last executing test programs: 8m16.224568391s ago: executing program 3 (id=939): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x141040, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x0, 0x7fffffff, 0xc, 0x2f, 0xd, 0xf1, 0x8, 0x4e1, 0x10000, 0x0, 0x8008500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffff, 0x31, 0x1ff, 0x9ea, 0x10, 0x0, 0xfffffffa, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x9a9]}) 8m14.136463467s ago: executing program 3 (id=942): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x9d, &(0x7f0000000300)={0x0, 0xb9d8, 0x80000, 0x3}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB, @ANYBLOB="d0f1a38eda88e82b9b6d86643bb600378a298575c964da8c845fcfccdc767a7b2b7b5783a1c331d5cf27aeda1bc6a18ec25e487a9f8b8ebc6be9a93ca339ef7d2730bb25a3f2366d178ac4631659ce394c913c92a3ec7356328f143606634d4d1396b8f49f7a0aaee65852aaa23d25f9ac9b93b98b7f6a99ce8cc7d3beb74362c5b5f5cf1b1600000000000000000000db6994ef7ce1d1459579b3eb5636a041175beb53fd9c6f2305000000000000000d7540de149255d4e38956494b142221003747de43f50f313925b6536f7700e532d5adaf5c92b6231cdcfb06dde67f9989978119ebb9e6506f0e619a129573df288775668a0c78fcde30d4300238c6df5a2499aa134d291886ad40d4270d97c21d591f571dbb3667749217"], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c00028005000100"], 0xe4}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e24, 0x7, @remote, 0x1}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000740)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x22f}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, r6, 0x7}}, 0x48) 8m13.07979794s ago: executing program 3 (id=946): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x38000, 0x0, 0x200000, 0x0, 0x3b7ed8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1, 0x1) 8m12.866903822s ago: executing program 3 (id=947): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33c"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x2e24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x264, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x238, 0x2, [@m_connmark={0x13c, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x4d, 0x6, 0x1, 0x3ff}, 0x80}}]}, {0xed, 0x6, "f6f50e4f1209659002552e754117d02f6a15ff482c3c396f14a1f4ac27144e0c93e17a1024f3b75c46594d18f8d55845f2172099bba57e57aa1bfd7a277fc130e4bd9b6e419a497e4332ece0da1f0f4a2f2b270dd69379e6e706dd97c6343857be0c8a8de492f828efb2f6dcce47bbc145b1707da9f1fb56830774252588a187ecef0c9e7657235fc43a5eea9754bd2907977e13f7b6506311824636ba267c23556ec56793c72708a1ced9ed89e9e5b4830fdb2b84b25c28d60b3e42179d07e8c7c135e3ca7067087d65fe82416dc1b22141cc48d4ecbb67957af7432a61d87a8ba725e4251424a709"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xf8, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0xcd, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91f782136cdc0714b85775a04918ee4cc6888787bef8a7ea2ff8719f6ea958d1c3bf43b9dab1460884c3fd5343c0ff92e083c9c4643b86542ab19d54d274212f9a29de4e77dbd8df27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2b5c, 0x2, [@TCA_CGROUP_ACT={0x2b58, 0x1, [@m_pedit={0x2b54, 0xb, 0x0, 0x0, {{0xa}, {0x2b28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x3, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0xffffffff, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x2, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0xfffffffe, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x5, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xd0, 0x572, 0x3}, 0x7f, 0x2, [{0xfffffff6, 0x5, 0x7, 0x9, 0x2, 0xd}]}, [{0x8001, 0x3, 0x4, 0x6, 0x9, 0x5}, {0x0, 0x2, 0x40, 0x7e2, 0xfffffffd, 0x7fffffff}, {0x8, 0x1, 0x8, 0x2, 0xb348, 0x400}, {0x101, 0x7, 0x8, 0x2, 0xfffffffa}, {0x6, 0x1, 0x414587ef, 0x8, 0xffffffff, 0x6}, {0x6, 0x9, 0x7fff, 0x9, 0x2, 0x8}, {0x7, 0x9, 0x6, 0x2, 0x1ff, 0x4}, {0xc, 0x5, 0x6, 0xffff, 0x1, 0x2}, {0x0, 0x1b4, 0xf, 0xf8b, 0x7, 0xca}, {0xb, 0x1, 0x5, 0x71, 0xc}, {0x0, 0x0, 0x7, 0x80, 0x66}, {0x8, 0xe4ee, 0x7, 0x6, 0x97, 0x1000}, {0x38ef, 0x6, 0x900000, 0x7, 0x0, 0x4}, {0x0, 0x5, 0xfffe00, 0xe2, 0xffffff00, 0x8}, {0x2, 0xe000, 0x7, 0x1, 0xffffff01, 0x80}, {0xd, 0x7fff, 0x15e, 0x1, 0x3, 0x7}, {0x6, 0xffffffff, 0x6, 0x1ff, 0x7, 0x3}, {0x7f, 0xfff, 0x8, 0xf4, 0x6c0, 0x2}, {0x5, 0x0, 0x8, 0x4, 0xffffffff, 0x5}, {0x400, 0x5, 0x0, 0x7, 0x1, 0x3}, {0x2, 0x8, 0x6a, 0x4, 0x36, 0x8001}, {0x3ff, 0x1, 0x0, 0xffffffff, 0x7, 0x6}, {0x2, 0x8fe, 0x123, 0xd, 0x5, 0x4}, {0xfffffff8, 0x2, 0x6, 0x2, 0x3, 0x6d2}, {0x7, 0xbee6, 0x6, 0x8000, 0x4, 0x1000}, {0x9, 0x9, 0x1, 0x2, 0x0, 0x1000}, {0x0, 0x5, 0xfffffe00, 0x5, 0x8, 0x5}, {0x784, 0x3, 0xfff, 0xfc, 0x200, 0x7fffffff}, {0x9, 0xfffff801, 0x7, 0x686, 0x80000001, 0x9}, {0xc, 0xc597214, 0x9, 0x170e, 0x23, 0x6}, {0x80000000, 0x0, 0x7, 0x3, 0x3, 0xffff}, {0x7fffffff, 0x3, 0x9, 0x6c1, 0xdb, 0xff}, {0x1, 0x8, 0x8001, 0xb, 0x7, 0x3}, {0x10001, 0x2, 0xf, 0x7, 0x100, 0x7}, {0x9, 0x7, 0x0, 0x8, 0x5a40, 0x4}, {0x7fff, 0x39, 0x3, 0x9, 0x236, 0x8}, {0x4, 0xfff, 0x0, 0x8001, 0x40, 0x8}, {0x101, 0x8000, 0x6, 0x1, 0xc57f, 0x1}, {0x1, 0x8903, 0x4, 0x8, 0x1c98}, {0x518e31c, 0x5, 0x1000, 0x2, 0x5, 0x4}, {0x7, 0x2, 0xfd, 0x6, 0x5, 0x1}, {0x800, 0x7fffffff, 0x3, 0xfffff800, 0x10000, 0x8}, {0xc, 0x1, 0x401, 0x3, 0x6d, 0x978c}, {0xa1, 0x9a, 0x44d, 0x9, 0x194, 0x5}, {0x7, 0x0, 0x9, 0xc, 0x6e, 0x7}, {0x5, 0x5, 0x9, 0x101, 0x4, 0x5}, {0x4, 0x0, 0xfffff697, 0x6, 0x6, 0x3}, {0xe, 0x10001, 0xc637, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x3, 0x1, 0xf, 0x87}, {0x2, 0x3, 0x7, 0xa, 0x80000000, 0x9}, {0xfffff461, 0x7ffbffff, 0x71, 0x2, 0x80000001, 0xc}, {0x3, 0x3, 0x8000, 0x7f, 0x9, 0x2}, {0x8, 0x3, 0xffff, 0xe220, 0x9, 0x96}, {0x3, 0x9, 0xffffcaec, 0x6, 0x8, 0xfffffffe}, {0x1, 0x7f, 0x1, 0xffffc3a6, 0x401, 0x9}, {0x40000000, 0x6, 0xffff, 0x7, 0x7, 0x2}, {0xbab7, 0x5, 0x6, 0x1a, 0x5, 0x2}, {0x0, 0xfffffffa, 0x1, 0x80000001, 0x28c, 0x40}, {0xebb, 0x8001, 0x4, 0xa, 0x4, 0x3}, {0x2, 0x35a, 0x2, 0x4, 0x4, 0x3}, {0x2, 0x2, 0x5, 0x3, 0x5, 0x8}, {0x2, 0x4, 0x4, 0xf3, 0x9, 0x3}, {0x2, 0xc51, 0x4, 0x4, 0x3ff, 0x7}, {0xf, 0x0, 0x8, 0x6, 0x1cc, 0x2}, {0x1, 0x5, 0x1, 0x9, 0x100}, {0x5, 0x3, 0x5, 0x8, 0x9, 0x6}, {0x4, 0x4, 0x2, 0x9356, 0x9, 0x392}, {0x400, 0x5ba5, 0x5, 0x3, 0x0, 0x9}, {0xffff1b0f, 0x8001, 0xffffdb93, 0x81, 0xffff, 0x2}, {0x9, 0x5, 0x7, 0x1, 0x8, 0xf}, {0x9, 0x4, 0x80000001, 0x2, 0xfaca, 0x28e}, {0x2, 0x4, 0x3, 0x9, 0x4, 0x37}, {0xdd, 0xb7a0, 0x7f, 0x7, 0x1ff, 0xff}, {0xb, 0x9, 0x1, 0x3, 0x100, 0xf4}, {0x2, 0x6, 0xc1, 0x9, 0x1000, 0x2}, {0x8, 0x3, 0x9, 0x0, 0x0, 0x9e}, {0x8, 0x10001, 0x40ee, 0x7, 0x3, 0x7f}, {0x7, 0x8, 0x4, 0x7f, 0x6a79, 0x4}, {0x487d, 0x0, 0x10000, 0x2a, 0x100, 0x64c4686e}, {0x8, 0xce7a, 0xb, 0x23c9036d, 0x7, 0x10}, {0xff, 0xcfb, 0x80000000, 0x1, 0xe, 0x4d4}, {0x31e0e21f, 0x6, 0x7bd, 0x5, 0x1000, 0x8}, {0xe, 0xb667, 0x610, 0x8, 0x8, 0xd2c5}, {0x80000000, 0x7, 0x7, 0x1ff, 0xa694, 0x4}, {0x2, 0x9, 0x1a1, 0x200, 0xf072, 0xfffff72e}, {0x7, 0x8000, 0x5, 0x4, 0x7, 0x1}, {0x8d56, 0x3, 0xb9, 0x9, 0x10001, 0xfffffffd}, {0xc, 0x4, 0x7, 0xafb6, 0x3a48, 0x8}, {0xf, 0x6, 0x2, 0xa638, 0xffffffff, 0x6}, {0x1, 0x80, 0x200, 0x1ff, 0x3, 0x4}, {0x4, 0x22b4, 0x3, 0x3, 0x9, 0x3a}, {0xe, 0x800, 0x9, 0x6, 0x92, 0x800}, {0xb, 0x4, 0x8, 0x7, 0xed70, 0x2}, {0x1, 0x6ef, 0x80000000, 0x10000, 0x80, 0x5}, {0x8, 0x7fffffff, 0xe5f9, 0x5, 0x80000001, 0x8}, {0x1, 0x10000, 0xb, 0x8000, 0x2, 0xc7}, {0x0, 0x5, 0x8, 0x1f31, 0x61}, {0x7ff, 0xd292, 0x8, 0xfffffffc, 0x3, 0x8}, {0x0, 0x2, 0x1000, 0xffffff98, 0x4800000}, {0x401, 0x9, 0x4, 0x4, 0x4, 0x10001}, {0x5, 0x9, 0xfffffff9, 0x7, 0x9}, {0xe, 0xd94, 0x4, 0x2, 0x4, 0x9}, {0x3ff, 0x3, 0x7, 0xf0f0, 0x7, 0x10}, {0x80, 0xff, 0x101, 0x4, 0x6, 0x8001}, {0x120000, 0x4, 0x7, 0x73a, 0xf48e, 0x1}, {0x10, 0x7, 0x3, 0x0, 0x1, 0xfffffff7}, {0x3ff, 0x9, 0x9e, 0x8, 0x5, 0x7}, {0xa4, 0x2, 0xffff, 0x9, 0x7}, {0xb, 0x9, 0x40, 0xd8, 0x1, 0x3400000}, {0x2, 0x8e, 0x68fc, 0xff, 0x6, 0x5}, {0x2, 0x0, 0x3, 0x9, 0x275, 0x2}, {0x6, 0x1ff, 0x10, 0x5, 0x400, 0xfff}, {0x4, 0x0, 0xffffff80, 0x80000001, 0x1, 0x6}, {0x4, 0x6, 0x0, 0x1000, 0x7feb, 0x4}, {0x4, 0x520c, 0x618, 0x3, 0x6, 0xa}, {0x3, 0x81, 0x0, 0x9, 0x5, 0xffffffff}, {0x7, 0x7, 0x3, 0x0, 0x80, 0x1}, {0x40, 0x3, 0x3, 0x101, 0x0, 0x31}, {0x2, 0xfffffff8, 0x9, 0xf, 0x1, 0x1}, {0xfffffff9, 0x5, 0xb, 0x1, 0x8, 0x1}, {0xfffffff9, 0x7, 0xff, 0x7, 0x8, 0x6}, {0x5, 0xffffffff, 0x7f80000, 0x8001, 0x1000100, 0x4}, {0x5, 0x8, 0x5, 0x5, 0x4, 0xfffffff7}, {0x0, 0xffffff9e, 0x6, 0x5, 0x4, 0x40}, {0x4, 0x0, 0x4, 0x7, 0x47, 0x4}, {0x8, 0x6, 0x81, 0x5, 0x8e6c, 0x6}, {0x8, 0x9, 0xd, 0x7, 0xfffffffd, 0x3}, {0xc9f, 0x1, 0x3, 0x2, 0x5, 0x271}], [{0x3, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x9a2bdb8565d0b58f, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x38776387de302820}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x2dbe85d22b710ec5}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xfbf, 0x4, 0x7, 0x10, 0x4}, 0xe, 0x8, [{0x2a7, 0xfffffffd, 0x9bc8, 0x0, 0xa, 0x9}, {0x5, 0x7, 0x3, 0xb5b, 0x8, 0x3}, {0x7ee, 0xa1, 0xffffff7f, 0x4, 0x2, 0xfff}, {0xffffffff, 0x2, 0x2, 0x9, 0x4, 0x3ff}, {0xe, 0x9, 0x2, 0x6521667, 0x1000}]}, [{0x6, 0x4e98, 0x7c159ba2, 0x9, 0xd9, 0x80}, {0x7f, 0x9, 0x9, 0xfffffffb, 0x100, 0x6}, {0x4, 0x8, 0x4, 0x2, 0x80000001, 0x5}, {0xfe, 0x7fffffff, 0x100, 0x1, 0x0, 0x9d}, {0x0, 0x2e, 0x6, 0x8, 0xba48, 0x1ff}, {0x1, 0xb5, 0x5, 0x2, 0x7, 0xfffffff7}, {0x9, 0x5, 0xf69, 0x8, 0x401, 0x9}, {0x39086aa7, 0xe0, 0x6, 0x1, 0x95, 0x4}, {0x5, 0x8, 0x2, 0x81, 0x4, 0x7}, {0x7, 0x7fffffff, 0x0, 0x0, 0x1, 0x1}, {0x8851, 0x8, 0xffff, 0x5, 0x5, 0x2}, {0x0, 0xffff, 0x8, 0x9, 0x6, 0x5246}, {0x7, 0x7fff, 0x9, 0x7d, 0xb8e, 0x2}, {0xca43, 0x311, 0x800, 0x7fffffff, 0x8001, 0xdf}, {0x698100, 0x5, 0x9, 0x1, 0x800, 0x4}, {0x10000, 0x5, 0x5, 0xc01e, 0x7, 0x400}, {0x5, 0xeb4, 0x4, 0x0, 0x4, 0x5286}, {0x1, 0x9, 0x5, 0x2, 0x0, 0x55}, {0xe9, 0x101, 0x5, 0x2, 0x8, 0x85}, {0x0, 0x2, 0x10001, 0x3ff, 0x99, 0x7}, {0x0, 0x2, 0x1, 0x3, 0x8, 0x9}, {0x6, 0x2, 0x10, 0x9eb, 0x8, 0x949f}, {0x7, 0x7, 0x9, 0x7, 0x40, 0x7}, {0x5, 0x0, 0x4716, 0x4, 0x1, 0x1}, {0x0, 0x7bd, 0x7fff, 0x180a, 0x7fff, 0x7}, {0x45, 0xb, 0x4, 0xb, 0xcb7, 0x6}, {0x7, 0x2374, 0x10, 0x7, 0x9, 0x7}, {0x6, 0x0, 0x8001, 0xff, 0x3, 0x8}, {0x1, 0x8, 0x7, 0xe35, 0x8, 0x7f}, {0x5, 0x6, 0x7, 0xffffffff, 0x401, 0x8}, {0x2, 0x2a0a, 0xea6e, 0x1, 0x8, 0x80}, {0xffffffff, 0x3ff, 0x1, 0x9, 0xf, 0xff}, {0xda, 0x66bf, 0x7, 0xd4, 0x7, 0x5}, {0x8, 0x80, 0x40, 0x10001, 0x0, 0x7ff}, {0x0, 0x0, 0x8, 0x6, 0x5, 0x6}, {0x4, 0x1, 0x9, 0x5, 0x5, 0x3e}, {0x80000001, 0x8, 0x38e, 0xac74, 0x7, 0x10000}, {0x7, 0x3, 0x7, 0x9, 0x49, 0x7fffffff}, {0x3, 0x401, 0x9, 0x0, 0x0, 0x5}, {0x9, 0x6, 0x3, 0x80000001, 0x4, 0x1}, {0x5, 0x0, 0x6, 0x8, 0x80000000, 0x7}, {0x584, 0x7fffffff, 0x5, 0x8000, 0xfffffffc, 0x4}, {0x4, 0x8, 0x3ff, 0x3, 0x1, 0x8}, {0x8001, 0x8, 0xff, 0x5, 0x7f, 0x80000001}, {0x2, 0xc, 0x101, 0x7, 0x6, 0x7}, {0x1, 0x5, 0x101, 0x1, 0x94e, 0x4}, {0xfe, 0x6, 0x5f2, 0x3, 0xfffff000}, {0x9de2, 0x4, 0x80000001, 0x2, 0x6, 0x3}, {0x9, 0x3, 0x5, 0x0, 0x70, 0x4}, {0x213a, 0x8, 0x2, 0x5, 0x7, 0xb2}, {0xfffffff7, 0x1, 0xf9ec, 0x2, 0x7ff, 0x40000000}, {0x7, 0x10001, 0x7, 0x1ff, 0x3, 0x2}, {0x6, 0x2, 0x80000001, 0x0, 0xd, 0x7ff}, {0x4, 0xc, 0x3, 0x6, 0x7, 0x3}, {0x9, 0x0, 0x5254, 0x58, 0x4, 0x927}, {0xffffff74, 0x100, 0x2, 0xfa, 0x81}, {0x9, 0x3, 0x79000000, 0x3, 0x8, 0xfffffffc}, {0x200, 0x9, 0x8d2c, 0xfffffffc, 0x2, 0x10000000}, {0xa, 0x2, 0x40, 0x5, 0xffffffaa, 0x18}, {0x0, 0x3, 0x5, 0x6, 0x0, 0x9515}, {0xd, 0x4, 0x2, 0x7, 0x80, 0xdc}, {0x6, 0x1, 0x1, 0x9, 0x7f, 0x3}, {0x54, 0x3, 0x1, 0x5, 0x800, 0xb}, {0xfffffff7, 0x6, 0x8, 0xffffffff, 0xa, 0x7}, {0x7, 0x9, 0x1, 0x8c, 0xff, 0x795000}, {0x6, 0x80, 0x1, 0x4, 0x7ff, 0x74}, {0x3, 0x7, 0x9, 0x6, 0x4, 0x800}, {0x1, 0x3, 0x8, 0x0, 0x8, 0x8000}, {0xfff, 0x5b, 0x6, 0x8, 0xffffffff, 0x1}, {0x0, 0x0, 0x3, 0x9, 0xb, 0x400}, {0x5, 0x4, 0x3, 0x4f3, 0x9, 0x1ff}, {0x7, 0x401, 0x5, 0x3, 0x6, 0x3}, {0x6, 0x2, 0x4, 0x0, 0x100, 0x6}, {0x35e, 0xd, 0x9, 0x800, 0x4, 0x3}, {0x4, 0x4, 0x10, 0x5, 0xff, 0x3}, {0x2, 0x0, 0xa, 0x80, 0x7f, 0x3}, {0xd110, 0x200, 0xf, 0x8, 0x2d, 0x3}, {0x6, 0x2, 0xda843d7, 0x0, 0x188316d3, 0x8}, {0xb, 0x2, 0x1977, 0xdbe, 0x4, 0x9}, {0xfffffffa, 0x5, 0x1, 0x1, 0x6, 0x7}, {0x7fff, 0x8000, 0x101, 0x4, 0x1, 0x8}, {0x3, 0x10001, 0x9, 0x4, 0x8, 0xffff}, {0x7fffffff, 0x7d79, 0x1, 0x8, 0x9, 0xc}, {0x2, 0x9, 0xb1f4, 0x3, 0x20000000, 0x1fa6}, {0x81, 0x4, 0x80000001, 0x6, 0xc, 0x800}, {0x80, 0x100, 0x0, 0x0, 0x0, 0xfff}, {0x4, 0x8, 0x8, 0x1, 0x5, 0x5}, {0x3, 0x1, 0x5, 0x9, 0x30e6, 0xa}, {0x8, 0x10, 0x5, 0x2, 0x6, 0x8}, {0x83df, 0x4, 0x9, 0x25f1, 0x1, 0x100}, {0x9, 0x3ff, 0x3, 0x6, 0x5, 0x3}, {0x9, 0x80, 0x1, 0x4, 0x6}, {0x0, 0x4270, 0x9, 0x9, 0x9, 0x2}, {0x5, 0x6d5, 0x8, 0xc0, 0x6, 0x3}, {0x40, 0x5, 0x7ff8, 0x4, 0x4, 0xfffffffc}, {0x8, 0x200, 0x5, 0x9, 0x200, 0x8001}, {0x5, 0x80, 0x100, 0x5, 0x7, 0x5d2}, {0x3, 0x8, 0x5, 0xfffffe00, 0x200}, {0xd, 0x1, 0xbb, 0x4, 0x4, 0x2a7}, {0x1, 0x1c000, 0x3, 0x0, 0x4ba2, 0x3}, {0x80000001, 0x8, 0x1000, 0x1, 0x5, 0x6}, {0x6, 0x6000000, 0x80000000, 0x2, 0xfffffff9, 0x7}, {0x2, 0x233, 0x6, 0x134, 0xff, 0x7}, {0x0, 0x7, 0xffffffff, 0xff, 0x2, 0x5}, {0x4, 0x10000, 0x2, 0x0, 0x20ffff, 0x4}, {0x2, 0x7f, 0xffffffff, 0x1, 0x7, 0x80000001}, {0x2, 0x10, 0x8, 0x1fb, 0xee, 0x4}, {0xfffff8b3, 0xff, 0xe, 0x9, 0x1, 0x9}, {0xb, 0x3, 0x7, 0x8, 0x8, 0x800}, {0x4, 0x0, 0x1, 0x1, 0x8000, 0x1}, {0x0, 0x7fffffff, 0x4, 0x800, 0x4, 0x7a9b}, {0x3, 0x6, 0xffff3c3c, 0xaf5a, 0x2, 0xbe0}, {0xec, 0x4f, 0x6, 0x2000, 0x8, 0x1}, {0x3, 0x2, 0x90000000, 0x411, 0x1}, {0x1, 0x1ff, 0x4, 0x7, 0x9, 0x5}, {0x2, 0xe, 0x2, 0x9, 0x9, 0x6}, {0x88ac, 0x401, 0x40, 0x6, 0x9, 0x4}, {0x7fff, 0x1a, 0x8, 0xe468000, 0x400, 0x518}, {0x8, 0x2, 0x74, 0x7, 0x64d6, 0x8000}, {0x3, 0x8, 0x7, 0x1, 0x10001, 0x401}, {0x8, 0x3, 0x464, 0x2, 0x9, 0x81}, {0xa2, 0x3, 0x2, 0x7f, 0x5, 0x7}, {0x2, 0x2bec41ce, 0x0, 0x5, 0x1000, 0x401}, {0x10001, 0x6, 0x2, 0x7, 0x1, 0xe}, {0x1, 0x6, 0xfff, 0xd, 0x0, 0x90}, {0x5, 0x0, 0x1, 0x9, 0x2, 0x2}, {0x4, 0x3, 0x9, 0xe, 0xbf, 0xfffffff8}, {0x9, 0x6, 0x7, 0xd1, 0x81, 0x9}], [{0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x353c1e9c68583be0}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {0x7}, {0x2}, {0x2, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x22bf1690da1ec7cf}, {0x6}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0xf}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4}, {}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x4}, {0xe, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2e24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) 8m9.747900719s ago: executing program 3 (id=955): pipe(&(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="cfe9ef6d6ee1d433ba73a5ddf753c74ac91bc34a934afacb0751028db60a", 0x1e}], 0x1) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000960)='1', 0x1) (fail_nth: 2) 8m8.085165815s ago: executing program 3 (id=958): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000004e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1000000, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x4000087, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) unshare(0x2a020480) unshare(0x2c000400) unshare(0x80) 7m52.607974992s ago: executing program 32 (id=958): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000004e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1000000, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x4000087, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) unshare(0x2a020480) unshare(0x2c000400) unshare(0x80) 4m36.351887119s ago: executing program 0 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYBLOB="5f29e21e12333f6bf8210abc0b3779191d2f5eb33aba5617fd3fca286b090d5b2edca617786e2de7d84f97e5f1becf74cc5698b6a587d8e376fc6498072c7d2260a9617a37486a8e3f6e8a1964c11cd79cc5c2f4"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x101002) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x80000009, 0x0, 0x23}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="3000000009000000000000000000000002"], 0x30) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010730644f0102030109021200010000000009000000000000000000571765ab07da3e9c030a444a380d04c802f13290649318af6b3e546c26529d8f9e4992f975"], 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x2, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}}, 0x80) r4 = syz_open_dev$I2C(&(0x7f0000000680), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000006c0)={&(0x7f0000000700)=[{0x4, 0x0, 0x0, 0x0}], 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xffffffff, 0x4f, 0x0, 0x0) 4m33.201943159s ago: executing program 0 (id=1427): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x9d, &(0x7f0000000300)={0x0, 0xb9d8, 0x80000, 0x3}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="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"], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1ead95c45987dd08df252c0000000c0099000000000057000020"], 0x20}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c00028005000100"], 0xe4}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e24, 0x7, @remote, 0x1}, r5, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000740)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x22f}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, r7, 0x7}}, 0x48) 4m31.079932994s ago: executing program 0 (id=1430): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x66, 0x7f2, 0x48, 0x1, 0xffe0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) (fail_nth: 2) 4m30.353011728s ago: executing program 0 (id=1433): syz_open_dev$usbfs(0x0, 0x76, 0x101301) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="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", 0x2bb}, {&(0x7f00000005c0)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e3", 0x21}], 0x2}, 0x8000) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x1, &(0x7f0000000780)=""/4080, 0xff0}, 0x0) close(r0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001c80)={r3, &(0x7f0000000200)='-n.