promiscuous mode [ 79.230773][ T5604] hsr_slave_1: entered promiscuous mode [ 79.231397][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 79.231497][ T5604] Cannot create hsr debugfs directory [ 79.234596][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.234614][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.234637][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.242267][ T5602] team0: Port device team_slave_1 added [ 79.289491][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.289512][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.289534][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.367551][ T5601] hsr_slave_0: entered promiscuous mode [ 79.373567][ T5601] hsr_slave_1: entered promiscuous mode [ 79.374237][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 79.374255][ T5601] Cannot create hsr debugfs directory [ 79.387160][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.387193][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.387219][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.437948][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.437975][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.438298][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.506229][ T5600] hsr_slave_0: entered promiscuous mode [ 79.507539][ T5600] hsr_slave_1: entered promiscuous mode [ 79.508144][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 79.508162][ T5600] Cannot create hsr debugfs directory [ 79.595244][ T5602] hsr_slave_0: entered promiscuous mode [ 79.596197][ T5602] hsr_slave_1: entered promiscuous mode [ 79.596834][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 79.596853][ T5602] Cannot create hsr debugfs directory [ 79.872994][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.885628][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.887006][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.899208][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.920067][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.929059][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.929906][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.940404][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.038989][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.049640][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.052377][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.069179][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.090600][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.104632][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.107872][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.118811][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.206679][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.217839][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.220574][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.230518][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.244114][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.253660][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.266663][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.277557][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.355427][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.366772][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.380201][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.389615][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.398945][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.399741][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.408675][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.410999][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.422088][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.471153][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.527826][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.527976][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.553386][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.553489][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.573850][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.583374][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.604183][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.616418][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.617201][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.627478][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.641328][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.652117][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.661320][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.735026][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.757746][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.757838][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.813080][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.813202][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.843959][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.852649][ T5616] Bluetooth: hci1: command tx timeout [ 80.852689][ T5616] Bluetooth: hci0: command tx timeout [ 80.852711][ T5616] Bluetooth: hci3: command tx timeout [ 80.852733][ T5616] Bluetooth: hci2: command tx timeout [ 80.852750][ T5616] Bluetooth: hci4: command tx timeout [ 80.919016][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.954878][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.964694][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.964788][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.999012][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.999215][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.063684][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.078756][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.091704][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.091824][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.095522][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.095619][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.175251][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.211664][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.211764][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.292524][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.292617][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.711239][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.838271][ T10] cfg80211: failed to load regulatory.db [ 82.031565][ T5603] veth0_vlan: entered promiscuous mode [ 82.069179][ T5603] veth1_vlan: entered promiscuous mode [ 82.147824][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.296997][ T5603] veth0_macvtap: entered promiscuous mode [ 82.369074][ T5604] veth0_vlan: entered promiscuous mode [ 82.392089][ T5603] veth1_macvtap: entered promiscuous mode [ 82.431939][ T5604] veth1_vlan: entered promiscuous mode [ 82.444190][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.486472][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.513811][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.559110][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.619535][ T5604] veth0_macvtap: entered promiscuous mode [ 82.664339][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.688473][ T5604] veth1_macvtap: entered promiscuous mode [ 82.701281][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.734402][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.734491][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.734519][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.828115][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.907115][ T5600] veth0_vlan: entered promiscuous mode [ 82.915157][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.933341][ T5616] Bluetooth: hci2: command tx timeout [ 82.934552][ T5616] Bluetooth: hci3: command tx timeout [ 82.934576][ T5616] Bluetooth: hci0: command tx timeout [ 82.934595][ T5616] Bluetooth: hci1: command tx timeout [ 82.934751][ T5607] Bluetooth: hci4: command tx timeout [ 82.957278][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.957307][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.975991][ T5600] veth1_vlan: entered promiscuous mode [ 83.033836][ T1531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.033917][ T1531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.033943][ T1531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.036436][ T5602] veth0_vlan: entered promiscuous mode [ 83.068299][ T1531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.068338][ T1531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.116517][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 83.116561][ T30] audit: type=1400 audit(1788440488.199:151): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.0nZS2t/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.147764][ T30] audit: type=1400 audit(1788440488.209:152): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.147814][ T30] audit: type=1400 audit(1788440488.209:153): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.0nZS2t/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.147853][ T30] audit: type=1400 audit(1788440488.209:154): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.147889][ T30] audit: type=1400 audit(1788440488.209:155): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.0nZS2t/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.147925][ T30] audit: type=1400 audit(1788440488.209:156): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.0nZS2t/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.152874][ T30] audit: type=1400 audit(1788440488.239:157): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.156944][ T5602] veth1_vlan: entered promiscuous mode [ 83.183893][ T30] audit: type=1400 audit(1788440488.259:158): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.204182][ T30] audit: type=1400 audit(1788440488.289:159): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="gadgetfs" ino=8284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.220177][ T30] audit: type=1400 audit(1788440488.289:160): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.320005][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.320028][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.321580][ T5601] veth0_vlan: entered promiscuous mode [ 83.328204][ T5600] veth0_macvtap: entered promiscuous mode [ 83.360624][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.381449][ T5600] veth1_macvtap: entered promiscuous mode [ 83.428811][ T5601] veth1_vlan: entered promiscuous mode [ 83.439071][ T5603] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.452433][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.452621][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.464739][ T5602] veth0_macvtap: entered promiscuous mode [ 83.470113][ T5602] veth1_macvtap: entered promiscuous mode [ 83.534221][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.578517][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.609518][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.632672][ T135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.633220][ T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.633260][ T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.633292][ T135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.644679][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.692033][ T5601] veth0_macvtap: entered promiscuous mode [ 83.746608][ T5601] veth1_macvtap: entered promiscuous mode [ 83.756507][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756577][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756623][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756659][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.866314][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.901337][ T5802] FAULT_INJECTION: forcing a failure. [ 83.901337][ T5802] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.917110][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 83.917139][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.917162][ T5802] Call Trace: [ 83.917169][ T5802] [ 83.917176][ T5802] dump_stack_lvl+0x100/0x190 [ 83.917213][ T5802] should_fail_ex.cold+0x5/0xa [ 83.917244][ T5802] _copy_to_user+0x32/0xd0 [ 83.917278][ T5802] simple_read_from_buffer+0xcb/0x170 [ 83.917300][ T5802] proc_fail_nth_read+0x1af/0x230 [ 83.917321][ T5802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.917341][ T5802] ? rw_verify_area+0xce/0x6d0 [ 83.917365][ T5802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.917390][ T5802] vfs_read+0x1e4/0xb40 [ 83.917417][ T5802] ? lock_acquire+0x1d1/0x380 [ 83.917435][ T5802] ? __fget_files+0x34/0x3d0 [ 83.917453][ T5802] ? __pfx_vfs_read+0x10/0x10 [ 83.917479][ T5802] ? find_held_lock+0x2b/0x80 [ 83.917502][ T5802] ? __fget_files+0x215/0x3d0 [ 83.917523][ T5802] ? __fget_files+0x21f/0x3d0 [ 83.917548][ T5802] ksys_read+0x12a/0x250 [ 83.917562][ T5802] ? __pfx_ksys_read+0x10/0x10 [ 83.917583][ T5802] do_syscall_64+0x123/0x790 [ 83.917605][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.917623][ T5802] RIP: 0033:0x7f22de75e98e [ 83.917638][ T5802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.917656][ T5802] RSP: 002b:00007f22df689fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.917677][ T5802] RAX: ffffffffffffffda RBX: 00007f22df68a6c0 RCX: 00007f22de75e98e [ 83.917688][ T5802] RDX: 000000000000000f RSI: 00007f22df68a0a0 RDI: 0000000000000004 [ 83.917698][ T5802] RBP: 00007f22df68a090 R08: 0000000000000000 R09: 0000000000000000 [ 83.917707][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.917717][ T5802] R13: 00007f22dea26038 R14: 00007f22dea25fa0 R15: 00007ffd96211818 [ 83.917740][ T5802] [ 84.081375][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.121230][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.121253][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.162659][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162727][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162758][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162787][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.270188][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.270237][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.290862][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.290908][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.363429][ T5710] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.399863][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.399903][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.457248][ T5796] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.516333][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.516381][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.546779][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 84.550191][ T5710] usb 2-1: New USB device found, idVendor=4ca7, idProduct=8201, bcdDevice= 0.40 [ 84.575104][ T5710] usb 2-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 84.575179][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 84.575201][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 84.586864][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 84.586891][ T5710] usb 2-1: Product: syz [ 84.586923][ T5710] usb 2-1: Manufacturer: syz [ 84.586939][ T5710] usb 2-1: SerialNumber: syz [ 84.639577][ T5800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.647841][ T5796] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.657944][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.657987][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.658020][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.698556][ T5796] usb 4-1: config 0 descriptor?? [ 84.761026][ T5806] Zero length message leads to an empty skb [ 84.786076][ T1531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.786114][ T1531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.020725][ T52] Bluetooth: hci1: command tx timeout [ 85.021379][ T5616] Bluetooth: hci0: command tx timeout [ 85.021390][ T5621] Bluetooth: hci3: command tx timeout [ 85.021418][ T5616] Bluetooth: hci2: command tx timeout [ 85.022047][ T5607] Bluetooth: hci4: command tx timeout [ 86.604612][ T5822] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 86.648004][ T5710] usb 2-1: USB disconnect, device number 2 [ 86.833015][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.905630][ T5796] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 87.054457][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.078355][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.092441][ T25] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.093168][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.093321][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.093353][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.247897][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.247958][ T25] usb 5-1: Product: syz [ 87.257990][ T25] usb 5-1: Manufacturer: syz [ 87.437135][ T5796] usb 4-1: USB disconnect, device number 2 [ 88.265153][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 88.273844][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 88.357366][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 88.357407][ T30] audit: type=1400 audit(1788440493.439:204): avc: denied { create } for pid=5819 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.412785][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 88.412824][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 88.470898][ T30] audit: type=1400 audit(1788440493.549:205): avc: denied { read } for pid=5819 comm="syz.4.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.470977][ T30] audit: type=1400 audit(1788440493.549:206): avc: denied { open } for pid=5819 comm="syz.4.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.477221][ T30] audit: type=1400 audit(1788440493.559:207): avc: denied { ioctl } for pid=5819 comm="syz.4.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.628090][ T30] audit: type=1400 audit(1788440493.709:208): avc: denied { ioctl } for pid=5838 comm="syz.1.13" path="socket:[8101]" dev="sockfs" ino=8101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.640868][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 88.671168][ T30] audit: type=1400 audit(1788440493.749:209): avc: denied { name_bind } for pid=5841 comm="syz.3.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 88.675983][ T30] audit: type=1400 audit(1788440493.759:210): avc: denied { map_write } for pid=5819 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.688372][ T30] audit: type=1400 audit(1788440493.769:211): avc: denied { create } for pid=5841 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.797039][ T30] audit: type=1400 audit(1788440493.879:212): avc: denied { prog_run } for pid=5848 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.828409][ T30] audit: type=1400 audit(1788440493.909:213): avc: denied { create } for pid=5842 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.905483][ T9] usb 5-1: USB disconnect, device number 2 [ 88.998934][ T5850] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 89.003779][ T5850] mmap: syz.0.15 (5850) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.142974][ T5796] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 89.712881][ T5796] usb 2-1: Invalid ep0 maxpacket: 32 [ 89.853088][ T5796] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 90.067645][ T5796] usb 2-1: Invalid ep0 maxpacket: 32 [ 90.077849][ T5796] usb usb2-port1: attempt power cycle [ 90.300893][ T5867] syzkaller0: entered promiscuous mode [ 90.309910][ T5867] syzkaller0: entered allmulticast mode [ 90.324951][ T5867] FAULT_INJECTION: forcing a failure. [ 90.324951][ T5867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.325008][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.3.22 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.325033][ T5867] Tainted: [L]=SOFTLOCKUP [ 90.325039][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.325048][ T5867] Call Trace: [ 90.325053][ T5867] [ 90.325059][ T5867] dump_stack_lvl+0x100/0x190 [ 90.325088][ T5867] should_fail_ex.cold+0x5/0xa [ 90.325114][ T5867] _copy_from_user+0x2e/0xd0 [ 90.325143][ T5867] move_addr_to_kernel+0x65/0x170 [ 90.325170][ T5867] copy_msghdr_from_user+0x3f0/0x4c0 [ 90.325193][ T5867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.325222][ T5867] ? lock_acquire+0x1d1/0x380 [ 90.325242][ T5867] ? get_pid_task+0x2a/0x250 [ 90.325268][ T5867] ___sys_sendmsg+0x106/0x1e0 [ 90.325293][ T5867] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.325316][ T5867] ? get_pid_task+0x106/0x250 [ 90.325353][ T5867] ? find_held_lock+0x2b/0x80 [ 90.325394][ T5867] __sys_sendmsg+0x160/0x210 [ 90.325413][ T5867] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.325446][ T5867] do_syscall_64+0x123/0x790 [ 90.325470][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.325489][ T5867] RIP: 0033:0x7f22de79e159 [ 90.325505][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.325521][ T5867] RSP: 002b:00007f22df68a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.325538][ T5867] RAX: ffffffffffffffda RBX: 00007f22dea25fa0 RCX: 00007f22de79e159 [ 90.325550][ T5867] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 90.325561][ T5867] RBP: 00007f22df68a090 R08: 0000000000000000 R09: 0000000000000000 [ 90.325572][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.325583][ T5867] R13: 00007f22dea26038 R14: 00007f22dea25fa0 R15: 00007ffd96211818 [ 90.325615][ T5867] [ 90.478454][ T5796] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 90.551592][ T5796] usb 2-1: Invalid ep0 maxpacket: 32 [ 90.990541][ T5796] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 91.039322][ T5796] usb 2-1: Invalid ep0 maxpacket: 32 [ 91.049481][ T5796] usb usb2-port1: unable to enumerate USB device [ 91.631048][ T5847] syz.0.15 (5847) used greatest stack depth: 19896 bytes left [ 93.666341][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 93.666387][ T30] audit: type=1400 audit(1788440498.589:240): avc: denied { write } for pid=5883 comm="syz.4.26" name="dlm" dev="configfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.717018][ T30] audit: type=1400 audit(1788440498.799:241): avc: denied { add_name } for pid=5883 comm="syz.4.26" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.758148][ T30] audit: type=1400 audit(1788440498.839:242): avc: denied { create } for pid=5883 comm="syz.4.26" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 93.823014][ T30] audit: type=1400 audit(1788440498.909:243): avc: denied { create } for pid=5883 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.868280][ T30] audit: type=1400 audit(1788440498.949:244): avc: denied { ioctl } for pid=5883 