last executing test programs: 17.942145033s ago: executing program 0 (id=1270): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(0x0, 0x0, 0xbb42) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xc93c, 0x1, 0x0, 0x340}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xafbc, 0x10000, 0x0, 0x3e6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9572, 0x20, 0x3, 0x37d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee47, 0x400, 0x2, 0x363}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d3d, 0x8001, 0x1, 0x58}}], 0x4, &(0x7f0000001900)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x1, 0xec2, 0x0, &(0x7f0000000900)=@buf_1k="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"}}, &(0x7f0000001980)) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc, 0x0, r2}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$rxrpc(0x21, 0x2, 0x2) r4 = dup(r3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') fcntl$setstatus(r4, 0x4, 0x4000) preadv(r5, &(0x7f0000004080)=[{&(0x7f0000000240)=""/39, 0x27}, {0x0}], 0x2, 0x421a, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RRENAME(r4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) 13.411592925s ago: executing program 1 (id=1280): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12.158999681s ago: executing program 2 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 12.10589294s ago: executing program 1 (id=1282): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000f10000000d00"], 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r3}, 0x38) 11.838211259s ago: executing program 0 (id=1283): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x8) 11.135293551s ago: executing program 1 (id=1284): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket$unix(0x1, 0x5, 0x0) socket(0x27, 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70ad27, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xe, 0x13}, {0x5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 11.133417568s ago: executing program 2 (id=1285): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0xfffffffffffffeeb) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x310, 0x9, 0x0, 0x81, 0x42}, 0xffffffffffffff7c) getsockname$llc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, &(0x7f00000021c0)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 9.738094096s ago: executing program 3 (id=1288): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) 9.559662611s ago: executing program 2 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) fdatasync(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000042) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a00)={0x0, 0x0}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) 8.4344893s ago: executing program 2 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000180)={0xa, @capture={0x0, 0x0, {0x2, 0x2}, 0x4, 0x9}}) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x414640, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) syz_io_uring_setup(0x2000048, &(0x7f0000000500)={0x0, 0xf20f, 0x40, 0x2, 0x1b, 0x0, r2}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000280)={0x9a, 0x5, 0x68, 0x1, 0x408}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff, 0x0, r2}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 7.896818541s ago: executing program 0 (id=1293): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfe, 'c\x00 \x00'}, 0x4, 0x2, {}, 0x20800}) write$binfmt_misc(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000a45000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00007b1000/0x2000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r4 = dup3(r3, r0, 0x80000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000040)=[0x6, 0x7fffffff], 0x2) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x0, 0x2, 0x800}], 0x1, 0xbff, 0x1e, 0x0, 0x48, 0x6e}) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) 7.792153357s ago: executing program 1 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000360)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000420)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000460)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004a0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 7.742013829s ago: executing program 3 (id=1295): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7.478426981s ago: executing program 2 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 7.475377808s ago: executing program 1 (id=1297): openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80941, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 6.478007925s ago: executing program 2 (id=1298): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0xdf132058c1cd5891, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x300000000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x48050) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 6.417199998s ago: executing program 3 (id=1299): syz_usb_connect(0x4, 0x36, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "b005c6c219429b7392ddb219fee43d0b9ef3e297a7d0ae10eeb182bb13703be56c16ba7c6c525e72adb2db06aa1f5c40e46c5db00a77b270c3163b8921f3f2d5d0bb553440480bc88e0fcc7d8ee5e71ec8cebf242fdf4d5110a543db17d7b9005f5a3f276059c4b1"}}]}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffff7a, 0xffffffff, 0x278, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'pimreg\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x2036, 0x3d, 0x1c, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.401311156s ago: executing program 4 (id=1300): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup2(r5, r3) 4.832711163s ago: executing program 4 (id=1301): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x4, 0x40000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 4.637748441s ago: executing program 0 (id=1302): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 3.872218623s ago: executing program 4 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.296970374s ago: executing program 3 (id=1304): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f00, 0x1, 0x1000000, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25ab, 0x20, 0x0, 0x221}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x2, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x2, 0xfffffdff}}], 0x1, 0x0, 0x0) 3.059287563s ago: executing program 0 (id=1305): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)="7e26309cedb2123af445f51b4abb9f4842e5a6fff031050293e9d974786360b53d77d6d9c0f652246b0b00fa75852fd949cff419e47e5b4ce5063f25b4b2588719bc1d1dac0e1c047b214f2364388eba5d6b49b0258fda42219d24eace427214dacc3ec4764f3dd5794166d9696692517c66", 0x72}, {&(0x7f00000003c0)="08e8921bd8cd1d68f754c5a683c82284e0e3cab432e2852ad2938215b416b387fef3d8c470c5c715487ba74265e1b224b7612cdf79cc0667768a3cc6639cd4cd0ccb7465aa12692f72ce550ed3cf81322c2b1617655832ad441708b9d888d89a8125bccc4186cbde3d5f67941e794785362ba3f9b3a997e99a96c58a031d53ef4205d266b9f845f57403c16af517688f5ce4888207134e2f82797fe4c470a92527254f83c10c44492753a5fa399325ec9580feb6eb260105f4e4533a04", 0xbd}, {&(0x7f0000000480)="f1fbc154e2d46702a612e1be1ccc0dceee74dd1a960e76bd78c471774344d969b09079d2257fc614a1d6b933c60b5952c1eba9418a2ffb94", 0x38}, {&(0x7f00000004c0)="158ee1cbea7c9e5268fa18d7390acbe7df", 0x11}, {&(0x7f0000000500)="848bd5457ac727384cda7867c5c8bee82e232671b9a682cc21d1c1e4a57f2116745b839818ab639348662dd9351675ca43a07bd6c655ea125979136cbb149d7fcb1e", 0x42}], 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x80, 0x2, 0x4, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x65, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x5}, {[@ssrr={0x89, 0x3, 0x7b}]}}}}}) getsockname$llc(r3, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) 1.498074023s ago: executing program 4 (id=1306): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES32], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') r2 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13100}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 1.495576205s ago: executing program 3 (id=1307): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(r2, &(0x7f0000000300)="12", 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000009a40)={0x2020}, 0x2020) 1.460324773s ago: executing program 0 (id=1308): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x2120, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffa}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1.1943274s ago: executing program 4 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 372.928909ms ago: executing program 3 (id=1310): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x6}, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) sync() sync() sync() write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x3}, 0x2) quotactl_fd$Q_SYNC(r0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) 250.403983ms ago: executing program 4 (id=1311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munlockall() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xb, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x9) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 0s ago: executing program 1 (id=1312): openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$CLEAR(r2, 0x3b88, 0x0) r3 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xab) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}}) kernel console output (not intermixed with test programs): get link speed/duplex [ 178.153154][ T7581] macsec1: entered promiscuous mode [ 178.163112][ T7581] virt_wifi0: entered promiscuous mode [ 181.187321][ T30] audit: type=1400 audit(3933104057.508:521): avc: denied { setopt } for pid=7605 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.994203][ T5985] net_ratelimit: 62 callbacks suppressed [ 181.994224][ T5985] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 182.096998][ T5985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 182.281883][ T7614] xt_hashlimit: size too large, truncated to 1048576 [ 182.295321][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 182.317880][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 182.441789][ T5985] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 182.455133][ T5985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 182.557182][ T7621] gfs2: gfs2 mount does not exist [ 182.571614][ T5985] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 182.689157][ T5985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 182.851994][ T7234] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 182.875548][ T7234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 183.152207][ T30] audit: type=1400 audit(3933104059.468:522): avc: denied { setopt } for pid=7630 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 184.421288][ T30] audit: type=1800 audit(3933104060.738:523): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.483" name="bus" dev="ramfs" ino=20677 res=0 errno=0 [ 186.655647][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 186.671591][ T7671] netlink: 17 bytes leftover after parsing attributes in process `syz.0.493'. [ 186.682102][ T7671] tipc: Invalid UDP bearer configuration [ 186.682148][ T7671] tipc: Enabling of bearer rejected, failed to enable media [ 187.275860][ T7234] net_ratelimit: 74 callbacks suppressed [ 187.275874][ T7234] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 187.309144][ T7234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.444255][ T5980] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 187.481417][ T5980] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.594178][ T7688] bridge1: entered promiscuous mode [ 187.599419][ T7688] bridge1: entered allmulticast mode [ 187.622575][ T7688] team0: Port device bridge1 added [ 187.691778][ T5980] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 188.216176][ T7688] bridge0: port 3(team0) entered blocking state [ 188.233033][ T7688] bridge0: port 3(team0) entered disabled state [ 188.246610][ T5980] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 188.398886][ T5980] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 188.974786][ T5980] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 188.984618][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.010902][ T7688] team0: entered allmulticast mode [ 189.018831][ T5985] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 189.051636][ T7688] team_slave_0: entered allmulticast mode [ 189.071263][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 189.096367][ T5985] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 189.144321][ T7688] team_slave_1: entered allmulticast mode [ 189.195345][ T7688] team0: entered promiscuous mode [ 189.210020][ T7688] team_slave_0: entered promiscuous mode [ 189.221729][ T7688] team_slave_1: entered promiscuous mode [ 189.237486][ T7688] bridge0: port 3(team0) entered blocking state [ 189.243844][ T7688] bridge0: port 3(team0) entered forwarding state [ 189.261781][ T5710] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 189.376025][ T7707] xt_SECMARK: invalid mode: 2 [ 190.793190][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.829951][ T5710] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 190.859454][ T5710] usb 5-1: can't read configurations, error -71 [ 191.640363][ T30] audit: type=1400 audit(3933104067.468:524): avc: denied { write } for pid=7720 comm="syz.4.507" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.679320][ T30] audit: type=1400 audit(3933104067.998:525): avc: denied { connect } for pid=7726 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.813554][ T30] audit: type=1400 audit(3933104068.128:526): avc: denied { shutdown } for pid=7726 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.852597][ T29] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 192.074506][ T7734] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.510'. [ 192.083849][ T7734] ksmbd: Unknown IPC event: 4, ignore. [ 192.372771][ T6182] net_ratelimit: 41 callbacks suppressed [ 192.372810][ T6182] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.501925][ T7733] syzkaller0: entered promiscuous mode [ 192.508715][ T7733] syzkaller0: entered allmulticast mode [ 192.521607][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.530940][ T660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.554774][ T29] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 