last executing test programs: 1.265114954s ago: executing program 1 (id=2): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x1) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.238373355s ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x2000) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$selinux_access(r1, &(0x7f0000000400)=ANY=[], 0x41) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7f) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 1.123236923s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/108, 0x6c}], 0x1}, 0x7}], 0x1, 0x40002000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'veth1_to_hsr\x00', {0x1}, 0xb5}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/33, 0x21}, {0x0}], 0x2, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$inet6(0xa, 0x80003, 0x6) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) gettid() (async) r6 = gettid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r6) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) (async) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 1.123049303s ago: executing program 2 (id=3): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @local}, {0x1, @multicast}, 0x4c, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}}) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @local}, 0x40, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="400a2e2704000000a0e792db1fa00e3120622c81f857f63a2475585b718265756fcb81d89aa1043ee2624165970b0221"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000380)={0x0, 0x7, 0xa0, "4daf509bbf3a62f648b10a1d9b45f330c35cac4690a367ba6f39126f26c324c0ad10fce1c4c50b4d2ff29847c4dfc51c04112f14024c4cba4861b5f483f6bccdb3622dad09420fc7cc51234cb0a98bb6162b16cf4e494823de83c953c29c8a6eb8d5125202fbf6c8f4d032ea9c0bca69ef846cd6560600f470c95be22ab22078fe50df756ee52daa536d430493ece246805baa3db9714cbc4ff52da8e7505bb9"}, 0x0, 0x0}) (async) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f0000000140)='./bus\x00') (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 987.225933ms ago: executing program 0 (id=7): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = eventfd2(0xfffffffe, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r2, 0x9, 0x4, r3}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r5 = dup3(r0, r1, 0x0) write$P9_RGETATTR(r5, 0x0, 0x0) 790.643936ms ago: executing program 3 (id=9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='|:*'], 0x58) close(r1) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 788.995126ms ago: executing program 3 (id=10): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000001b40)=""/4106, 0x100a}, {0x0}, {&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000300)=""/103, 0x67}], 0xa}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}, 0xb}], 0x7, 0x0, 0x0) 786.307636ms ago: executing program 3 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 395.480192ms ago: executing program 2 (id=12): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000001c0)=0xfffffffe, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x8, 0x3, 0x4}}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x8080, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x2, 0x65, {{0x26, 0x4, 0x1, 0x4, 0x98, 0x65, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @timestamp={0x44, 0x1c, 0xf5, 0x0, 0x4, [0x800, 0xfffffffd, 0x1, 0x2, 0x6, 0x400]}, @noop, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x7, [0x756, 0xe, 0xffff]}, @ra={0x94, 0x4}, @cipso={0x86, 0x52, 0x3, [{0x1, 0x7, "82bc8a441e"}, {0x6, 0xc, "210c3274a373c79cba5f"}, {0x7, 0xf, "309938657dcfee97055f547ed7"}, {0x1, 0x4, "8ab4"}, {0x0, 0x2}, {0x7, 0x12, "1fe68ff141d68a2b7335a8a0a2cb68d8"}, {0x7, 0x12, "ca93f5f90ebf054c829b666d4fc93288"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', r2, 0x2f, 0x4, 0xc4, 0x0, 0x4, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80, 0x700, 0x101, 0x5fa}}) write(r1, 0x0, 0x0) 188.516497ms ago: executing program 2 (id=13): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="2c80fce256052b06f8148e045f9b2dec", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000b80)="d7d42f9134461c21d42a97f0ebd55245", 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 160.097779ms ago: executing program 3 (id=14): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x2000, 0x3}, 0x20) madvise(&(0x7f0000305000/0x4000)=nil, 0x4000, 0x9) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x8, 0x1, 0x4}) 95.180253ms ago: executing program 3 (id=15): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001a00130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r3 = dup(r2) r4 = socket(0x1e, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) dup3(r4, r0, 0x80000) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e0003000000c9030000000000004000000000000000eb02000000000000000001000400380001000600ad06000403"], 0x178) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x459, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}, {&(0x7f0000002b00)={0x2218, 0x23, 0x100, 0x70bd29, 0x25dfdbfb, "", [@typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x94}, @nested={0x1120, 0x88, 0x0, 