$\x8d^\'+^,{[\x00', 0x200000, &(0x7f0000000240)={@align=0xc39, {0x4f7b, 0x2}}, 0x8, &(0x7f0000001c00)={@_ha_fsid}, &(0x7f0000001c40)=0x6}) connect$inet(r4, &(0x7f0000001cc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000001780)={'syz0\x00', {0x2, 0x40, 0x1, 0x3}, 0x12, [0x2, 0x2, 0x7, 0x22c0, 0x2, 0x2, 0x6, 0x4, 0x7, 0x1, 0x68, 0x5, 0x8, 0x5, 0xfff, 0x2, 0x9e4b, 0x5, 0x7, 0xade, 0xfff, 0x2, 0x0, 0x1, 0x4000000, 0x6, 0x8, 0x8, 0x8, 0x7, 0xffffff01, 0x2, 0x8, 0xff, 0x8, 0x28b82bb, 0xbe, 0x3, 0x1, 0x6, 0x35d4, 0x4, 0x6, 0x5, 0x8, 0x3, 0x81, 0x0, 0x5, 0xbf, 0x7, 0x7, 0xf9, 0x2, 0x7fffffff, 0xc, 0x1, 0x0, 0xd5, 0x1de, 0x3f, 0xf4a8, 0x2, 0x2], [0x8, 0x3, 0x2, 0x0, 0xfffffff8, 0x1, 0x7, 0x10000, 0x81, 0x59ca, 0x7fff, 0x3, 0x88, 0x101, 0x99, 0x36, 0xff3, 0x6, 0x7f, 0xffff, 0x80000000, 0xfffffff7, 0x8001, 0x0, 0xd, 0x1, 0x3, 0x1, 0x200, 0x0, 0x0, 0x6, 0xfffffaa1, 0x101, 0x7, 0xfe000000, 0xfffffff9, 0xd0, 0x49c2, 0x45, 0x7, 0x8, 0x1, 0x4, 0xc, 0x401, 0x6, 0xff, 0xfff, 0x9, 0xc12, 0x0, 0x66, 0x2, 0x1, 0x800, 0x4, 0xd162, 0x6, 0x8, 0x101, 0x7, 0x458, 0x3ff], [0x5, 0x8, 0xfffffff8, 0x8, 0x0, 0x1, 0x8, 0x80000001, 0xc, 0x6, 0xdd, 0x1, 0xeb8c, 0x2ca4, 0xff, 0x4, 0x2795ba2e, 0x40000000, 0x3, 0xed, 0x0, 0xffffffff, 0x2, 0xa338, 0x2, 0x0, 0x80000000, 0xc1400000, 0x100, 0x8, 0x8, 0x1, 0x8, 0xff, 0x126, 0x1, 0x6, 0x4, 0x9, 0x0, 0xd99, 0x5c, 0x4cf, 0x0, 0x9, 0x0, 0x6, 0x4, 0x39, 0x20000000, 0x4, 0xe7, 0x5, 0x20e, 0x3ff, 0x2d5dcb15, 0x400, 0xb55, 0x800, 0x1, 0x6, 0x0, 0x1, 0x2], [0x5, 0x80000000, 0x8, 0x101, 0x1000, 0x800, 0x7, 0x4, 0x3, 0xfffffffe, 0x4, 0x1, 0x8, 0x915, 0xfffffff9, 0x6, 0x3, 0x4, 0x9, 0x3, 0xffff00, 0x0, 0xfffffffd, 0x3, 0x0, 0x1000, 0x6, 0x1, 0x8, 0x2, 0x8, 0x9, 0x6, 0x2, 0xc5c, 0x80000000, 0x9, 0x2, 0x0, 0xd, 0x6, 0x3, 0xfffffff8, 0x1, 0x2, 0x20000000, 0x8, 0x8, 0x0, 0x5, 0x7, 0x2, 0xfffff800, 0x6, 0x8, 0xffffffff, 0x80000001, 0x6, 0x80, 0x200, 0x2400, 0x3, 0xe, 0x7]}, 0x45c) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/sched/filter\x00', 0x4801, 0x15d) write$selinux_attr(r2, &(0x7f00000002c0)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 4m29.302955902s ago: executing program 0 (id=1434): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000006c0)={0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x400, 0x2) read(r1, &(0x7f0000000a80)=""/4096, 0x1000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000006840)=ANY=[], 0x2f34}, 0x1, 0x0, 0x0, 0x1}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1001}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 4m26.777023234s ago: executing program 0 (id=1440): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 4m11.777658288s ago: executing program 33 (id=1440): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m32.909933404s ago: executing program 6 (id=1680): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000500)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000640)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000000680), 0x4000000000000e4, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x40) syz_emit_ethernet(0x82, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x16, 0x4, 0x0, 0x9, 0x686, 0x67, 0x84ff, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xc1, 0x3, 0x1, [{@private=0xa010100, 0x8a}, {@multicast1, 0xb4}]}, @timestamp={0x44, 0x30, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0, 0x1, 0x5, 0x4, 0x6]}]}}}}}}}, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000b00)={0x20, 0x0, 0xffffffffffffffc5, 0x0, 0x0}) 2m31.155867876s ago: executing program 6 (id=1682): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000aa000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) 2m30.808339329s ago: executing program 6 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) 2m30.711142528s ago: executing program 6 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c0002800a0001006c696d69740000000800024000000000240003"], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e000000070020000100050005000000000000000300000008000000f30000006273000004000000010020e50100100000040000"], 0x58) close(r10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 2m28.739790558s ago: executing program 6 (id=1691): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/pool_threads\x00', 0x1, 0x0) write(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000840}, 0x80) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x80009, 0x3, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x80000004000000, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m27.296299342s ago: executing program 6 (id=1695): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)="c021", 0x2}], 0x1) 2m12.034287671s ago: executing program 34 (id=1695): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)="c021", 0x2}], 0x1) 30.6104002s ago: executing program 7 (id=1919): eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019500)=0x7) socket$inet6(0xa, 0x3, 0x8000000003c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000019580), 0x80, 0x50a00) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000195c0)={{0x200002, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3e, r5, 0x1, 0x2, 'syz1\x00', &(0x7f0000019700)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) r6 = io_uring_setup(0x17bf, &(0x7f00000001c0)={0x0, 0xea9b, 0x40, 0x1, 0x25a}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000300)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000280)={0x6, 0x0, 0x1, '\x00', 0x2}, 0x1) io_uring_enter(r6, 0x0, 0x1, 0x9, &(0x7f0000000380), 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/trace_options\x00', 0x1, 0x184) write(r7, &(0x7f0000000240)="32b9b504499f5ef1d8c97a4cabf7ad9cb4da96e0ed3de40736e8c864ab2d8fd17dd8e749202583c30f8d0dd91c1876ed8a18cf183af7af9cbff1a31d6f684f15", 0x40) 29.281554502s ago: executing program 4 (id=1921): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000019500)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019540)='./sys\x00', 0x1ff) sendto(r0, &(0x7f0000019580)="96002cce5cc8fee55a7634151e9d2aada51d4790d767353753a423cc05a31ad0bfaf485611ed77853350a4831a56595dac6c0823e7c787b3b3bb32a4040541bdbf15f4ea9cbcdd1a2f54990e8dd4e8d43a9b934daf41d3a3939c568bbc285741b880ceee0c1b7691e42619c97b73d11309fc5cbe348091d7ce4eb0f1a23ecbc64a756f91ff7b72080718cd34f9c6b4bdc7321c5537", 0x95, 0x4c840, &(0x7f0000019640)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) mount(0x0, &(0x7f00000196c0)='./sys\x00', &(0x7f0000019700)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019740)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000019780)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000198c0)={0x28, 0x0, 0x2710}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x127) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x10000000, 0xffffffffffffffff, &(0x7f0000000080)=[0x0], 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 29.19279304s ago: executing program 7 (id=1922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002dc0)={{r0}, &(0x7f0000002d40), &(0x7f0000002d80)='%pI4 \x00'}, 0x20) syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x10b241) (async) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x10b241) ioctl$MEMWRITEOOB64(r2, 0xc0184d15, &(0x7f0000000040)={0x40000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.414129517s ago: executing program 4 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000540), 0x492492492492627, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x8001, 0x195) write(r3, &(0x7f0000000440)='0', 0x1) (fail_nth: 2) 23.132730882s ago: executing program 7 (id=1932): eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019500)=0x7) socket$inet6(0xa, 0x3, 0x8000000003c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000019580), 0x80, 0x50a00) r5 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000195c0)={{0x200002, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3e, r5, 0x1, 0x2, 'syz1\x00', &(0x7f0000019700)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) r6 = io_uring_setup(0x17bf, &(0x7f00000001c0)={0x0, 0xea9b, 0x40, 0x1, 0x25a}) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000300)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000280)={0x6, 0x0, 0x1, '\x00', 0x2}, 0x1) io_uring_enter(r6, 0x0, 0x1, 0x9, &(0x7f0000000380), 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/trace_options\x00', 0x1, 0x184) write(r7, &(0x7f0000000240)="32b9b504499f5ef1d8c97a4cabf7ad9cb4da96e0ed3de40736e8c864ab2d8fd17dd8e749202583c30f8d0dd91c1876ed8a18cf183af7af9cbff1a31d6f684f15", 0x40) 22.962233911s ago: executing program 5 (id=1933): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000019580), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000195c0), &(0x7f0000019600)={'syz', 0x3}, 0x0, 0x0, 0x0) lstat(0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x40003) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x2c, 0x1}) connect$inet(r4, &(0x7f00000196c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="ca26ece58b7b5c1d1039ff0864f88ed7fd49927b5063b2e2b503eb9db44632265d57f4bfeb6568935dd5cfba2d98e89ced427930fcf10c0406a4f2bb3c14e810908ed07d4d18857162c82db1d5d249", 0x4f, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000019740)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000100)={0x0, 0x6, 0x61, 0x5}) 21.192812883s ago: executing program 7 (id=1936): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000019580), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000195c0), &(0x7f0000019600)={'syz', 0x3}, 0x0, 0x0, 0x0) lstat(0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x40003) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x2c, 0x1}) connect$inet(r4, &(0x7f00000196c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="ca26ece58b7b5c1d1039ff0864f88ed7fd49927b5063b2e2b503eb9db44632265d57f4bfeb6568935dd5cfba2d98e89ced427930fcf10c0406a4f2bb3c14e810908ed07d4d18857162c82db1d5d249", 0x4f, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000019740)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000100)={0x0, 0x6, 0x61, 0x5}) 20.193744993s ago: executing program 5 (id=1938): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000004e) prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000840), 0x4000087, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) unshare(0x2a020480) unshare(0x2c000400) unshare(0x80) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, 0x0) 18.300707829s ago: executing program 4 (id=1942): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000) getpgrp(0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000193c0)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000019700), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysfs(0xffffffffffffff9c, 0x0, 0x220801, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000019640)=ANY=[@ANYBLOB], 0x0) lseek(r0, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17.310975602s ago: executing program 4 (id=1943): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000006c0)={0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x400, 0x2) read(r1, &(0x7f0000000a80)=""/4096, 0x1000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000006840)=ANY=[], 0x2f34}, 0x1, 0x0, 0x0, 0x1}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="400d0600006f87fa00898a2a"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1001}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 14.235927372s ago: executing program 7 (id=1946): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000) getpgrp(0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f00000193c0)=0x7) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x3, 0x10, &(0x7f0000019640)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.919982236s ago: executing program 5 (id=1948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x7000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002900), 0x651, 0x0) recvmmsg(r4, &(0x7f0000002940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002980)=0x6) unshare(0xe000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000108fdffff01000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c00018008001d0001"], 0x3c}}, 0x0) 11.298716894s ago: executing program 2 (id=1949): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000) getpgrp(0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000019700), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysfs(0xffffffffffffff9c, 0x0, 0x220801, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000019640)=ANY=[@ANYBLOB], 0x0) lseek(r0, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.318016324s ago: executing program 2 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r10 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048e8) write$binfmt_elf32(r10, &(0x7f0000002cc0)=ANY=[@ANYBLOB="7f454c4604074306080000000000000038000000bf0000000e000000070020000100050005000000000000000300000008000000f30000006273000004000000010020e50100100000040000"], 0x58) close(r10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 10.317311623s ago: executing program 5 (id=1951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x7000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002880)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000002940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002980)=0x6) unshare(0xe000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000108fdffff010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c00018008001d"], 0x3c}}, 0x0) 10.314376464s ago: executing program 1 (id=1952): openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000280)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt(r0, 0xfffffff8, 0xbd, &(0x7f00000004c0)=""/126, &(0x7f0000000540)=0x7e) mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x800, &(0x7f0000000300)={0x100008, 0x72, 0x20000, {r0}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x275a, 0x0) r3 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000440)={{&(0x7f000037f000/0x2000)=nil, 0x2000}, 0x1}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="b2450300005c677648e33a404a0df3d414a7540dc04ebc66dc479370"]) 8.963157396s ago: executing program 5 (id=1953): r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./sys/file0\x00', 0x486080, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x7f, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000012c0)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000013c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000001440), 0x2, 0x141102) writev(r2, &(0x7f0000001480)=[{&(0x7f0000001780)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000017c0)='./sys\x00', 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001800), 0x9, 0x32b0c1) getpid() mkdirat(r0, 0x0, 0xda) mount(0x0, &(0x7f0000001840)='./sys\x00', &(0x7f0000001880)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000018c0)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r3) r4 = syz_open_dev$vbi(&(0x7f0000001940), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0xc0400200}, 0xc, &(0x7f0000001a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="3334f4ee7ce84df51c000000", @ANYRES16=0x0, @ANYBLOB="100000000100ffdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000001a80)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0x6, 0x9, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) openat(0xffffffffffffff9c, &(0x7f0000001b40)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000001540)="c72212dcbc6bad1707dd11e199e6f81b46f2ee8232ef292399ebb336e46c5966e7dcbf0b09a6c8f0eaa6ba298f0b9533e24643452da3c3aa170344bda8212c4562078737440668d32c070093d3c8c3685ac70451d522743bd9583dd6a351ddb5ccb9c67a0648928138dfcbb539e1b8049ec19e534e031057b104686bda7673e91845157ce5cf8c7cb90f4bac6741fd57d044941d067ff31f20044dc49153a4416b15951110a459baa19b4de6a815e95d4ac4c7f78ab2649e9fccaa903406f3be5fb1e12e85bf77a4d59a54d13ebf7bdb5620a8aea96431e6084a4025a7545af52400000000", 0xe5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'ip6gre0\x00', &(0x7f0000001300)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x7f, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0x0, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="00035829bd7000ffdbdf2516000000050003001f00000005000300010000000500030000000000050001000000000005000200000000000500040000000000f6ff0400000000008800017808000100", @ANYRES32=r1, @ANYBLOB="140002006261746164765f736c6176655f30000008000300010000001400020074756e6c3000000000000000000000001400020076657468305f746f5f62726964676500080003000000000014000200767863616e31000000000000000000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r6, @ANYBLOB="0500030001000000"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x48844) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000001640)={0x200000, 