192.586198][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.608653][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.631383][ T29] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.652103][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.664634][ T29] usb 2-1: Product: syz [ 192.673498][ T29] usb 2-1: Manufacturer: syz [ 192.691681][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.761458][ T30] audit: type=1400 audit(3933104069.038:527): avc: denied { connect } for pid=7735 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.780818][ T29] usb 2-1: SerialNumber: syz [ 192.788890][ T29] usb 2-1: config 0 descriptor?? [ 192.794141][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.794751][ T30] audit: type=1400 audit(3933104069.038:528): avc: denied { write } for pid=7735 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.799844][ T29] usb 2-1: selecting invalid altsetting 0 [ 192.827656][ T30] audit: type=1400 audit(3933104069.048:529): avc: denied { ioctl } for pid=7735 comm="syz.2.512" path="socket:[20833]" dev="sockfs" ino=20833 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.892796][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.942018][ T6182] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 192.982356][ T6182] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 193.018628][ T7738] bridge0: port 3(team0) entered disabled state [ 193.024981][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.032206][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.046322][ T7723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7723 comm=syz.1.508 [ 193.058789][ T6182] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 193.066531][ T30] audit: type=1400 audit(3933104069.368:530): avc: denied { read } for pid=7722 comm="syz.1.508" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.093930][ T30] audit: type=1400 audit(3933104069.368:531): avc: denied { open } for pid=7722 comm="syz.1.508" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.277361][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.291475][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.314828][ T7746] fuse: Bad value for 'fd' [ 193.360171][ T29] usb 2-1: USB disconnect, device number 8 [ 194.206735][ T7738] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 194.241294][ T30] audit: type=1400 audit(3933104070.558:532): avc: denied { ioctl } for pid=7751 comm="syz.1.518" path="socket:[20877]" dev="sockfs" ino=20877 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.312354][ T7738] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 194.359053][ T7754] netlink: 'syz.0.519': attribute type 5 has an invalid length. [ 194.395867][ T7738] virt_wifi0: left promiscuous mode [ 194.405303][ T7738] macsec1: left promiscuous mode [ 194.465090][ T5985] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.502845][ T5985] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.545025][ T5985] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.575514][ T5985] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.837191][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 194.955455][ T30] audit: type=1400 audit(3933104071.238:533): avc: denied { setopt } for pid=7764 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.073661][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 197.073676][ T30] audit: type=1400 audit(3933104073.398:535): avc: denied { listen } for pid=7789 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.116890][ T30] audit: type=1400 audit(3933104073.398:536): avc: denied { accept } for pid=7789 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.491871][ T6183] net_ratelimit: 95 callbacks suppressed [ 197.491888][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.530217][ T6183] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.652504][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.670590][ T6183] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.791992][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.810700][ T6183] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.932043][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.957841][ T6183] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.081653][ T5985] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 198.116952][ T5985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.544706][ T30] audit: type=1400 audit(3933104074.868:537): avc: denied { read } for pid=7814 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.779250][ T30] audit: type=1400 audit(3933104076.098:538): avc: denied { write } for pid=7846 comm="syz.3.549" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.813477][ T7844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.868027][ T7844] bond4: (slave macvlan2): making interface the new active one [ 199.882846][ T30] audit: type=1400 audit(3933104076.098:539): avc: denied { open } for pid=7846 comm="syz.3.549" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 199.946502][ T7844] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 199.960490][ T30] audit: type=1400 audit(3933104076.098:540): avc: denied { ioctl } for pid=7846 comm="syz.3.549" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.308981][ T7857] mmap: syz.3.552 (7857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.724908][ T7877] syzkaller0: entered promiscuous mode [ 201.738338][ T7877] syzkaller0: entered allmulticast mode [ 201.755865][ T7877] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 201.875734][ T7886] gadgetfs: bound to dummy_udc driver [ 201.950449][ T30] audit: type=1400 audit(3933104078.268:541): avc: denied { setattr } for pid=7888 comm="syz.4.564" name="RDS" dev="sockfs" ino=22633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.122672][ T5710] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 202.142283][ C1] gadgetfs: connected [ 202.147443][ T5710] gadgetfs: disconnected [ 202.393641][ C1] gadgetfs: connected [ 202.409435][ T5710] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 202.418428][ T5710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 202.427508][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.511983][ T7236] net_ratelimit: 112 callbacks suppressed [ 202.512015][ T7236] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.531212][ T7236] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.641652][ T7236] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.649705][ T7236] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.702268][ T7894] gadgetfs: suspended from state 3 [ 202.723154][ T7894] gadgetfs: disconnected [ 202.772080][ T7236] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.799161][ T5710] usb 1-1: can't set config #1, error -71 [ 202.806165][ T5710] usb 1-1: USB disconnect, device number 5 [ 202.827961][ T7236] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.961600][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.975032][ T660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 203.103445][ T7236] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 203.133194][ T7236] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 203.169448][ T30] audit: type=1400 audit(3933104079.488:542): avc: denied { create } for pid=7908 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.205444][ T30] audit: type=1400 audit(3933104079.488:543): avc: denied { bind } for pid=7908 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.226419][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'. [ 203.360135][ T7917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7917 comm=syz.2.571 [ 203.771085][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'. [ 204.312632][ T30] audit: type=1400 audit(3933104080.628:544): avc: denied { write } for pid=7922 comm="syz.2.574" name="usb_gadget" dev="configfs" ino=3437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.380921][ T30] audit: type=1400 audit(3933104080.638:545): avc: denied { write } for pid=7922 comm="syz.2.574" name="functions" dev="configfs" ino=22706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.475166][ T30] audit: type=1400 audit(3933104080.668:546): avc: denied { write } for pid=7922 comm="syz.2.574" name="configs" dev="configfs" ino=22707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.626561][ T30] audit: type=1400 audit(3933104080.668:547): avc: denied { write } for pid=7922 comm="syz.2.574" name="c.1" dev="configfs" ino=22712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.708170][ T30] audit: type=1400 audit(3933104080.668:548): avc: denied { create } for pid=7922 comm="syz.2.574" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 204.757817][ T30] audit: type=1400 audit(3933104080.668:549): avc: denied { write } for pid=7922 comm="syz.2.574" name="c.1" dev="configfs" ino=22712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.981635][ T5710] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 205.181667][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 205.236088][ T5710] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 205.340236][ T5710] usb 3-1: config 0 has no interface number 0 [ 205.392788][ T5710] usb 3-1: config 0 interface 12 has no altsetting 0 [ 205.416659][ T5710] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 205.445117][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.478540][ T5710] usb 3-1: Product: syz [ 205.487042][ T5710] usb 3-1: Manufacturer: syz [ 205.509247][ T5710] usb 3-1: SerialNumber: syz [ 205.546747][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 205.561056][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 205.584243][ T7945] ceph: No mds server is up or the cluster is laggy [ 205.626902][ T5710] usb 3-1: config 0 descriptor?? [ 205.670178][ T30] audit: type=1326 audit(3933104081.988:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.0.583" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c99e019 code=0x7ffc0000 [ 205.696865][ T30] audit: type=1326 audit(3933104082.028:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.0.583" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c99e019 code=0x7ffc0000 [ 206.076208][ T7965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.051599][ T29] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 207.140851][ T660] tipc: Subscription rejected, illegal request [ 207.155039][ T7978] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 207.291595][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 207.298361][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.308972][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.320039][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.329726][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.339447][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.353828][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.603605][ T6183] net_ratelimit: 74 callbacks suppressed [ 207.603663][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.618591][ T6183] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.725087][ T29] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.733178][ T29] usb 2-1: Manufacturer: syz [ 207.741577][ T7234] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.749717][ T7234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.759854][ T29] usb 2-1: config 0 descriptor?? [ 207.871562][ T7234] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.879348][ T7234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.992161][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.011541][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 208.041606][ T29] rc_core: IR keymap rc-hauppauge not found [ 208.047543][ T29] Registered IR keymap rc-empty [ 208.056484][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.081690][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.116464][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 208.128145][ T7234] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 208.128169][ T7234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 208.162954][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 208.203192][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.241841][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.271718][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.301654][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.341616][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.369273][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.391639][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.424942][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.452182][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.501654][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.521995][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 209.086933][ T29] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 209.099067][ T29] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.112412][ T5710] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 209.123550][ T5710] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 209.137086][ T5710] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 209.146127][ T29] usb 2-1: USB disconnect, device number 9 [ 209.166423][ T5710] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 209.214025][ T5710] usb 3-1: USB disconnect, device number 8 [ 209.490308][ T8015] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 209.735585][ T8015] bridge3: entered promiscuous mode [ 209.761873][ T8015] bond4: (slave bridge3): making interface the new active one [ 209.887969][ T8015] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 210.917644][ T8042] fuse: fd is not a fuse device [ 210.973959][ T8045] ip6tnl0: Caught tx_queue_len zero misconfig [ 211.180876][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 211.180892][ T30] audit: type=1400 audit(3933104087.498:607): avc: denied { open } for pid=8044 comm="syz.3.614" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 211.283473][ T8050] syzkaller0: entered promiscuous mode [ 211.314355][ T8050] syzkaller0: entered allmulticast mode [ 211.344756][ T8060] capability: warning: `syz.0.617' uses deprecated v2 capabilities in a way that may be insecure [ 212.606175][ T8098] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.621949][ T5984] net_ratelimit: 99 callbacks