comm="syz.4.26" path="socket:[13616]" dev="sockfs" ino=13616 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.888080][ T5884] syzkaller0: entered promiscuous mode [ 93.888132][ T5884] syzkaller0: entered allmulticast mode [ 94.049903][ T5902] netlink: 'syz.3.30': attribute type 4 has an invalid length. [ 94.049956][ T5902] netlink: 240 bytes leftover after parsing attributes in process `syz.3.30'. [ 94.817017][ T30] audit: type=1400 audit(1788440499.899:245): avc: denied { setopt } for pid=5912 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.984141][ T30] audit: type=1400 audit(1788440500.059:246): avc: denied { watch } for pid=5910 comm="syz.4.32" path="/4/net_prio.prioidx" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.984214][ T30] audit: type=1400 audit(1788440500.059:247): avc: denied { watch_sb watch_reads } for pid=5910 comm="syz.4.32" path="/4/net_prio.prioidx" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.187495][ T30] audit: type=1400 audit(1788440500.269:248): avc: denied { write } for pid=5912 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.300881][ T5911] smpboot: CPU 1 is now offline [ 95.455512][ T9] libceph: connect (1)[c::]:6789 error -101 [ 95.455790][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 95.485599][ T5915] ceph: No mds server is up or the cluster is laggy [ 96.295932][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.514430][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 96.524333][ T9] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 96.524349][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.524371][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.524394][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.590213][ T9] cdc_acm 4-1:1.0: skipping garbage [ 96.890867][ T9] usb 4-1: USB disconnect, device number 3 [ 97.088029][ T5943] ceph: No mds server is up or the cluster is laggy [ 97.096605][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 97.096742][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 97.392525][ T5739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.543587][ T5739] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 97.554728][ T5739] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 97.565274][ T5739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.565323][ T5739] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.565350][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.626764][ T5739] cdc_acm 3-1:1.0: skipping garbage [ 97.837788][ T9] usb 3-1: USB disconnect, device number 2 [ 99.151115][ T30] audit: type=1400 audit(1788440504.229:249): avc: denied { write } for pid=5953 comm="syz.3.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.623266][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.758122][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 99.758249][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 99.772620][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 99.778822][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.796277][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.796309][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.796339][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.830340][ T9] usb 2-1: config 0 descriptor?? [ 99.831969][ T5964] ceph: No mds server is up or the cluster is laggy [ 99.878208][ T9] hub 2-1:0.0: USB hub found [ 100.281709][ T9] hub 2-1:0.0: 29 ports detected [ 100.288496][ T9] hub 2-1:0.0: insufficient power available to use all downstream ports [ 100.334179][ T5739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.503343][ T5739] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 100.513528][ T5739] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 100.513553][ T5739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.513592][ T5739] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.513647][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.568246][ T30] audit: type=1400 audit(1788440505.649:250): avc: denied { mount } for pid=5957 comm="syz.1.44" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 100.699204][ T30] audit: type=1400 audit(1788440505.779:251): avc: denied { write } for pid=5957 comm="syz.1.44" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 100.725207][ T5739] cdc_acm 4-1:1.0: skipping garbage [ 100.938172][ T30] audit: type=1400 audit(1788440506.019:252): avc: denied { bind } for pid=5973 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.961380][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.977971][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.996460][ T30] audit: type=1400 audit(1788440506.079:253): avc: denied { listen } for pid=5973 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.023934][ T30] audit: type=1400 audit(1788440506.109:254): avc: denied { accept } for pid=5973 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.110547][ T5738] usb 4-1: USB disconnect, device number 4 [ 101.304935][ T9] usb 2-1: USB disconnect, device number 7 [ 101.504662][ T30] audit: type=1400 audit(1788440506.589:255): avc: denied { create } for pid=5988 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.544995][ T30] audit: type=1400 audit(1788440506.629:256): avc: denied { setopt } for pid=5988 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.579023][ T5989] netlink: 144 bytes leftover after parsing attributes in process `syz.2.51'. [ 101.590797][ T30] audit: type=1400 audit(1788440506.659:257): avc: denied { write } for pid=5988 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.590836][ T30] audit: type=1400 audit(1788440506.659:258): avc: denied { nlmsg_write } for pid=5988 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.018804][ T6000] o2cb: This node has not been configured. [ 102.018830][ T6000] o2cb: Cluster check failed. Fix errors before retrying. [ 102.018851][ T6000] (syz.3.53,6000,0):user_dlm_register:674 ERROR: status = -22 [ 102.018868][ T6000] (syz.3.53,6000,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 102.232650][ T6003] fuse: Unknown parameter 'grou00000000000000000000' [ 102.276924][ T6001] xt_hashlimit: size too large, truncated to 1048576 [ 102.398318][ T6006] netlink: 'syz.2.54': attribute type 27 has an invalid length. [ 102.892105][ T6006] bond0: (slave bond_slave_1): Releasing backup interface [ 103.654283][ T6023] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 104.554042][ T6033] netlink: 144 bytes leftover after parsing attributes in process `syz.3.64'. [ 106.343600][ T5739] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.569068][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.569111][ T5739] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 106.587227][ T5739] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 106.587258][ T5739] usb 3-1: config 114 has no interface number 0 [ 106.587289][ T5739] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 106.587305][ T5739] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 106.587322][ T5739] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 106.587336][ T5739] usb 3-1: config 114 interface 240 has no altsetting 0 [ 106.848543][ T5739] usb 3-1: string descriptor 0 read error: -22 [ 106.861794][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.898560][ T6038] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.898656][ T6038] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.990323][ T5739] ir_usb 3-1:114.240: IR Dongle converter detected [ 107.126584][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 107.126613][ T30] audit: type=1400 audit(1788440512.209:275): avc: denied { append } for pid=6048 comm="syz.3.68" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.229652][ T5739] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 107.329993][ T30] audit: type=1400 audit(1788440512.409:276): avc: denied { bind } for pid=6048 comm="syz.3.68" laddr=::1 lport=58 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.330043][ T30] audit: type=1400 audit(1788440512.409:277): avc: denied { name_bind } for pid=6048 comm="syz.3.68" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 107.330075][ T30] audit: type=1400 audit(1788440512.409:278): avc: denied { node_bind } for pid=6048 comm="syz.3.68" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 107.428426][ T5710] usb 3-1: USB disconnect, device number 3 [ 107.446019][ T30] audit: type=1400 audit(1788440512.529:279): avc: denied { name_connect } for pid=6048 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.519839][ T5710] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 107.534774][ T5710] ir_usb 3-1:114.240: device disconnected [ 107.625993][ T30] audit: type=1400 audit(1788440512.709:280): avc: denied { create } for pid=6048 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.626039][ T30] audit: type=1400 audit(1788440512.709:281): avc: denied { bind } for pid=6048 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.472098][ T30] audit: type=1400 audit(1788440513.549:282): avc: denied { create } for pid=6062 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.656964][ T30] audit: type=1400 audit(1788440513.729:283): avc: denied { name_bind } for pid=6062 comm="syz.0.71" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 108.657013][ T30] audit: type=1400 audit(1788440513.729:284): avc: denied { node_bind } for pid=6062 comm="syz.0.71" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.756834][ T6080] netlink: 'syz.3.76': attribute type 13 has an invalid length. [ 111.393540][ T5739] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.592738][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 111.598694][ T5739] usb 1-1: New USB device found, idVendor=4ca7, idProduct=8201, bcdDevice= 0.40 [ 111.618220][ T5739] usb 1-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 111.618276][ T5739] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 111.618301][ T5739] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 111.663906][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 111.663934][ T5739] usb 1-1: Product: syz [ 111.663952][ T5739] usb 1-1: Manufacturer: syz [ 111.663963][ T5739] usb 1-1: SerialNumber: syz [ 111.701482][ T6103] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.867858][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.868756][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.518210][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.614897][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.475096][ T6119] FAULT_INJECTION: forcing a failure. [ 113.475096][ T6119] name failslab, interval 1, probability 0, space 0, times 1 [ 113.475140][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.2.84 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.475157][ T6119] Tainted: [L]=SOFTLOCKUP [ 113.475161][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.475169][ T6119] Call Trace: [ 113.475173][ T6119] [ 113.475178][ T6119] dump_stack_lvl+0x100/0x190 [ 113.475201][ T6119] should_fail_ex.cold+0x5/0xa [ 113.475217][ T6119] should_failslab+0xc2/0x120 [ 113.475231][ T6119] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.475243][ T6119] ? do_getname+0x35/0x390 [ 113.475261][ T6119] do_getname+0x35/0x390 [ 113.475276][ T6119] do_sys_openat2+0xc7/0x1e0 [ 113.475291][ T6119] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.475305][ T6119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.475320][ T6119] ? __fget_files+0x21f/0x3d0 [ 113.475335][ T6119] __x64_sys_openat+0x12d/0x210 [ 113.475350][ T6119] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.475371][ T6119] ? ksys_write+0x1ac/0x250 [ 113.475386][ T6119] do_syscall_64+0x123/0x790 [ 113.475400][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.475412][ T6119] RIP: 0033:0x7f52e495e98e [ 113.475422][ T6119] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.475432][ T6119] RSP: 002b:00007f52e57ffb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.475444][ T6119] RAX: ffffffffffffffda RBX: 00007f52e58006c0 RCX: 00007f52e495e98e [ 113.475451][ T6119] RDX: 0000000000101301 RSI: 00007f52e57ffc00 RDI: ffffffffffffff9c [ 113.475458][ T6119] RBP: 00007f52e57ffc00 R08: 0000000000000000 R09: 0000000000000000 [ 113.475465][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 113.475471][ T6119] R13: 00007f52e4c26038 R14: 00007f52e4c25fa0 R15: 00007fffa543e4a8 [ 113.475486][ T6119] [ 113.694471][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 113.694498][ T30] audit: type=1400 audit(1788440518.529:294): avc: denied { read } for pid=6118 comm="syz.2.84" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.694528][ T30] audit: type=1400 audit(1788440518.529:295): avc: denied { open } for pid=6118 comm="syz.2.84" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 114.334864][ T5739] usb 1-1: USB disconnect, device number 2 [ 115.099080][ T3482] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.108195][ T3482] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.117410][ T3482] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.127106][ T3482] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.489795][ T30] audit: type=1400 audit(1788440520.569:296): avc: denied { name_bind } for pid=6126 comm="syz.3.87" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.638157][ T10] libceph: connect (1)[c::]:6789 error -101 [ 115.638298][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 115.668688][ T6128] ceph: No mds server is up or the cluster is laggy [ 115.721141][ T30] audit: type=1400 audit(1788440520.799:297): avc: denied { create } for pid=6136 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.749825][ T30] audit: type=1400 audit(1788440520.829:298): avc: denied { read append } for pid=6130 comm="syz.0.89" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.749868][ T30] audit: type=1400 audit(1788440520.829:299): avc: denied { open } for pid=6130 comm="syz.0.89" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.833113][ T30] audit: type=1400 audit(1788440520.919:300): avc: denied { read write } for pid=6138 comm="syz.4.91" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.833158][ T30] audit: type=1400 audit(1788440520.919:301): avc: denied { open } for pid=6138 comm="syz.4.91" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.914072][ T6139] binder: 6138:6139 ioctl 4018620d 0 returned -22 [ 115.920697][ T30] audit: type=1400 audit(1788440520.999:302): avc: denied { ioctl } for pid=6138 comm="syz.4.91" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.042819][ T5739] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.220139][ T6142] netlink: NAT attribute has 8 unknown bytes [ 116.245942][ T6142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.293237][ T5739] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 116.304005][ T5739] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 116.304035][ T5739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.304068][ T5739] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.304093][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.365288][ T5739] cdc_acm 4-1:1.0: skipping garbage [ 116.726851][ T5739] usb 4-1: USB disconnect, device number 5 [ 116.742817][ T5606] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 116.817784][ T30] audit: type=1400 audit(1788440521.899:303): avc: denied { mount } for pid=6152 comm="syz.2.95" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 116.872647][ T5606] usb 5-1: device descriptor read/64, error -71 [ 116.951036][ T6153] ceph: No mds server is up or the cluster is laggy [ 116.958781][ T5335] libceph: connect (1)[c::]:6789 error -101 [ 116.958898][ T5335] libceph: mon0 (1)[c::]:6789 connect error [ 117.114967][ T5606] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 117.245695][ T5739] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.257008][ T5606] usb 5-1: device descriptor read/64, error -71 [ 117.325683][ T5335] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.363880][ T5606] usb usb5-port1: attempt power cycle [ 117.423065][ T5739] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 117.433502][ T5739] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 117.433528][ T5739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.433559][ T5739] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.433584][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.487492][ T5739] cdc_acm 2-1:1.0: skipping garbage [ 117.493111][ T5335] usb 3-1: Using ep0 maxpacket: 32 [ 117.504133][ T5335] usb 3-1: New USB device found, idVendor=4ca7, idProduct=8201, bcdDevice= 0.40 [ 117.517930][ T5335] usb 3-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 117.517968][ T5335] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 117.517992][ T5335] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 117.555395][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 117.555428][ T5335] usb 3-1: Product: syz [ 117.555445][ T5335] usb 3-1: Manufacturer: syz [ 117.555456][ T5335] usb 3-1: SerialNumber: syz [ 117.588570][ T6162] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 117.742542][ T5606] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 117.766555][ T5606] usb 5-1: device descriptor read/8, error -71 [ 117.796741][ T5710] usb 2-1: USB disconnect, device number 8 [ 118.014406][ T5606] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 118.023595][ T6164] FAULT_INJECTION: forcing a failure. [ 118.023595][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 118.037291][ T5606] usb 5-1: device descriptor read/8, error -71 [ 118.046380][ T6164] CPU: 0 UID: 0 PID: 6164 Comm: syz.0.97 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.046403][ T6164] Tainted: [L]=SOFTLOCKUP [ 118.046408][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.046418][ T6164] Call Trace: [ 118.046423][ T6164] [ 118.046428][ T6164] dump_stack_lvl+0x100/0x190 [ 118.046453][ T6164] should_fail_ex.cold+0x5/0xa [ 118.046477][ T6164] should_failslab+0xc2/0x120 [ 118.046491][ T6164] kmem_cache_alloc_noprof+0x92/0x6a0 [ 118.046503][ T6164] ? prepare_creds+0x2c/0x950 [ 118.046524][ T6164] prepare_creds+0x2c/0x950 [ 118.046542][ T6164] set_current_groups+0x15/0xd0 [ 118.046559][ T6164] __do_sys_setgroups+0x3e2/0x4f0 [ 118.046577][ T6164] do_syscall_64+0x123/0x790 [ 118.046592][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.046604][ T6164] RIP: 0033:0x7febc0d9e159 [ 118.046618][ T6164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.046628][ T6164] RSP: 002b:00007febc1c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 118.046640][ T6164] RAX: ffffffffffffffda RBX: 00007febc1025fa0 RCX: 00007febc0d9e159 [ 118.046648][ T6164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.046654][ T6164] RBP: 00007febc1c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 118.046661][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.046668][ T6164] R13: 00007febc1026038 R14: 00007febc1025fa0 R15: 00007ffd96e436d8 [ 118.046683][ T6164] [ 118.143307][ T5606] usb usb5-port1: unable to enumerate USB device [ 118.678903][ T5335] usb 3-1: USB disconnect, device number 4 [ 118.748139][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 118.748165][ T30] audit: type=1400 audit(1788440523.829:319): avc: denied { watch_mount watch_reads } for pid=6180 comm="syz.0.103" path="/19" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.794563][ T30] audit: type=1400 audit(1788440523.879:320): avc: denied { watch } for pid=6180 comm="syz.0.103" path="/19" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.843478][ T5606] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.859106][ T6183] sysfs: Unknown parameter '0000156' [ 118.890649][ T6183] Invalid option length (1047276) for dns_resolver key [ 118.901580][ T30] audit: type=1400 audit(1788440523.989:321): avc: denied { setopt } for pid=6180 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.963687][ T30] audit: type=1400 audit(1788440524.049:322): avc: denied { read write } for pid=6180 comm="syz.0.103" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 118.989492][ T30] audit: type=1400 audit(1788440524.079:323): avc: denied { open } for pid=6180 comm="syz.0.103" path="/19/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 119.013434][ T5606] usb 4-1: Using ep0 maxpacket: 32 [ 119.019052][ T5606] usb 4-1: New USB device found, idVendor=4ca7, idProduct=8201, bcdDevice= 0.40 [ 119.029311][ T5606] usb 4-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 119.029349][ T5606] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 119.029373][ T5606] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 119.067112][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 119.067139][ T5606] usb 4-1: Product: syz [ 119.067157][ T5606] usb 4-1: Manufacturer: syz [ 119.067167][ T5606] usb 4-1: SerialNumber: syz [ 119.091976][ T6179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.114099][ T30] audit: type=1400 audit(1788440524.189:324): avc: denied { bind } for pid=6180 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.137162][ T30] audit: type=1400 audit(1788440524.219:325): avc: denied { map } for pid=6180 comm="syz.0.103" path="socket:[14556]" dev="sockfs" ino=14556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.137205][ T30] audit: type=1400 audit(1788440524.219:326): avc: denied { read write } for pid=6180 comm="syz.0.103" path="socket:[14556]" dev="sockfs" ino=14556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.213555][ T6186] FAULT_INJECTION: forcing a failure. [ 119.213555][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 119.230002][ T6186] CPU: 0 UID: 0 PID: 6186 Comm: syz.4.