0x40200082, 0x0, 0x6, 0x7, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) socket$inet_udp(0x2, 0x2, 0x0) 8.869061141s ago: executing program 1 (id=1954): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'xfrm0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x2) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000680)={0x0, 0x7ffffffe}) r5 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f00000006c0)=0x9, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0x8, 0x10, &(0x7f0000001740)={0x0, 0x1, 0xff}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES64=r5], 0x0, 0xfffffffffffffddf}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xd, 0xffff}, {0x6, 0x1}, {0xffe9, 0xb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x41) ioprio_set$uid(0x3, 0x0, 0x2000) add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="1d", 0xfe3a, 0xfffffffffffffffe) r6 = dup(0xffffffffffffffff) r7 = io_uring_setup(0x6b14, &(0x7f0000000000)={0x0, 0xaa18, 0x2, 0x0, 0x23c, 0x0, r6}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000080)={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x32481) 5.320484604s ago: executing program 1 (id=1955): r0 = syz_open_dev$dvb_frontend(&(0x7f00000008c0), 0x0, 0x2) r1 = socket(0x200000000000011, 0x2, 0xd) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x20, '\x00', @st={0x1, [{0x3, @uvalue=0x3ff}, {0x1, @uvalue=0x1}, {0x0, @uvalue=0x101}, {0x3, @svalue=0xa}]}, 0x80000000}, {0x35, '\x00', @buffer={"37dcf882d301f636bba1aeb8b9ff3b2e8a1433ce9a54973d8fcc7513cfef7ed6", 0x20}, 0x74}, {0x2f, '\x00', @data=0x3, 0x4}, {0x17, '\x00', @st={0x4, [{0x1, @svalue=0x8}, {0x3, @uvalue=0x3a5}, {0x3, @svalue=0xb}, {0x5d1ae71d15d461ec, @svalue=0xc}]}, 0x6}, {0x40, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0xbf}, {0x19, '\x00', @data=0x4, 0x367}, {0xb, '\x00', @data=0x1, 0x40001b}, {0x1c, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @uvalue=0x8}, {0x0, @svalue=0x391}, {0x3, @svalue=0xd0}]}, 0x7}, {0x3b, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x0, @svalue=0x3}, {0x3, @svalue=0x80000080}, {0x0, @svalue=0x3ff}]}, 0x5}]}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)={@empty, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000900)={0x3, &(0x7f0000000940)=[{0x3c, '\x00', @buffer={"638391fa201e124b4d03b18e2244770b6a3cc3b15e17ebb2af56e062fea3cd65", 0x20}, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x1, @svalue}, {0x3}, {0x2, @uvalue=0x5}, {0x0, @svalue=0x6}]}, 0x40005}, {0x3c, '\x00', @data=0x2, 0x7}]}) 5.169476225s ago: executing program 2 (id=1956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000026c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002680)={&(0x7f0000000400)={0x14, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x105}, 0x0) 5.085850636s ago: executing program 5 (id=1957): syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB], 0x58) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5b54, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='select \n', 0x10) write(r2, &(0x7f0000000480)='file read /etc/passwd 0ask.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000500)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x1007, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x8, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000b40)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x3, 0x2d, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x10b8}, 0x4008841) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c80)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000d00), 0x2, 0x141102) writev(r4, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000dc0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000e00)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0xfffffffffffffffc, 0x1, 0x9}, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/77, 0x4d}], 0x1, 0xa, 0x4) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000f00)={0x1, @pix={0xfff, 0xcf6, 0x34565348, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) syz_emit_vhci(&(0x7f0000001080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x1bd}, @l2cap_cid_signaling={{0x1b9}, [@l2cap_info_req={{0xa, 0x7, 0x2}, {0x3c1}}, @l2cap_disconn_rsp={{0x7, 0x43, 0x4}, {0x8, 0xfffd}}, @l2cap_create_chan_req={{0xc, 0x40, 0x5}, {0x9, 0x7c, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xa, 0x2}, {0x9}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x5, 0x7}}, @l2cap_info_rsp={{0xb, 0xf0, 0xe8}, {0x1ff, 0xcb51, "0e667749141c9f1666867da37f3be427b831a83162a4daa886abecf8cb378f5a739836773d5efe7f4f88d22d755eb21527de9b6b07472063962298a4ef5eedf49f813fb695afd2d438d26f4b9e74948e5e29470ff337ccd68a3fa5231b50a8648f7b60c5d4d6850c806f743fda8cabaa57329e09fb35bb49264ca0573d118f2fae2abb0b22fdec3b17ad0340b9e1113fe2289b7591f80ae36f306762cf9925adbadb4668b04c88590436658f2739300dde82d217ec2cb93f830a9cf5ee19c2180a4d78f573ea25acfc7fba1174623da47154cb3cad1118db99e424b3caff38fce09276d7"}}, @l2cap_create_chan_rsp={{0xd, 0x81, 0x8}, {0xfff, 0x9, 0x5, 0x6}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x9, 0x6, 0x4}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x3ff, 0xfe}}, @l2cap_cmd_rej_unk={{0x1, 0x78, 0x2}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x7, 0x3f}, {0x7, 0x5, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x8, 0x0, 0xff, 0x7, 0x2}}, @l2cap_conf_mtu={0x1, 0x2, 0xfff7}, @l2cap_conf_ews={0x7, 0x2, 0xb428}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0xc, 0x10, 0x3, 0x5}}, @l2cap_conf_ews={0x7, 0x2, 0xb259}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x8000}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xc, 0xd, 0x3d1, 0x4, 0x6}}, @l2cap_conf_flushto={0x2, 0x2, 0x5bc}]}}, @l2cap_conn_rsp={{0x3, 0x3f, 0x8}, {0x8, 0x8, 0x800}}, @l2cap_conf_req={{0x4, 0x7, 0x33}, {0x5, 0xffff, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0x2a, 0x3ff, 0x1, 0x8000}}, @l2cap_conf_flushto={0x2, 0x2, 0xd1}, @l2cap_conf_fcs={0x5, 0x1, 0xc1338f37b2e7eb36}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x6, 0xfffff3ac, 0x6, 0x7}}]}}]}}, 0x1c2) 5.050208318s ago: executing program 4 (id=1958): r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./sys/file0\x00', 0x486080, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x7f, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000012c0)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000013c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000001440), 0x2, 0x141102) writev(r2, &(0x7f0000001480)=[{&(0x7f0000001780)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000017c0)='./sys\x00', 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001800), 0x9, 0x32b0c1) getpid() mkdirat(r0, 0x0, 0xda) mount(0x0, &(0x7f0000001840)='./sys\x00', &(0x7f0000001880)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000018c0)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r3) r4 = syz_open_dev$vbi(&(0x7f0000001940), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0xc0400200}, 0xc, &(0x7f0000001a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="3334f4ee7ce84df51c000000", @ANYRES16=0x0, @ANYBLOB="100000000100ffdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000001a80)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0x6, 0x9, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) openat(0xffffffffffffff9c, &(0x7f0000001b40)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000001540)="c72212dcbc6bad1707dd11e199e6f81b46f2ee8232ef292399ebb336e46c5966e7dcbf0b09a6c8f0eaa6ba298f0b9533e24643452da3c3aa170344bda8212c4562078737440668d32c070093d3c8c3685ac70451d522743bd9583dd6a351ddb5ccb9c67a0648928138dfcbb539e1b8049ec19e534e031057b104686bda7673e91845157ce5cf8c7cb90f4bac6741fd57d044941d067ff31f20044dc49153a4416b15951110a459baa19b4de6a815e95d4ac4c7f78ab2649e9fccaa903406f3be5fb1e12e85bf77a4d59a54d13ebf7bdb5620a8aea96431e6084a4025a7545af52400000000", 0xe5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'ip6gre0\x00', &(0x7f0000001300)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x7f, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0x0, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="00035829bd7000ffdbdf2516000000050003001f00000005000300010000000500030000000000050001000000000005000200000000000500040000000000f6ff0400000000008800017808000100", @ANYRES32=r1, @ANYBLOB="140002006261746164765f736c6176655f30000008000300010000001400020074756e6c3000000000000000000000001400020076657468305f746f5f62726964676500080003000000000014000200767863616e31000000000000000000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r6, @ANYBLOB="0500030001000000"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x48844) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) 5.019808299s ago: executing program 7 (id=1959): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0xfd8e, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = syz_create_resource$futex(&(0x7f0000000100)=0x1) (async) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000200)="2e000000010002", 0x7) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') (async, rerun: 32) r4 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) (rerun: 32) write(r4, &(0x7f0000000500)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async, rerun: 64) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) (async, rerun: 64) r5 = dup3(r3, r2, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mkdirat(r5, &(0x7f00000005c0)='./file1\x00', 0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000640)=0x53fffffe) (async) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = syz_io_uring_setup(0x7408, &(0x7f0000000840)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex$unlock_wake_list64(r0, 0x8b, 0x1, &(0x7f0000000180)={r10, r11+10000000}, 0x0, 0xfd3c) syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) 5.01335963s ago: executing program 2 (id=1960): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'xfrm0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x2) recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000680)={0x0, 0x7ffffffe}) r5 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f00000006c0)=0x9, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0x8, 0x10, &(0x7f0000001740)={0x0, 0x1, 0xff}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES64=r5], 0x0, 0xfffffffffffffddf}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xd, 0xffff}, {0x6, 0x1}, {0xffe9, 0xb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x41) ioprio_set$uid(0x3, 0x0, 0x2000) add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="1d", 0xfe3a, 0xfffffffffffffffe) r6 = dup(0xffffffffffffffff) r7 = io_uring_setup(0x6b14, &(0x7f0000000000)={0x0, 0xaa18, 0x2, 0x0, 0x23c, 0x0, r6}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000080)={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x32481) 4.990628147s ago: executing program 1 (id=1961): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000) getpgrp(0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f00000193c0)=0x7) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000019700), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysfs(0xffffffffffffff9c, 0x0, 0x220801, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000019640)=ANY=[@ANYBLOB], 0x0) lseek(r0, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.56865911s ago: executing program 2 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x7000, 0x2000, &(0x7f0000003000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002900), 0x651, 0x0) recvmmsg(r4, &(0x7f0000002940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002980)=0x6) unshare(0xe000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000108fdffff01000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c00018008001d0001"], 0x3c}}, 0x0) 1.251961385s ago: executing program 4 (id=1963): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x18}}, 0xc000) getpgrp(0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000193c0)=0x7) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019480)={0x3, 0x10, &(0x7f0000019640)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000196c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000019700)=r7, 0x4) syz_emit_ethernet(0xba, &(0x7f0000019740)=ANY=[], 0x0) futex(0x0, 0x97817e3164d53bc5, 0x0, 0x0, 0x0, 0x400001) openat$sysfs(0xffffffffffffff9c, 0x0, 0x220801, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000019640)=ANY=[@ANYBLOB], 0x0) lseek(r0, 0x9, 0x0) 1.20880829s ago: executing program 1 (id=1964): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB, @ANYBLOB="d0f1a38eda88e82b9b6d86643bb600378a298575c964da8c845fcfccdc767a7b2b7b5783a1c331d5cf27aeda1bc6a18ec25e487a9f8b8ebc6be9a93ca339ef7d2730bb25a3f2366d178ac4631659ce394c913c92a3ec7356328f143606634d4d1396b8f49f7a0aaee65852aaa23d25f9ac9b93b98b7f6a99ce8cc7d3beb74362c5b5f5cf1b1600000000000000000000db6994ef7ce1d1459579b3eb5636a041175beb53fd9c6f2305000000000000000d7540de149255d4e38956494b142221003747de43f50f313925b6536f7700e532d5adaf5c92b6231cdcfb06dde67f9989978119ebb9e6506f"], 0x50) semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1ead95c45987dd08df252c0000000c0099000000000057000020"], 0x20}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c00028005000100"], 0xe4}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e24, 0x7, @remote, 0x1}, r5, 0x7}}, 0x48) 385.614167ms ago: executing program 2 (id=1965): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x121080) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000340)=@usbdevfs_driver={0x5, 0x6, &(0x7f0000000280)="5177a496c5c8bbeda689bc24f961cb17dbc981b414b3eb0144e96174c6f653c7bddcc8f908d76b75862b0da7404a15125515b9c0e0a15ca2e3717a6e71a87edca8af68b678b9f5c773bdfb71369484d3afff257faf34e5cccf097e4ac1643ee5246888251dcdd440cf32a888ca9378253388d292cba3252b95e88a4a4722613e2d4ad4e59fdcb75fe929ecd25e3b1a729699de93795776c86b1525263c22e6ae6254b682fc02bf036ba4692d68da4edde43251f6001b"}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000800), 0x41, 0x0) write$nbd(r2, 0x0, 0x40) syz_usb_control_io$uac2(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc3, &(0x7f0000000d00)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x8, 0x10, &(0x7f0000000180)={0x0, 0xfffffffc}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r3) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000f40)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x1) connect$vsock_stream(r5, &(0x7f0000000f80)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r4}, &(0x7f0000001040), &(0x7f0000001080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r4}, &(0x7f0000001100), &(0x7f0000001140)=r7}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000240)=ANY=[]) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x1, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2f}, {0x1, 0x1004, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2c, 0x25dfdbfb, 0x1, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004600002c0003e00000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 1 (id=1966): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000500)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000640)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000000680), 0x4000000000000e4, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048004000100000000010a4bdc84620b688a455241b18278c22000028010000100706f6c696379300008", 0x68}], 0x1}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000b00)={0x20, 0x0, 0xffffffffffffffc5, 0x0, 0x0}) kernel console output (not intermixed with test programs): c::]:6789 error -101 [ 765.056984][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 765.451817][T12839] ceph: No mds server is up or the cluster is laggy [ 765.454902][ T31] audit: type=1400 audit(1792225554.147:6557): avc: denied { module_request } for pid=12845 comm="syz.2.1632" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 765.454947][ T31] audit: type=1400 audit(1792225554.217:6558): avc: denied { map_create } for pid=12845 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 765.454982][ T31] audit: type=1400 audit(1792225554.227:6559): avc: denied { execmem } for pid=12845 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 765.455015][ T31] audit: type=1400 audit(1792225554.267:6560): avc: denied { create } for pid=12845 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 765.465498][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 765.465650][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 768.195430][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 768.195449][ T31] audit: type=1400 audit(1792225557.327:6580): avc: denied { unmount } for pid=12191 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 768.240808][ T31] audit: type=1400 audit(1792225557.367:6581): avc: denied { mount } for pid=12848 comm="syz.1.1633" name="/" dev="gadgetfs" ino=7550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 768.257119][T12871] gadgetfs: bound to dummy_udc driver [ 768.299221][ T31] audit: type=1400 audit(1792225557.427:6582): avc: denied { write } for pid=12848 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 768.318702][ T31] audit: type=1400 audit(1792225557.447:6583): avc: denied { sqpoll } for pid=12848 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 768.328623][ T31] audit: type=1400 audit(1792225557.457:6584): avc: denied { read append } for pid=12848 comm="syz.1.1633" name="cec0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.328924][ T31] audit: type=1400 audit(1792225557.457:6585): avc: denied { open } for pid=12848 comm="syz.1.1633" path="/dev/cec0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.336807][ T31] audit: type=1400 audit(1792225557.467:6586): avc: denied { ioctl } for pid=12848 comm="syz.1.1633" path="/dev/cec0" dev="devtmpfs" ino=947 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.353763][ T31] audit: type=1400 audit(1792225557.487:6587): avc: denied { ioctl } for pid=12848 comm="syz.1.1633" path="socket:[39272]" dev="sockfs" ino=39272 ioctlcmd=0x8b18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.362069][ T31] audit: type=1400 audit(1792225557.487:6588): avc: denied { read } for pid=12869 comm="syz.2.1637" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 768.362110][ T31] audit: type=1400 audit(1792225557.487:6589): avc: denied { open } for pid=12869 comm="syz.2.1637" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 768.397863][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.398169][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.494598][T12512] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 768.494804][ C1] gadgetfs: connected [ 768.494924][T12512] gadgetfs: disconnected [ 771.001508][T12896] ebt_limit: overflow, try lower: 0/0 [ 773.405420][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 773.405483][ T31] audit: type=1400 audit(1792225562.537:6620): avc: denied { setopt } for pid=12908 comm="syz.6.