suppressed [ 212.621963][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.672176][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.682915][ T8098] bond6: (slave lo): Enslaving as an active interface with an up link [ 212.707688][ T8098] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 212.727126][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.752406][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.762642][ T660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.791578][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 212.857429][ T8107] syzkaller0: entered promiscuous mode [ 212.867202][ T8107] syzkaller0: entered allmulticast mode [ 212.891576][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.913391][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.931565][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.962362][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.001733][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 213.008095][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 213.021002][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.040928][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.079727][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 213.421817][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 213.544533][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.565481][ T29] usb 4-1: config 0 descriptor?? [ 213.573185][ T8093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.340333][ T29] usb 4-1: USB disconnect, device number 6 [ 214.361932][ T5611] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 214.882391][ T30] audit: type=1400 audit(3933104091.208:608): avc: denied { watch_reads } for pid=8130 comm="syz.0.632" path="/154" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.914429][ T8150] syzkaller0: entered promiscuous mode [ 216.929765][ T8150] syzkaller0: entered allmulticast mode [ 217.112201][ T8158] fuse: fd is not a fuse device [ 217.642504][ T12] net_ratelimit: 66 callbacks suppressed [ 217.642517][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.694174][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.821706][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.861590][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.912846][ T8164] team0: left allmulticast mode [ 217.930893][ T8164] team_slave_0: left allmulticast mode [ 217.946385][ T8164] team_slave_1: left allmulticast mode [ 217.953133][ T8164] bridge1: left allmulticast mode [ 217.958187][ T8164] team0: left promiscuous mode [ 217.964395][ T8164] team_slave_0: left promiscuous mode [ 217.972569][ T8164] team_slave_1: left promiscuous mode [ 217.978190][ T8164] bridge1: left promiscuous mode [ 217.985207][ T8164] bridge0: port 3(team0) entered disabled state [ 217.991681][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.006817][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 218.102367][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.115901][ T8164] bridge_slave_0: left allmulticast mode [ 218.123424][ T8164] bridge_slave_0: left promiscuous mode [ 218.132594][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.372565][ T7231] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.647908][ T8164] bridge_slave_1: left allmulticast mode [ 218.661631][ T7231] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.675160][ T8164] bridge_slave_1: left promiscuous mode [ 218.681742][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.681809][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.718303][ T8164] bond0: (slave bond_slave_0): Releasing backup interface [ 218.780962][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.824507][ T8164] bond0: (slave bond_slave_1): Releasing backup interface [ 218.864800][ T8164] team0: Port device team_slave_0 removed [ 218.886685][ T8164] team0: Port device team_slave_1 removed [ 218.899978][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.918284][ T8186] xt_hashlimit: max too large, truncated to 1048576 [ 218.918857][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.925331][ T8186] xt_hashlimit: overflow, rate too high: 0 [ 218.953802][ T8171] team0: No ports can be present during mode change [ 218.989191][ T8178] team0: Device xfrm0 is of different type [ 219.008167][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 219.290427][ T5731] IPVS: starting estimator thread 0... [ 219.391961][ T8204] IPVS: using max 43 ests per chain, 103200 per kthread [ 219.418152][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.655'. [ 219.948063][ T8219] team0: No ports can be present during mode change [ 220.017177][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.436482][ T8242] netlink: 'syz.4.665': attribute type 10 has an invalid length. [ 220.451863][ T8242] bond0: (slave veth2): Enslaving as an active interface with an up link [ 220.462291][ T8244] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 220.471650][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.621560][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 220.628220][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.636782][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 220.647684][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 220.660426][ T29] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 220.669612][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.680231][ T29] usb 4-1: Product: syz [ 220.684742][ T29] usb 4-1: Manufacturer: syz [ 220.689356][ T29] usb 4-1: SerialNumber: syz [ 221.103861][ T30] audit: type=1400 audit(3933104097.418:609): avc: denied { mounton } for pid=8228 comm="syz.3.660" path=2F3130382FE91F7189591E9233614B dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 221.382126][ T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 221.390278][ T29] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 221.456957][ T29] usb 4-1: USB disconnect, device number 7 [ 221.864581][ T8260] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.205805][ T8260] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.648696][ T30] audit: type=1400 audit(3933104098.768:610): avc: denied { load_policy } for pid=8252 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 222.684150][ T136] net_ratelimit: 97 callbacks suppressed [ 222.684174][ T136] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.876551][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.895334][ T8265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.931321][ T8267] netlink: 92 bytes leftover after parsing attributes in process `syz.1.670'. [ 222.931594][ T136] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.961801][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.031635][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.077156][ T8260] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.095732][ T8253] SELinux: invalid class [ 223.101901][ T5984] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.369475][ T8271] Device name not specified. [ 223.369475][ T8271] [ 223.509435][ T5984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 223.534103][ T8253] SELinux: failed to load policy [ 223.591380][ T8260] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.631663][ T136] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.651561][ T136] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 223.684708][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.731586][ T136] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.381586][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 224.401988][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.023519][ T29] usb 4-1: string descriptor 0 read error: -71 [ 225.051398][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.077600][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.096105][ T29] usb 4-1: config 0 descriptor?? [ 225.107882][ T29] usb 4-1: can't set config #0, error -71 [ 225.129399][ T29] usb 4-1: USB disconnect, device number 8 [ 225.141119][ T7229] tipc: Resetting bearer [ 225.154186][ T8281] tipc: Enabling of bearer rejected, already enabled [ 225.223072][ T136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.236837][ T136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.262653][ T136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.281934][ T136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.376138][ T8297] syzkaller0: entered promiscuous mode [ 225.382233][ T8297] syzkaller0: entered allmulticast mode [ 225.460655][ T8304] sch_fq: defrate 4294967295 ignored. [ 225.481625][ T29] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 225.644027][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.666123][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 225.684674][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 225.714887][ T29] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 225.731328][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.750861][ T29] usb 4-1: Product: syz [ 225.763427][ T29] usb 4-1: Manufacturer: syz [ 225.773146][ T29] usb 4-1: SerialNumber: syz [ 225.792525][ T29] usb 4-1: config 0 descriptor?? [ 225.803922][ T8285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.901656][ T29] rc_core: IR keymap rc-streamzap not found [ 225.918055][ T29] Registered IR keymap rc-empty [ 225.968154][ T29] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 226.008083][ T29] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 226.045605][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.067353][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.298368][ T29] usb 4-1: USB disconnect, device number 9 [ 226.935787][ T30] audit: type=1400 audit(3933104103.258:611): avc: denied { write } for pid=8328 comm="syz.3.694" name="functions" dev="configfs" ino=22706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.531008][ T30] audit: type=1400 audit(3933104103.848:612): avc: denied { write } for pid=8328 comm="syz.3.694" name="in_ports" dev="configfs" ino=23875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 227.564629][ T30] audit: type=1400 audit(3933104103.848:613): avc: denied { open } for pid=8328 comm="syz.3.694" path="/111/config/usb_gadget/g1/functions/midi.usb0/in_ports" dev="configfs" ino=23875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 227.728744][ T7229] net_ratelimit: 57 callbacks suppressed [ 227.728755][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.751582][ T7229] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.774337][ T30] audit: type=1400 audit(3933104104.098:614): avc: denied { write } for pid=8328 comm="syz.3.694" name="c.1" dev="configfs" ino=22712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.863044][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.292537][ T30] audit: type=1400 audit(3933104104.608:615): avc: denied { write } for pid=8328 comm="syz.3.694" name="c.1" dev="configfs" ino=22712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 228.344548][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.381732][ T660] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.392050][ T660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.562840][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.574858][ T7229] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.658285][ T8344] nftables ruleset with unbound chain [ 228.665579][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.699'. [ 228.674738][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.699'. [ 228.701096][ T7229] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 228.822890][ T7229] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.932092][ T5850] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 228.983879][ T8351] tipc: Enabled bearer , priority 0 [ 228.992005][ T8351] syzkaller0: entered promiscuous mode [ 228.997524][ T8351] syzkaller0: entered allmulticast mode [ 229.013668][ T8351] tipc: Resetting bearer [ 229.021079][ T8347] tipc: Resetting bearer [ 229.033530][ T8347] tipc: Disabling bearer [ 229.092462][ T30] audit: type=1400 audit(3933104105.418:616): avc: denied { execute } for pid=8348 comm="syz.3.701" path=2F6D656D66643A14A3BB07202864656C6574656429 dev="hugetlbfs" ino=23486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 229.103379][ T5850] usb 1-1: Dual-Role OTG device on HNP port [ 229.146452][ T5850] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 229.155883][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.197190][ T5850] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 229.239453][ T5850] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.750664][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 230.841711][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 231.111573][ T5731] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.271602][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 231.278317][ T5731] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 231.286781][ T5731] usb 4-1: config 0 has no interface number 0 [ 231.293004][ T5731] usb 4-1: config 0 interface 153 has no altsetting 0 [ 231.301443][ T5731] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 231.310605][ T5731] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 231.319029][ T5731] usb 4-1: Product: syz [ 231.323896][ T5731] usb 4-1: Manufacturer: syz [ 231.328491][ T5731] usb 4-1: SerialNumber: syz [ 231.337488][ T5731] usb 4-1: config 0 descriptor?? [ 231.648848][ T30] audit: type=1400 audit(3933104107.968:617): avc: denied { create } for pid=8390 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.825939][ T5731] hub 4-1:0.153: bad descriptor, ignoring hub [ 231.838109][ T5731] hub 4-1:0.153: probe with driver hub failed with error -5 [ 231.932913][ T5731] sierra 4-1:0.153: Sierra USB modem converter detected [ 231.962795][ T5731] usb 4-1: USB disconnect, device number 10 [ 232.565719][ T5731] sierra 4-1:0.153: device disconnected [ 232.780636][ T8411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.788964][ T8411] IPv6: NLM_F_CREATE should be set when creating new route [ 232.796246][ T8411] IPv6: NLM_F_CREATE should be set when creating new route [ 232.905512][ T8411] bridge4: entered promiscuous mode [ 232.913499][ T29] IPVS: starting estimator thread 0... [ 233.112100][ T8414] IPVS: using max 76 ests per chain, 182400 per kthread [ 