0x1, [@generic="d640cb3d00a2a050803a84c7516bcc364ac6e538bc917aa195e6e9ed5e1af677459ae50b71d1b834471c0deb752626934d6116a2ab8220c4c56ec36e3379f59dd48dd358c6f3d78bca64460b0d41449513e79bf2138278ccd422a751d2496f49300ca21a0905fa03fe14cf28052175f5f4a4aed7f10e503774be2d52b5d9dfb45c6add1aec05fc2bb3df50944c7c1830a3828a5f1b272ec182480638f0c7ac66be38ff6b47dbc5ec6de28a061cd52b20f16403e88a75f73533621a422d2d05ede259fcc5dcaf1200c352f6aa9c4a1a49fef1c0f136fffea22973dd22a3d6da1230240a5994ab6b8c7f7ea9aec3be53a27a9f47bd596e12a594cfe834f445e9c3ed9bffa1e79a8494f21d9f3ece52afcb78fc6624f75abf068d8593c7861d7c6eadfc79b1528e9e756bdba28983a2fb8866b5515609bec125f652b9868e0e07ef7608d0c9d8c0b217671dcc6dbf9bcd540696b2d94b6c1d5abd86c28fa9f132cd01389b3f6f43c79f077c01099831b77bbdb53aba8381c42dc85cc291fc453d0f0e85e518041b3d33c69d638676a7c28f9221d233ba6b8325d974f2b6c8744d7b8c9a31cb6b83fb1e8837b24feb29ea001a242d440feac328695a3061e76710d37c1f9300aad001962da621aafe3bf4fd5b08acb222ae6551ae774a3f42f0531bce1845d383b751b3ea043ef9614f1f8a0b6386291ba5e3ef3032e2e20522f3174bc09d918ff258cfbaaa51a1eb01abd5ea2da014790fa197d25e20ba871128b9b739129d385cdb8d46a6d9d633b8a6adaa7e0a20c84d23fb69db1e275fe2d1b9d862d587738e2516b42b2c77aee9732733ac1dd11c4506d8f9ad99c0e1ddd9a494d1d4b37cebbc9e94414d13fa76287d93e77157d0eae45d85f1695f248fa9fd15a2c0ab8b3bb60b49d64837b722d98a712428919a25df02a1890c97ff6b45961c667a982791f74d8a2080fff80c096162278c454de34fd040308984985a721b0cbd3f364a0aedc23c388335835d5c04772af6850efb0776555bf9d683deef5168392298b71eda1830ff0c96bb5b21f69d587760fab179d4fcf03d2ec10eb6dec20acfce05e09151d1bb38ffb83042e47c4ea9280787288b32d4ec7fcff1ef8e2ee7f27cc48b1065eac909bd04a15a26ab772a489d37fe040023c87dad0dcbd7d1b4d89ecb33daa2791289e2e6b3844b5920202ef58633bae69c6021bd97ac60c3334e056ca0d9f9f598ec681391a852a0fbf6cb0d3bf14a242709d33177e5d67a0d98c3e56e605038277bed02201710b267f9ca694d61ac5e035cd645be11509242ee00514d3c46206ef6cb32ccbf4b2dcf3fc50544ebb4d34cb029f02bd90b99fd66fc881582574c423a22b650d530d14677c2b80e37b61ffec97f7ac06d6a8a5d42fba04b2ecd13b8e1707d456e82723b6ddd043b44b48d23b6d50b09d6ad90cf24e3e4f6d0010cae3f2858ac0ed002ef4fdeb9c909fbab011d2066c803bf03104e54f8091e5632537eeabac4ef4b96db99152b2adcbfdc34084bad58bc283ef14aadffefeae8093f1c2acccd98d63a58ddf343af220ad55cf58f04d9cbd00cf7b1af214d56ed64383e4c23686d978d6348c8140d37ac57165273793b4a608bb2982e28e9c837f1fdfe3c8cd7248f54842d61110969c92b574fdbd0d3d9f07288ee6d588f6316d88b7a0ac0b8e645fcb0140a45582635f4ba2ed8a90c70541c0182bbb0c2e37ff62160aba019a96df20b5537e66d720849b6a25eb1604debd391f103fe6f1a818c673680a1544bde8fb2eedc217f4ed0571f50e1dbc3dc8ae8ecd4946efb88ced40d22aee2146a39d41d1472c734c611329532d883cac71a8d422699e9a68b45332f37a07ec2cd7be9fa955d4f007f73b12c2a01c9aa155784b973513405420dbfe9cbc3a7cf4f5a81b651455e79c3e7d9476edd3883ab5ae10927e3d4d500f4c60e5baebf47be481fb51fb9374ad988c150b70d3d12f69b7e80e00c532572227561d35714d361f6d8b5fb356526edc95bba7bac4a58aef6432d23f994ebabe3dcb539368e551f331093b7e4f38b4949b239ac38a26c18aa784bb580aa1f511ccee0224269515e114f12cc90f7a20d07a7fff4912385ef237a8bce3aa646beab2fc5a4a47fc9700052cc5c5b515f1c7885e83e7c3fb3a4de217db3402a5dc66e3e4eeb82ad9b0e095a28b1d9d95aaf5c1b853613d9bb2004373a1a9d874a8b13536cb8e92959fb98610504dfa7205dab44fdaeb261eb2d57d82bf635a87dce932b939ca847372c8893f196778c79b9cf3075bed6cc7e7cdf2aa69a363c2f7bd095186fc6894653ae4a30e8e0acddd0acf6e32ec176c306c1586e0917c255a00cdb3f3b71d12d5e8d7618950c3630e44f577dad81b0d1fca0e72363fb24500ef70877e44779e22fe94e212067a8b7f6803fd1443e105a252c2ac242d8314a79ae81f185cfa00f04a60ec113ca8de2cba93221539b7db4b2eac4e741f479c0dafe05a63c8169471444a8a8ecdf430f10e9027fa0747858bae2884139b5eab475f40400f2fe3526f8a18f3588f9985193ba296d26948f1ef02b0adce4629cbcd9a57d7c31d72c8229120f8c72010bfa52d5caf6cb69497644ce2a5309024ec2a2e9137b7d5006adc9bc0ac70817b5f64e25b27c74786b23c215746786057215478edd5324a0eb36b750fd3f18616a0240ad66c8f1f3905161e1f071c9d287382304db2d84ac83443ef0bceecb591741c852380640041ce685e347ea6aca11793da33822415450ff2c7e573968c274e837e73e77551dcb253d10f37604f53da9acbc8e9b7f0486cea245e1497c7a230bd23afe39fec3e297aa8326eece67ef0004400b0679686fdfaa8aa0bf1da71b668935b8805386d9183d5771cba181cbeff3ec9e3cb62fc9988ccb753f252d4034fe282eb038956b4dd071ed44b63218ea6d629b4baf90e6ee303f3ed76ddb04a9c481a5720d545c1ba6a49dddc71847c9a5829a6e9b4a33b976979a86af5a626b3b27d251f7bd03ab8ceb3abd0733757c658d749eff2213792d1c3d26415f5f227263141367fe5c0b3aef8b17dda0abf61694191eb11a4c8be9c3e7f55171f2e4e368018adfe697b19c171bb22374d6e5d4f4e5d4ae873c486e18d5de61f743cb496e19f6f90dd2cddf5624f16fa4f1efb8cd00ae3ddf631ed38740dc56b1d30d55a2a0bd5cf6c78d90fab4eb603ecfc317ae7939aad0f04025219cbcfb0597d44f5bbeb88829396c7f92ad03ba42f72a5e92ad9dc8cc6908018c7992324a39c17033bde27ac689efc4b68eb8185777b9e28019b380d8a470f4df33010f4415e494a083eee72d4498d8f4277fcce69bdea7c928e1f3779b71604e4d89bd0b2858b2a8023be314a3ed9cffd9d43b990fd85f3f27c5502ce4fc4c1b21c2b6a08409378efb9b328e4103a537f92189de1c39c8f0df45eb9481861e4a7bfd18e89afecbe18be488fb91915a1416f0f8a03395cef7e37fdae694616ea6de24c9d96a250b8770594d19abfe5de3805be3d40d8a5a26c23d96e5448a1ddc953d52d9a7329c1f95f2a1ce30c500c4f90aaedee9f71231d0256ae03b067d4de87f447880981550b4ba3ec7b675236c0c06860d7fd478877eff0cd92866ebd6cb16c62e2a2f129c0902ba93f2a619f5027d8770f3e57effce3de700952b35a6ff0a333b624af4e1b9187662704ff31bce0168fe4419259fa7fc56570cef2379b34526e74d251460497b68cd8fd9c9d11aee0b88fa1b4451e4b86aadac2fb9123eff027cce0d008df0605abc7ab46d3a60d7f5cf8bf16bd2daaa2b197d7143e30f66fc8d87e0bb6d63ed9947af272abb27421560b24080664f262fbbb40829f49bc54a5a0b6ebda049db3dde91204da864e5573f56d0b280266f7c6093d81b9b0ac1ba43f780ee6e3a293bf3f07f79a9f472defed0bec7b63d470cee5a1a88e7ba4a7ba1c2cd6013bbb00c0291d71d99ff0cf41b5e558cfb2462427a0f258ef84b6efec9d8c943917e780ddfa607bc10c73bbbb81de3fc124b47e11eb2c62e59d1592e5b7d49881fbd2a33af8d2626e992604803ff7af96d1b64e867a395718fd8c907ffd39475e3572f2690c48c81d17d6d871e12abb7c1fe1148d1d5916642634d38444a6b4e02345e7ff49c71e647cb56567a36b18e1a417038fe2c6e93a03b6f1b0ab41f91efc1c1d870b256656b62dc4c986c2faae34e576435b910767745e54d3eb965e882a1333ad2a9510702c9d75f59326baee5669a0721dbde3c6e6b1b86db488e5ead1b58febd64381014bc939fd77cbf70cdb325bdbc790ec9f5a70d5b78fc9b9f539bc5429e80b42e9fd7b2eaaf3691c543939696a163ff7efcbdc9e65f4069ddfd54727cee786d090e532e430b5433f005ce155d516ac4e4524e1a1463eaba029204ec1511e3b28a27637f371853907a5945270b6eb50b730f69d6d9c99b14caae28592b9eddc6027d965ed686d44b1bf3e364094ef6af634ce8439bb24e2448c1c3b9a53a77ef8669c0ebbd2c2ac86a1d401b5f1520d217e651fe92b9c42a924732b8d3a94e1f8a61a2a36e5f24d9bf39ec1719e55fd5cf18b089c399bd8090f45fb624f30f82e19066506e4859feb6cc3b0ce0e60162634601cb532e6733f99e45c05682d648189c4561ea11cdb461385847727b2ea81c1f7bb92027b7372dd4ba4d6d6de4a3caf138bd6e0eb87d02ef79ca81f7a6a9a9c965220df51ef4310e1fd07528c1b1a8e2e215083d2ff2e9036dd0d210c6930813d00e713a8b43a12a2e0a084ed1e46dd8c52c19e422b27140d911db6f2c6c994571df20fae6b3a4350951299c46d3a4731c5df2371e2810ef116bd43bc46bbf4deb9428af4f18dc9a6cf044af55b3c02b87a3fbb9954a369308a5d75700a54857c2ee463b75b2e8274774caed3b46bba9469a019133be98adac1a20763fbfaf622ba9a341f39abd176812a8dd71e0a74c8637a7d64575418f06a787fa8475c544de9f95b8b3a800eb2bba007d58e8a92e9d58458adff54d3a0f7ebf82f16ae9530b606c9e315fa322fa30b724d194137ffbc7518d56621b7c2b1e82267d5a1b10d785fb2773a0ffa423b39d2a48aeac72a1c47b4060ccd998a826f15006fd1f14fd68f151cb8da0055c6c8e3748d6a8c5a670e5eefafc105550ecc6815d9bd915e621a41580c2050d061caf5b235a0b70f85b8e578babf737cca0f28d9cc4d0623c02bc33a1fc2565618d594da8cd7a127c2ea07de23f1dabafc942ae7339050e459c07e67498dd3b801db7bb098bccacd6fa0799cbef0b2d4f53e280f8af56258020639da6fd6cc107d7b9fd3c413c45c10130788c0f8ea07b71609e8dd52d8f9021e9f6fa8d360548abe2ffe90bde852f9bcbbf811ec540068acf204f6fcefb2d2f110ab5713d7ff3e2270da17bcc8cf779c09078f0988f3a131516faa1acc308bf610f0de7567a324f1291a95eeb826145ce55252a6d3ab0039a9f8dacf4ae3df4f2e374596b1e58fea9c7991f996476e879be052cc6f84ccee7bce065f6237ec7979d2527d0cba2be59ab25288c11d2542f5d9283b17fd887145605cc2470920551ac4bbdb9160741c8b43e45a7b277453feb258aff9335339d20e1b0e14a21ee682cc0836a4cb6b7181492e112cb3a5e812999e5d9b74d5c8de327a3d03e8bf7f4ed4d6f25157f79f029539c227282725782c5b6ec7d2cdb127d69fc8f28daeab0809069a9fa91c021b6514d00b5338bdb7f4131213fab2002e2a53162a17376d741716a460db4d0770b670b1914", @nested={0x11b, 0xa9, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@multicast2}, @generic="4997076ea3c921f6fe82fd261598f5b180f28737db9106837fd2d8c1947a9d18809a318373a5c5e287aa1ea94fc12904f2b950f3e4f2ebd054eeff40a3fbe925e5d60540386497cd7ca2fe9227d43275b25c04b13fc5350e46b1792455623df991cfb25e5aa41a68970b79c6905bffc46be6f6897687bb07dc6328d1d9bb387c3875af6cf6f8ecdf7402ec9ef2dfd3fdb7b03e3313c89a1a4e809844a7f1b572068ced24fe5f753fa5f87eea1b4d0a8629ba4be30e0c567b6793", @generic="59c3d36e94ef575b46523a714f181e6ca15d62db0c", @nested={0x4, 0xb1}, @nested={0x4, 0xb6}, @nested={0x4, 0x119}, @nested={0x4, 0x30}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@remote}]}]}, @nested={0x10c0, 0xa3, 0x0, 0x1, [@generic="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", @generic, @generic="f4c22c00a9436de9d3342e2a0e0cae27d0bd998471487a60053ab389bb4a9b1217388a4a6612aebd3d3f18770791f27801d1552eca70e162a244f63d7f7fb893ada2efb3d9ee722458745406ca1ffc57f5fdf14fc528e3d69828007809371d0481b33114d27d768f89a7b525a9170207c1d3740bd8328dbcd548105f488c4b256f24", @generic="157800e42f6480cb04bad7a6ad81a9f66c4e63777428b363ffdb6547fd6f9788d0056fd7441783671d559d40852244fca08d382ff5e6aae62e8a"]}]}, 0x2218}], 0x2}, 0x4000000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1b0, 0x7, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xda, 0x7, 0x1, 0x0, "352393b4d133c36851acff4a221b14456ee208e43fa18c6dd79d714accb3399cae4f7d8c06f12372b80e3e43bf34ade10307e8a9e0a29aea73393f2fbbd0026ef1e5f1ea957eb373c0a352136d213ccb83b9d788143360395841aace47c4f6bb14c6eaf831065557dbdffc4cc3f86adfa7b698c261e56ca63e40a5a171fb7f653ed67cd3fd86c23a09951e4f004329d2403a293321618c7ce8006db43977fcb43c542e200383df6eea3d10005d0e430c974da70898fc683bb1ea43709aaadf4780bd96f46c77f9f79178997a737963773648050b9f30"}, @NFTA_RULE_USERDATA={0x99, 0x7, 0x1, 0x0, "09c247311d59971f9e139b7d0d6df3fdd805dea1cee12495d96a7eab035a7a107427e2f1effecbd3e342051f6988d26efb200bd453589749697dd8dbad9edf7430482d646b727c6dd7912c74343123f525ea7f08fb81b1ccda8e01f7e5342f59ff66aabc23d64ac6fc2237e4464d92ddcadaf975420c282e42c704b823c3a3a68ab29d022e15d644dd07678ecf9fd87bebff6a81af"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004000) execveat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x40) 94.947703ms ago: executing program 0 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000100)=0x23, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d8200000000000000000000ffffff00"}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x22, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2000000, 0x0) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0}, 0x0) 94.506753ms ago: executing program 2 (id=17): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000000c0)) timerfd_create(0x0, 0x80800) syz_usb_connect$uac3(0x3, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x245f, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x20, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x25, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xf, 0x2}, [@selector_unit={0x5, 0x24, 0xc, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xff, 0x9, 0x8, {0xa, 0x25, 0x25, 0x0, 0xa, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5f, 0x2, 0x0, {0xa, 0x25, 0x25, 0x0, 0x10, 0x905}}}}}}}}]}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYRES16], 0xd0060) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)) 61.387476ms ago: executing program 3 (id=18): r0 = syz_clone(0x8000cc11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x102200, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, 0x0) io_submit(r3, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r2, 0x0, 0x0, 0x800, 0x0, 0x6, r2}]) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0107000e1001006e657464657673696d0000000f0002006e657464657673696d3000"/46], 0x34}}, 