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 773.419793][ T31] audit: type=1400 audit(1792225562.547:6621): avc: denied { mount } for pid=12908 comm="syz.6.1646" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 773.855403][ T31] audit: type=1400 audit(1792225562.947:6622): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 775.291840][T12512] libceph: connect (1)[c::]:6789 error -101 [ 775.291978][T12512] libceph: mon0 (1)[c::]:6789 connect error [ 775.487671][ T31] audit: type=1400 audit(1792225564.617:6623): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 775.517979][ T31] audit: type=1400 audit(1792225564.647:6624): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 775.543322][T12512] libceph: connect (1)[c::]:6789 error -101 [ 775.543469][T12512] libceph: mon0 (1)[c::]:6789 connect error [ 775.544837][ T31] audit: type=1400 audit(1792225564.657:6625): avc: denied { read } for pid=5603 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.544884][ T31] audit: type=1400 audit(1792225564.657:6626): avc: denied { open } for pid=5603 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.544921][ T31] audit: type=1400 audit(1792225564.657:6627): avc: denied { ioctl } for pid=5603 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.557006][ T31] audit: type=1400 audit(1792225564.687:6628): avc: denied { map_create } for pid=12916 comm="syz.1.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 775.557053][ T31] audit: type=1400 audit(1792225564.687:6629): avc: denied { perfmon } for pid=12916 comm="syz.1.1647" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 775.579008][T12917] 9p: Bad value for 'rfdno' [ 775.789774][T12911] ceph: No mds server is up or the cluster is laggy [ 777.575353][ T6597] rpcbind: server 127.0.0.1 not responding, timed out [ 779.090143][ T31] kauditd_printk_skb: 118 callbacks suppressed [ 779.090165][ T31] audit: type=1400 audit(1792225567.297:6748): avc: denied { write } for pid=12937 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 779.090205][ T31] audit: type=1400 audit(1792225567.567:6749): avc: denied { read } for pid=12940 comm="syz.6.1655" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 779.090242][ T31] audit: type=1400 audit(1792225567.567:6750): avc: denied { open } for pid=12940 comm="syz.6.1655" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 779.090280][ T31] audit: type=1400 audit(1792225567.727:6751): avc: denied { prog_run } for pid=12940 comm="syz.6.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.090314][ T31] audit: type=1400 audit(1792225567.857:6752): avc: denied { setopt } for pid=12940 comm="syz.6.1655" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 779.298668][ T31] audit: type=1400 audit(1792225568.427:6753): avc: denied { read write } for pid=12950 comm="syz.2.1656" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 779.299081][ T31] audit: type=1400 audit(1792225568.427:6754): avc: denied { open } for pid=12950 comm="syz.2.1656" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 779.411826][ T31] audit: type=1400 audit(1792225568.537:6755): avc: denied { read write } for pid=12938 comm="syz.1.1654" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 779.411873][ T31] audit: type=1400 audit(1792225568.537:6756): avc: denied { open } for pid=12938 comm="syz.1.1654" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 779.411907][ T31] audit: type=1400 audit(1792225568.537:6757): avc: denied { mounton } for pid=12938 comm="syz.1.1654" path="/335/file0" dev="tmpfs" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 780.382100][T12962] FAULT_INJECTION: forcing a failure. [ 780.382100][T12962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.382134][T12962] CPU: 1 UID: 0 PID: 12962 Comm: syz.2.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.382159][T12962] Tainted: [L]=SOFTLOCKUP [ 780.382167][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 780.382178][T12962] Call Trace: [ 780.382185][T12962] [ 780.382193][T12962] dump_stack_lvl+0x100/0x190 [ 780.382227][T12962] should_fail_ex.cold+0x5/0xa [ 780.382255][T12962] _copy_to_user+0x32/0xd0 [ 780.382285][T12962] simple_read_from_buffer+0xcb/0x170 [ 780.382314][T12962] proc_fail_nth_read+0x1af/0x230 [ 780.382344][T12962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.382373][T12962] ? rw_verify_area+0xce/0x6d0 [ 780.382400][T12962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.382430][T12962] vfs_read+0x1e4/0xb40 [ 780.382453][T12962] ? lock_acquire+0x1d1/0x380 [ 780.382480][T12962] ? __fget_files+0x34/0x3d0 [ 780.382506][T12962] ? __pfx_vfs_read+0x10/0x10 [ 780.382526][T12962] ? find_held_lock+0x2b/0x80 [ 780.382554][T12962] ? __fget_files+0x215/0x3d0 [ 780.382585][T12962] ? __fget_files+0x21f/0x3d0 [ 780.382619][T12962] ksys_read+0x12a/0x250 [ 780.382642][T12962] ? __pfx_ksys_read+0x10/0x10 [ 780.382671][T12962] do_syscall_64+0x123/0x790 [ 780.382699][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.382717][T12962] RIP: 0033:0x7fab6555ed8e [ 780.382732][T12962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 780.382749][T12962] RSP: 002b:00007fab663e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.382767][T12962] RAX: ffffffffffffffda RBX: 00007fab663e66c0 RCX: 00007fab6555ed8e [ 780.382779][T12962] RDX: 000000000000000f RSI: 00007fab663e60a0 RDI: 0000000000000005 [ 780.382790][T12962] RBP: 00007fab663e6090 R08: 0000000000000000 R09: 0000000000000000 [ 780.382800][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.382811][T12962] R13: 00007fab65826038 R14: 00007fab65825fa0 R15: 00007ffcb2b17968 [ 780.382838][T12962] [ 780.567616][T12963] ebt_limit: overflow, try lower: 0/0 [ 784.602519][ T8724] rpcbind: server 127.0.0.1 not responding, timed out [ 784.962813][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 784.962914][ T31] audit: type=1400 audit(1792225574.087:6845): avc: denied { name_bind } for pid=12991 comm="syz.6.1668" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 786.095281][ T31] audit: type=1400 audit(1792225575.227:6846): avc: denied { create } for pid=12999 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 786.124411][ T31] audit: type=1400 audit(1792225575.257:6847): avc: denied { ioctl } for pid=12999 comm="syz.4.1669" path="socket:[38716]" dev="sockfs" ino=38716 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 786.132600][ T31] audit: type=1400 audit(1792225575.257:6848): avc: denied { write } for pid=12999 comm="syz.4.1669" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.793288][ T5807] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 786.952752][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 786.958129][ T5807] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 786.959229][ T5807] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 786.959255][ T5807] usb 5-1: config 1 has no interface number 0 [ 786.959290][ T5807] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 786.959314][ T5807] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 786.959338][ T5807] usb 5-1: config 1 interface 105 has no altsetting 0 [ 786.963792][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 786.963816][ T5807] usb 5-1: Product: syz [ 786.963829][ T5807] usb 5-1: Manufacturer: syz [ 786.963849][ T5807] usb 5-1: SerialNumber: syz [ 787.039454][T13000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.039559][T13000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 788.321804][ T31] audit: type=1400 audit(1792225577.447:6849): avc: denied { create } for pid=13012 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 788.363542][ T31] audit: type=1400 audit(1792225577.497:6850): avc: denied { ioctl } for pid=13012 comm="syz.1.1676" path="socket:[39574]" dev="sockfs" ino=39574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 788.394856][T13013] openvswitch: netlink: Key type 2054 is out of range max 32 [ 788.398892][ T31] audit: type=1400 audit(1792225577.507:6851): avc: denied { unlink } for pid=12999 comm="syz.4.1669" name="#2d" dev="tmpfs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 788.398927][ T31] audit: type=1400 audit(1792225577.507:6852): avc: denied { bind } for pid=13012 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 788.398966][ T31] audit: type=1400 audit(1792225577.507:6853): avc: denied { mount } for pid=12999 comm="syz.4.1669" name="/" dev="overlay" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 788.402829][ T31] audit: type=1400 audit(1792225577.527:6854): avc: denied { write } for pid=13012 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 788.459672][T13000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 788.459775][T13000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 788.552320][T13014] netlink: 'syz.1.1676': attribute type 8 has an invalid length. [ 788.552344][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 788.663863][ T5807] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 788.663988][ T5807] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 789.832798][ T5808] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 789.910197][T13027] batman_adv: batadv0: Adding interface: syz_tun [ 789.910216][T13027] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.910244][T13027] batman_adv: batadv0: Interface activated: syz_tun [ 789.912555][ T5807] usb 5-1: USB disconnect, device number 59 [ 789.977089][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 789.977108][ T31] audit: type=1400 audit(1792225579.107:6924): avc: denied { read write } for pid=13025 comm="syz.6.1677" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.977148][ T31] audit: type=1400 audit(1792225579.107:6925): avc: denied { open } for pid=13025 comm="syz.6.1677" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.977910][ T31] audit: type=1400 audit(1792225579.107:6926): avc: denied { map } for pid=13025 comm="syz.6.1677" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 790.026421][ T5808] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 790.028887][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.028910][ T5808] usb 6-1: Product: syz [ 790.028923][ T5808] usb 6-1: Manufacturer: syz [ 790.028936][ T5808] usb 6-1: SerialNumber: syz [ 790.072420][ T5808] usb 6-1: config 0 descriptor?? [ 790.728194][ T31] audit: type=1400 audit(1792225579.657:6927): avc: denied { ioctl } for pid=13032 comm="syz.4.1679" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 790.789209][ T31] audit: type=1400 audit(1792225579.917:6928): avc: denied { create } for pid=13017 comm="syz.5.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 791.951345][T13049] FAULT_INJECTION: forcing a failure. [ 791.951345][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 791.951378][T13049] CPU: 0 UID: 0 PID: 13049 Comm: syz.6.1682 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.951403][T13049] Tainted: [L]=SOFTLOCKUP [ 791.951411][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 791.951421][T13049] Call Trace: [ 791.951428][T13049] [ 791.951435][T13049] dump_stack_lvl+0x100/0x190 [ 791.951467][T13049] should_fail_ex.cold+0x5/0xa [ 791.951495][T13049] should_failslab+0xc2/0x120 [ 791.951524][T13049] __kmalloc_cache_node_noprof+0x94/0x720 [ 791.951551][T13049] ? __get_vm_area_node+0x124/0x350 [ 791.951582][T13049] __get_vm_area_node+0x124/0x350 [ 791.951613][T13049] __vmalloc_node_range_noprof+0x268/0x1420 [ 791.951641][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 791.951671][T13049] ? up_write+0x2dc/0x5b0 [ 791.951700][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 791.951725][T13049] ? lock_acquire+0x1d1/0x380 [ 791.951747][T13049] ? find_held_lock+0x2b/0x80 [ 791.951774][T13049] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 791.951801][T13049] ? avc_has_perm_noaudit+0x11e/0x470 [ 791.951826][T13049] ? avc_has_perm_noaudit+0x145/0x470 [ 791.951849][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 791.951874][T13049] __vmalloc_node_noprof+0xad/0xf0 [ 791.951902][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 791.951929][T13049] __vmalloc_noprof+0xa3/0x120 [ 791.951957][T13049] ? __pfx___vmalloc_noprof+0x10/0x10 [ 791.951986][T13049] ? rcu_is_watching+0x13/0xc0 [ 791.952013][T13049] ? cap_capable+0x107/0x430 [ 791.952038][T13049] bpf_prog_alloc_no_stats+0x59/0x690 [ 791.952062][T13049] ? security_capable+0x80/0x260 [ 791.952087][T13049] bpf_prog_alloc+0x3b/0x200 [ 791.952109][T13049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.952131][T13049] bpf_prog_load+0x49e/0x2ab0 [ 791.952161][T13049] ? __pfx_bpf_prog_load+0x10/0x10 [ 791.952208][T13049] __sys_bpf+0x1f46/0x4a30 [ 791.952236][T13049] ? __pfx___sys_bpf+0x10/0x10 [ 791.952262][T13049] ? find_held_lock+0x2b/0x80 [ 791.952288][T13049] ? get_pid_task+0xfc/0x250 [ 791.952313][T13049] ? get_pid_task+0xfc/0x250 [ 791.952347][T13049] ? find_held_lock+0x2b/0x80 [ 791.952378][T13049] ? rcu_read_lock_any_held+0x6a/0x90 [ 791.952396][T13049] ? find_held_lock+0x2b/0x80 [ 791.952422][T13049] ? ksys_write+0x190/0x250 [ 791.952447][T13049] ? ksys_write+0x190/0x250 [ 791.952468][T13049] ? lock_acquire+0x1d1/0x380 [ 791.952507][T13049] ? fput+0x7c/0x100 [ 791.952533][T13049] ? ksys_write+0x1ac/0x250 [ 791.952559][T13049] ? __x64_sys_bpf+0xce/0x140 [ 791.952578][T13049] __x64_sys_bpf+0xce/0x140 [ 791.952599][T13049] ? do_syscall_64+0xae/0x790 [ 791.952628][T13049] do_syscall_64+0x123/0x790 [ 791.952654][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.952672][T13049] RIP: 0033:0x7f11ce59e559 [ 791.952686][T13049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.952701][T13049] RSP: 002b:00007f11cf538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.952719][T13049] RAX: ffffffffffffffda RBX: 00007f11ce825fa0 RCX: 00007f11ce59e559 [ 791.952732][T13049] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 791.952742][T13049] RBP: 00007f11cf538090 R08: 0000000000000000 R09: 0000000000000000 [ 791.952753][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.952763][T13049] R13: 00007f11ce826038 R14: 00007f11ce825fa0 R15: 00007ffdd82c8a78 [ 791.952788][T13049] [ 791.958411][ T863] usb 6-1: USB disconnect, device number 19 [ 791.983188][ T31] audit: type=1400 audit(1792225581.107:6929): avc: denied { read append } for pid=13026 comm="syz.2.1678" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 791.983232][ T31] audit: type=1400 audit(1792225581.107:6930): avc: denied { open } for pid=13026 comm="syz.2.1678" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 792.028663][T13049] syz.6.1682: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 792.028730][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.6.1682 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.028760][T13049] Tainted: [L]=SOFTLOCKUP [ 792.028766][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 792.028776][T13049] Call Trace: [ 792.028782][T13049] [ 792.028789][T13049] dump_stack_lvl+0x100/0x190 [ 792.028820][T13049] warn_alloc.cold+0x9e/0xb2 [ 792.028840][T13049] ? __pfx_warn_alloc+0x10/0x10 [ 792.028858][T13049] ? __kasan_kmalloc+0x8a/0xb0 [ 792.028889][T13049] ? __get_vm_area_node+0x22b/0x350 [ 