234.408169][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'. [ 234.432998][ T8423] syzkaller0: entered promiscuous mode [ 234.439520][ T8423] syzkaller0: entered allmulticast mode [ 235.648064][ T8445] netlink: 'syz.2.729': attribute type 28 has an invalid length. [ 235.655906][ T8445] netlink: 'syz.2.729': attribute type 29 has an invalid length. [ 235.663631][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.2.729'. [ 235.885559][ T30] audit: type=1400 audit(3933104112.198:618): avc: denied { read } for pid=8448 comm="syz.0.730" path="socket:[24746]" dev="sockfs" ino=24746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.856733][ T30] audit: type=1400 audit(3933104116.178:619): avc: denied { ioctl } for pid=8474 comm="syz.2.737" path="socket:[24802]" dev="sockfs" ino=24802 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.581074][ T8481] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 240.627670][ T8483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.741'. [ 240.636797][ T8483] netlink: 64 bytes leftover after parsing attributes in process `syz.1.741'. [ 240.698016][ T8481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.724024][ T8483] net_ratelimit: 26 callbacks suppressed [ 240.724039][ T8483] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 240.803603][ T8487] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 241.025024][ T8492] tipc: Started in network mode [ 241.040544][ T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.040889][ T8492] tipc: Node identity 16930f393e67, cluster identity 4711 [ 241.097090][ T8492] tipc: Enabled bearer , priority 0 [ 241.113067][ T8494] syzkaller0: entered promiscuous mode [ 241.123075][ T8494] syzkaller0: entered allmulticast mode [ 241.621580][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 241.628060][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.638318][ T29] usb 4-1: config 0 has no interfaces? [ 241.648993][ T8492] tipc: Resetting bearer [ 241.649377][ T29] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 241.668940][ T8491] tipc: Resetting bearer [ 241.669119][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.694376][ T29] usb 4-1: Product: syz [ 241.703015][ T29] usb 4-1: Manufacturer: syz [ 241.703314][ T8491] tipc: Disabling bearer [ 241.710150][ T29] usb 4-1: SerialNumber: syz [ 241.729410][ T29] usb 4-1: config 0 descriptor?? [ 241.910479][ T8497] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 241.983542][ T8498] erspan1: entered allmulticast mode [ 242.015254][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 242.127695][ T8497] bond5: entered promiscuous mode [ 242.149002][ T8497] bond5: entered allmulticast mode [ 242.168659][ T8497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.398616][ T8509] syzkaller0: entered promiscuous mode [ 242.413103][ T8509] syzkaller0: entered allmulticast mode [ 242.652545][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 242.756432][ T30] audit: type=1400 audit(3933104119.078:620): avc: denied { append } for pid=8520 comm="syz.2.752" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 242.900115][ T8522] kvm: kvm [8520]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff [ 243.053157][ T8521] Set syz1 is full, maxelem 6117 reached [ 243.805888][ T29] usb 4-1: USB disconnect, device number 11 [ 245.869040][ T8537] tipc: Started in network mode [ 245.874044][ T8537] tipc: Node identity 1000001, cluster identity 4369 [ 245.880705][ T8537] tipc: Node number set to 16777217 [ 245.887286][ T8537] tipc: Cannot configure node identity twice [ 245.894050][ T8539] kthread_run failed with err -4 [ 245.931253][ T8544] bond1: entered promiscuous mode [ 245.967423][ T8544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.986158][ T8542] tipc: New replicast peer: 127.0.0.1 [ 246.025030][ T8542] tipc: Enabled bearer , priority 10 [ 246.670998][ T30] audit: type=1400 audit(3933104122.988:621): avc: denied { write } for pid=8578 comm="syz.1.767" name="functions" dev="configfs" ino=22706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.688325][ T30] audit: type=1400 audit(3933104123.058:622): avc: denied { write } for pid=8578 comm="syz.1.767" name="c.1" dev="configfs" ino=22712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.712036][ T30] audit: type=1400 audit(3933104123.058:623): avc: denied { write } for pid=8578 comm="syz.1.767" name="c.1" dev="configfs" ino=22712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.769509][ T8591] fuse: fd is not a fuse device [ 248.014519][ T30] audit: type=1400 audit(3933104124.318:624): avc: denied { write } for pid=8570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.269290][ T30] audit: type=1400 audit(3933104124.588:625): avc: denied { write } for pid=8604 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.416858][ T8610] ip6_vti0: entered promiscuous mode [ 248.417251][ T30] audit: type=1400 audit(3933104124.718:626): avc: denied { watch watch_reads } for pid=8602 comm="syz.0.772" path="pipe:[24348]" dev="pipefs" ino=24348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 248.422438][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 249.263653][ T8619] netlink: 'syz.4.777': attribute type 2 has an invalid length. [ 249.318794][ T30] audit: type=1400 audit(3933104125.638:627): avc: denied { write } for pid=8616 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 250.052620][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.097176][ T30] audit: type=1400 audit(3933104126.418:628): avc: denied { write } for pid=8620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.551929][ T8647] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 251.312957][ T30] audit: type=1400 audit(3933104127.588:629): avc: denied { write } for pid=8651 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.377503][ T30] audit: type=1400 audit(3933104129.698:630): avc: denied { create } for pid=8672 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.422586][ T30] audit: type=1400 audit(3933104129.698:631): avc: denied { bind } for pid=8672 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.468654][ T30] audit: type=1400 audit(3933104129.698:632): avc: denied { listen } for pid=8672 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.642155][ T5731] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 253.821543][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 253.828859][ T5731] usb 4-1: config 0 has no interfaces? [ 253.849885][ T5731] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 253.852974][ T8679] tipc: Resetting bearer [ 253.866264][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.882902][ T5731] usb 4-1: Product: syz [ 253.891970][ T5731] usb 4-1: Manufacturer: syz [ 253.902808][ T5731] usb 4-1: SerialNumber: syz [ 253.923430][ T5731] usb 4-1: config 0 descriptor?? [ 254.231740][ T7231] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.268074][ T7231] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.307054][ T7231] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.317519][ T30] audit: type=1400 audit(3933104130.638:633): avc: denied { read } for pid=8688 comm="syz.1.796" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 254.325313][ T7231] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.582620][ T5731] usb 4-1: USB disconnect, device number 12 [ 256.850378][ T8732] sit1: entered promiscuous mode [ 257.659665][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 257.802625][ T5850] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 258.194420][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 258.204595][ T5850] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.228787][ T5850] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 258.258988][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 258.273391][ T5850] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 258.283235][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.346993][ T5850] usb 4-1: config 0 descriptor?? [ 258.350157][ T8765] syz.1.818: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset= [ 258.354758][ T30] audit: type=1400 audit(3933104134.668:634): avc: denied { append } for pid=8763 comm="syz.1.818" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 258.368043][ T8765] /,mems_allowed=0-1 [ 258.395167][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.1.818 Not tainted syzkaller #0 PREEMPT(full) [ 258.395191][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 258.395202][ T8765] Call Trace: [ 258.395208][ T8765] [ 258.395215][ T8765] dump_stack_lvl+0x100/0x190 [ 258.395244][ T8765] warn_alloc.cold+0x94/0xa8 [ 258.395264][ T8765] ? __pfx_warn_alloc+0x10/0x10 [ 258.395289][ T8765] ? lockdep_unlock+0x5a/0xc0 [ 258.395307][ T8765] ? __lock_acquire+0xd5b/0x1a40 [ 258.395338][ T8765] __vmalloc_node_range_noprof+0x136c/0x1630 [ 258.395371][ T8765] ? trace_contention_end+0x126/0x160 [ 258.395396][ T8765] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 258.395427][ T8765] ? dvb_demux_do_ioctl+0x929/0x1200 [ 258.395458][ T8765] ? find_held_lock+0x2b/0x80 [ 258.395475][ T8765] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.395502][ T8765] ? __pfx___mutex_lock+0x10/0x10 [ 258.395529][ T8765] ? tomoyo_path_number_perm+0x188/0x580 [ 258.395561][ T8765] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 258.395596][ T8765] __vmalloc_node_noprof+0xad/0xf0 [ 258.395621][ T8765] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 258.395652][ T8765] dvb_demux_do_ioctl+0x9e0/0x1200 [ 258.395683][ T8765] ? do_vfs_ioctl+0x226/0x13e0 [ 258.395714][ T8765] dvb_usercopy+0x167/0x340 [ 258.395739][ T8765] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 258.395769][ T8765] ? __pfx_dvb_usercopy+0x10/0x10 [ 258.395805][ T8765] ? selinux_file_ioctl+0x13b/0x290 [ 258.395832][ T8765] ? selinux_file_ioctl+0xb6/0x290 [ 258.395862][ T8765] dvb_demux_ioctl+0x29/0x40 [ 258.395887][ T8765] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 258.395913][ T8765] __x64_sys_ioctl+0x18e/0x210 [ 258.395940][ T8765] do_syscall_64+0x115/0x870 [ 258.395960][ T8765] ? clear_bhb_loop+0x40/0x90 [ 258.395982][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.396001][ T8765] RIP: 0033:0x7f00df19e019 [ 258.396016][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.396033][ T8765] RSP: 002b:00007f00e0005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.396051][ T8765] RAX: ffffffffffffffda RBX: 00007f00df426090 RCX: 00007f00df19e019 [ 258.396063][ T8765] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 258.396074][ T8765] RBP: 00007f00df23500c R08: 0000000000000000 R09: 0000000000000000 [ 258.396084][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.396094][ T8765] R13: 00007f00df426128 R14: 00007f00df426090 R15: 00007fff1399e718 [ 258.396119][ T8765] [ 258.396157][ T8765] Mem-Info: [ 258.652441][ T8765] active_anon:20650 inactive_anon:0 isolated_anon:0 [ 258.652441][ T8765] active_file:0 inactive_file:60027 isolated_file:0 [ 258.652441][ T8765] unevictable:768 dirty:484 writeback:0 [ 258.652441][ T8765] slab_reclaimable:11780 slab_unreclaimable:100933 [ 258.652441][ T8765] mapped:32959 shmem:11721 pagetables:1396 [ 258.652441][ T8765] sec_pagetables:0 bounce:0 [ 258.652441][ T8765] kernel_misc_reclaimable:0 [ 258.652441][ T8765] free:1275977 free_pcp:17846 free_cma:0 [ 258.699008][ T8765] Node 0 active_anon:79936kB inactive_anon:0kB active_file:0kB inactive_file:239856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131676kB dirty:1996kB writeback:0kB shmem:42448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:5392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 258.733966][ T8765] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:16kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 258.767399][ T8765] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.798403][ T8765] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 258.807187][ T8765] Node 0 DMA32 free:1150568kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77336kB inactive_anon:0kB active_file:0kB inactive_file:239856kB unevictable:1536kB writepending:1996kB zspages:0kB present:3129332kB managed:2532108kB mlocked:0kB bounce:0kB free_pcp:72796kB local_pcp:46240kB free_cma:0kB [ 258.840823][ T8765] lowmem_reserve[]: 0 0 0 0 0 [ 258.846826][ T8765] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.876495][ T8765] lowmem_reserve[]: 0 0 0 0 0 [ 258.881817][ T8765] Node 1 Normal free:3937996kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 258.914822][ T8765] lowmem_reserve[]: 0 0 0 0 0 [ 258.920271][ T8765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.936327][ T8765] Node 0 DMA32: 228*4kB (UM) 415*8kB (UME) 576*16kB (UME) 681*32kB (UME) 241*64kB (UME) 101*128kB (UME) 12*256kB (UME) 3*512kB (M) 5*1024kB (UM) 4*2048kB (M) 261*4096kB (UM) = 1150568kB [ 258.955949][ T8765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 258.968272][ T8765] Node 1 Normal: 1*4kB (U) 1*8kB (M) 6*16kB (U) 7*32kB (U) 10*64kB (UM) 2*128kB (UM) 2*256kB (U) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 960*4096kB (M) = 3937996kB [ 258.986103][ T8765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.996820][ T8765] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 259.006521][ T8765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.016501][ T8765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.025989][ T8765] 70956 total pagecache pages [ 259.030805][ T8765] 0 pages in swap cache [ 259.035206][ T8765] Free swap = 124996kB [ 259.043005][ T8765] Total swap = 124996kB [ 259.047546][ T8765] 2097051 pages RAM [ 259.051776][ T8765] 0 pages HighMem/MovableOnly [ 259.056878][ T8765] 432315 pages reserved [ 259.061177][ T8765] 0 pages cma reserved [ 259.505968][ T8774] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 260.673687][ T8774] overlayfs: overlapping lowerdir path [ 260.686770][ T30] audit: type=1400 audit(3933104137.008:635): avc: denied { write } for pid=8783 comm="syz.2.824" path="socket:[25347]" dev="sockfs" ino=25347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.842745][ T5850] usbhid 4-1:0.0: can't add hid device: -71 [ 260.851656][ T5850] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 260.881845][ T5850] usb 4-1: USB disconnect, device number 13 [ 261.810444][ T30] audit: type=1400 audit(3933104137.718:636): avc: denied { append } for pid=8787 comm="syz.2.825" name="pfkey" dev="proc" ino=4026533173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 262.922339][ T8811] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 262.948774][ T8811] CIFS mount error: No usable UNC path provided in device string! [ 262.948774][ T8811] [ 262.961813][ T8811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.431106][ T30] audit: type=1400 audit(3933104141.718:637): avc: denied { write } for pid=8823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.647433][ T30] audit: type=1400 audit(3933104141.948:638): avc: denied { write } for pid=8844 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.271332][ T8856] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 266.337312][ T8856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.440450][ T8859] vlan2: entered promiscuous mode [ 266.488018][ T8859] bond4: entered promiscuous mode [ 266.535353][ T8859] vlan2: entered allmulticast mode [ 266.560332][ T8859] bond4: entered allmulticast mode [ 266.636791][ T8856] bond4: (slave bridge2): making interface the new active one [ 266.773546][ T8856] bridge2: entered promiscuous mode [ 266.850023][ T8856] bridge2: entered allmulticast mode [ 267.079025][ T8856] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 267.225900][ T8866] syzkaller0: entered promiscuous mode [ 267.231660][ T8866] syzkaller0: entered allmulticast mode [ 270.203346][ T8900] overlayfs: failed to clone upperpath [ 270.420225][ T8911] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 270.462729][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 270.486260][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 270.544799][ T8908] ceph: No mds server is up or the cluster is laggy [ 271.525065][ T30] audit: type=1400 audit(3933104147.488:639): avc: denied { write } for pid=8926 comm="syz.1.859" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 271.914783][ T30] audit: type=1400 audit(3933104147.488:640): avc: denied { open } for pid=8926 comm="syz.1.859" path="/171/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 272.491671][ T5850] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 272.673005][ T5850] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 272.694751][ T5850] usb 3-1: config 0 has no interface number 0 [ 272.714094][ T5850] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 272.740009][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.773905][ T5850] usb 3-1: Product: syz [ 272.790167][ T5850] usb 3-1: Manufacturer: syz [ 272.803979][ T5850] usb 3-1: SerialNumber: syz [ 272.830451][ T5850] usb 3-1: config 0 descriptor?? [ 273.067209][ T5850] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 273.129613][ T5850] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 273.153623][ T5850] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 273.701852][ T5850] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 273.718447][ T5850] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 273.747522][ T5850] usb 3-1: USB disconnect, device number 9 [ 273.779147][ T5850] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 273.802096][ T5850] keyspan 3-1:0.133: device disconnected [ 274.023829][ T8971] overlayfs: failed to clone upperpath [ 274.136794][ T5850] libceph: connect (1)[c::]:6789 error -99 [ 274.142937][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 274.148919][ T8973] ceph: No mds server is up or the cluster is laggy [ 274.272060][ T30] audit: type=1400 audit(3933104150.588:641): avc: denied { mount } for pid=8974 comm="syz.4.875" name="/" dev="rpc_pipefs" ino=26768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 274.645358][ T8984] team0: left allmulticast mode [ 274.650318][ T8984] team_slave_0: left allmulticast mode [ 274.657301][ T8984] team_slave_1: left allmulticast mode [ 274.665916][ T8984] team0: left promiscuous mode [ 275.232103][ T8990] ======================================================= [ 275.232103][ T8990] WARNING: The mand mount option has been deprecated and [ 275.232103][ T8990] and is ignored by this kernel. Remove the mand [ 275.232103][ T8990] option from the mount to silence this warning. [ 275.232103][ T8990] ======================================================= [ 275.651270][ T8984] team_slave_0: left promiscuous mode [ 275.677211][ T8984] team_slave_1: left promiscuous mode [ 275.741711][ T8984] bridge0: port 3(team0) entered disabled state [ 275.760024][ T8984] bridge_slave_0: left allmulticast mode [ 275.802135][ T8984] bridge_slave_0: left promiscuous mode [ 275.859145][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.871615][ T30] audit: type=1400 audit(3933104152.198:642): avc: denied { getopt } for pid=9001 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.463927][ T8984] bridge_slave_1: left allmulticast mode [ 276.471993][ T8984] bridge_slave_1: left promiscuous mode [ 276.499684][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.764455][ T8984] bond3: (slave veth0_to_bond): Releasing backup interface [ 276.971630][ T8984] bond0: (slave bond_slave_0): Releasing backup interface [ 276.988423][ T8984] bond0: (slave bond_slave_1): Releasing backup interface [ 277.021805][ T8984] team0: Port device team_slave_0 removed [ 277.162793][ T8984] team0: Port device team_slave_1 removed [ 277.177969][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.201890][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.164786][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.184729][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.283257][ T8984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 278.346246][ T8987] team0: No ports can be present during mode change [ 278.492321][ T9007] team0: Device xfrm0 is of different type [ 278.744262][ T30] audit: type=1400 audit(3933104155.058:643): avc: denied { map } for pid=9038 comm="syz.2.888" path="socket:[26838]" dev="sockfs" ino=26838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 278.849969][ T9028] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 278.866415][ T9046] syzkaller0: entered promiscuous mode [ 278.868308][ T9028] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 278.881533][ T9046] syzkaller0: entered allmulticast mode [ 278.905421][ T30] audit: type=1400 audit(3933104155.218:644): avc: denied { relabelto } for pid=9027 comm="syz.1.887" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 278.958545][ T30] audit: type=1400 audit(3933104155.218:645): avc: denied { associate } for pid=9027 comm="syz.1.887" name="001" dev="devtmpfs" ino=737 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 278.992582][ T30] audit: type=1326 audit(3933104155.278:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.031558][ T30] audit: type=1326 audit(3933104155.298:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.080223][ T30] audit: type=1326 audit(3933104155.308:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.158214][ T30] audit: type=1326 audit(3933104155.308:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.700794][ T30] audit: type=1326 audit(3933104155.428:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.735594][ T30] audit: type=1326 audit(3933104155.428:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.777132][ T9053] syzkaller0: entered promiscuous mode [ 279.789032][ T9053] syzkaller0: entered allmulticast mode [ 279.790957][ T30] audit: type=1326 audit(3933104155.428:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.1.887" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00df19e019 code=0x7ffc0000 [ 279.947940][ T9053] tipc: Started in network mode [ 279.953392][ T9053] tipc: Node identity 4e92e177c1ea, cluster identity 4711 [ 279.969856][ T9053] tipc: Enabled bearer , priority 0 [ 280.004601][ T9052] tipc: Resetting bearer [ 280.040826][ T9052] tipc: Disabling bearer [ 280.161663][ T5703] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 280.898698][ T5703] usb 2-1: config 0 has no interfaces? [ 280.906017][ T5703] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 280.915397][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.923624][ T5703] usb 2-1: Product: syz [ 280.927803][ T5703] usb 2-1: Manufacturer: syz [ 280.935102][ T5703] usb 2-1: SerialNumber: syz [ 280.945315][ T5703] usb 2-1: config 0 descriptor?? [ 281.480493][ T5618] usb 2-1: USB disconnect, device number 10 [ 286.603937][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 286.603968][ T30] audit: type=1400 audit(3933104162.918:661): avc: denied { relabelfrom } for pid=9111 comm="syz.2.909" name="" dev="pipefs" ino=26947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 287.303325][ T9120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.912'. [ 291.250006][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.918'. [ 291.581739][ T30] audit: type=1400 audit(3933104167.868:662): avc: denied { create } for pid=9186 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.836101][ T9209] tipc: Started in network mode [ 292.849582][ T30] audit: type=1400 audit(3933104169.168:663): avc: denied { mounton } for pid=9206 comm="syz.3.927" path="/file0" dev="ramfs" ino=27074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 292.853118][ T9209] tipc: Node identity 76657468115f, cluster identity 4711 [ 292.905694][ T9207] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.929643][ T9209] tipc: Enabled bearer , priority 0 [ 292.972978][ T9207] overlayfs: failed to set xattr on upper [ 293.081575][ T9207] overlayfs: ...falling back to redirect_dir=nofollow. [ 293.139520][ T9207] overlayfs: ...falling back to index=off. [ 293.178610][ T9207] overlayfs: ...falling back to uuid=null. [ 293.751108][ T9207] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 293.799230][ T9207] overlayfs: failed to clone lowerpath [ 293.924162][ T30] audit: type=1400 audit(3933104170.248:664): avc: denied { read } for pid=9218 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.041641][ T5618] tipc: Node number set to 1731884136 [ 295.182909][ T9249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.940'. [ 295.296697][ T9249] netlink: 'syz.1.940': attribute type 15 has an invalid length. [ 295.335070][ T9247] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 295.378320][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 295.395026][ T9247] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 295.499990][ T30] audit: type=1400 audit(3933104171.738:665): avc: denied { append } for pid=9256 comm="syz.2.942" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.538689][ T9247] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 295.742852][ T1040] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.754291][ T9249] netlink: 'syz.1.940': attribute type 15 has an invalid length. [ 295.813660][ T1040] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.832685][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 295.850947][ T9247] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 295.864858][ T1040] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 295.899328][ T1040] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 296.191617][ T5703] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 296.362309][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 296.385449][ T5703] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 296.404733][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.427165][ T5703] usb 3-1: Product: syz [ 296.441829][ T5703] usb 3-1: Manufacturer: syz [ 296.457031][ T5703] usb 3-1: SerialNumber: syz [ 296.487642][ T5703] usb 3-1: config 0 descriptor?? [ 296.716689][ T5703] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 296.744296][ T5703] 00 00 00 00 00 00 00 00 [ 296.764028][ T5703] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 297.447696][ T5618] usb 3-1: USB disconnect, device number 10 [ 297.809043][ T30] audit: type=1400 audit(3933104174.048:666): avc: denied { bind } for pid=9287 comm="syz.1.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.851005][ T9292] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 297.974804][ T9292] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.031537][ T30] audit: type=1400 audit(3933104174.348:667): avc: denied { ioctl } for pid=9299 comm="syz.1.953" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 298.118261][ T9296] gretap3: entered promiscuous mode [ 298.126590][ T9296] bond7: (slave gretap3): making interface the new active one [ 298.144003][ T9296] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 298.209685][ T9298] macvlan2: entered promiscuous mode [ 298.257255][ T9298] macvlan2: entered allmulticast mode [ 298.272767][ T9298] bond7: entered promiscuous mode [ 298.282539][ T9298] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.297819][ T9298] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 298.314832][ T9298] bond7: left promiscuous mode [ 298.417209][ T9307] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 298.441891][ T9307] CIFS mount error: No usable UNC path provided in device string! [ 298.441891][ T9307] [ 298.452157][ T9307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 299.531775][ T5618] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 299.701560][ T5618] usb 2-1: Using ep0 maxpacket: 8 [ 299.711035][ T5618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.721839][ T5618] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.730938][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.741840][ T5618] usb 2-1: config 0 descriptor?? [ 299.763765][ T5618] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 300.013195][ T30] audit: type=1400 audit(3933104176.338:668): avc: denied { ioctl } for pid=9326 comm="syz.1.961" path="socket:[27668]" dev="sockfs" ino=27668 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 300.045922][ T5618] usb 2-1: USB disconnect, device number 11 [ 300.672916][ T30] audit: type=1400 audit(3933104176.988:669): avc: denied { read write } for pid=9344 comm="syz.3.966" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 300.728884][ T30] audit: type=1400 audit(3933104176.988:670): avc: denied { open } for pid=9344 comm="syz.3.966" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 300.804583][ T5731] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 300.816650][ T5731] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.341099][ T30] audit: type=1400 