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.230025][ T6186] Tainted: [L]=SOFTLOCKUP [ 119.230030][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.230037][ T6186] Call Trace: [ 119.230043][ T6186] [ 119.230049][ T6186] dump_stack_lvl+0x100/0x190 [ 119.230071][ T6186] should_fail_ex.cold+0x5/0xa [ 119.230088][ T6186] should_failslab+0xc2/0x120 [ 119.230102][ T6186] __kmalloc_noprof+0xfc/0x840 [ 119.230115][ T6186] ? __pfx_dynamic_dname+0x10/0x10 [ 119.230126][ T6186] ? tomoyo_encode2+0xfb/0x3c0 [ 119.230141][ T6186] tomoyo_encode2+0xfb/0x3c0 [ 119.230155][ T6186] tomoyo_encode+0x29/0x50 [ 119.230165][ T6186] tomoyo_realpath_from_path+0x18c/0x690 [ 119.230181][ T6186] tomoyo_path_number_perm+0x23c/0x580 [ 119.230197][ T6186] ? tomoyo_path_number_perm+0x22e/0x580 [ 119.230213][ T6186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.230235][ T6186] ? __lock_acquire+0x4c5/0x1ec0 [ 119.230254][ T6186] ? __fget_files+0x34/0x3d0 [ 119.230267][ T6186] ? find_held_lock+0x2b/0x80 [ 119.230282][ T6186] ? hook_file_ioctl_common+0x140/0x440 [ 119.230299][ T6186] ? __fget_files+0x21f/0x3d0 [ 119.230314][ T6186] security_file_ioctl+0xd3/0x230 [ 119.230332][ T6186] __x64_sys_ioctl+0xb7/0x210 [ 119.230351][ T6186] do_syscall_64+0x123/0x790 [ 119.230366][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.230378][ T6186] RIP: 0033:0x7fb49039e159 [ 119.230389][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.230399][ T6186] RSP: 002b:00007fb49128e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.230411][ T6186] RAX: ffffffffffffffda RBX: 00007fb490625fa0 RCX: 00007fb49039e159 [ 119.230425][ T6186] RDX: 0000200000000340 RSI: 00000000000089fb RDI: 0000000000000004 [ 119.230432][ T6186] RBP: 00007fb49128e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.230439][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.230446][ T6186] R13: 00007fb490626038 R14: 00007fb490625fa0 R15: 00007ffe161c83f8 [ 119.230461][ T6186] [ 119.340551][ T6186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.709418][ T30] audit: type=1400 audit(1788440524.789:327): avc: denied { setopt } for pid=6188 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.733328][ T30] audit: type=1400 audit(1788440524.819:328): avc: denied { listen } for pid=6189 comm="syz.4.107" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.420612][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 121.019066][ T5606] usb 4-1: USB disconnect, device number 6 [ 121.073268][ T6212] FAULT_INJECTION: forcing a failure. [ 121.073268][ T6212] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 121.073307][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.2.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.073324][ T6212] Tainted: [L]=SOFTLOCKUP [ 121.073328][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.073335][ T6212] Call Trace: [ 121.073339][ T6212] [ 121.073344][ T6212] dump_stack_lvl+0x100/0x190 [ 121.073365][ T6212] should_fail_ex.cold+0x5/0xa [ 121.073380][ T6212] ? prepare_alloc_pages+0x16d/0x5b0 [ 121.073395][ T6212] should_fail_alloc_page+0xeb/0x140 [ 121.073410][ T6212] prepare_alloc_pages+0x1f0/0x5b0 [ 121.073425][ T6212] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 121.073443][ T6212] ? is_bpf_text_address+0x8a/0x1a0 [ 121.073459][ T6212] ? bpf_ksym_find+0x128/0x1c0 [ 121.073474][ T6212] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 121.073493][ T6212] ? is_bpf_text_address+0x94/0x1a0 [ 121.073506][ T6212] ? kernel_text_address+0x8d/0x100 [ 121.073524][ T6212] ? __kernel_text_address+0xd/0x30 [ 121.073540][ T6212] ? unwind_get_return_address+0x59/0xa0 [ 121.073556][ T6212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.073573][ T6212] ? __lock_acquire+0x4c5/0x1ec0 [ 121.073588][ T6212] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 121.073608][ T6212] ? look_up_lock_class+0x64/0x120 [ 121.073621][ T6212] ? register_lock_class+0x3f/0x7b0 [ 121.073634][ T6212] ? __lock_acquire+0x4c5/0x1ec0 [ 121.073649][ T6212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.073662][ T6212] ? policy_nodemask+0xed/0x4f0 [ 121.073678][ T6212] alloc_pages_mpol+0x201/0x550 [ 121.073693][ T6212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 121.073706][ T6212] ? is_bpf_text_address+0x25/0x1a0 [ 121.073723][ T6212] folio_alloc_mpol_noprof+0x36/0x260 [ 121.073740][ T6212] shmem_alloc_folio+0x135/0x160 [ 121.073755][ T6212] shmem_alloc_and_add_folio+0x371/0xd40 [ 121.073774][ T6212] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 121.073797][ T6212] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 121.073813][ T6212] ? __lock_acquire+0x4c5/0x1ec0 [ 121.073826][ T6212] shmem_get_folio_gfp+0x75b/0x1980 [ 121.073845][ T6212] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 121.073862][ T6212] ? __lock_acquire+0x4c5/0x1ec0 [ 121.073875][ T6212] shmem_write_begin+0x1a4/0x420 [ 121.073892][ T6212] ? __pfx_shmem_write_begin+0x10/0x10 [ 121.073907][ T6212] ? reacquire_held_locks+0xdd/0x1f0 [ 121.073919][ T6212] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 121.073939][ T6212] generic_perform_write+0x292/0xa40 [ 121.073952][ T6212] ? __mark_inode_dirty+0x557/0x16e0 [ 121.073973][ T6212] ? __pfx_generic_perform_write+0x10/0x10 [ 121.073987][ T6212] ? mnt_put_write_access_file+0x4e/0x100 [ 121.074001][ T6212] ? file_update_time_flags+0x38c/0x520 [ 121.074019][ T6212] shmem_file_write_iter+0x10e/0x140 [ 121.074031][ T6212] do_iter_readv_writev+0x6f7/0x930 [ 121.074049][ T6212] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 121.074064][ T6212] ? lock_acquire+0x1d1/0x380 [ 121.074081][ T6212] vfs_writev+0x360/0xdd0 [ 121.074098][ T6212] ? __lock_acquire+0x4c5/0x1ec0 [ 121.074111][ T6212] ? __pfx_vfs_writev+0x10/0x10 [ 121.074126][ T6212] ? find_held_lock+0x2b/0x80 [ 121.074144][ T6212] ? lock_acquire+0x1d1/0x380 [ 121.074154][ T6212] ? __fget_files+0x34/0x3d0 [ 121.074172][ T6212] ? __fget_files+0x21f/0x3d0 [ 121.074188][ T6212] ? do_pwritev+0x1ac/0x270 [ 121.074203][ T6212] do_pwritev+0x1ac/0x270 [ 121.074219][ T6212] ? __pfx_do_pwritev+0x10/0x10 [ 121.074235][ T6212] ? ksys_write+0x1ac/0x250 [ 121.074245][ T6212] ? __pfx_ksys_write+0x10/0x10 [ 121.074257][ T6212] __x64_sys_pwritev2+0xef/0x160 [ 121.074270][ T6212] do_syscall_64+0x123/0x790 [ 121.074284][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.074296][ T6212] RIP: 0033:0x7f52e499e159 [ 121.074306][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.074316][ T6212] RSP: 002b:00007f52e5800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 121.074327][ T6212] RAX: ffffffffffffffda RBX: 00007f52e4c25fa0 RCX: 00007f52e499e159 [ 121.074334][ T6212] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003 [ 121.074341][ T6212] RBP: 00007f52e5800090 R08: 0000000000000000 R09: 0000000000000022 [ 121.074348][ T6212] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 121.074354][ T6212] R13: 00007f52e4c26038 R14: 00007f52e4c25fa0 R15: 00007fffa543e4a8 [ 121.074369][ T6212] [ 121.911238][ T6225] netlink: 144 bytes leftover after parsing attributes in process `syz.0.116'. [ 123.846117][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 123.846160][ T30] audit: type=1400 audit(1788440528.879:338): avc: denied { map } for pid=6240 comm="syz.2.120" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.846194][ T30] audit: type=1400 audit(1788440528.879:339): avc: denied { read write } for pid=6240 comm="syz.2.120" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.143093][ T5606] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 125.072208][ T6236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.172146][ T30] audit: type=1400 audit(1788440530.249:340): avc: denied { mount } for pid=6245 comm="syz.1.119" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 125.200895][ T30] audit: type=1400 audit(1788440530.289:341): avc: denied { search } for pid=6245 comm="syz.1.119" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 125.200951][ T30] audit: type=1400 audit(1788440530.289:342): avc: denied { read } for pid=6245 comm="syz.1.119" name="export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 125.200985][ T30] audit: type=1400 audit(1788440530.289:343): avc: denied { open } for pid=6245 comm="syz.1.119" path="/18/nfsd/export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 125.322761][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.368619][ T6251] FAULT_INJECTION: forcing a failure. [ 125.368619][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 125.368662][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.2.122 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.368693][ T6251] Tainted: [L]=SOFTLOCKUP [ 125.368698][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.368708][ T6251] Call Trace: [ 125.368712][ T6251] [ 125.368717][ T6251] dump_stack_lvl+0x100/0x190 [ 125.368742][ T6251] should_fail_ex.cold+0x5/0xa [ 125.368762][ T6251] should_failslab+0xc2/0x120 [ 125.368779][ T6251] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.368792][ T6251] ? __mt_dup+0x61e/0xce0 [ 125.368812][ T6251] __mt_dup+0x61e/0xce0 [ 125.368830][ T6251] ? __pfx___mt_dup+0x10/0x10 [ 125.368851][ T6251] ? lock_acquire+0x1d1/0x380 [ 125.368864][ T6251] ? get_mm_exe_file+0x25/0x1a0 [ 125.368886][ T6251] dup_mmap+0x3d0/0x2370 [ 125.368904][ T6251] ? do_raw_spin_lock+0x128/0x260 [ 125.368923][ T6251] ? __pfx_dup_mmap+0x10/0x10 [ 125.368938][ T6251] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.368953][ T6251] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.368983][ T6251] ? __lock_acquire+0x4c5/0x1ec0 [ 125.369005][ T6251] ? lock_acquire+0x1d1/0x380 [ 125.369020][ T6251] ? copy_process+0x4806/0x8370 [ 125.369041][ T6251] copy_process+0x4811/0x8370 [ 125.369064][ T6251] ? __pfx_copy_process+0x10/0x10 [ 125.369079][ T6251] ? futex_wake+0x4ea/0x5e0 [ 125.369107][ T6251] kernel_clone+0x176/0x9d0 [ 125.369122][ T6251] ? __pfx_kernel_clone+0x10/0x10 [ 125.369145][ T6251] __do_sys_clone+0xd9/0x120 [ 125.369160][ T6251] ? __pfx___do_sys_clone+0x10/0x10 [ 125.369188][ T6251] do_syscall_64+0x123/0x790 [ 125.369207][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.369221][ T6251] RIP: 0033:0x7f52e499e159 [ 125.369233][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.369245][ T6251] RSP: 002b:00007f52e57fffd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 125.369259][ T6251] RAX: ffffffffffffffda RBX: 00007f52e4c25fa0 RCX: 00007f52e499e159 [ 125.369269][ T6251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.369277][ T6251] RBP: 00007f52e4a35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.369284][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.369292][ T6251] R13: 00007f52e4c26038 R14: 00007f52e4c25fa0 R15: 00007fffa543e4a8 [ 125.369309][ T6251] [ 125.538498][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.709450][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.709479][ T10] usb 4-1: Product: syz [ 125.709496][ T10] usb 4-1: Manufacturer: syz [ 125.709506][ T10] usb 4-1: SerialNumber: syz [ 125.737499][ T30] audit: type=1400 audit(1788440530.819:344): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 125.758357][ T10] usb 4-1: config 0 descriptor?? [ 125.914966][ T6254] FAULT_INJECTION: forcing a failure. [ 125.914966][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 125.915002][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.4.123 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.915019][ T6254] Tainted: [L]=SOFTLOCKUP [ 125.915023][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.915030][ T6254] Call Trace: [ 125.915034][ T6254] [ 125.915039][ T6254] dump_stack_lvl+0x100/0x190 [ 125.915059][ T6254] should_fail_ex.cold+0x5/0xa [ 125.915080][ T6254] should_failslab+0xc2/0x120 [ 125.915099][ T6254] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.915110][ T6254] ? __pfx_map_id_range_down+0x10/0x10 [ 125.915125][ T6254] ? security_inode_alloc+0x3b/0x2c0 [ 125.915145][ T6254] security_inode_alloc+0x3b/0x2c0 [ 125.915161][ T6254] inode_init_always_gfp+0xc6f/0xfb0 [ 125.915177][ T6254] alloc_inode+0x8e/0x250 [ 125.915194][ T6254] new_inode+0x22/0x1c0 [ 125.915211][ T6254] proc_pid_make_inode+0x22/0x160 [ 125.915228][ T6254] proc_pident_instantiate+0x85/0x310 [ 125.915244][ T6254] proc_pident_lookup+0x1e3/0x270 [ 125.915260][ T6254] ? __pfx_proc_tid_base_lookup+0x10/0x10 [ 125.915275][ T6254] lookup_open+0xa79/0x1990 [ 125.915298][ T6254] path_openat+0xa2c/0x2440 [ 125.915313][ T6254] ? __pfx_path_openat+0x10/0x10 [ 125.915333][ T6254] do_file_open+0x20e/0x430 [ 125.915347][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 125.915369][ T6254] ? __pfx_kfree_link+0x10/0x10 [ 