792.028917][T13049] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 792.028944][T13049] ? up_write+0x2dc/0x5b0 [ 792.028983][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 792.029006][T13049] ? lock_acquire+0x1d1/0x380 [ 792.029026][T13049] ? find_held_lock+0x2b/0x80 [ 792.029049][T13049] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 792.029073][T13049] ? avc_has_perm_noaudit+0x11e/0x470 [ 792.029097][T13049] ? avc_has_perm_noaudit+0x145/0x470 [ 792.029116][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 792.029138][T13049] __vmalloc_node_noprof+0xad/0xf0 [ 792.029161][T13049] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 792.029186][T13049] __vmalloc_noprof+0xa3/0x120 [ 792.029209][T13049] ? __pfx___vmalloc_noprof+0x10/0x10 [ 792.029235][T13049] ? rcu_is_watching+0x13/0xc0 [ 792.029258][T13049] ? cap_capable+0x107/0x430 [ 792.029281][T13049] bpf_prog_alloc_no_stats+0x59/0x690 [ 792.029301][T13049] ? security_capable+0x80/0x260 [ 792.029323][T13049] bpf_prog_alloc+0x3b/0x200 [ 792.029342][T13049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 792.029366][T13049] bpf_prog_load+0x49e/0x2ab0 [ 792.029397][T13049] ? __pfx_bpf_prog_load+0x10/0x10 [ 792.029439][T13049] __sys_bpf+0x1f46/0x4a30 [ 792.029463][T13049] ? __pfx___sys_bpf+0x10/0x10 [ 792.029480][T13049] ? find_held_lock+0x2b/0x80 [ 792.029502][T13049] ? get_pid_task+0xfc/0x250 [ 792.029523][T13049] ? get_pid_task+0xfc/0x250 [ 792.029552][T13049] ? find_held_lock+0x2b/0x80 [ 792.029581][T13049] ? rcu_read_lock_any_held+0x6a/0x90 [ 792.029597][T13049] ? find_held_lock+0x2b/0x80 [ 792.029619][T13049] ? ksys_write+0x190/0x250 [ 792.029639][T13049] ? ksys_write+0x190/0x250 [ 792.029657][T13049] ? lock_acquire+0x1d1/0x380 [ 792.029691][T13049] ? fput+0x7c/0x100 [ 792.029714][T13049] ? ksys_write+0x1ac/0x250 [ 792.029736][T13049] ? __x64_sys_bpf+0xce/0x140 [ 792.029758][T13049] __x64_sys_bpf+0xce/0x140 [ 792.029777][T13049] ? do_syscall_64+0xae/0x790 [ 792.029802][T13049] do_syscall_64+0x123/0x790 [ 792.029827][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.029843][T13049] RIP: 0033:0x7f11ce59e559 [ 792.029857][T13049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.029872][T13049] RSP: 002b:00007f11cf538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 792.029888][T13049] RAX: ffffffffffffffda RBX: 00007f11ce825fa0 RCX: 00007f11ce59e559 [ 792.029899][T13049] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 792.029909][T13049] RBP: 00007f11cf538090 R08: 0000000000000000 R09: 0000000000000000 [ 792.029918][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.029928][T13049] R13: 00007f11ce826038 R14: 00007f11ce825fa0 R15: 00007ffdd82c8a78 [ 792.029951][T13049] [ 792.052909][T13049] Mem-Info: [ 792.052922][T13049] active_anon:49182 inactive_anon:1 isolated_anon:0 [ 792.052922][T13049] active_file:0 inactive_file:73575 isolated_file:0 [ 792.052922][T13049] unevictable:0 dirty:0 writeback:0 [ 792.052922][T13049] slab_reclaimable:12963 slab_unreclaimable:105075 [ 792.052922][T13049] mapped:37137 shmem:37597 pagetables:1518 [ 792.052922][T13049] sec_pagetables:0 bounce:0 [ 792.052922][T13049] kernel_misc_reclaimable:0 [ 792.052922][T13049] free:1200402 free_pcp:25965 free_cma:0 [ 792.052960][T13049] Node 0 active_anon:196728kB inactive_anon:4kB active_file:0kB inactive_file:294000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148464kB dirty:0kB writeback:0kB shmem:150388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13212kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 792.052999][T13049] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 792.053037][T13049] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.053081][T13049] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 792.053108][T13049] Node 0 DMA32 free:858452kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:196728kB inactive_anon:4kB active_file:0kB inactive_file:294000kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:95668kB local_pcp:33788kB free_cma:0kB [ 792.053151][T13049] lowmem_reserve[]: 0 0 0 0 0 [ 792.053177][T13049] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.053217][T13049] lowmem_reserve[]: 0 0 0 0 0 [ 792.053242][T13049] Node 1 Normal free:3927796kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:8192kB local_pcp:8192kB free_cma:0kB [ 792.053285][T13049] lowmem_reserve[]: 0 0 0 0 0 [ 792.053310][T13049] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 792.053399][T13049] Node 0 DMA32: 1098*4kB (UME) 1444*8kB (UME) 1154*16kB (UM) 607*32kB (UME) 392*64kB (UM) 272*128kB (UM) 91*256kB (UME) 45*512kB (M) 2*1024kB (M) 20*2048kB (UME) 160*4096kB (UM) = 858440kB [ 792.053528][T13049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 792.053601][T13049] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 14*16kB (UM) 12*32kB (UM) 9*64kB (UM) 6*128kB (U) 7*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 957*4096kB (UM) = 3927796kB [ 792.056468][T13049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.056481][T13049] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 792.056493][T13049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.056504][T13049] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 792.056516][T13049] 111165 total pagecache pages [ 792.056522][T13049] 1 pages in swap cache [ 792.056528][T13049] Free swap = 124992kB [ 792.056534][T13049] Total swap = 124996kB [ 792.056541][T13049] 2097051 pages RAM [ 792.056546][T13049] 0 pages HighMem/MovableOnly [ 792.056552][T13049] 437690 pages reserved [ 792.056557][T13049] 0 pages cma reserved [ 792.065608][ T31] audit: type=1400 audit(1792225581.197:6931): avc: denied { ioctl } for pid=13026 comm="syz.2.1678" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 792.135690][ T31] audit: type=1400 audit(1792225581.267:6932): avc: denied { write } for pid=13026 comm="syz.2.1678" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 792.852379][T13058] ebt_limit: overflow, try lower: 0/0 [ 792.962809][ T31] audit: type=1400 audit(1792225582.087:6933): avc: denied { execute } for pid=13056 comm="syz.6.1686" name="file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 794.104293][ T6238] rpcbind: server 127.0.0.1 not responding, timed out [ 795.223885][ T8724] rpcbind: server 127.0.0.1 not responding, timed out [ 795.519446][ T8579] rpcbind: server 127.0.0.1 not responding, timed out [ 795.645702][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 795.645721][ T31] audit: type=1400 audit(1792225584.777:6942): avc: denied { unmount } for pid=12191 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 795.760593][T13083] FAULT_INJECTION: forcing a failure. [ 795.760593][T13083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.760625][T13083] CPU: 1 UID: 0 PID: 13083 Comm: syz.1.1683 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.760651][T13083] Tainted: [L]=SOFTLOCKUP [ 795.760658][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 795.760670][T13083] Call Trace: [ 795.760677][T13083] [ 795.760685][T13083] dump_stack_lvl+0x100/0x190 [ 795.760719][T13083] should_fail_ex.cold+0x5/0xa [ 795.760747][T13083] _copy_to_user+0x32/0xd0 [ 795.760783][T13083] simple_read_from_buffer+0xcb/0x170 [ 795.760812][T13083] proc_fail_nth_read+0x1af/0x230 [ 795.760842][T13083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.760871][T13083] ? rw_verify_area+0xce/0x6d0 [ 795.760892][T13083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.760919][T13083] vfs_read+0x1e4/0xb40 [ 795.760942][T13083] ? lock_acquire+0x1d1/0x380 [ 795.760963][T13083] ? __fget_files+0x34/0x3d0 [ 795.760991][T13083] ? __pfx_vfs_read+0x10/0x10 [ 795.761010][T13083] ? find_held_lock+0x2b/0x80 [ 795.761039][T13083] ? __fget_files+0x215/0x3d0 [ 795.761069][T13083] ? __fget_files+0x21f/0x3d0 [ 795.761103][T13083] ksys_read+0x12a/0x250 [ 795.761126][T13083] ? __pfx_ksys_read+0x10/0x10 [ 795.761157][T13083] do_syscall_64+0x123/0x790 [ 795.761187][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.761207][T13083] RIP: 0033:0x7f4469b5ed8e [ 795.761222][T13083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 795.761238][T13083] RSP: 002b:00007f446aac8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.761255][T13083] RAX: ffffffffffffffda RBX: 00007f446aac96c0 RCX: 00007f4469b5ed8e [ 795.761268][T13083] RDX: 000000000000000f RSI: 00007f446aac90a0 RDI: 0000000000000005 [ 795.761279][T13083] RBP: 00007f446aac9090 R08: 0000000000000000 R09: 0000000000000000 [ 795.761291][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.761303][T13083] R13: 00007f4469e26038 R14: 00007f4469e25fa0 R15: 00007ffe14698628 [ 795.761331][T13083] [ 798.051402][ T8579] rpcbind: server 127.0.0.1 not responding, timed out [ 798.184343][ T191] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 799.163811][ T191] usb 5-1: Using ep0 maxpacket: 16 [ 799.164545][ T191] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.165498][ T191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.165528][ T191] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 799.165552][ T191] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 799.165576][ T191] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 799.166463][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 799.166486][ T191] usb 5-1: SerialNumber: syz [ 799.169415][T13089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 799.169516][T13089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 799.259185][ T191] hub 5-1:1.0: bad descriptor, ignoring hub [ 799.259213][ T191] hub 5-1:1.0: probe with driver hub failed with error -5 [ 799.371990][T13089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 799.372087][T13089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 799.586603][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.586898][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.011864][ T31] audit: type=1400 audit(1792225589.137:6943): avc: denied { getopt } for pid=13088 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 800.037369][ T191] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 800.063874][ T191] usb 5-1: USB disconnect, device number 60 [ 801.340119][ T31] audit: type=1400 audit(1792225590.467:6944): avc: denied { create } for pid=13116 comm="syz.2.1700" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 801.340856][ T31] audit: type=1400 audit(1792225590.467:6945): avc: denied { write } for pid=13116 comm="syz.2.1700" name="file0" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 801.341183][ T31] audit: type=1400 audit(1792225590.467:6946): avc: denied { open } for pid=13116 comm="syz.2.1700" path="/347/file0" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 801.398553][ T8724] rpcbind: server 127.0.0.1 not responding, timed out [ 801.452012][ T31] audit: type=1400 audit(1792225590.577:6947): avc: denied { ioctl } for pid=13116 comm="syz.2.1700" path="/347/file0" dev="tmpfs" ino=2021 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 802.190625][ T863] libceph: connect (1)[c::]:6789 error -101 [ 802.191346][ T863] libceph: mon0 (1)[c::]:6789 connect error [ 802.268067][ T31] audit: type=1400 audit(1792225591.397:6948): avc: denied { unlink } for pid=5607 comm="syz-executor" name="file0" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 802.273499][ T31] audit: type=1400 audit(1792225591.407:6949): avc: denied { read } for pid=5607 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.273763][ T31] audit: type=1400 audit(1792225591.407:6950): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.274055][ T31] audit: type=1400 audit(1792225591.407:6951): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.361937][ T31] audit: type=1400 audit(1792225591.487:6952): avc: denied { read } for pid=13128 comm="syz.1.1704" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 802.363752][ T31] audit: type=1400 audit(1792225591.497:6953): avc: denied { open } for pid=13128 comm="syz.1.1704" path="net:[4026533079]" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 802.447030][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 802.448258][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 802.953356][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 802.953526][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 803.113250][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.113302][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.070790][T13122] ceph: No mds server is up or the cluster is laggy [ 804.114988][ T5601] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 807.132721][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 807.132744][ T31] audit: type=1400 audit(1792225595.837:7006): avc: denied { create } for pid=13159 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.132783][ T31] audit: type=1400 audit(1792225595.867:7007): avc: denied { prog_run } for pid=13159 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.132817][ T31] audit: type=1400 audit(1792225595.887:7008): avc: denied { setopt } for pid=13159 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.132857][ T31] audit: type=1400 audit(1792225595.907:7009): avc: denied { setopt } for pid=13159 comm="syz.4.1710" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 807.182859][ T5726] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 807.403602][ T5726] usb 3-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 807.404509][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 807.404538][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.404571][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.576775][T13169] ebt_limit: overflow, try lower: 0/0 [ 807.703865][ T31] audit: type=1400 audit(1792225596.787:7010): avc: denied { execute } for pid=13164 comm="syz.1.1713" name="file0" dev="tmpfs" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 807.704046][ T31] audit: type=1400 audit(1792225596.787:7011): avc: denied { execute_no_trans } for pid=13164 comm="syz.1.1713" path="/348/file0" dev="tmpfs" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 807.767683][ T5726] usb 3-1: config 0 descriptor?? [ 807.835741][ T31] audit: type=1400 audit(1792225596.967:7012): avc: denied { create } for pid=13171 comm="syz.5.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 807.836477][ T31] audit: type=1400 audit(1792225596.967:7013): avc: denied { connect } for pid=13171 comm="syz.5.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 807.836773][ T31] audit: type=1400 audit(1792225596.967:7014): avc: denied { bind } for pid=13171 comm="syz.5.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 807.986947][ T5726] usbhid 3-1:0.0: can't add hid device: -71 [ 807.987037][ T5726] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 808.010538][ T5726] usb 3-1: USB disconnect, device number 49 [ 808.082742][ T5741] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 808.390662][ T31] audit: type=1400 audit(1792225597.497:7015): avc: denied { read write } for pid=13177 comm="syz.4.1714" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 808.422045][ T5741] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 808.582078][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.582112][ T5741] usb 6-1: Product: syz [ 808.582121][ T5741] usb 6-1: Manufacturer: syz [ 808.582129][ T5741] usb 6-1: SerialNumber: syz [ 809.160341][ T5741] gspca_main: mars-2.14.0 probing 093a:050f [ 809.190960][T13190] gadgetfs: bound to dummy_udc driver [ 809.219696][ T5741] usb 6-1: USB disconnect, device number 20 [ 809.507794][ T5726] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 810.629200][T13212] openvswitch: netlink: Key type 2054 is out of range max 32 [ 810.796524][T13212] netlink: 'syz.2.1721': attribute type 8 has an invalid length. [ 810.796554][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 810.912735][T13213] ceph: No mds server is up or the cluster is laggy [ 811.243766][T12078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 811.252487][T12078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 811.269684][T12078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 812.255724][T12078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 812.271458][T12078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 812.283264][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 812.283281][ T31] audit: type=1400 audit(1792225601.417:7057): avc: denied { read } for pid=13223 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 812.283509][ T31] audit: type=1400 audit(1792225601.417:7058): avc: denied { open } for pid=13223 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 812.799898][ T31] audit: type=1400 audit(1792225601.887:7059): avc: denied { prog_load } for pid=13226 comm="syz.4.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.800170][ T31] audit: type=1400 audit(1792225601.897:7060): avc: denied { bpf } for pid=13226 comm="syz.4.1726" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.800315][ T31] audit: type=1400 audit(1792225601.897:7061): avc: denied { perfmon } for pid=13226 comm="syz.4.1726" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.800446][ T31] audit: type=1400 audit(1792225601.907:7062): avc: denied { allowed } for pid=13226 comm="syz.4.