audit(3933104177.658:671): avc: denied { accept } for pid=9357 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 301.391655][ T5731] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 301.662849][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.689252][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.704982][ T5731] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 301.717164][ T5731] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.235811][ T5731] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 302.245172][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 302.253359][ T5731] usb 2-1: Product: syz [ 302.257538][ T5731] usb 2-1: Manufacturer: syz [ 302.268425][ T5731] usb_debug 2-1:1.0: debug converter detected [ 302.284175][ T5731] usb 2-1: debug converter now attached to ttyUSB0 [ 302.518286][ T5618] usb 2-1: USB disconnect, device number 12 [ 302.554593][ T5618] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 302.608570][ T5618] usb_debug 2-1:1.0: device disconnected [ 303.344176][ T9379] netlink: 3 bytes leftover after parsing attributes in process `syz.4.976'. [ 303.962381][ T9387] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 304.689282][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 304.706898][ T9406] warning: `syz.0.983' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 305.797647][ T9420] futex_wake_op: syz.4.986 tries to shift op by 144; fix this program [ 305.818222][ T30] audit: type=1400 audit(3933104182.128:672): avc: denied { setopt } for pid=9415 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 306.393666][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 306.694461][ T9424] bond0 (unregistering): Released all slaves [ 306.811738][ T30] audit: type=1400 audit(3933104183.118:673): avc: denied { setattr } for pid=9423 comm="syz.2.988" path="socket:[27553]" dev="sockfs" ino=27553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 307.198004][ T30] audit: type=1400 audit(3933104183.288:674): avc: denied { bind } for pid=9439 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.244602][ T9435] syzkaller0: entered promiscuous mode [ 307.299139][ T9435] syzkaller0: entered allmulticast mode [ 307.407030][ T9455] Timeout policy `syz1' can only be used by L3 protocol number 28 [ 307.416477][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 307.561222][ T30] audit: type=1804 audit(3933104183.878:675): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.999" name="file0" dev="tmpfs" ino=1239 res=1 errno=0 [ 307.584571][ T9466] uprobe: syz.0.999:9466 failed to unregister, leaking uprobe [ 307.605068][ T30] audit: type=1400 audit(3933104183.928:676): avc: denied { ioctl } for pid=9452 comm="syz.3.995" path="socket:[27908]" dev="sockfs" ino=27908 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.620290][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 307.693877][ T9453] syzkaller0: entered promiscuous mode [ 307.715187][ T9453] syzkaller0: entered allmulticast mode [ 309.674340][ T5703] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 309.841549][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 309.853616][ T5703] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.875821][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.888156][ T5703] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 309.907541][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.928159][ T5703] usb 3-1: config 0 descriptor?? [ 310.268096][ T9498] No such timeout policy "syz1" [ 310.555399][ T5703] usbhid 3-1:0.0: can't add hid device: -71 [ 310.561395][ T5703] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 310.576727][ T5703] usb 3-1: USB disconnect, device number 11 [ 310.693186][ T30] audit: type=1326 audit(3933104187.018:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9499 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9d0c997d97 code=0x0 [ 311.399830][ T30] audit: type=1400 audit(3933104187.688:678): avc: denied { name_connect } for pid=9510 comm="syz.1.1011" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 311.492703][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.392759][ T30] audit: type=1400 audit(3933104188.718:679): avc: denied { read } for pid=9535 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.708207][ T9571] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 315.878201][ T9571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.454047][ T9578] vlan2: entered promiscuous mode [ 316.459101][ T9578] bond3: entered promiscuous mode [ 316.468401][ T9578] vlan2: entered allmulticast mode [ 316.481778][ T9578] bond3: entered allmulticast mode [ 316.568603][ T9571] bond3: (slave bridge1): making interface the new active one [ 316.661894][ T9571] bridge1: entered promiscuous mode [ 316.768981][ T9571] bridge1: entered allmulticast mode [ 316.904001][ T9571] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 318.668791][ T9597] syzkaller0: entered promiscuous mode [ 318.683288][ T9597] syzkaller0: entered allmulticast mode [ 319.116256][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1040'. [ 319.651600][ T5703] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 319.926270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 321.139392][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.180760][ T5703] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 321.207595][ T5703] usb 4-1: can't read configurations, error -71 [ 321.233729][ T9628] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 321.294512][ T9628] bond4: entered promiscuous mode [ 321.314805][ T9628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.348609][ T9632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.368479][ T9632] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 321.381332][ T9632] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 321.400829][ T30] audit: type=1400 audit(3933104197.718:680): avc: denied { audit_read } for pid=9633 comm="syz.0.1048" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.438102][ T9632] bond4: (slave ip6gre1): making interface the new active one [ 321.451555][ T5731] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 321.493673][ T9632] ip6gre1: entered promiscuous mode [ 321.530380][ T9632] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 321.611760][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 321.625947][ T5731] usb 2-1: config 3 has an invalid interface number: 88 but max is 0 [ 321.645109][ T5731] usb 2-1: config 3 has no interface number 0 [ 321.676577][ T5731] usb 2-1: config 3 interface 88 has no altsetting 0 [ 321.691378][ T5731] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 321.704005][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.713053][ T5731] usb 2-1: Product: syz [ 321.718702][ T5731] usb 2-1: Manufacturer: syz [ 321.724089][ T5731] usb 2-1: SerialNumber: syz [ 322.642050][ T9626] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1046'. [ 322.731765][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1046'. [ 322.813411][ T9648] 9p: Bad value for 'rfdno' [ 322.873161][ T30] audit: type=1400 audit(3933104199.118:681): avc: denied { mounton } for pid=9625 comm="syz.1.1046" path="/203/file0" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 322.930264][ T5731] kl5kusb105 2-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 322.958882][ T5731] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 322.987257][ T5731] usb 2-1: USB disconnect, device number 13 [ 323.042724][ T5731] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 323.089917][ T5731] kl5kusb105 2-1:3.88: device disconnected [ 323.841645][ T5850] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 324.101930][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 324.121178][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 324.138527][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 324.153157][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 324.163882][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 324.182878][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 324.202444][ T5850] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 324.213637][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.277061][ T5850] usb 2-1: Product: syz [ 324.285785][ T5850] usb 2-1: Manufacturer: syz [ 324.297355][ T5850] usb 2-1: SerialNumber: syz [ 324.322209][ T5850] usb 2-1: config 0 descriptor?? [ 324.464135][ T30] audit: type=1400 audit(3933104200.788:682): avc: denied { kexec_image_load } for pid=9668 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 324.546058][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 324.552628][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 324.559862][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 324.656354][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.754843][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.774012][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.789900][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 324.792182][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.822072][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 324.875628][ T30] audit: type=1400 audit(3933104201.158:683): avc: denied { accept } for pid=9677 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.882105][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 324.962447][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 324.969503][ T9681] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 324.994916][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.012192][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.029902][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.042067][ T9681] bond0: entered promiscuous mode [ 325.051889][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.066363][ T9681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.076350][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.092219][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.106234][ T9685] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.120775][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.133194][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.141781][ T30] audit: type=1400 audit(3933104201.458:684): avc: denied { read } for pid=9682 comm="syz.4.1065" path="socket:[28386]" dev="sockfs" ino=28386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.168553][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.186456][ T9685] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 325.196815][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.210733][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.224887][ T5850] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 325.232603][ T9685] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 325.248217][ T5850] input input8: Timeout waiting for response from device. [ 325.281704][ T5850] usb 2-1: USB disconnect, device number 14 [ 325.288140][ T9681] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.339760][ T9681] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 325.694587][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 326.416090][ T9701] syz.0.1071: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 326.453268][ T9701] CPU: 1 UID: 0 PID: 9701 Comm: syz.0.1071 Not tainted syzkaller #0 PREEMPT(full) [ 326.453293][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 326.453305][ T9701] Call Trace: [ 326.453311][ T9701] [ 326.453319][ T9701] dump_stack_lvl+0x100/0x190 [ 326.453346][ T9701] warn_alloc.cold+0x94/0xa8 [ 326.453367][ T9701] ? __pfx_warn_alloc+0x10/0x10 [ 326.453386][ T9701] ? register_lock_class+0x40/0x560 [ 326.453413][ T9701] ? kasan_save_stack+0x3f/0x50 [ 326.453435][ T9701] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 326.453464][ T9701] ? xskq_create+0x52/0x1d0 [ 326.453482][ T9701] ? xsk_setsockopt+0x743/0xab0 [ 326.453498][ T9701] ? do_sock_setsockopt+0xf3/0x1d0 [ 326.453529][ T9701] ? __sys_setsockopt+0x195/0x220 [ 326.453550][ T9701] ? __x64_sys_setsockopt+0xbd/0x160 [ 326.453572][ T9701] ? do_syscall_64+0x115/0x870 [ 326.453595][ T9701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.453620][ T9701] ? xskq_create+0xfb/0x1d0 [ 326.453640][ T9701] __vmalloc_node_range_noprof+0x136c/0x1630 [ 326.453676][ T9701] ? xskq_create+0xfb/0x1d0 [ 326.453703][ T9701] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 326.453734][ T9701] ? kasan_save_track+0x14/0x30 [ 326.453755][ T9701] ? __kasan_kmalloc+0xaa/0xb0 [ 326.453777][ T9701] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 326.453807][ T9701] ? xskq_create+0xfb/0x1d0 [ 326.453827][ T9701] vmalloc_user_noprof+0x9e/0xe0 [ 326.453853][ T9701] ? xskq_create+0xfb/0x1d0 [ 326.453873][ T9701] xskq_create+0xfb/0x1d0 [ 326.453894][ T9701] xsk_setsockopt+0x743/0xab0 [ 326.453914][ T9701] ? __pfx_xsk_setsockopt+0x10/0x10 [ 326.453932][ T9701] ? find_held_lock+0x2b/0x80 [ 326.453948][ T9701] ? __fget_files+0x215/0x3d0 [ 326.453972][ T9701] ? selinux_socket_setsockopt+0x6a/0x80 [ 326.454000][ T9701] ? __pfx_xsk_setsockopt+0x10/0x10 [ 326.454019][ T9701] do_sock_setsockopt+0xf3/0x1d0 [ 326.454052][ T9701] __sys_setsockopt+0x195/0x220 [ 326.454081][ T9701] __x64_sys_setsockopt+0xbd/0x160 [ 326.454104][ T9701] ? do_syscall_64+0x90/0x870 [ 326.454126][ T9701] ? lockdep_hardirqs_on+0x78/0x100 [ 326.454149][ T9701] do_syscall_64+0x115/0x870 [ 326.454171][ T9701] ? clear_bhb_loop+0x40/0x90 [ 326.454194][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.454216][ T9701] RIP: 0033:0x7f9d0c99e019 [ 326.454231][ T9701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.454249][ T9701] RSP: 002b:00007f9d0d8ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 326.454266][ T9701] RAX: ffffffffffffffda RBX: 00007f9d0cc25fa0 RCX: 00007f9d0c99e019 [ 326.454279][ T9701] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 326.454289][ T9701] RBP: 00007f9d0ca3500c R08: 0000000000000029 R09: 0000000000000000 [ 326.454300][ T9701] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.454310][ T9701] R13: 00007f9d0cc26038 R14: 00007f9d0cc25fa0 R15: 00007fff0fa1ea58 [ 326.454335][ T9701] [ 326.457248][ T9701] Mem-Info: [ 326.585169][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'. [ 326.988242][ T9701] active_anon:19049 inactive_anon:0 isolated_anon:0 [ 326.988242][ T9701] active_file:0 inactive_file:61845 