0x24000040) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r8, @ANYBLOB="dd2a780500000000000000844a"], 0xb0}, 0x1, 0x0, 0x0, 0xc080}, 0xd4) setpgid(r1, r0) r9 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0xd145}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0x8, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r9, &(0x7f0000000100)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="000f09000000000cec388639aae697"], 0x0}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x40, 0x3}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d00)=ANY=[@ANYBLOB="20810100004b262201e843733a8eb1415e685930"], 0x0, &(0x7f00000002c0)={0x20, 0x83, 0x1, "e4"}, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r9, &(0x7f0000000100)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="000f09000000000cec388639aae697"], 0x0}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x40, 0x3}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d00)=ANY=[@ANYBLOB="20810100004b262201e843733a8eb1415e685930"], 0x0, &(0x7f00000002c0)={0x20, 0x83, 0x1, "e4"}, 0x0, 0x0}) syz_usb_control_io$uac3(r9, 0x0, 0x0) syz_usb_control_io$uac3(r9, 0x0, 0x0) (async) syz_usb_control_io$uac3(r9, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r10, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/181, 0xb5}, {0x0}], 0x2, 0x80, 0x800003) (async) preadv(r10, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/181, 0xb5}, {0x0}], 0x2, 0x80, 0x800003) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000680), 0x900, &(0x7f00000006c0)={@align=0x5, {0x5, 0x6, 0x24fa, 0x4}}, 0x8, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000680), 0x900, &(0x7f00000006c0)={@align=0x5, {0x5, 0x6, 0x24fa, 0x4}}, 0x8, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)}) io_submit(r3, 0x9, &(0x7f0000000c80)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4, 0x8, r5, &(0x7f0000000280)="de0cc03f02a7ca5bfe73df3b4a2efa2d852dc05a45080b05e0b132029d09f958abcc1236bf704e586ba0d855f7", 0x2d, 0x8, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000000340)="fc3985a8be0c42179b5c8d61043a999551163b3e84f4972d60fe4da6f5aaf128af52ae11ea11906367f4db35370bb6cff09fb463b5", 0x35, 0x9, 0x0, 0x3, r10}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7fff, r7, &(0x7f0000000500)="6453f603ffb1290b0c815fa5df33175f53fa9db9e70215dd070c1cb718f08de83c81b89682d88e08630b800f4feafd999807d6c7b85e7b0a0a8b81c8e05e09a3d865e490032d0edb5e71612ba3084f8e6a0d10f2249f8f3ecbdc38b031f6152f793dc4df8eaa7ecb21e6501ea975e60a9a11161136e7855f73f07aee84e70c40ae0c60219624e46fc2165dd6011b33c2cbe71f9f89efdda683bddfa5dd3added83365eeda26da7e3ca1807c4f7bdc4b5fcc90b7acce76973dd893e5a84c05c5eb76e8da56ea4", 0xc6, 0xfffffffffffffff8, 0x0, 0x0, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1000, r2, &(0x7f0000000640)="c3152430e6f4f6f2749e2d7d0206e4bef63969", 0x13, 0xd5e9, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xa, r7, &(0x7f0000000800)="6c007900a1e07969f191894562b7b0810bbf0c8f986e1353d72e0cf75a38456b317ec49d8e876c8091214d12b2680ae50a23852d0312dab0a7cf0a54f117bd24a23568ed8acc8c65599102676aecaf9af894b34ae71175455ea294e3029458b6ce25e455640579f38893b9b77169e7a8da7a9c3f8d10f68e35a11916ffa9a640ad515d346df2ce9665ce51", 0x8b, 0x8000000000000001, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000900)="23bd8b5fb54c0d05023a6eaf8f66e8992d64ce501de3566f4aa62ad7c36c19d50413e7f0524034a7ef7978df6feadfd38bc641a6a7449326361aefa97b831ff6e1c7bd969fc190605de6cf67acbfb84b1d6e69e3a19d1cc0a72319698d891cfa21871462d36a1abb011b", 0x6a, 0x0, 0x0, 0x3, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x4, r8, &(0x7f00000009c0)="aae430e3995c53675f02b946ca2a381fade5350d95eb163d2831f2ac875b70d97b6962074931bdaacc61a5b48654aa29dd9ce12bfe05b07bb87250dcdeaed52a09f4a52c6420532f98125b7504f55370be6f2b4ffbcaa6ec34faed13c5d702a8da9a12b2b3f8c499ae187dcd49a6dd5005fe3553d909bbb5bc08e21a301ebcc6da4ae1f36edbac22ceb0b888a7120159857d0ae5628bdb8de3eb86823d06eb07dee3c6de6224f27f5c9d66244953b6fadbf7fca50ca65d1b9319231b0bada15c3c2188f718b22ee7375ae9610d25534e3e405cb955fbd8c8150e102726b0fa76d8e9afa434e07635b62ef8809dc9bb3a5cebdf", 0xf3, 0x8001, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x6, 0x10, r5, &(0x7f0000000b00)="f7a6d597444583b5686734b4aecd39c7f65a3854ce2645a7a2bcdb46a6c635218bdd7eca4c0084adb82a1b20b1cacf9a8941b9649ec1ce95f8badbaa1ec5478f7df1d445703372686ce6ab6ef3c980d9dd1afeb392", 0x55, 0x8, 0x0, 0x3, r2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x7, 0x8001, r8, &(0x7f0000000bc0)="777e5c2ab353913ae569028517b0813b568e3ec9390111882e8df95220de779e42838e72f3a46b2197cb03fb25af8c8127e52c3998ebc8181d5693ad5955a4a00dcb0c630a61e1a17f05139012a8d59efd3ffdea4ce0399b8f5fe8ef3be176e5ab1a2ea1d385c94fdb586372b33fe1925c7645", 0x73, 0x3, 0x0, 0x1, r2}]) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x1, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r12, 0x2) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 29.092638ms ago: executing program 0 (id=19): mkdir(&(0x7f00000003c0)='./file0\x00', 0x93) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, 0x0) 13.311199ms ago: executing program 0 (id=20): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001feeb8409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a54604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) 0s ago: executing program 0 (id=21): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000001c0)=0xfffffffe, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x8, 0x3, 0x4}}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x8080, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x2, 0x65, {{0x26, 0x4, 0x1, 0x4, 0x98, 0x65, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @timestamp={0x44, 0x1c, 0xf5, 0x0, 0x4, [0x800, 0xfffffffd, 0x1, 0x2, 0x6, 