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 812.800584][ T31] audit: type=1400 audit(1792225601.917:7063): avc: denied { sqpoll } for pid=13226 comm="syz.4.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 812.800713][ T31] audit: type=1400 audit(1792225601.917:7064): avc: denied { create } for pid=13226 comm="syz.4.1726" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 812.891504][ T31] audit: type=1400 audit(1792225601.987:7065): avc: denied { mounton } for pid=13223 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 812.891554][ T31] audit: type=1400 audit(1792225602.017:7066): avc: denied { module_request } for pid=13223 comm="syz-executor" kmod="netdev-nr7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 814.344986][ T5601] Bluetooth: hci6: command tx timeout [ 816.208225][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 816.433375][T12078] Bluetooth: hci6: command tx timeout [ 816.970395][T13223] rxe_eth0 speed is unknown, defaulting to 1000 [ 818.232369][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 818.232382][ T31] audit: type=1400 audit(1792225607.357:7103): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 818.296675][ T31] audit: type=1400 audit(1792225607.427:7104): avc: denied { read } for pid=5603 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.298511][ T31] audit: type=1400 audit(1792225607.427:7105): avc: denied { open } for pid=5603 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.298559][ T31] audit: type=1400 audit(1792225607.427:7106): avc: denied { ioctl } for pid=5603 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.379893][ T31] audit: type=1400 audit(1792225607.487:7107): avc: denied { unmount } for pid=9946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 818.449124][ T31] audit: type=1400 audit(1792225607.577:7108): avc: denied { read } for pid=13272 comm="syz.1.1737" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 818.449446][ T31] audit: type=1400 audit(1792225607.577:7109): avc: denied { open } for pid=13272 comm="syz.1.1737" path="net:[4026533079]" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 818.449852][ T31] audit: type=1400 audit(1792225607.577:7110): avc: denied { create } for pid=13272 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 818.518975][T12078] Bluetooth: hci6: command tx timeout [ 818.519625][ T31] audit: type=1400 audit(1792225607.647:7111): avc: denied { create } for pid=13275 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 818.525161][ T31] audit: type=1400 audit(1792225607.657:7112): avc: denied { ioctl } for pid=13272 comm="syz.1.1737" path="socket:[41215]" dev="sockfs" ino=41215 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 819.133876][T13285] gadgetfs: bound to dummy_udc driver [ 819.164061][T13277] netlink: 'syz.5.1736': attribute type 8 has an invalid length. [ 819.164086][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'. [ 819.347202][T13287] ebt_limit: overflow, try lower: 0/0 [ 819.372775][ T5726] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 819.372997][ C1] gadgetfs: connected [ 819.373133][ T5726] gadgetfs: disconnected [ 819.525364][ C1] gadgetfs: connected [ 819.527680][ T5726] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 819.529739][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.569593][ C1] gadgetfs: configuration #1 [ 819.609357][ T5726] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input36 [ 819.789949][ T5741] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 819.942295][ T5741] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 819.967106][ T5741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.967440][ T5741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 819.967468][ T5741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 819.967490][ T5741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 819.967514][ T5741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.967535][ T5741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 819.967558][ T5741] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 820.064409][ T5741] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 820.064443][ T5741] usb 5-1: Product: syz [ 820.064457][ T5741] usb 5-1: Manufacturer: syz [ 820.064472][ T5741] usb 5-1: SerialNumber: syz [ 820.091585][T13285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 820.091725][T13285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 820.091854][T13285] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 820.121654][ T5741] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 820.122130][ T5741] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 820.141248][ T5741] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 820.141346][ T5741] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 820.161794][ T5741] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 820.364619][T13274] gadgetfs: suspended from state 3 [ 820.364663][T13274] gadgetfs: disconnected [ 820.365193][ T9] usb 5-1: USB disconnect, device number 62 [ 820.387488][ T5808] usb 2-1: USB disconnect, device number 63 [ 820.418225][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 820.429982][ T9] keyspan 5-1:1.0: device disconnected [ 820.587319][T12078] Bluetooth: hci6: command tx timeout [ 820.786034][T13307] ebt_limit: overflow, try lower: 0/0 [ 823.058566][T13327] ebt_limit: overflow, try lower: 0/0 [ 823.208566][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.208675][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.208779][T13223] bridge_slave_0: entered allmulticast mode [ 823.211620][T13223] bridge_slave_0: entered promiscuous mode [ 823.214885][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.214996][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.215236][T13223] bridge_slave_1: entered allmulticast mode [ 823.216563][T13223] bridge_slave_1: entered promiscuous mode [ 823.408338][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 823.408356][ T31] audit: type=1400 audit(1792225612.537:7173): avc: denied { create } for pid=13333 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 823.415933][ T31] audit: type=1400 audit(1792225612.547:7174): avc: denied { watch } for pid=13331 comm="syz.2.1744" path="/356" dev="tmpfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 823.471219][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.588227][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.949556][ T31] audit: type=1400 audit(1792225613.977:7175): avc: denied { setopt } for pid=13333 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 825.216053][ T31] audit: type=1400 audit(1792225614.347:7176): avc: denied { write } for pid=13342 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 825.301636][ T31] audit: type=1400 audit(1792225614.427:7177): avc: denied { ioctl } for pid=13340 comm="syz.5.1746" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 825.434622][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 825.540847][ T31] audit: type=1400 audit(1792225614.667:7178): avc: denied { read } for pid=5607 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.543576][ T31] audit: type=1400 audit(1792225614.677:7179): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 825.590222][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 825.590255][ T9] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 825.591443][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 825.591473][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.593204][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 825.593227][ T9] usb 6-1: Product: syz [ 825.593241][ T9] usb 6-1: Manufacturer: syz [ 825.664478][ T31] audit: type=1400 audit(1792225614.797:7180): avc: denied { open } for pid=5603 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.664528][ T31] audit: type=1400 audit(1792225614.797:7181): avc: denied { ioctl } for pid=5603 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.669109][ T9] hub 6-1:1.0: USB hub found [ 825.671732][T13223] team0: Port device team_slave_0 added [ 825.732549][T13223] team0: Port device team_slave_1 added [ 825.769512][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.769529][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.769550][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.770573][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.770585][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.770605][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.813006][ T31] audit: type=1400 audit(1792225614.937:7182): avc: denied { create } for pid=13349 comm="syz.2.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 826.106505][ T7578] rpcbind: server 127.0.0.1 not responding, timed out [ 826.288094][T13344] netlink: 'syz.5.1746': attribute type 5 has an invalid length. [ 826.354842][ T9] hub 6-1:1.0: config failed, can't read hub descriptor (err -90) [ 826.373306][T13223] hsr_slave_0: entered promiscuous mode [ 826.376351][T13223] hsr_slave_1: entered promiscuous mode [ 826.378439][T13223] debugfs: 'hsr0' already exists in 'hsr' [ 826.378456][T13223] Cannot create hsr debugfs directory [ 826.461032][ T9] usbtouchscreen 6-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 826.493316][ T9] usb 6-1: USB disconnect, device number 21 [ 827.357791][T13223] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 827.370851][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 827.382136][T13223] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 827.398779][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 827.399824][T13223] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 827.419568][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 827.421482][T13223] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 828.385128][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.493906][T12512] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 828.631882][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 828.631900][ T31] audit: type=1400 audit(1792225617.757:7222): avc: denied { create } for pid=13377 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 828.666871][ T31] audit: type=1400 audit(1792225617.797:7223): avc: denied { connect } for pid=13377 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 828.712479][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.757460][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.802222][ T31] audit: type=1400 audit(1792225617.797:7224): avc: denied { write } for pid=13377 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 829.209742][T12512] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 829.211805][T12512] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.211843][T12512] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 829.211864][T12512] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 829.211884][T12512] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 829.211904][T12512] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 829.211923][T12512] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 829.211942][T12512] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 829.216774][ T31] audit: type=1400 audit(1792225617.977:7225): avc: denied { read write } for pid=13378 comm="syz.4.1754" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 829.216853][ T31] audit: type=1400 audit(1792225617.977:7226): avc: denied { open } for pid=13378 comm="syz.4.1754" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 829.216885][ T31] audit: type=1400 audit(1792225617.987:7227): avc: denied { ioctl } for pid=13378 comm="syz.4.1754" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 829.216917][ T31] audit: type=1400 audit(1792225618.027:7228): avc: denied { create } for pid=13377 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 829.216948][ T31] audit: type=1400 audit(1792225618.037:7229): avc: denied { setopt } for pid=13377 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 829.216977][ T31] audit: type=1400 audit(1792225618.097:7230): avc: denied { write } for pid=13377 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 829.217093][T12512] usb 3-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 829.217115][T12512] usb 3-1: Product: syz [ 829.217128][T12512] usb 3-1: Manufacturer: syz [ 829.217141][T12512] usb 3-1: SerialNumber: syz [ 829.289650][T13359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.289820][T13359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.289914][T13359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.293477][T12512] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 829.294234][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.294305][ T8724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.295432][T12512] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 829.730201][T12512] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 829.730285][T12512] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 829.732942][T12512] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 829.741393][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.741472][ T8724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.771886][ T31] audit: type=1400 audit(1792225618.897:7231): avc: denied { mount } for pid=13357 comm="syz.2.1750" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 829.782570][ T5741] usb 3-1: USB disconnect, device number 50 [ 829.820163][ T5741] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 829.820789][ T5741] keyspan 3-1:1.0: device disconnected [ 830.517128][T13397] FAULT_INJECTION: forcing a failure. [ 830.517128][T13397] name failslab, interval 1, probability 0, space 0, times 0 [ 830.517164][T13397] CPU: 1 UID: 0 PID: 13397 Comm: syz.4.1757 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.517195][T13397] Tainted: [L]=SOFTLOCKUP [ 830.517203][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 830.517216][T13397] Call Trace: [ 830.517223][T13397] [ 830.517232][T13397] dump_stack_lvl+0x100/0x190 [ 830.517267][T13397] should_fail_ex.cold+0x5/0xa [ 830.517303][T13397] should_failslab+0xc2/0x120 [ 830.517336][T13397] kmem_cache_alloc_noprof+0x92/0x6a0 [ 830.517363][T13397] ? __pfx_map_id_range_down+0x10/0x10 [ 830.517390][T13397] ? security_inode_alloc+0x3b/0x2c0 [ 830.517425][T13397] security_inode_alloc+0x3b/0x2c0 [ 830.517453][T13397] inode_init_always_gfp+0xc6f/0xfb0 [ 830.517488][T13397] alloc_inode+0x8e/0x250 [ 830.517512][T13397] path_from_stashed+0x25b/0x760 [ 830.517538][T13397] open_namespace+0x93/0x1c0 [ 830.517559][T13397] ? __pfx_open_namespace+0x10/0x10 [ 830.517587][T13397] open_related_ns+0x41/0x70 [ 830.517611][T13397] sock_ioctl+0x2bb/0x6b0 [ 830.517640][T13397] ? __pfx_sock_ioctl+0x10/0x10 [ 830.517674][T13397] ? selinux_file_ioctl+0x13b/0x290 [ 830.517703][T13397] ? selinux_file_ioctl+0xb6/0x290 [ 830.517735][T13397] ? __pfx_sock_ioctl+0x10/0x10 [ 830.517764][T13397] __x64_sys_ioctl+0x18e/0x210 [ 830.517792][T13397] do_syscall_64+0x123/0x790 [ 830.517824][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.517846][T13397] RIP: 0033:0x7f3a86d9e559 [ 830.517864][T13397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.517886][T13397] RSP: 002b:00007f3a87c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.517908][T13397] RAX: ffffffffffffffda RBX: 00007f3a87026090 RCX: 00007f3a86d9e559 [ 830.517923][T13397] RDX: 0000000000000000 RSI: 000000000000894c RDI: 0000000000000003 [ 830.517936][T13397] RBP: 00007f3a86e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 830.517950][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.517963][T13397] R13: 00007f3a87026128 R14: 00007f3a87026090 R15: 00007ffcfb7c40b8 [ 830.517990][T13397] [ 831.318991][T13411] netlink: 'syz.2.1761': attribute type 8 has an invalid length. [ 831.319014][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 831.549975][T13223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.391719][T13223] veth0_vlan: entered promiscuous mode [ 832.401202][T13223] veth1_vlan: entered promiscuous mode [ 832.428816][T13223] veth0_macvtap: entered promiscuous mode [ 832.433244][T13223] veth1_macvtap: entered promiscuous mode [ 832.448098][T13223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.457400][T13223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.613213][ T8579] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.629128][ T6597] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.639990][ T6597] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.640239][ T6597] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.727250][ T8723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.727278][ T8723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.759451][ T6599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.759473][ T6599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.958136][ T191] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 833.710360][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 833.710377][ T31] audit: type=1326 audit(1792225622.837:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.711759][ T31] audit: type=1326 audit(1792225622.837:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.855939][ T31] audit: type=1326 audit(1792225622.987:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.855991][ T31] audit: type=1326 audit(1792225622.987:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.856031][ T31] audit: type=1326 audit(1792225622.987:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.977929][ T31] audit: type=1326 audit(1792225623.107:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.977981][ T31] audit: type=1326 audit(1792225623.107:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.978022][ T31] audit: type=1326 audit(1792225623.107:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.985534][ T31] audit: type=1326 audit(1792225623.117:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 833.985576][ T31] audit: type=1326 audit(1792225623.117:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13431 comm="syz.1.1764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4469b9e559 code=0x7ffc0000 [ 834.145600][ T191] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 834.147962][ T191] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.150067][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.150093][ T191] usb 6-1: Product: syz [ 834.150106][ T191] usb 6-1: Manufacturer: syz [ 834.150120][ T191] usb 6-1: SerialNumber: syz [ 834.152417][ T191] usb 6-1: config 0 descriptor?? [ 834.720281][ T191] usb 6-1: USB disconnect, device number 22 [ 834.794454][T13449] gadgetfs: bound to dummy_udc driver [ 835.597491][T13458] ebt_limit: overflow, try lower: 0/0 [ 835.788231][ T1459] rpcbind: server 127.0.0.1 not responding, timed out [ 836.103048][ T5741] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 836.103626][ C1] gadgetfs: connected [ 836.106337][ T5741] gadgetfs: disconnected [ 836.163872][ T863] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 836.390820][T13467] FAULT_INJECTION: forcing a failure. [ 836.390820][T13467] name failslab, interval 1, probability 0, space 0, times 0 [ 836.390916][T13467] CPU: 1 UID: 0 PID: 13467 Comm: syz.4.