125.915388][ T6254] ? _raw_spin_unlock+0x28/0x50 [ 125.915405][ T6254] ? alloc_fd+0x471/0x7a0 [ 125.915422][ T6254] do_sys_openat2+0x10f/0x1e0 [ 125.915436][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.915459][ T6254] __x64_sys_openat+0x12d/0x210 [ 125.915474][ T6254] ? __pfx___x64_sys_openat+0x10/0x10 [ 125.915494][ T6254] do_syscall_64+0x123/0x790 [ 125.915508][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.915520][ T6254] RIP: 0033:0x7fb49035e98e [ 125.915530][ T6254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.915544][ T6254] RSP: 002b:00007fb49128df98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.915555][ T6254] RAX: ffffffffffffffda RBX: 00007fb49128e6c0 RCX: 00007fb49035e98e [ 125.915562][ T6254] RDX: 0000000000000002 RSI: 00007fb49043492b RDI: ffffffffffffff9c [ 125.915569][ T6254] RBP: 00007fb490435024 R08: 0000000000000000 R09: 0000000000000000 [ 125.915576][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.915582][ T6254] R13: 00007fb490626038 R14: 00007fb490625fa0 R15: 00007ffe161c83f8 [ 125.915598][ T6254] [ 126.240620][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.398169][ T30] audit: type=1400 audit(1788440531.379:345): avc: denied { name_connect } for pid=6256 comm="syz.2.126" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 126.620938][ T30] audit: type=1400 audit(1788440531.699:346): avc: denied { read } for pid=6247 comm="syz.3.121" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.620992][ T30] audit: type=1400 audit(1788440531.699:347): avc: denied { open } for pid=6247 comm="syz.3.121" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.928104][ T6268] netlink: 144 bytes leftover after parsing attributes in process `syz.4.127'. [ 127.285583][ T6271] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 128.083057][ T6248] Bluetooth: MGMT ver 1.23 [ 128.270829][ T6248] unsupported nlmsg_type 40 [ 128.292122][ T6248] netlink: 312 bytes leftover after parsing attributes in process `syz.3.121'. [ 128.307703][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 128.922043][ T5710] usb 4-1: USB disconnect, device number 7 [ 129.014334][ T6292] binder: 6283:6292 ioctl 400c620e 200000000380 returned -22 [ 129.015288][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 129.015317][ T30] audit: type=1400 audit(1788440534.089:354): avc: denied { create } for pid=6283 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.015348][ T30] audit: type=1400 audit(1788440534.089:355): avc: denied { write } for pid=6283 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.015371][ T30] audit: type=1400 audit(1788440534.089:356): avc: denied { read } for pid=6283 comm="syz.0.132" lport=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.341328][ T6296] FAULT_INJECTION: forcing a failure. [ 129.341328][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 129.362509][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.375092][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.2.135 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.375113][ T6296] Tainted: [L]=SOFTLOCKUP [ 129.375118][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.375125][ T6296] Call Trace: [ 129.375130][ T6296] [ 129.375135][ T6296] dump_stack_lvl+0x100/0x190 [ 129.375157][ T6296] should_fail_ex.cold+0x5/0xa [ 129.375180][ T6296] should_failslab+0xc2/0x120 [ 129.375195][ T6296] __kmalloc_noprof+0xfc/0x840 [ 129.375206][ T6296] ? tomoyo_encode2+0xfb/0x3c0 [ 129.375221][ T6296] tomoyo_encode2+0xfb/0x3c0 [ 129.375234][ T6296] tomoyo_encode+0x29/0x50 [ 129.375245][ T6296] tomoyo_realpath_from_path+0x18c/0x690 [ 129.375260][ T6296] tomoyo_path_number_perm+0x23c/0x580 [ 129.375276][ T6296] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.375293][ T6296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.375314][ T6296] ? __lock_acquire+0x4c5/0x1ec0 [ 129.375333][ T6296] ? __fget_files+0x34/0x3d0 [ 129.375346][ T6296] ? find_held_lock+0x2b/0x80 [ 129.375361][ T6296] ? hook_file_ioctl_common+0x140/0x440 [ 129.375377][ T6296] ? __fget_files+0x21f/0x3d0 [ 129.375392][ T6296] security_file_ioctl+0xd3/0x230 [ 129.375410][ T6296] __x64_sys_ioctl+0xb7/0x210 [ 129.375429][ T6296] do_syscall_64+0x123/0x790 [ 129.375443][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.375455][ T6296] RIP: 0033:0x7f52e499e159 [ 129.375466][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.375476][ T6296] RSP: 002b:00007f52e5800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.375487][ T6296] RAX: ffffffffffffffda RBX: 00007f52e4c25fa0 RCX: 00007f52e499e159 [ 129.375495][ T6296] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000004 [ 129.375501][ T6296] RBP: 00007f52e5800090 R08: 0000000000000000 R09: 0000000000000000 [ 129.375508][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.375515][ T6296] R13: 00007f52e4c26038 R14: 00007f52e4c25fa0 R15: 00007fffa543e4a8 [ 129.375530][ T6296] [ 129.408301][ T6296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.447085][ T6297] FAULT_INJECTION: forcing a failure. [ 129.447085][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 129.447108][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.1.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.447123][ T6297] Tainted: [L]=SOFTLOCKUP [ 129.447128][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.447135][ T6297] Call Trace: [ 129.447139][ T6297] [ 129.447143][ T6297] dump_stack_lvl+0x100/0x190 [ 129.447163][ T6297] should_fail_ex.cold+0x5/0xa [ 129.447180][ T6297] should_failslab+0xc2/0x120 [ 129.447193][ T6297] __kmalloc_noprof+0xfc/0x840 [ 129.447205][ T6297] ? alloc_pipe_info+0x1ec/0x590 [ 129.447221][ T6297] alloc_pipe_info+0x1ec/0x590 [ 129.447235][ T6297] splice_direct_to_actor+0x78f/0xa30 [ 129.447250][ T6297] ? __lock_acquire+0x4c5/0x1ec0 [ 129.447262][ T6297] ? __pfx_direct_splice_actor+0x10/0x10 [ 129.447275][ T6297] ? lock_acquire+0x1d1/0x380 [ 129.447285][ T6297] ? get_pid_task+0x2a/0x250 [ 129.447301][ T6297] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 129.447316][ T6297] ? lock_acquire+0x1d1/0x380 [ 129.447329][ T6297] do_splice_direct+0x174/0x240 [ 129.447342][ T6297] ? __pfx_do_splice_direct+0x10/0x10 [ 129.447355][ T6297] ? avc_policy_seqno+0x9/0x20 [ 129.447369][ T6297] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 129.447385][ T6297] ? rw_verify_area+0xce/0x6d0 [ 129.447402][ T6297] do_sendfile+0xadc/0xe20 [ 129.447420][ T6297] ? __pfx_do_sendfile+0x10/0x10 [ 129.447435][ T6297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.447449][ T6297] ? __fget_files+0x21f/0x3d0 [ 129.447466][ T6297] __x64_sys_sendfile64+0x1d8/0x220 [ 129.447478][ T6297] ? ksys_write+0x1ac/0x250 [ 129.447488][ T6297] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 129.447505][ T6297] do_syscall_64+0x123/0x790 [ 129.447519][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.447531][ T6297] RIP: 0033:0x7fab7659e159 [ 129.447541][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.447551][ T6297] RSP: 002b:00007fab774dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 129.447563][ T6297] RAX: ffffffffffffffda RBX: 00007fab76825fa0 RCX: 00007fab7659e159 [ 129.447570][ T6297] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 129.447576][ T6297] RBP: 00007fab774dd090 R08: 0000000000000000 R09: 0000000000000000 [ 129.447583][ T6297] R10: 00000000000000f2 R11: 0000000000000246 R12: 0000000000000001 [ 129.447590][ T6297] R13: 00007fab76826038 R14: 00007fab76825fa0 R15: 00007ffe5736b6c8 [ 129.447604][ T6297] [ 129.619938][ T10] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 129.693344][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.693366][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 129.739059][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.739077][ T10] usb 1-1: Product: syz [ 129.739086][ T10] usb 1-1: Manufacturer: syz [ 129.739094][ T10] usb 1-1: SerialNumber: syz [ 129.919906][ T10] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 130.081862][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 130.121857][ T10] input input6: usb_submit_urb failed [ 130.378727][ T10] input: failed to attach handler kbd to device input6, error: -5 [ 130.388564][ T4954] input input6: usb_submit_urb failed [ 130.436881][ T10] scsi host1: usb-storage 1-1:1.0 [ 130.455319][ T4954] input input6: usb_submit_urb failed [ 130.533330][ T10] usb 1-1: USB disconnect, device number 3 [ 130.558182][ T30] audit: type=1400 audit(1788440535.639:357): avc: denied { mount } for pid=6307 comm="syz.2.139" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 130.758298][ T6311] FAULT_INJECTION: forcing a failure. [ 130.758298][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.801091][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.2.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.801113][ T6311] Tainted: [L]=SOFTLOCKUP [ 130.801118][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.801125][ T6311] Call Trace: [ 130.801129][ T6311] [ 130.801134][ T6311] dump_stack_lvl+0x100/0x190 [ 130.801155][ T6311] should_fail_ex.cold+0x5/0xa [ 130.801173][ T6311] _copy_from_user+0x2e/0xd0 [ 130.801191][ T6311] kstrtouint_from_user+0xd6/0x1d0 [ 130.801204][ T6311] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.801220][ T6311] ? lock_acquire+0x1d1/0x380 [ 130.801235][ T6311] proc_fail_nth_write+0x83/0x220 [ 130.801248][ T6311] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.801265][ T6311] vfs_write+0x2aa/0x1050 [ 130.801283][ T6311] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.801296][ T6311] ? lock_acquire+0x1d1/0x380 [ 130.801306][ T6311] ? __fget_files+0x34/0x3d0 [ 130.801321][ T6311] ? __pfx_vfs_write+0x10/0x10 [ 130.801336][ T6311] ? find_held_lock+0x2b/0x80 [ 130.801352][ T6311] ? __fget_files+0x215/0x3d0 [ 130.801367][ T6311] ? __fget_files+0x21f/0x3d0 [ 130.801383][ T6311] ksys_write+0x12a/0x250 [ 130.801393][ T6311] ? __pfx_ksys_write+0x10/0x10 [ 130.801408][ T6311] do_syscall_64+0x123/0x790 [ 130.801423][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.801434][ T6311] RIP: 0033:0x7f52e495e98e [ 130.801444][ T6311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.801454][ T6311] RSP: 002b:00007f52e57fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.801466][ T6311] RAX: ffffffffffffffda RBX: 00007f52e58006c0 RCX: 00007f52e495e98e [ 130.801474][ T6311] RDX: 0000000000000001 RSI: 00007f52e58000a0 RDI: 0000000000000007 [ 130.801480][ T6311] RBP: 00007f52e5800090 R08: 0000000000000000 R09: 0000000000000000 [ 130.801487][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.801494][ T6311] R13: 00007f52e4c26038 R14: 00007f52e4c25fa0 R15: 00007fffa543e4a8 [ 130.801509][ T6311] [ 131.051654][ T6317] netlink: 144 bytes leftover after parsing attributes in process `syz.4.141'. [ 131.127844][ T30] audit: type=1400 audit(1788440536.209:358): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 131.448227][ T5606] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.622604][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 131.790329][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.797204][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.125963][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.375399][ T30] audit: type=1400 audit(1788440537.459:359): avc: denied { read write } for pid=6308 comm="syz.1.138" name="sg0" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.375453][ T30] audit: type=1400 audit(1788440537.459:360): avc: denied { open } for pid=6308 comm="syz.1.138" path="/dev/sg0" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 133.049515][ T5606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.049574][ T5606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.058267][ T5606] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 133.058299][ T5606] usb 2-1: can't read configurations, error -71 [ 133.487813][ T6343] fuse: Bad value for 'user_id' [ 133.493658][ T6343] fuse: Bad value for 'user_id' [ 133.740779][ T6347] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.149'. [ 133.917687][ T30] audit: type=1400 audit(1788440538.999:361): avc: denied { ioctl } for pid=6351 comm="syz.3.150" path="socket:[15177]" dev="sockfs" ino=15177 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.402891][ T5335] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.553070][ T5335] usb 4-1: Using ep0 maxpacket: 16 [ 134.568638][ T5335] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.581132][ T5335] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.581173][ T5335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.581204][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.614646][ T5335] usb 4-1: config 0 descriptor?? [ 134.641090][ T6362] netlink: 144 bytes leftover after parsing attributes in process `syz.4.153'. [ 135.167298][ T6367] dvmrp0: entered allmulticast mode [ 135.196623][ T5335] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 135.767189][ T5335] usb 4-1: USB disconnect, device number 8 [ 135.774863][ T30] audit: type=1400 audit(1788440540.859:362): avc: denied { read write } for pid=6378 comm="syz.2.159" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.805550][ T30] audit: type=1400 audit(1788440540.889:363): avc: denied { open } for pid=6378 comm="syz.2.159" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.925962][ T30] audit: type=1400 audit(1788440541.009:364): avc: denied { ioctl } for pid=6378 comm="syz.2.159" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.968496][ T6381] fuse: Bad value for 'user_id' [ 135.968531][ T6381] fuse: Bad value for 'user_id' [ 136.128166][ T6380] loop7: detected capacity change from 0 to 7 [ 136.329496][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.329620][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.508222][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.508297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.593563][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.593643][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.613473][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.613555][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.634246][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.634320][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.663255][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.663330][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.715008][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.715076][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.741504][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.741570][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.765333][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.765385][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.784313][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.784372][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 136.812409][ T6380] ldm_validate_partition_table(): Disk read failed. [ 136.835046][ T6380] Dev loop7: unable to read RDB block 0 [ 136.847719][ T6380] loop7: unable to read partition table [ 136.847969][ T6380] loop7: partition table beyond EOD, truncated [ 136.848074][ T6380] loop_reread_partitions: partition scan of loop7 (j̖ 8?}X%`ր{֐ȵ4FLQ5) failed (rc=-5) [ 136.926509][ T30] audit: type=1400 audit(1788440542.009:365): avc: denied { node_bind } for pid=6391 comm="syz.3.163" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 137.001983][ T30] audit: type=1400 audit(1788440542.079:366): avc: denied { map } for pid=6391 comm="syz.3.163" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.087707][ T30] audit: type=1400 audit(1788440542.079:367): avc: denied { execute } for pid=6391 comm="syz.3.163" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.207187][ T6383] ldm_validate_partition_table(): Disk read failed. [ 137.216891][ T6383] Dev loop7: unable to read RDB block 0 [ 137.225333][ T6383] loop7: unable to read partition table [ 137.225464][ T6383] loop7: partition table beyond EOD, truncated [ 242.352405][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 242.359472][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6217/1:b..l [ 242.367368][ C0] rcu: (detected by 0, t=10502 jiffies, g=22865, q=865 ncpus=1) [ 242.375067][ C0] task:syz.1.113 state:R running task stack:22984 pid:6217 tgid:6217 ppid:5604 task_flags:0x40064c flags:0x00080001 [ 242.388631][ C0] Call Trace: [ 242.391899][ C0] [ 242.394811][ C0] __schedule+0x1259/0x6920 [ 242.399302][ C0] ? irqentry_exit+0x24d/0xa10 [ 242.404057][ C0] ? __pfx___schedule+0x10/0x10 [ 242.408890][ C0] ? rcu_is_watching+0x13/0xc0 [ 242.413642][ C0] preempt_schedule_irq+0x4e/0x90 [ 242.418651][ C0] irqentry_exit+0x205/0xa10 [ 242.423234][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.429198][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 242.434379][ C0] Code: 05 4f cd a4 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e da 5d 0f 0f 82 c9 02 00 00 8b 35 fe 0b 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed cc a4 12 0f 85 09 03 00 00 48 83 c4 [ 242.453979][ C0] RSP: 0018:ffffc90004e26ea8 EFLAGS: 00000206 [ 242.460060][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 242.468048][ C0] RDX: 0000000000000000 RSI: ffffffff8e3c4c52 RDI: ffffffff8c620e80 [ 242.476022][ C0] RBP: ffffffff8edec060 R08: 00000000ef9d33e4 R09: 0000000000000007 [ 242.484014][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 242.491989][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.499982][ C0] ? unwind_next_frame+0x3be/0x2090 [ 242.505167][ C0] ? unwind_next_frame+0x3be/0x2090 [ 242.510351][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 242.516520][ C0] unwind_next_frame+0xd1/0x2090 [ 242.521448][ C0] ? unwind_next_frame+0xbd/0x2090 [ 242.526548][ C0] ? do_exit+0x951/0x2ae0 [ 242.530888][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 242.537041][ C0] arch_stack_walk+0x94/0xf0 [ 242.541630][ C0] ? do_exit+0x951/0x2ae0 [ 242.545973][ C0] stack_trace_save+0x8e/0xc0 [ 242.550643][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 242.556279][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 242.561215][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.567055][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.572298][ C0] save_stack+0x162/0x1e0 [ 242.576652][ C0] ? __pfx_save_stack+0x10/0x10 [ 242.581523][ C0] ? free_unref_folios+0xa4a/0x1790 [ 242.586754][ C0] ? folios_put_refs+0x585/0xaa0 [ 242.591726][ C0] ? shmem_undo_range+0x5e5/0x1570 [ 242.596893][ C0] ? shmem_evict_inode+0x3b1/0xca0 [ 242.602041][ C0] ? evict+0x3c2/0xad0 [ 242.606115][ C0] ? iput.part.0+0x989/0x1050 [ 242.610790][ C0] ? iput+0x35/0x40 [ 242.614583][ C0] ? dentry_unlink_inode+0x284/0x470 [ 242.619849][ C0] ? dentry_kill+0x25d/0xc20 [ 242.624425][ C0] ? dput.part.0+0xd7/0x240 [ 242.628914][ C0] ? dput+0x1f/0x30 [ 242.632704][ C0] ? __fput+0x519/0xb50 [ 242.636842][ C0] ? task_work_run+0x150/0x240 [ 242.641608][ C0] ? do_exit+0x951/0x2ae0 [ 242.645969][ C0] ? page_ext_put+0x3e/0xd0 [ 242.650460][ C0] __reset_page_owner+0x84/0x190 [ 242.655388][ C0] free_unref_folios+0xa4a/0x1790 [ 242.660405][ C0] ? folios_put_refs+0x51d/0xaa0 [ 242.665881][ C0] ? folios_put_refs+0x51d/0xaa0 [ 242.670863][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.676668][ C0] folios_put_refs+0x585/0xaa0 [ 242.681427][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 242.686779][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 242.693111][ C0] shmem_undo_range+0x5e5/0x1570 [ 242.698049][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 242.703428][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 242.708366][ C0] ? lock_acquire+0x1d1/0x380 [ 242.713027][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 242.718215][ C0] shmem_evict_inode+0x3b1/0xca0 [ 242.723144][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 242.728659][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 242.734714][ C0] ? lock_acquire+0x1d1/0x380 [ 242.739397][ C0] ? find_held_lock+0x2b/0x80 [ 242.744074][ C0] ? evict+0x37e/0xad0 [ 242.748144][ C0] ? evict+0x37e/0xad0 [ 242.752211][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 242.757663][ C0] evict+0x3c2/0xad0 [ 242.761548][ C0] ? fsnotify_grab_connector+0x4b/0x290 [ 242.767105][ C0] ? __pfx_evict+0x10/0x10 [ 242.771531][ C0] ? lock_acquire+0x1d1/0x380 [ 242.776196][ C0] ? iput.part.0+0x981/0x1050 [ 242.780868][ C0] iput.part.0+0x989/0x1050 [ 242.785390][ C0] iput+0x35/0x40 [ 242.789013][ C0] dentry_unlink_inode+0x284/0x470 [ 242.794136][ C0] dentry_kill+0x25d/0xc20 [ 242.798639][ C0] dput.part.0+0xd7/0x240 [ 242.802973][ C0] dput+0x1f/0x30 [ 242.806591][ C0] __fput+0x519/0xb50 [ 242.810562][ C0] task_work_run+0x150/0x240 [ 242.815146][ C0] ? __pfx_task_work_run+0x10/0x10 [ 242.820259][ C0] do_exit+0x951/0x2ae0 [ 242.824403][ C0] ? __pfx_do_exit+0x10/0x10 [ 242.828973][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 242.834947][ C0] do_group_exit+0xd5/0x2a0 [ 242.839454][ C0] get_signal+0x1ec7/0x21e0 [ 242.843950][ C0] ? __pfx_get_signal+0x10/0x10 [ 242.848805][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 242.854345][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 242.860496][ C0] irqentry_exit+0x402/0xa10 [ 242.865086][ C0] asm_exc_page_fault+0x26/0x30 [ 242.869923][ C0] RIP: 0033:0x7fab76453bd7 [ 242.874314][ C0] RSP: 002b:00007fab774be1a0 EFLAGS: 00010206 [ 242.880361][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fab7659e159 [ 242.888334][ C0] RDX: 00007fab774be1c0 RSI: 00007fab774be2f0 RDI: 000000000000000b [ 242.896295][ C0] RBP: 00007fab76635024 R08: 0000000000000000 R09: 0000000000000000 [ 242.904258][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.912257][ C0] R13: 00007fab76826038 R14: 00007fab76825fa0 R15: 00007ffe5736b6c8 [ 242.920246][ C0] [ 242.923265][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g22865 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 242.934261][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 242.944220][ C0] rcu: RCU grace-period kthread stack dump: [ 242.950092][ C0] task:rcu_preempt state:R running task stack:28984 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 242.963561][ C0] Call Trace: [ 242.966836][ C0] [ 242.969756][ C0] __schedule+0x1259/0x6920 [ 242.974250][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 242.979188][ C0] ? __pfx___schedule+0x10/0x10 [ 242.984022][ C0] ? find_held_lock+0x2b/0x80 [ 242.988687][ C0] ? schedule+0x225/0x2c0 [ 242.993032][ C0] schedule+0xdd/0x2c0 [ 242.997103][ C0] schedule_timeout+0x127/0x280 [ 243.001939][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 243.007327][ C0] ? __pfx_process_timeout+0x10/0x10 [ 243.012610][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.018435][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 243.023886][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 