0x400]}, @noop, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x7, [0x756, 0xe, 0xffff]}, @ra={0x94, 0x4}, @cipso={0x86, 0x52, 0x3, [{0x1, 0x7, "82bc8a441e"}, {0x6, 0xc, "210c3274a373c79cba5f"}, {0x7, 0xf, "309938657dcfee97055f547ed7"}, {0x1, 0x4, "8ab4"}, {0x0, 0x2}, {0x7, 0x12, "1fe68ff141d68a2b7335a8a0a2cb68d8"}, {0x7, 0x12, "ca93f5f90ebf054c829b666d4fc93288"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', r2, 0x2f, 0x4, 0xc4, 0x0, 0x4, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80, 0x700, 0x101, 0x5fa}}) write(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 22.247722][ T36] audit: type=1400 audit(1775565914.240:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.248900][ T282] cgroup: Unknown subsys name 'net' [ 22.270832][ T36] audit: type=1400 audit(1775565914.240:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.298910][ T36] audit: type=1400 audit(1775565914.270:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.299110][ T282] cgroup: Unknown subsys name 'devices' [ 22.486287][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.492062][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.645558][ T36] audit: type=1400 audit(1775565914.640:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.669533][ T36] audit: type=1400 audit(1775565914.640:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.680555][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.695215][ T36] audit: type=1400 audit(1775565914.640:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.727174][ T36] audit: type=1400 audit(1775565914.690:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.745618][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.753491][ T36] audit: type=1400 audit(1775565914.690:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.789277][ T36] audit: type=1400 audit(1775565914.730:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.815186][ T36] audit: type=1400 audit(1775565914.730:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.541319][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.548535][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.555880][ T289] bridge_slave_0: entered allmulticast mode [ 23.562591][ T289] bridge_slave_0: entered promiscuous mode [ 23.571572][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.578795][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.586678][ T289] bridge_slave_1: entered allmulticast mode [ 23.592985][ T289] bridge_slave_1: entered promiscuous mode [ 23.724483][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.731964][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.739447][ T290] bridge_slave_0: entered allmulticast mode [ 23.746161][ T290] bridge_slave_0: entered promiscuous mode [ 23.762334][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.769631][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.776851][ T290] bridge_slave_1: entered allmulticast mode [ 23.783170][ T290] bridge_slave_1: entered promiscuous mode [ 23.792602][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.799806][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.807104][ T292] bridge_slave_0: entered allmulticast mode [ 23.813387][ T292] bridge_slave_0: entered promiscuous mode [ 23.820149][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.827451][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.834957][ T292] bridge_slave_1: entered allmulticast mode [ 23.841318][ T292] bridge_slave_1: entered promiscuous mode [ 23.862855][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.870144][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.877471][ T295] bridge_slave_0: entered allmulticast mode [ 23.884116][ T295] bridge_slave_0: entered promiscuous mode [ 23.893513][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.900725][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.908216][ T295] bridge_slave_1: entered allmulticast mode [ 23.914777][ T295] bridge_slave_1: entered promiscuous mode [ 24.020428][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.027635][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.034981][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.042374][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.093726][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100897][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.108314][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.115649][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.131853][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.139047][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.146368][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.153625][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.174295][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.181643][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.189418][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.196747][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.225339][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.232922][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.240990][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.248736][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.256585][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.264409][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.272196][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.279965][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.296355][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.303422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.311183][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.318655][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.340957][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.348246][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.360193][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.367533][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.383345][ T289] veth0_vlan: entered promiscuous mode [ 24.397499][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.404720][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.416139][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.423430][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.446202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.461865][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469417][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.492775][ T289] veth1_macvtap: entered promiscuous mode [ 24.512940][ T290] veth0_vlan: entered promiscuous mode [ 24.542245][ T292] veth0_vlan: entered promiscuous mode [ 24.556688][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.575377][ T295] veth0_vlan: entered promiscuous mode [ 24.583608][ T290] veth1_macvtap: entered promiscuous mode [ 24.616016][ T292] veth1_macvtap: entered promiscuous mode [ 24.625775][ T295] veth1_macvtap: entered promiscuous mode [ 24.701704][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.721060][ T325] overlayfs: workdir and upperdir must be separate subtrees [ 24.884468][ T319] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.964107][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.005302][ T339] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 25.014401][ T338] 9pnet: p9_errstr2errno: server reported unknown error *– [ 25.034317][ T342] process 'syz.3.9' launched './file0' with NULL argv: empty string added [ 25.035083][ T319] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 25.054856][ T319] usb 2-1: config 0 has no interface number 0 [ 25.061050][ T319] usb 2-1: config 0 interface 41 has no altsetting 0 [ 25.070240][ T319] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 25.080709][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.089017][ T319] usb 2-1: Product: syz [ 25.093199][ T319] usb 2-1: Manufacturer: syz [ 25.098311][ T319] usb 2-1: SerialNumber: syz [ 25.106219][ T319] usb 2-1: config 0 descriptor?? [ 25.113728][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 25.120455][ T306] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 25.129422][ T306] usb 3-1: config 0 has no interface number 0 [ 25.136142][ T306] usb 3-1: config 0 interface 184 has no altsetting 0 [ 25.145126][ T306] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 25.155310][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.163546][ T306] usb 3-1: Product: syz [ 25.168180][ T306] usb 3-1: Manufacturer: syz [ 25.173153][ T306] usb 3-1: SerialNumber: syz [ 25.179246][ T306] usb 3-1: config 0 descriptor?? [ 25.186409][ T346] FAULT_INJECTION: forcing a failure. [ 25.186409][ T346] name failslab, interval 1, probability 0, space 0, times 1 [ 25.199983][ T346] CPU: 0 UID: 0 PID: 346 Comm: syz.3.11 Not tainted syzkaller #0 916f3d974aa0fa32e8d6ac226cea77ce335b314b [ 25.200011][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 25.200026][ T346] Call Trace: [ 25.200032][ T346] [ 25.200039][ T346] __dump_stack+0x21/0x30 [ 25.200080][ T346] dump_stack_lvl+0x140/0x1c0 [ 25.200101][ T346] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.200124][ T346] ? __kasan_check_write+0x18/0x20 [ 25.200149][ T346] ? copy_mm+0x2f7/0x1d70 [ 25.200170][ T346] dump_stack+0x19/0x20 [ 25.200190][ T346] should_fail_ex+0x3d7/0x530 [ 25.200215][ T346] should_failslab+0xac/0x100 [ 25.200232][ T346] kmem_cache_alloc_noprof+0x42/0x410 [ 25.200256][ T346] ? alloc_pid+0xa5/0xba0 [ 25.200274][ T346] ? __asan_memcpy+0x5a/0x80 [ 25.200294][ T346] alloc_pid+0xa5/0xba0 [ 25.200310][ T346] copy_process+0x1409/0x32a0 [ 25.200332][ T346] ? __cfi_copy_process+0x10/0x10 [ 25.200352][ T346] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.200376][ T346] ? __kasan_check_write+0x18/0x20 [ 25.200399][ T346] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 25.200418][ T346] vhost_task_create+0x1f7/0x400 [ 25.200435][ T346] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 25.200454][ T346] ? __cfi_vhost_task_create+0x10/0x10 [ 25.200471][ T346] ? __cfi_vhost_task_fn+0x10/0x10 [ 25.200488][ T346] ? __kasan_check_write+0x18/0x20 [ 25.200510][ T346] ? mutex_lock+0x97/0x1d0 [ 25.200528][ T346] ? __cfi_mutex_lock+0x10/0x10 [ 25.200546][ T346] ? kernel_text_address+0xa9/0xe0 [ 25.200567][ T346] kvm_mmu_post_init_vm+0x161/0x300 [ 25.200590][ T346] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 25.200614][ T346] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 25.200636][ T346] ? kstrtoull+0x13b/0x1e0 [ 25.200656][ T346] ? kstrtouint+0x78/0xf0 [ 25.200675][ T346] ? ioctl_has_perm+0x1bc/0x500 [ 25.200697][ T346] ? __asan_memcpy+0x5a/0x80 [ 25.200719][ T346] ? ioctl_has_perm+0x408/0x500 [ 25.200741][ T346] ? has_cap_mac_admin+0xd0/0xd0 [ 25.200762][ T346] ? __kasan_check_write+0x18/0x20 [ 25.200785][ T346] ? mutex_lock_killable+0x97/0x1d0 [ 25.200804][ T346] ? __cfi_mutex_lock_killable+0x10/0x10 [ 25.200824][ T346] ? proc_fail_nth_write+0x184/0x220 [ 25.200847][ T346] kvm_vcpu_ioctl+0xa48/0x1000 [ 25.200874][ T346] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.200910][ T346] ? __cfi_vfs_write+0x10/0x10 [ 25.200935][ T346] ? __kasan_check_write+0x18/0x20 [ 25.200959][ T346] ? mutex_unlock+0x90/0x240 [ 25.200977][ T346] ? __cfi_mutex_unlock+0x10/0x10 [ 25.200996][ T346] ? __fget_files+0x2c5/0x340 [ 25.201013][ T346] ? __fget_files+0x2c5/0x340 [ 25.201029][ T346] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.201049][ T346] ? security_file_ioctl+0x3e/0x110 [ 25.201070][ T346] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.201094][ T346] __se_sys_ioctl+0x135/0x1b0 [ 25.201111][ T346] __x64_sys_ioctl+0x7f/0xa0 [ 25.201127][ T346] x64_sys_call+0x1878/0x2ee0 [ 25.201150][ T346] do_syscall_64+0x57/0xf0 [ 25.201174][ T346] ? clear_bhb_loop+0x50/0xa0 [ 25.201191][ T346] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.201216][ T346] RIP: 0033:0x7f91f2f9c819 [ 25.201239][ T346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.201254][ T346] RSP: 002b:00007f91f19f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.201278][ T346] RAX: ffffffffffffffda RBX: 00007f91f3215fa0 RCX: 00007f91f2f9c819 [ 25.201292][ T346] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 25.201303][ T346] RBP: 00007f91f19f7090 R08: 0000000000000000 R09: 0000000000000000 [ 25.201315][ T346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.201327][ T346] R13: 00007f91f3216038 R14: 00007f91f3215fa0 R15: 00007fff1b53f328 [ 25.201342][ T346] [ 25.202590][ T306] smsc75xx v1.0.0 [ 25.513892][ T319] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 25.516409][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 25.526381][ T319] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 25.545810][ T306] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 25.557904][ T319] usb 2-1: USB disconnect, device number 2 [ 25.566839][ T306] usb 3-1: USB disconnect, device number 2 [ 25.855762][ T292] ------------[ cut here ]------------ [ 25.861429][ T292] WARNING: CPU: 0 PID: 292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 25.869922][ T292] Modules linked in: [ 25.874815][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 916f3d974aa0fa32e8d6ac226cea77ce335b314b [ 25.886741][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 25.897415][ T292] RIP: 0010:drop_nlink+0xce/0x110 [ 25.902663][ T292] Code: 04 00 00 be 08 00 00 00 e8 df 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 d4 b1 03 cc e8 d2 dc 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 25.922794][ T292] RSP: 0018:ffffc9000115fc60 EFLAGS: 00010293 [ 25.929035][ T292] RAX: ffffffff81f1ce0e RBX: ffff88810ebd1a78 RCX: ffff88810f65df00 [ 25.937260][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.945318][ T292] RBP: ffffc9000115fc88 R08: 0000000000000003 R09: 0000000000000004 [ 25.953396][ T292] R10: dffffc0000000000 R11: fffff5200022bf7c R12: dffffc0000000000 [ 25.961498][ T292] R13: 1ffff11021d7a358 R14: ffff88810ebd1ac0 R15: 0000000000000000 [ 25.969704][ T292] FS: 000055557e61d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.978727][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.985370][ T292] CR2: 000055557e640948 CR3: 0000000102f8a000 CR4: 00000000003526b0 [ 25.993388][ T292] Call Trace: [ 25.996907][ T292] [ 25.999861][ T292] shmem_rmdir+0x5f/0x90 [ 26.004281][ T292] vfs_rmdir+0x3e3/0x560 [ 26.008633][ T292] incfs_kill_sb+0x109/0x230 [ 26.013469][ T292] deactivate_locked_super+0xd8/0x2a0 [ 26.019284][ T292] deactivate_super+0xb8/0xe0 [ 26.024188][ T292] cleanup_mnt+0x406/0x4a0 [ 26.028728][ T292] __cleanup_mnt+0x1d/0x40 [ 26.033188][ T292] task_work_run+0x1e8/0x260 [ 26.037946][ T292] ? __cfi_task_work_run+0x10/0x10 [ 26.043114][ T292] ? __x64_sys_umount+0x12e/0x180 [ 26.043885][ T319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.048232][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.061688][ T292] ? __kasan_check_read+0x15/0x20 [ 26.066986][ T292] resume_user_mode_work+0x35/0x50 [ 26.072441][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 26.078081][ T292] do_syscall_64+0x63/0xf0 [ 26.082641][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.087588][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.093852][ T292] RIP: 0033:0x7fdf19b9da57 [ 26.098305][ T292] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.119004][ T292] RSP: 002b:00007ffcd4f22a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.127759][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf19b9da57 [ 26.136080][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd4f22b40 [ 26.144301][ T292] RBP: 00007ffcd4f22b40 R08: 00007ffcd4f23b40 R09: 00000000ffffffff [ 26.152391][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd4f23bd0 [ 26.160495][ T292] R13: 00007fdf19c32048 R14: 00000000000064e0 R15: 00007ffcd4f23c10 [ 26.168708][ T292] [ 26.171891][ T292] ---[ end trace 0000000000000000 ]--- [ 26.178275][ T292] ================================================================== [ 26.186727][ T292] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 26.193960][ T292] Write of size 4 at addr 0000000000000168 by task syz-executor/292 [ 26.202581][ T292] [ 26.205123][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 916f3d974aa0fa32e8d6ac226cea77ce335b314b [ 26.205163][ T292] Tainted: [W]=WARN [ 26.205170][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 26.205182][ T292] Call Trace: [ 26.205190][ T292] [ 26.205198][ T292] __dump_stack+0x21/0x30 [ 26.205231][ T292] dump_stack_lvl+0x140/0x1c0 [ 26.205253][ T292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.205277][ T292] print_report+0x3d/0x70 [ 26.205299][ T292] kasan_report+0x162/0x1a0 [ 26.205319][ T292] ? ihold+0x24/0x70 [ 26.205337][ T292] ? _raw_spin_unlock+0x45/0x60 [ 26.205363][ T292] ? ihold+0x24/0x70 [ 26.205379][ T292] kasan_check_range+0x25a/0x2b0 [ 26.205398][ T292] __kasan_check_write+0x18/0x20 [ 26.205422][ T292] ihold+0x24/0x70 [ 26.205438][ T292] vfs_rmdir+0x26a/0x560 [ 26.205459][ T292] incfs_kill_sb+0x109/0x230 [ 26.205481][ T292] deactivate_locked_super+0xd8/0x2a0 [ 26.205507][ T292] deactivate_super+0xb8/0xe0 [ 26.205526][ T292] cleanup_mnt+0x406/0x4a0 [ 26.205544][ T292] __cleanup_mnt+0x1d/0x40 [ 26.205560][ T292] task_work_run+0x1e8/0x260 [ 26.205582][ T292] ? __cfi_task_work_run+0x10/0x10 [ 26.205602][ T292] ? __x64_sys_umount+0x12e/0x180 [ 26.205625][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.205647][ T292] ? __kasan_check_read+0x15/0x20 [ 26.205671][ T292] resume_user_mode_work+0x35/0x50 [ 26.205697][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 26.205721][ T292] do_syscall_64+0x63/0xf0 [ 26.205746][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.205780][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.205808][ T292] RIP: 0033:0x7fdf19b9da57 [ 26.205826][ T292] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.205842][ T292] RSP: 002b:00007ffcd4f22a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.205863][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf19b9da57 [ 26.205877][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd4f22b40 [ 26.205889][ T292] RBP: 00007ffcd4f22b40 R08: 00007ffcd4f23b40 R09: 00000000ffffffff [ 26.205902][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd4f23bd0 [ 26.205914][ T292] R13: 00007fdf19c32048 R14: 00000000000064e0 R15: 00007ffcd4f23c10 [ 26.205929][ T292] [ 26.205936][ T292] ================================================================== [ 26.225046][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.233903][ T292] Disabling lock debugging due to kernel taint [ 26.255765][ T319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 26.259384][ T292] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 26.278204][ T319] usb 4-1: string descriptor 0 read error: -22 [ 26.281723][ T292] #PF: supervisor write access in kernel mode [ 26.281743][ T292] #PF: error_code(0x0002) - not-present page [ 26.281768][ T292] PGD 80000001333c9067 [ 26.290174][ T319] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 26.290468][ T292] P4D 80000001333c9067 [ 26.299667][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.304804][ T292] PUD 0 [ 26.304830][ T292] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 26.304850][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G B W syzkaller #0 916f3d974aa0fa32e8d6ac226cea77ce335b314b [ 26.304878][ T292] Tainted: [B]=BAD_PAGE, [W]=WARN [ 26.304883][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 26.304893][ T292] RIP: 0010:ihold+0x2a/0x70 [ 26.304916][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd d3 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 26.304930][ T292] RSP: 0018:ffffc9000115fca0 EFLAGS: 00010246 [ 26.604330][ T292] RAX: ffff88810f65df00 RBX: 0000000000000000 RCX: ffff88810f65df00 [ 26.612326][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.620317][ T292] RBP: ffffc9000115fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 26.628410][ T292] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88810ebd1a84 [ 26.636571][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.644646][ T292] FS: 000055557e61d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.653679][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.660291][ T292] CR2: 0000000000000168 CR3: 0000000102f8a000 CR4: 00000000003526b0 [ 26.668458][ T292] Call Trace: [ 26.671909][ T292] [ 26.674873][ T292] vfs_rmdir+0x26a/0x560 [ 26.679276][ T292] incfs_kill_sb+0x109/0x230 [ 26.683908][ T292] deactivate_locked_super+0xd8/0x2a0 [ 26.689327][ T292] deactivate_super+0xb8/0xe0 [ 26.694115][ T292] cleanup_mnt+0x406/0x4a0 [ 26.698556][ T292] __cleanup_mnt+0x1d/0x40 [ 26.702984][ T292] task_work_run+0x1e8/0x260 [ 26.707706][ T292] ? __cfi_task_work_run+0x10/0x10 [ 26.712929][ T292] ? __x64_sys_umount+0x12e/0x180 [ 26.717990][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.723398][ T292] ? __kasan_check_read+0x15/0x20 [ 26.728451][ T292] resume_user_mode_work+0x35/0x50 [ 26.733575][ T292] syscall_exit_to_user_mode+0x63/0xb0 [ 26.739208][ T292] do_syscall_64+0x63/0xf0 [ 26.743659][ T292] ? clear_bhb_loop+0x50/0xa0 [ 26.748371][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.754289][ T292] RIP: 0033:0x7fdf19b9da57 [ 26.758831][ T292] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.778915][ T292] RSP: 002b:00007ffcd4f22a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.787616][ T292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf19b9da57 [ 26.795698][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd4f22b40 [ 26.803892][ T292] RBP: 00007ffcd4f22b40 R08: 00007ffcd4f23b40 R09: 00000000ffffffff [ 26.811897][ T292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd4f23bd0 [ 26.819964][ T292] R13: 00007fdf19c32048 R14: 00000000000064e0 R15: 00007ffcd4f23c10 [ 26.828088][ T292] [ 26.831397][ T292] Modules linked in: [ 26.835797][ T292] CR2: 0000000000000168 [ 26.840337][ T292] ---[ end trace 0000000000000000 ]--- [ 26.845906][ T292] RIP: 0010:ihold+0x2a/0x70 [ 26.850586][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd d3 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 9c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 26.870746][ T292] RSP: 0018:ffffc9000115fca0 EFLAGS: 00010246 [ 26.877281][ T292] RAX: ffff88810f65df00 RBX: 0000000000000000 RCX: ffff88810f65df00 [ 26.885527][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.894024][ T292] RBP: ffffc9000115fcb0 R08: ffffffff88b98947 R09: 1ffffffff1173128 [ 26.902053][ T292] R10: dffffc0000000000 R11: fffffbfff1173129 R12: ffff88810ebd1a84 [ 26.910317][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.918484][ T292] FS: 000055557e61d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.927441][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.934032][ T292] CR2: 0000000000000168 CR3: 0000000102f8a000 CR4: 00000000003526b0 [ 26.942121][ T292] Kernel panic - not syncing: Fatal exception [ 26.948750][ T292] Kernel Offset: disabled [ 26.953185][ T292] Rebooting in 86400 seconds..