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.390942][T13467] Tainted: [L]=SOFTLOCKUP [ 836.390949][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 836.390961][T13467] Call Trace: [ 836.390967][T13467] [ 836.390975][T13467] dump_stack_lvl+0x100/0x190 [ 836.391010][T13467] should_fail_ex.cold+0x5/0xa [ 836.391038][T13467] should_failslab+0xc2/0x120 [ 836.391067][T13467] __kmalloc_noprof+0xfc/0x840 [ 836.391090][T13467] ? __pfx_dynamic_dname+0x10/0x10 [ 836.391114][T13467] ? tomoyo_encode2+0xfb/0x3c0 [ 836.391151][T13467] tomoyo_encode2+0xfb/0x3c0 [ 836.391184][T13467] tomoyo_encode+0x29/0x50 [ 836.391211][T13467] tomoyo_realpath_from_path+0x18c/0x690 [ 836.391245][T13467] tomoyo_path_number_perm+0x23c/0x580 [ 836.391269][T13467] ? tomoyo_path_number_perm+0x22e/0x580 [ 836.391301][T13467] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.391327][T13467] ? find_held_lock+0x2b/0x80 [ 836.391363][T13467] ? __lock_acquire+0x5c0/0x1f40 [ 836.391397][T13467] ? __fget_files+0x34/0x3d0 [ 836.391424][T13467] ? find_held_lock+0x2b/0x80 [ 836.391450][T13467] ? hook_file_ioctl_common+0x140/0x440 [ 836.391476][T13467] ? __fget_files+0x21f/0x3d0 [ 836.391507][T13467] security_file_ioctl+0xd3/0x230 [ 836.391537][T13467] __x64_sys_ioctl+0xb7/0x210 [ 836.391563][T13467] do_syscall_64+0x123/0x790 [ 836.391593][T13467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.391612][T13467] RIP: 0033:0x7f3a86d9e559 [ 836.391628][T13467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.391645][T13467] RSP: 002b:00007f3a87c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.391665][T13467] RAX: ffffffffffffffda RBX: 00007f3a87026090 RCX: 00007f3a86d9e559 [ 836.391678][T13467] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 836.391689][T13467] RBP: 00007f3a87c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 836.391701][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.391712][T13467] R13: 00007f3a87026128 R14: 00007f3a87026090 R15: 00007ffcfb7c40b8 [ 836.391739][T13467] [ 836.398039][T13467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.415381][T13480] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1768'. [ 839.101998][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 839.102017][ T31] audit: type=1400 audit(1792225628.227:7359): avc: denied { unmount } for pid=13223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 839.471194][ T31] audit: type=1400 audit(1792225628.597:7360): avc: denied { ioctl } for pid=13509 comm="syz.4.1785" path="/dev/radio7" dev="devtmpfs" ino=996 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 839.557471][ T31] audit: type=1400 audit(1792225628.687:7361): avc: denied { read write } for pid=13509 comm="syz.4.1785" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 839.557521][ T31] audit: type=1400 audit(1792225628.687:7362): avc: denied { open } for pid=13509 comm="syz.4.1785" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 839.628098][ T31] audit: type=1400 audit(1792225628.757:7363): avc: denied { ioctl } for pid=13509 comm="syz.4.1785" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 839.634637][ T31] audit: type=1400 audit(1792225628.767:7364): avc: denied { set_context_mgr } for pid=13509 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 839.708380][T13522] gadgetfs: bound to dummy_udc driver [ 839.760331][ T31] audit: type=1400 audit(1792225628.887:7365): avc: denied { read } for pid=13509 comm="syz.4.1785" name="state_hashed" dev="binder" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 839.760379][ T31] audit: type=1400 audit(1792225628.887:7366): avc: denied { open } for pid=13509 comm="syz.4.1785" path="/dev/binderfs/binder_logs/state_hashed" dev="binder" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 839.940154][ T31] audit: type=1400 audit(1792225629.067:7367): avc: denied { map } for pid=13523 comm="syz.7.1786" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 839.945790][ T5741] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 839.970106][ C1] gadgetfs: connected [ 839.970991][ T5741] gadgetfs: disconnected [ 840.062962][ T863] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 840.120458][T13512] gadgetfs: suspended from state 2 [ 840.129522][ T5741] usb 2-1: device descriptor read/all, error -71 [ 844.162722][ T5741] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 844.333283][ T5741] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 844.337477][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.337501][ T5741] usb 6-1: Product: syz [ 844.337511][ T5741] usb 6-1: Manufacturer: syz [ 844.337520][ T5741] usb 6-1: SerialNumber: syz [ 844.338922][ T5741] usb 6-1: config 0 descriptor?? [ 844.392226][T12078] Bluetooth: hci6: unexpected Set CIG Parameters response data [ 844.446040][ T31] audit: type=1400 audit(1792225633.577:7368): avc: denied { bind } for pid=13556 comm="syz.7.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 844.446087][ T31] audit: type=1400 audit(1792225633.577:7369): avc: denied { name_bind } for pid=13556 comm="syz.7.1791" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 844.460135][ T31] audit: type=1400 audit(1792225633.577:7370): avc: denied { node_bind } for pid=13556 comm="syz.7.1791" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 844.460184][ T31] audit: type=1400 audit(1792225633.577:7371): avc: denied { write } for pid=13556 comm="syz.7.1791" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 844.583604][ T191] usb 6-1: USB disconnect, device number 24 [ 844.612814][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 845.223965][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 845.227402][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.227429][ T9] usb 3-1: Product: syz [ 845.227444][ T9] usb 3-1: Manufacturer: syz [ 845.227459][ T9] usb 3-1: SerialNumber: syz [ 845.313419][ T9] usb 3-1: config 0 descriptor?? [ 845.868550][ T9] usb 3-1: USB disconnect, device number 52 [ 846.866335][T13346] udevd[13346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 848.378924][T13588] gadgetfs: bound to dummy_udc driver [ 848.894075][T13587] gadgetfs: suspended from state 2 [ 848.913001][ T191] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 849.376949][ T31] audit: type=1400 audit(1792225638.507:7372): avc: denied { read } for pid=13601 comm="syz.4.1798" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 849.377310][ T31] audit: type=1400 audit(1792225638.507:7373): avc: denied { open } for pid=13601 comm="syz.4.1798" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 850.007976][T13605] fuse: Unknown parameter 'user_id00000000000000000000' [ 850.059680][ T31] audit: type=1400 audit(1792225639.137:7374): avc: denied { read write } for pid=13604 comm="syz.1.1804" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 850.059848][ T31] audit: type=1400 audit(1792225639.137:7375): avc: denied { open } for pid=13604 comm="syz.1.1804" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 850.059981][ T31] audit: type=1400 audit(1792225639.137:7376): avc: denied { mounton } for pid=13604 comm="syz.1.1804" path="/366/file0" dev="tmpfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 850.202908][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 851.204054][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 851.204579][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 851.205702][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 851.205725][ T9] usb 5-1: config 179 has no interface number 0 [ 851.205760][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 851.205783][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 851.205806][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 851.205828][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 851.205848][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 851.205882][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.210658][T13602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 851.602781][ T31] audit: type=1400 audit(1792225640.727:7377): avc: denied { ioctl } for pid=13601 comm="syz.4.1798" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 852.792859][ T31] audit: type=1400 audit(1792225641.767:7378): avc: denied { read } for pid=13601 comm="syz.4.1798" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 852.793013][ T31] audit: type=1400 audit(1792225641.887:7379): avc: denied { ioctl } for pid=13601 comm="syz.4.1798" path="socket:[41945]" dev="sockfs" ino=41945 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 853.630215][ T8580] rpcbind: server 127.0.0.1 not responding, timed out [ 855.067634][ T191] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 856.218867][ T5741] usb 5-1: USB disconnect, device number 63 [ 856.218892][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 856.218925][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 857.110067][ T31] audit: type=1400 audit(1792225645.517:7380): avc: denied { mount } for pid=13642 comm="syz.1.1807" name="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 857.110121][ T31] audit: type=1400 audit(1792225645.717:7381): avc: denied { search } for pid=13642 comm="syz.1.1807" name="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110157][ T31] audit: type=1400 audit(1792225645.717:7382): avc: denied { search } for pid=13642 comm="syz.1.1807" name="usb_gadget" dev="configfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110192][ T31] audit: type=1400 audit(1792225646.117:7383): avc: denied { search } for pid=13642 comm="syz.1.1807" name="/" dev="configfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110233][ T31] audit: type=1400 audit(1792225646.117:7384): avc: denied { search } for pid=13642 comm="syz.1.1807" name="usb_gadget" dev="configfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110267][ T31] audit: type=1400 audit(1792225646.117:7385): avc: denied { search } for pid=13642 comm="syz.1.1807" name="g1" dev="configfs" ino=9908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110303][ T31] audit: type=1400 audit(1792225646.117:7386): avc: denied { search } for pid=13642 comm="syz.1.1807" name="functions" dev="configfs" ino=9909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110348][ T31] audit: type=1400 audit(1792225646.117:7387): avc: denied { write search } for pid=13642 comm="syz.1.1807" name="functions" dev="configfs" ino=9909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110384][ T31] audit: type=1400 audit(1792225646.117:7388): avc: denied { add_name } for pid=13642 comm="syz.1.1807" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 857.110418][ T31] audit: type=1400 audit(1792225646.117:7389): avc: denied { create } for pid=13642 comm="syz.1.1807" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 857.658573][ T191] usb 6-1: device descriptor read/all, error -71 [ 858.567933][T13661] netlink: 'syz.7.1812': attribute type 8 has an invalid length. [ 858.567957][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1812'. [ 860.405679][T13657] fuse: Unknown parameter 'user_id00000000000000000000' [ 860.664586][ T191] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 860.671395][ T6238] rpcbind: server 127.0.0.1 not responding, timed out [ 860.833458][ T191] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 860.836182][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.836210][ T191] usb 6-1: Product: syz [ 860.836226][ T191] usb 6-1: Manufacturer: syz [ 860.836240][ T191] usb 6-1: SerialNumber: syz [ 860.840286][ T191] usb 6-1: config 0 descriptor?? [ 861.890304][ T5741] usb 6-1: USB disconnect, device number 26 [ 862.287920][T13681] tipc: New replicast peer: 255.255.255.255 [ 862.289060][T13681] tipc: Enabled bearer , priority 10 [ 862.291378][T13681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13681 comm=syz.2.1825 [ 862.404799][T13683] ubi0: attaching mtd0 [ 862.416179][T13683] ubi0: scanning is finished [ 862.416337][T13683] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 864.157160][T13683] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 864.202782][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 864.202804][ T31] audit: type=1400 audit(1792225653.297:7397): avc: denied { mount } for pid=13687 comm="syz.5.1826" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 864.231672][T13689] FAULT_INJECTION: forcing a failure. [ 864.231672][T13689] name fail_futex, interval 1, probability 0, space 0, times 0 [ 864.231703][T13689] CPU: 1 UID: 0 PID: 13689 Comm: syz.5.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.231726][T13689] Tainted: [L]=SOFTLOCKUP [ 864.231733][T13689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 864.231743][T13689] Call Trace: [ 864.231749][T13689] [ 864.231756][T13689] dump_stack_lvl+0x100/0x190 [ 864.231785][T13689] should_fail_ex.cold+0x5/0xa [ 864.231809][T13689] get_futex_key+0x1d0/0x14f0 [ 864.231836][T13689] ? __pfx_get_futex_key+0x10/0x10 [ 864.231858][T13689] ? refill_pi_state_cache+0x91/0x260 [ 864.231887][T13689] futex_requeue+0x227/0x22e0 [ 864.231914][T13689] ? __pfx_futex_requeue+0x10/0x10 [ 864.231930][T13689] ? get_pid_task+0xfc/0x250 [ 864.231959][T13689] ? get_pid_task+0x106/0x250 [ 864.231981][T13689] ? proc_fail_nth_write+0x9f/0x220 [ 864.232012][T13689] ? rcu_read_lock_any_held+0x6a/0x90 [ 864.232028][T13689] ? find_held_lock+0x2b/0x80 [ 864.232056][T13689] do_futex+0x3ae/0x440 [ 864.232081][T13689] ? __pfx_do_futex+0x10/0x10 [ 864.232106][T13689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 864.232136][T13689] __x64_sys_futex+0x34f/0x4d0 [ 864.232161][T13689] ? fput+0x7c/0x100 [ 864.232185][T13689] ? __pfx___x64_sys_futex+0x10/0x10 [ 864.232207][T13689] ? ksys_write+0x1ac/0x250 [ 864.232227][T13689] ? __pfx_ksys_write+0x10/0x10 [ 864.232253][T13689] do_syscall_64+0x123/0x790 [ 864.232279][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.232296][T13689] RIP: 0033:0x7fc7e0f9e559 [ 864.232311][T13689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.232326][T13689] RSP: 002b:00007fc7e1d98028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 864.232343][T13689] RAX: ffffffffffffffda RBX: 00007fc7e1226090 RCX: 00007fc7e0f9e559 [ 864.232354][T13689] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000200000000140 [ 864.232365][T13689] RBP: 00007fc7e1d98090 R08: 0000200000000180 R09: 0000000000000001 [ 864.232375][T13689] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 864.232386][T13689] R13: 00007fc7e1226128 R14: 00007fc7e1226090 R15: 00007fffafc755b8 [ 864.232409][T13689] [ 864.255034][ T31] audit: type=1400 audit(1792225653.387:7398): avc: denied { ioctl } for pid=13687 comm="syz.5.1826" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42636 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 865.386694][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.386746][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.172829][ T9] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 868.305609][ T9] usb 5-1: device descriptor read/64, error -71 [ 868.555984][ T9] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 868.683428][ T9] usb 5-1: device descriptor read/64, error -71 [ 868.829034][ T9] usb usb5-port1: attempt power cycle [ 869.536903][ T9] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 869.985948][ T9] usb 5-1: device descriptor read/8, error -71 [ 870.882943][T13745] FAULT_INJECTION: forcing a failure. [ 870.882943][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.882979][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.7.