243.028647][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 243.034116][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 243.039052][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 243.044277][ C0] ? rcu_is_watching+0x13/0xc0 [ 243.049044][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.054835][ C0] rcu_gp_kthread+0x17a/0x220 [ 243.059509][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.064692][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.070490][ C0] ? __kthread_parkme+0x18f/0x230 [ 243.075506][ C0] ? kthread+0x13a/0x450 [ 243.079736][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.084915][ C0] kthread+0x373/0x450 [ 243.088970][ C0] ? __pfx_kthread+0x10/0x10 [ 243.093561][ C0] ret_from_fork+0x730/0xd60 [ 243.098134][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 243.103226][ C0] ? __switch_to+0x800/0x10f0 [ 243.107888][ C0] ? __pfx_kthread+0x10/0x10 [ 243.112512][ C0] ret_from_fork_asm+0x1a/0x30 [ 243.117282][ C0] [ 243.120285][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 243.126630][ C0] CPU: 0 UID: 0 PID: 6395 Comm: syz.0.164 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.137367][ C0] Tainted: [L]=SOFTLOCKUP [ 243.141675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 243.151878][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 243.157701][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 2a de 14 f6 48 89 df e8 52 34 15 f6 e8 7d f4 41 f6 fb bf 01 00 00 00 32 3b 04 f6 65 48 83 3d f1 a5 b9 08 00 74 06 5b c3 cc cc cc cc [ 243.177289][ C0] RSP: 0018:ffffc90003857c90 EFLAGS: 00000206 [ 243.183337][ C0] RAX: 000000000953c22d RBX: ffff888021fe9280 RCX: 0000000000000000 [ 243.191291][ C0] RDX: 0000000000000001 RSI: ffffffff8e3eb021 RDI: 0000000000000001 [ 243.199279][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 243.207441][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000021 [ 243.215444][ C0] R13: ffff888021fe9680 R14: dffffc0000000000 R15: ffff88802b3b8000 [ 243.223395][ C0] FS: 00007febc1c2a6c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 243.232302][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.238883][ C0] CR2: 0000001b33004ff8 CR3: 000000002ce6b000 CR4: 00000000003526f0 [ 243.246865][ C0] Call Trace: [ 243.250129][ C0] [ 243.253045][ C0] get_signal+0x195a/0x21e0 [ 243.257533][ C0] ? __pfx_get_signal+0x10/0x10 [ 243.262390][ C0] ? do_futex+0x190/0x440 [ 243.266700][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 243.272256][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 243.278401][ C0] exit_to_user_mode_loop+0x139/0x700 [ 243.283755][ C0] ? rcu_is_watching+0x13/0xc0 [ 243.288502][ C0] do_syscall_64+0x661/0x790 [ 243.293072][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.298941][ C0] RIP: 0033:0x7febc0d9e159 [ 243.303338][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.322924][ C0] RSP: 002b:00007febc1c2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.331341][ C0] RAX: fffffffffffffe00 RBX: 00007febc1025fa8 RCX: 00007febc0d9e159 [ 243.339290][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007febc1025fa8 [ 243.347243][ C0] RBP: 00007febc1025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 243.355195][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.363271][ C0] R13: 00007febc1026038 R14: 00007ffd96e435f0 R15: 00007ffd96e436d8 [ 243.371245][ C0] [ 243.553705][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.560078][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=160 sent=0 n=-1 (errno 32: Broken pipe) [ 244.699852][ T30] audit: type=1400 audit(1788440649.699:368): avc: denied { mount } for pid=6399 comm="syz.2.167" name="/" dev="ramfs" ino=15383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 246.190482][ T59] bridge_slave_1: left allmulticast mode [ 246.203472][ T59] bridge_slave_1: left promiscuous mode [ 246.215565][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.230758][ T59] bridge_slave_0: left allmulticast mode [ 246.238288][ T59] bridge_slave_0: left promiscuous mode [ 246.238451][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.518797][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.543663][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.556319][ T59] bond0 (unregistering): Released all slaves [ 246.610272][ T30] audit: type=1400 audit(1788440651.689:369): avc: denied { write } for pid=6411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.794368][ T30] audit: type=1400 audit(1788440651.879:370): avc: denied { write } for pid=6422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.909545][ T59] hsr_slave_0: left promiscuous mode [ 246.918528][ T59] hsr_slave_1: left promiscuous mode [ 246.924741][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.934731][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.060175][ T59] team0 (unregistering): Port device team_slave_1 removed [ 247.078809][ T59] team0 (unregistering): Port device team_slave_0 removed [ 247.181137][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 247.597086][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.674812][ T30] audit: type=1400 audit(1788440652.759:371): avc: denied { write } for pid=6425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.704358][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.787795][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.821523][ T30] audit: type=1400 audit(1788440652.899:372): avc: denied { write } for pid=6436 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.873372][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.935492][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 248.219217][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.329542][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.400873][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.414759][ T30] audit: type=1400 audit(1788440653.499:373): avc: denied { write } for pid=6439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.513536][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.536900][ T30] audit: type=1400 audit(1788440653.619:374): avc: denied { write } for pid=6450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.648099][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 248.866312][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.994580][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.095190][ T30] audit: type=1400 audit(1788440654.179:375): avc: denied { write } for pid=6453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.135883][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.217012][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.258840][ T30] audit: type=1400 audit(1788440654.339:376): avc: denied { write } for pid=6464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.371399][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 249.458030][ T59] bridge_slave_1: left allmulticast mode [ 249.468806][ T59] bridge_slave_1: left promiscuous mode [ 249.468975][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.487349][ T59] bridge_slave_0: left allmulticast mode [ 249.496101][ T59] bridge_slave_0: left promiscuous mode [ 249.501941][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.527441][ T59] bridge_slave_1: left allmulticast mode [ 249.540204][ T59] bridge_slave_1: left promiscuous mode [ 249.546265][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.559538][ T59] bridge_slave_0: left allmulticast mode [ 249.565463][ T59] bridge_slave_0: left promiscuous mode [ 249.571440][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.606324][ T59] dvmrp0: left allmulticast mode [ 249.621936][ T59] bridge_slave_1: left allmulticast mode [ 249.628060][ T59] bridge_slave_1: left promiscuous mode [ 249.628216][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.648991][ T59] bridge_slave_0: left allmulticast mode [ 249.654950][ T59] bridge_slave_0: left promiscuous mode [ 249.655079][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.958368][ T30] audit: type=1400 audit(1788440655.039:377): avc: denied { write } for pid=6467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.108580][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.118145][ T30] audit: type=1400 audit(1788440655.189:378): avc: denied { write } for pid=6478 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.142056][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.153481][ T59] bond0 (unregistering): Released all slaves [ 250.281769][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.297041][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.310211][ T59] bond0 (unregistering): Released all slaves [ 250.399991][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.410166][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.424249][ T59] bond0 (unregistering): Released all slaves [ 250.440184][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 251.033817][ T59] hsr_slave_0: left promiscuous mode [ 251.034201][ T59] hsr_slave_1: left promiscuous mode [ 251.034650][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.034704][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.035201][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.035214][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.080423][ T59] hsr_slave_0: left promiscuous mode [ 251.086394][ T59] hsr_slave_1: left promiscuous mode [ 251.087085][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.087134][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.110081][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.110106][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.141891][ T59] hsr_slave_0: left promiscuous mode [ 251.149014][ T59] hsr_slave_1: left promiscuous mode [ 251.149554][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.149578][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.170512][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.170541][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.226986][ T30] audit: type=1400 audit(1788440656.309:379): avc: denied { write } for pid=6482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.259884][ T59] veth1_macvtap: left promiscuous mode [ 251.266359][ T59] veth0_macvtap: left promiscuous mode [ 251.266438][ T59] veth1_vlan: left promiscuous mode [ 251.266526][ T59] veth0_vlan: left promiscuous mode [ 251.286303][ T59] veth1_macvtap: left promiscuous mode [ 251.294706][ T59] veth0_macvtap: left promiscuous mode [ 251.294790][ T59] veth1_vlan: left promiscuous mode [ 251.294837][ T59] veth0_vlan: left promiscuous mode [ 251.314880][ T59] veth1_macvtap: left promiscuous mode [ 251.314916][ T59] veth0_macvtap: left promiscuous mode [ 251.314975][ T59] veth1_vlan: left promiscuous mode [ 251.315115][ T59] veth0_vlan: left promiscuous mode [ 251.432301][ T30] audit: type=1400 audit(1788440656.509:380): avc: denied { write } for pid=6493 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.716233][ T59] team0 (unregistering): Port device team_slave_1 removed [ 251.731992][ T59] team0 (unregistering): Port device team_slave_0 removed [ 251.937185][ T59] team0 (unregistering): Port device team_slave_1 removed [ 251.954019][ T59] team0 (unregistering): Port device team_slave_0 removed [ 252.149976][ T59] team0 (unregistering): Port device team_slave_1 removed [ 252.167419][ T59] team0 (unregistering): Port device team_slave_0 removed [ 252.263086][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6