isolated_file:0 [ 326.988242][ T9701] unevictable:768 dirty:650 writeback:0 [ 326.988242][ T9701] slab_reclaimable:12064 slab_unreclaimable:101296 [ 326.988242][ T9701] mapped:32357 shmem:9810 pagetables:1495 [ 326.988242][ T9701] sec_pagetables:0 bounce:0 [ 326.988242][ T9701] kernel_misc_reclaimable:0 [ 326.988242][ T9701] free:1275972 free_pcp:15724 free_cma:0 [ 327.034598][ T30] audit: type=1326 audit(3933104203.308:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.0.1071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d0c99e019 code=0x0 [ 327.142112][ T9713] netlink: 'syz.0.1071': attribute type 6 has an invalid length. [ 327.169959][ T9701] Node 0 active_anon:77748kB inactive_anon:0kB active_file:0kB inactive_file:247120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131396kB dirty:2576kB writeback:0kB shmem:39156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14740kB pagetables:5612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 327.295024][ T9701] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:24kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 327.390993][ T9701] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.442464][ T9701] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 327.483743][ T9701] Node 0 DMA32 free:1145692kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86396kB inactive_anon:0kB active_file:0kB inactive_file:247128kB unevictable:1536kB writepending:2596kB zspages:0kB present:3129332kB managed:2532108kB mlocked:0kB bounce:0kB free_pcp:52156kB local_pcp:31220kB free_cma:0kB [ 327.618837][ T9701] lowmem_reserve[]: 0 0 0 0 0 [ 327.649300][ T9720] GUP no longer grows the stack in syz.2.1075 (9720): 200000004000-200000005000 (200000001000) [ 327.734384][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.2.1075 Not tainted syzkaller #0 PREEMPT(full) [ 327.734401][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 327.734408][ T9720] Call Trace: [ 327.734412][ T9720] [ 327.734417][ T9720] dump_stack_lvl+0x100/0x190 [ 327.734435][ T9720] gup_vma_lookup.cold+0x83/0x96 [ 327.734452][ T9720] __get_user_pages+0x241/0x32a0 [ 327.734471][ T9720] ? down_read_killable+0x35e/0x520 [ 327.734492][ T9720] ? __pfx___get_user_pages+0x10/0x10 [ 327.734511][ T9720] __gup_longterm_locked+0x87d/0x16f0 [ 327.734530][ T9720] ? __pfx___gup_longterm_locked+0x10/0x10 [ 327.734545][ T9720] ? lock_acquire+0x1b9/0x370 [ 327.734563][ T9720] gup_fast_fallback+0x16dc/0x2790 [ 327.734587][ T9720] ? __pfx_gup_fast_fallback+0x10/0x10 [ 327.734604][ T9720] ? __lock_acquire+0x49f/0x1a40 [ 327.734618][ T9720] ? ktime_get+0x9f/0x320 [ 327.734632][ T9720] ? ktime_get+0x1a4/0x320 [ 327.734646][ T9720] get_user_pages_fast+0xa7/0xf0 [ 327.734661][ T9720] ? __pfx_get_user_pages_fast+0x10/0x10 [ 327.734680][ T9720] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 327.734697][ T9720] ? __mutex_lock+0x26d/0x1bd0 [ 327.734710][ T9720] ? pipe_lock+0x69/0x80 [ 327.734721][ T9720] ? irqentry_exit+0x24d/0xa00 [ 327.734733][ T9720] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 327.734749][ T9720] ? __pfx___mutex_lock+0x10/0x10 [ 327.734763][ T9720] ? import_ubuf+0x1b6/0x220 [ 327.734779][ T9720] iov_iter_get_pages2+0xa3/0x100 [ 327.734795][ T9720] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 327.734809][ T9720] ? wait_for_space+0x2ca/0x3b0 [ 327.734824][ T9720] __do_sys_vmsplice+0x7dd/0x13c0 [ 327.734842][ T9720] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 327.734859][ T9720] ? __pfx_futex_wait+0x10/0x10 [ 327.734893][ T9720] ? do_syscall_64+0x115/0x870 [ 327.734906][ T9720] do_syscall_64+0x115/0x870 [ 327.734923][ T9720] ? clear_bhb_loop+0x40/0x90 [ 327.734945][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.734963][ T9720] RIP: 0033:0x7f558179e019 [ 327.734979][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.734993][ T9720] RSP: 002b:00007f5582619028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 327.735004][ T9720] RAX: ffffffffffffffda RBX: 00007f5581a25fa0 RCX: 00007f558179e019 [ 327.735011][ T9720] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 327.735018][ T9720] RBP: 00007f558183500c R08: 0000000000000000 R09: 0000000000000000 [ 327.735024][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.735030][ T9720] R13: 00007f5581a26038 R14: 00007f5581a25fa0 R15: 00007fff52013f88 [ 327.735044][ T9720] [ 328.003735][ T9701] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.041752][ T9701] lowmem_reserve[]: 0 0 0 0 0 [ 328.049564][ T9701] Node 1 Normal free:3940036kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB writepending:24kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.086190][ T9701] lowmem_reserve[]: 0 0 0 0 0 [ 328.093290][ T9701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.106074][ T9701] Node 0 DMA32: 769*4kB (UE) 330*8kB (UME) 412*16kB (UM) 428*32kB (UM) 314*64kB (UME) 199*128kB (ME) 100*256kB (UME) 34*512kB (UM) 15*1024kB (UM) 8*2048kB (M) 243*4096kB (M) = 1141652kB [ 328.141536][ T5731] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 328.169401][ T9701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.291921][ T9701] Node 1 Normal: 1*4kB (U) 0*8kB 6*16kB (U) 7*32kB (U) 10*64kB (UM) 2*128kB (UM) 2*256kB (U) 2*512kB (UM) 1*1024kB (U) 2*2048kB (M) 960*4096kB (M) = 3940036kB [ 328.308063][ T9701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.318370][ T9701] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 328.858847][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 328.864035][ T9701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.873934][ T9701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 328.918723][ T9701] 75914 total pagecache pages [ 328.930162][ T9701] 0 pages in swap cache [ 328.939234][ T9701] Free swap = 124996kB [ 328.950502][ T9701] Total swap = 124996kB [ 328.962777][ T9701] 2097051 pages RAM [ 328.975688][ T9701] 0 pages HighMem/MovableOnly [ 328.988612][ T9701] 432315 pages reserved [ 329.031783][ T9701] 0 pages cma reserved [ 329.380280][ T5731] usb 4-1: device descriptor read/all, error -71 [ 329.402565][ T9734] netlink: 'syz.2.1078': attribute type 4 has an invalid length. [ 329.422192][ T9734] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1078'. [ 330.890422][ T30] audit: type=1400 audit(3933104207.208:686): avc: denied { getopt } for pid=9776 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.049237][ T30] audit: type=1400 audit(3933104209.368:687): avc: denied { getopt } for pid=9819 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.372237][ T9827] FAT-fs (nbd2): unable to read boot sector [ 333.384547][ T30] audit: type=1400 audit(3933104209.688:688): avc: denied { mounton } for pid=9819 comm="syz.2.1097" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 334.407449][ T9836] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 334.424186][ T9836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 334.444801][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 334.707140][ T30] audit: type=1400 audit(3933104211.028:689): avc: denied { getopt } for pid=9842 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.811473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 335.538304][ T9855] macvlan0: entered promiscuous mode [ 337.546402][ T9883] openvswitch: netlink: IP tunnel dst address not specified [ 339.660995][ T9888] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 339.684184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 339.714080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 339.853934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 339.871636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 340.161379][ T9888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.187476][ T9891] gretap2: entered promiscuous mode [ 340.195863][ T9891] bond4: (slave gretap2): making interface the new active one [ 340.206178][ T9891] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 340.379413][ T9888] macvlan2: entered promiscuous mode [ 340.407729][ T9888] macvlan2: entered allmulticast mode [ 340.430692][ T9888] bond4: entered promiscuous mode [ 340.454847][ T9888] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.472725][ T9888] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 340.525410][ T9888] bond4: left promiscuous mode [ 342.097972][ T9910] SET target dimension over the limit! [ 343.726641][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 346.332680][ T30] audit: type=1400 audit(3933104222.658:690): avc: denied { name_bind } for pid=9960 comm="syz.4.1138" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 346.838414][ T9967] program syz.2.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.363993][ T9964] syzkaller0: entered promiscuous mode [ 347.380831][ T9964] syzkaller0: entered allmulticast mode [ 347.489295][ T9973] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 347.872383][ T9980] syzkaller0: entered promiscuous mode [ 348.753417][ T9980] syzkaller0: entered allmulticast mode [ 349.554345][ T30] audit: type=1400 audit(3933104225.878:691): avc: denied { name_bind } for pid=9998 comm="syz.0.1151" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 350.258809][T10006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'. [ 350.976707][T10014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.852451][ T30] audit: type=1400 audit(3933104232.178:692): avc: denied { write } for pid=10055 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 356.775922][T10071] i2c i2c-0: delete_device: Can't find device in list [ 357.420553][ T30] audit: type=1326 audit(3933104233.718:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 357.447113][ T30] audit: type=1326 audit(3933104233.718:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 357.515934][ T30] audit: type=1326 audit(3933104233.718:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 357.584673][T10084] netdevsim netdevsim1: Direct firmware load for . [ 357.584673][T10084] failed with error -2 [ 357.629861][ T30] audit: type=1326 audit(3933104233.718:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 357.665009][T10084] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 357.665009][T10084] [ 357.700710][ T30] audit: type=1326 audit(3933104233.718:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 357.832434][ T5703] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 357.921765][T10091] [U] [ 357.924639][T10091] [U] [ 357.927314][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 357.974205][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 358.027295][ T30] audit: type=1326 audit(3933104233.728:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 358.111713][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 358.131392][ T5703] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 358.178751][ T30] audit: type=1326 audit(3933104233.728:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 358.224784][ T5703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.284613][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.404695][ T30] audit: type=1326 audit(3933104233.728:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 358.471474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 358.596848][ T30] audit: type=1326 audit(3933104233.728:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.3.1173" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4242f9e019 code=0x7ffc0000 [ 358.854388][ T5850] usb 3-1: USB disconnect, device number 12 [ 358.876053][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 358.922982][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 358.969889][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 359.016790][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 359.596850][T10108] netlink: 'syz.0.1180': attribute type 11 has an invalid length. [ 359.619731][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 359.627095][T10107] fuse: fd is not a fuse device [ 359.666634][T10091] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 359.666679][T10091] [U] [ 359.666703][T10091] [U] [ 359.715264][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.726698][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.740444][T10108] tipc: Resetting bearer [ 359.841873][T10091] [U] [ 359.844596][T10091] [U] [ 359.847282][T10091] [U] [ 359.849967][T10091] [U] [ 359.921859][T10091] [U] [ 359.924568][T10091] [U] [ 359.927251][T10091] [U] [ 359.929939][T10091] [U] [ 359.938325][T10108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.955453][T10108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.960880][T10091] [U] [ 359.990018][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 360.002396][T10108] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 360.027940][T10118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1183'. [ 360.110959][ T29] syz0: Port: 1 Link ACTIVE [ 361.955985][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 361.956002][ T30] audit: type=1400 audit(3933104238.278:725): avc: denied { connect } for pid=10141 comm="syz.1.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 362.025971][ T30] audit: type=1400 audit(3933104238.348:726): avc: denied { read } for pid=10141 comm="syz.1.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 362.771038][T10155] xt_NFQUEUE: number of total queues is 0 [ 365.729448][T10189] tc action pedit offset must be on 32 bit boundaries [ 366.071535][ T5850] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 366.283171][T10199] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 366.292502][T10199] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 366.305735][T10199] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 366.663979][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.674310][ T5850] usb 3-1: config 0 has no interfaces? [ 366.679834][ T5850] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 366.689450][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.700576][ T5850] usb 3-1: config 0 descriptor?? [ 368.190354][ T5731] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 368.311475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 368.461572][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 368.847080][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.879391][ T5731] usb 2-1: config 8 interface 0 has no altsetting 0 [ 368.895476][ T5731] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=31.0a [ 368.918607][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.960675][ T5731] usb 2-1: Product: syz [ 368.988562][ T5731] usb 2-1: Manufacturer: syz [ 369.017223][ T5731] usb 2-1: SerialNumber: syz [ 369.036517][ T5703] usb 3-1: USB disconnect, device number 13 [ 369.164236][ T5731] usb 2-1: active config #8 != 1 ?? [ 369.386929][T10232] netlink: 'syz.0.1214': attribute type 10 has an invalid length. [ 369.396053][T10232] syz_tun: entered promiscuous mode [ 369.992693][T10232] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 370.881467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 370.901458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 371.601541][ T5703] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 371.756354][ T5731] usb 2-1: USB disconnect, device number 15 [ 371.770193][ T5984] bond0: (slave syz_tun): interface is now down [ 371.782347][ T5703] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 371.819903][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.830158][ T5984] bond0: now running without any active interface! [ 371.860683][ T5703] usb 3-1: config 0 descriptor?? [ 372.080148][T10245] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 372.102832][T10245] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 372.905767][ T30] audit: type=1400 audit(3933104249.218:727): avc: denied { read } for pid=10251 comm="syz.1.1218" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 372.932343][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.941874][T10245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1216'. [ 372.997189][ T30] audit: type=1400 audit(3933104249.318:728): avc: denied { map } for pid=10244 comm="syz.2.1216" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 373.065602][ T30] audit: type=1400 audit(3933104249.318:729): avc: denied { execute } for pid=10244 comm="syz.2.1216" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 374.015869][ T5703] usb 3-1: string descriptor 0 read error: -71 [ 374.032943][ T5703] ldusb 3-1:0.0: Interrupt in endpoint not found [ 374.059543][ T5703] usb 3-1: USB disconnect, device number 14 [ 376.709240][T10287] kvm: kvm [10286]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 380.467983][T10327] netlink: 'syz.0.1237': attribute type 4 has an invalid length. [ 380.657179][T10327] netlink: 'syz.0.1237': attribute type 4 has an invalid length. [ 380.678987][T10307] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 383.728077][T10365] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 384.002489][T10372] bond4: entered allmulticast mode [ 384.021912][T10372] ip6gre1: entered allmulticast mode [ 384.507701][T10372] bond4: left allmulticast mode [ 384.784981][T10372] ip6gre1: left allmulticast mode [ 386.250153][T10398] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 386.405982][T10404] overlayfs: failed to clone lowerpath [ 387.281554][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 387.487962][ T29] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 387.515437][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.549342][ T29] usb 3-1: Product: syz [ 387.998048][ T29] usb 3-1: Manufacturer: syz [ 388.008911][ T29] usb 3-1: SerialNumber: syz [ 388.024580][ T29] usb 3-1: config 0 descriptor?? [ 388.038549][ T29] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 015 [ 388.632568][T10421] PKCS8: Unsupported PKCS#8 version [ 388.820331][ T29] (null): error -EIO: failure setting delay to 10us [ 388.843758][ T29] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 388.890454][ T29] usb 3-1: USB disconnect, device number 15 [ 389.915706][ T30] audit: type=1804 audit(3933104265.288:730): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1264" name="bus" dev="ramfs" ino=31380 res=1 errno=0 [ 390.438022][ T30] audit: type=1804 audit(3933104265.288:731): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1264" name="bus" dev="ramfs" ino=31380 res=1 errno=0 [ 390.721646][ T30] audit: type=1400 audit(3933104267.038:732): avc: denied { node_bind } for pid=10428 comm="syz.0.1266" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 398.384055][T10525] xt_hashlimit: size too large, truncated to 1048576 [ 398.476970][T10528] netlink: 'syz.1.1284': attribute type 27 has an invalid length. [ 399.864934][ T30] audit: type=1400 audit(3933104276.188:733): avc: denied { ioctl } for pid=10536 comm="syz.4.1289" path="socket:[31934]" dev="sockfs" ino=31934 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 401.483440][T10528] bond0: (slave bond_slave_1): Releasing backup interface [ 401.691545][ T30] audit: type=1400 audit(3933104278.008:734): avc: denied { write } for pid=10557 comm="syz.1.1294" name="functions" dev="configfs" ino=22706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 401.778668][ T30] audit: type=1400 audit(3933104278.048:735): avc: denied { write } for pid=10557 comm="syz.1.1294" name="header" dev="configfs" ino=31531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 401.825821][T10562] 9p: Bad value for 'rfdno' [ 401.830382][ T30] audit: type=1400 audit(3933104278.068:736): avc: denied { write } for pid=10557 comm="syz.1.1294" name="fs" dev="configfs" ino=31540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 401.878793][ T30] audit: type=1400 audit(3933104278.068:737): avc: denied { create } for pid=10557 comm="syz.1.1294" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 401.954540][ T30] audit: type=1400 audit(3933104278.068:738): avc: denied { write } for pid=10557 comm="syz.1.1294" name="fs" dev="configfs" ino=31540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.016939][ T30] audit: type=1400 audit(3933104278.098:739): avc: denied { write } for pid=10557 comm="syz.1.1294" name="ss" dev="configfs" ino=31541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.072999][ T30] audit: type=1400 audit(3933104278.098:740): avc: denied { write } for pid=10557 comm="syz.1.1294" name="ss" dev="configfs" ino=31541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.165694][ T30] audit: type=1400 audit(3933104278.108:741): avc: denied { write } for pid=10557 comm="syz.1.1294" name="header" dev="configfs" ino=31544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 402.764149][ T30] audit: type=1400 audit(3933104278.118:742): avc: denied { write } for pid=10557 comm="syz.1.1294" name="fs" dev="configfs" ino=31551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.322239][ T5703] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 405.299075][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 405.305570][ T5703] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 405.333947][ T5703] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 405.364316][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 405.524419][ T5703] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 406.053157][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.086178][ T5703] usb 4-1: config 0 descriptor?? [ 406.101916][ T5703] usb 4-1: can't set config #0, error -71 [ 406.124256][ T5703] usb 4-1: USB disconnect, device number 18 [ 407.982644][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 407.982660][ T30] audit: type=1400 audit(3933104284.308:750): avc: denied { listen } for pid=10603 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.012842][ T30] audit: type=1400 audit(3933104284.338:751): avc: denied { map } for pid=10603 comm="syz.3.1307" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 408.038116][ T30] audit: type=1400 audit(3933104284.338:752): avc: denied { execute } for pid=10603 comm="syz.3.1307" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 409.582762][ T5618] [ 409.585098][ T5618] ============================================ [ 409.591216][ T5618] WARNING: possible recursive locking detected [ 409.597334][ T5618] syzkaller #0 Not tainted [ 409.601718][ T5618] -------------------------------------------- [ 409.607831][ T5618] kworker/1:3/5618 is trying to acquire lock: [ 409.613863][ T5618] ffff88803275b928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 409.623573][ T5618] [ 409.623573][ T5618] but task is already holding lock: [ 409.630904][ T5618] ffff888032acd928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 409.640607][ T5618] [ 409.640607][ T5618] other info that might help us debug this: [ 409.648633][ T5618] Possible unsafe locking scenario: [ 409.648633][ T5618] [ 409.656049][ T5618] CPU0 [ 409.659296][ T5618] ---- [ 409.662546][ T5618] lock(&grp->list_lock); [ 409.666931][ T5618] lock(&grp->list_lock); [ 409.671314][ T5618] [ 409.671314][ T5618] *** DEADLOCK *** [ 409.671314][ T5618] [ 409.679426][ T5618] May be due to missing lock nesting notation [ 409.679426][ T5618] [ 409.687716][ T5618] 3 locks held by kworker/1:3/5618: [ 409.692878][ T5618] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 409.703277][ T5618] #1: ffffc9000316fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 409.715148][ T5618] #2: ffff888032acd928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 409.725288][ T5618] [ 409.725288][ T5618] stack backtrace: [ 409.731146][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 409.731159][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 409.731167][ T5618] Workqueue: events snd_rawmidi_input_event_work [ 409.731185][ T5618] Call Trace: [ 409.731189][ T5618] [ 409.731193][ T5618] dump_stack_lvl+0x100/0x190 [ 409.731206][ T5618] print_deadlock_bug.cold+0xbd/0xca [ 409.731222][ T5618] __lock_acquire+0x1256/0x1a40 [ 409.731237][ T5618] lock_acquire+0x1b9/0x370 [ 409.731248][ T5618] ? snd_seq_deliver_event+0x230/0x860 [ 409.731265][ T5618] ? do_raw_read_unlock+0x3f/0x70 [ 409.731280][ T5618] _raw_read_lock+0x5f/0x70 [ 409.731291][ T5618] ? snd_seq_deliver_event+0x230/0x860 [ 409.731306][ T5618] snd_seq_deliver_event+0x230/0x860 [ 409.731322][ T5618] ? do_raw_spin_lock+0x128/0x260 [ 409.731337][ T5618] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 409.731352][ T5618] ? mark_held_locks+0x40/0x70 [ 409.731364][ T5618] ? lockdep_hardirqs_on+0x78/0x100 [ 409.731376][ T5618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.731387][ T5618] ? client_use_ptr+0x107/0x4b0 [ 409.731401][ T5618] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 409.731418][ T5618] queue_broadcast_event.isra.0+0x143/0x1b0 [ 409.731434][ T5618] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 409.731452][ T5618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.731468][ T5618] ? snd_seq_timer_start+0x1f0/0x2a0 [ 409.731487][ T5618] snd_seq_control_queue+0x709/0xb70 [ 409.731498][ T5618] ? __pfx_event_input_timer+0x10/0x10 [ 409.731512][ T5618] __snd_seq_deliver_single_event+0x127/0x1c0 [ 409.731529][ T5618] snd_seq_deliver_single_event+0x31f/0x8c0 [ 409.731546][ T5618] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 409.731562][ T5618] ? __lock_acquire+0x49f/0x1a40 [ 409.731576][ T5618] snd_seq_deliver_event+0x44b/0x860 [ 409.731591][ T5618] ? do_raw_spin_lock+0x128/0x260 [ 409.731606][ T5618] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 409.731623][ T5618] ? mark_held_locks+0x40/0x70 [ 409.731635][ T5618] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 409.731646][ T5618] ? lockdep_hardirqs_on+0x78/0x100 [ 409.731658][ T5618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.731669][ T5618] ? client_use_ptr+0x107/0x4b0 [ 409.731683][ T5618] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 409.731699][ T5618] send_timer_event.isra.0+0x130/0x190 [ 409.731716][ T5618] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 409.731731][ T5618] ? lockdep_hardirqs_on+0x78/0x100 [ 409.731743][ T5618] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 409.731756][ T5618] snd_seq_oss_timer_start+0x1db/0x320 [ 409.731772][ T5618] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 409.731788][ T5618] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 409.731802][ T5618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.731812][ T5618] ? find_slot+0x166/0x1b0 [ 409.731823][ T5618] snd_seq_oss_midi_input+0x467/0xa30 [ 409.731835][ T5618] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 409.731848][ T5618] ? find_held_lock+0x2b/0x80 [ 409.731856][ T5618] ? snd_seq_port_use_ptr+0x128/0x190 [ 409.731870][ T5618] snd_seq_oss_event_input+0x194/0x250 [ 409.731880][ T5618] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 409.731891][ T5618] __snd_seq_deliver_single_event+0x127/0x1c0 [ 409.731907][ T5618] snd_seq_deliver_single_event+0x31f/0x8c0 [ 409.731924][ T5618] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 409.731940][ T5618] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 409.731951][ T5618] ? lockdep_hardirqs_on+0x78/0x100 [ 409.731962][ T5618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.731973][ T5618] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 409.731989][ T5618] snd_seq_deliver_event+0x2c1/0x860 [ 409.732014][ T5618] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 409.732038][ T5618] ? mark_held_locks+0x40/0x70 [ 409.732052][ T5618] ? lockdep_hardirqs_on+0x78/0x100 [ 409.732063][ T5618] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.732074][ T5618] ? client_use_ptr+0x107/0x4b0 [ 409.732088][ T5618] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 409.732105][ T5618] snd_midi_input_event+0x32f/0x470 [ 409.732126][ T5618] ? __pfx_snd_midi_input_event+0x10/0x10 [ 409.732141][ T5618] ? __pfx_snd_midi_input_event+0x10/0x10 [ 409.732154][ T5618] snd_rawmidi_input_event_work+0x61/0x80 [ 409.732171][ T5618] process_one_work+0xa23/0x1940 [ 409.732184][ T5618] ? __pfx_process_one_work+0x10/0x10 [ 409.732197][ T5618] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 409.732214][ T5618] worker_thread+0x5ef/0xe50 [ 409.732226][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 409.732237][ T5618] ? kthread+0x13a/0x450 [ 409.732246][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 409.732256][ T5618] kthread+0x370/0x450 [ 409.732265][ T5618] ? __pfx_kthread+0x10/0x10 [ 409.732275][ T5618] ret_from_fork+0x72b/0xd50 [ 409.732289][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 409.732303][ T5618] ? rcu_is_watching+0x12/0xc0 [ 409.732318][ T5618] ? __switch_to+0x800/0x10f0 [ 409.732328][ T5618] ? __pfx_kthread+0x10/0x10 [ 409.732338][ T5618] ret_from_fork_asm+0x1a/0x30 [ 409.732355][ T5618]