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.883005][T13745] Tainted: [L]=SOFTLOCKUP [ 870.883012][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 870.883023][T13745] Call Trace: [ 870.883030][T13745] [ 870.883039][T13745] dump_stack_lvl+0x100/0x190 [ 870.883073][T13745] should_fail_ex.cold+0x5/0xa [ 870.883100][T13745] _copy_from_user+0x2e/0xd0 [ 870.883129][T13745] sctp_setsockopt+0x8cc/0xb370 [ 870.883158][T13745] ? __pfx_sctp_setsockopt+0x10/0x10 [ 870.883179][T13745] ? __fget_files+0x215/0x3d0 [ 870.883208][T13745] ? selinux_socket_setsockopt+0x6a/0x80 [ 870.883232][T13745] ? sock_common_setsockopt+0x2e/0xf0 [ 870.883255][T13745] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 870.883280][T13745] do_sock_setsockopt+0xf3/0x1d0 [ 870.883306][T13745] __sys_setsockopt+0x195/0x220 [ 870.883332][T13745] __x64_sys_setsockopt+0xbd/0x160 [ 870.883355][T13745] ? do_syscall_64+0xae/0x790 [ 870.883382][T13745] ? lockdep_hardirqs_on+0x7d/0x110 [ 870.883408][T13745] do_syscall_64+0x123/0x790 [ 870.883438][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.883458][T13745] RIP: 0033:0x7f7d5c19e559 [ 870.883474][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.883492][T13745] RSP: 002b:00007f7d5cf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 870.883511][T13745] RAX: ffffffffffffffda RBX: 00007f7d5c425fa0 RCX: 00007f7d5c19e559 [ 870.883524][T13745] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 870.883535][T13745] RBP: 00007f7d5cf93090 R08: 0000000000000008 R09: 0000000000000000 [ 870.883546][T13745] R10: 0000200000001940 R11: 0000000000000246 R12: 0000000000000001 [ 870.883558][T13745] R13: 00007f7d5c426038 R14: 00007f7d5c425fa0 R15: 00007ffd353243b8 [ 870.883584][T13745] [ 872.572810][T13759] openvswitch: netlink: Key type 2054 is out of range max 32 [ 872.592571][T13759] netlink: 'syz.7.1842': attribute type 8 has an invalid length. [ 872.592595][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1842'. [ 872.754574][ T31] audit: type=1400 audit(1792225661.887:7399): avc: denied { append } for pid=13760 comm="syz.2.1839" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 875.889185][ T31] audit: type=1400 audit(1792225665.017:7400): avc: denied { watch } for pid=13784 comm="syz.1.1849" path="/376" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 876.086390][ T31] audit: type=1400 audit(1792225665.077:7401): avc: denied { read write } for pid=13784 comm="syz.1.1849" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 876.086583][ T31] audit: type=1400 audit(1792225665.077:7402): avc: denied { open } for pid=13784 comm="syz.1.1849" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 876.086666][ T31] audit: type=1400 audit(1792225665.077:7403): avc: denied { execmem } for pid=13784 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 876.969131][ T31] audit: type=1400 audit(1792225666.097:7404): avc: denied { read } for pid=5599 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 876.971269][ T31] audit: type=1400 audit(1792225666.097:7405): avc: denied { open } for pid=5599 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 877.026945][ T31] audit: type=1400 audit(1792225666.157:7406): avc: denied { ioctl } for pid=5599 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 877.129793][ T31] audit: type=1400 audit(1792225666.257:7407): avc: denied { read } for pid=13788 comm="syz.1.1851" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 877.130126][ T31] audit: type=1400 audit(1792225666.257:7408): avc: denied { open } for pid=13788 comm="syz.1.1851" path="net:[4026533079]" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 877.931076][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 877.931099][ T31] audit: type=1400 audit(1792225666.477:7414): avc: denied { write } for pid=13788 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 877.931141][ T31] audit: type=1400 audit(1792225666.477:7415): avc: denied { mounton } for pid=13788 comm="syz.1.1851" path="/377/sys" dev="tmpfs" ino=2189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 877.931179][ T31] audit: type=1400 audit(1792225666.487:7416): avc: denied { mount } for pid=13788 comm="syz.1.1851" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 877.931215][ T31] audit: type=1400 audit(1792225666.577:7417): avc: denied { create } for pid=13788 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 877.931260][ T31] audit: type=1400 audit(1792225666.587:7418): avc: denied { connect } for pid=13788 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 877.931297][ T31] audit: type=1400 audit(1792225666.597:7419): avc: denied { prog_load } for pid=13788 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 877.931333][ T31] audit: type=1400 audit(1792225666.597:7420): avc: denied { bpf } for pid=13788 comm="syz.1.1851" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 877.931370][ T31] audit: type=1400 audit(1792225666.617:7421): avc: denied { perfmon } for pid=13788 comm="syz.1.1851" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 877.931456][ T31] audit: type=1400 audit(1792225666.707:7422): avc: denied { create } for pid=13788 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 878.532448][T13781] Set syz1 is full, maxelem 6117 reached [ 878.623260][ T31] audit: type=1400 audit(1792225667.757:7423): avc: denied { read write } for pid=13795 comm="syz.4.1847" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 878.862784][ T5807] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 878.871146][ T83] rpcbind: server 127.0.0.1 not responding, timed out [ 878.881078][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 878.993009][ T5807] usb 5-1: device descriptor read/64, error -71 [ 879.006540][T13802] tipc: Started in network mode [ 879.006603][T13802] tipc: Node identity 4, cluster identity 4711 [ 879.006628][T13802] tipc: Node number set to 4 [ 879.242951][ T5807] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 879.413778][ T5807] usb 5-1: device descriptor read/64, error -71 [ 879.523213][ T5807] usb usb5-port1: attempt power cycle [ 881.630580][ T5807] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 881.789722][ T5807] usb 5-1: device descriptor read/8, error -71 [ 882.426226][ T8580] rpcbind: server 127.0.0.1 not responding, timed out [ 882.542918][T13823] openvswitch: netlink: Key type 2054 is out of range max 32 [ 882.549849][T13823] netlink: 'syz.4.1860': attribute type 8 has an invalid length. [ 882.549871][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 882.603210][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1861'. [ 882.603231][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1861'. [ 883.586988][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 883.587010][ T31] audit: type=1400 audit(1792225672.277:7474): avc: denied { prog_run } for pid=13827 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 883.669596][ T31] audit: type=1400 audit(1792225672.797:7475): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 883.715143][ T31] audit: type=1400 audit(1792225672.847:7476): avc: denied { read write } for pid=13831 comm="syz.5.1864" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 883.715505][ T31] audit: type=1400 audit(1792225672.847:7477): avc: denied { open } for pid=13831 comm="syz.5.1864" path="/dev/input/event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 883.716206][ T31] audit: type=1400 audit(1792225672.847:7478): avc: denied { ioctl } for pid=13831 comm="syz.5.1864" path="/dev/input/event1" dev="devtmpfs" ino=918 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 883.716843][ T31] audit: type=1400 audit(1792225672.847:7479): avc: denied { read } for pid=13831 comm="syz.5.1864" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 883.717148][ T31] audit: type=1400 audit(1792225672.847:7480): avc: denied { open } for pid=13831 comm="syz.5.1864" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 883.717704][ T31] audit: type=1400 audit(1792225672.847:7481): avc: denied { ioctl } for pid=13831 comm="syz.5.1864" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 883.800452][ T31] audit: type=1400 audit(1792225672.927:7482): avc: denied { allowed } for pid=13831 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 883.962826][ T31] audit: type=1400 audit(1792225673.087:7483): avc: denied { create } for pid=13831 comm="syz.5.1864" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 888.117175][ T5807] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 888.233224][T13876] netlink: 'syz.7.1874': attribute type 14 has an invalid length. [ 889.247661][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 889.249830][ T5807] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 889.250718][ T5807] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 889.250741][ T5807] usb 3-1: config 1 has no interface number 0 [ 889.250774][ T5807] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 889.250797][ T5807] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 889.250820][ T5807] usb 3-1: config 1 interface 105 has no altsetting 0 [ 889.254068][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 889.254096][ T5807] usb 3-1: Product: syz [ 889.254108][ T5807] usb 3-1: Manufacturer: syz [ 889.254122][ T5807] usb 3-1: SerialNumber: syz [ 889.259357][T13865] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 889.259449][T13865] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 889.399594][T13883] openvswitch: netlink: Key type 2054 is out of range max 32 [ 889.415517][T13883] netlink: 'syz.5.1877': attribute type 8 has an invalid length. [ 889.415538][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 890.205811][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 890.205833][ T31] audit: type=1400 audit(1792225679.327:7490): avc: denied { unlink } for pid=13864 comm="syz.2.1863" name="#2f" dev="tmpfs" ino=2235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 890.216442][ T31] audit: type=1400 audit(1792225679.347:7491): avc: denied { mount } for pid=13864 comm="syz.2.1863" name="/" dev="overlay" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 890.290343][T13865] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 890.290415][T13865] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 890.577547][ T5807] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 890.580153][ T5807] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 891.725943][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 891.727323][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 892.000141][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 892.012318][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 892.233790][ T5807] usb 3-1: USB disconnect, device number 53 [ 892.305791][ T31] audit: type=1400 audit(1792225681.437:7492): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 892.534489][ T9] libceph: connect (1)[c::]:6789 error -101 [ 892.536207][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 892.698447][T13913] 9p: Bad value for 'rfdno' [ 892.764695][T13905] ceph: No mds server is up or the cluster is laggy [ 893.699809][T12679] libceph: connect (1)[c::]:6789 error -101 [ 893.699963][T12679] libceph: mon0 (1)[c::]:6789 connect error [ 894.752867][ T6238] rpcbind: server 127.0.0.1 not responding, timed out [ 894.831720][T12078] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 896.495472][ T31] audit: type=1400 audit(1792225685.627:7493): avc: denied { module_request } for pid=13934 comm="syz.2.1890" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 896.774421][ T31] audit: type=1400 audit(1792225685.907:7494): avc: denied { sys_module } for pid=13934 comm="syz.2.1890" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 896.819837][ T31] audit: type=1400 audit(1792225685.947:7495): avc: denied { mmap_zero } for pid=13943 comm="syz.7.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 896.850404][ T31] audit: type=1400 audit(1792225685.977:7496): avc: denied { map } for pid=13943 comm="syz.7.1893" path="socket:[43530]" dev="sockfs" ino=43530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 896.924317][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1893'. [ 897.050366][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1893'. [ 898.124301][ T31] audit: type=1400 audit(1792225686.697:7497): avc: denied { write } for pid=13951 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 898.705896][ T31] audit: type=1400 audit(1792225687.837:7498): avc: denied { write } for pid=13960 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 898.732562][ T5807] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 898.775111][T13958] Set syz1 is full, maxelem 6117 reached [ 899.295231][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 899.349883][ T5807] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 899.383983][ T5807] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 899.384018][ T5807] usb 3-1: config 1 has no interface number 0 [ 899.384053][ T5807] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 899.384077][ T5807] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 899.384372][ T5807] usb 3-1: config 1 interface 105 has no altsetting 0 [ 899.481235][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 899.481881][ T5807] usb 3-1: Product: syz [ 899.482238][ T5807] usb 3-1: Manufacturer: syz [ 899.491594][ T5807] usb 3-1: SerialNumber: syz [ 899.606134][T13956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 899.610755][T13956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 899.755252][ T31] audit: type=1400 audit(1792225688.887:7499): avc: denied { bind } for pid=13973 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 899.758519][T13974] openvswitch: netlink: Key type 2054 is out of range max 32 [ 899.817606][T13975] netlink: 'syz.5.1899': attribute type 8 has an invalid length. [ 899.817630][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1899'. [ 900.005249][ T31] audit: type=1400 audit(1792225689.137:7500): avc: denied { create } for pid=13976 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 900.031356][ T31] audit: type=1400 audit(1792225689.157:7501): avc: denied { bind } for pid=13976 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 900.063640][ T31] audit: type=1400 audit(1792225689.197:7502): avc: denied { write } for pid=13976 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 900.082169][T13956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 900.082263][T13956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 900.271610][T13980] 9p: Bad value for 'rfdno' [ 900.296539][ T5807] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 900.296749][ T5807] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 902.504197][ T5807] usb 3-1: USB disconnect, device number 54 [ 902.827811][ T1459] rpcbind: server 127.0.0.1 not responding, timed out [ 903.288318][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 903.288340][ T31] audit: type=1400 audit(1792225692.407:7507): avc: denied { read write } for pid=14003 comm="syz.4.1909" name="vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 903.288393][ T31] audit: type=1400 audit(1792225692.407:7508): avc: denied { open } for pid=14003 comm="syz.4.1909" path="/dev/vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 903.310772][ T31] audit: type=1400 audit(1792225692.437:7509): avc: denied { ioctl } for pid=14003 comm="syz.4.1909" path="/dev/vmci" dev="devtmpfs" ino=696 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 903.330228][ T31] audit: type=1400 audit(1792225692.457:7510): avc: denied { setopt } for pid=13995 comm="syz.1.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 903.330337][ T31] audit: type=1400 audit(1792225692.457:7511): avc: denied { mounton } for pid=13995 comm="syz.1.1907" path="/387/sys" dev="tmpfs" ino=2244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 903.340010][ T31] audit: type=1400 audit(1792225692.467:7512): avc: denied { mount } for pid=13995 comm="syz.1.1907" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 904.438455][ T5334] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 904.724144][ T31] audit: type=1400 audit(1792225692.497:7513): avc: denied { execmem } for pid=14003 comm="syz.4.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 904.724403][ T31] audit: type=1400 audit(1792225692.837:7514): avc: denied { read } for pid=14003 comm="syz.4.1909" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 904.724567][ T31] audit: type=1400 audit(1792225692.837:7515): avc: denied { open } for pid=14003 comm="syz.4.1909" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 904.724709][ T31] audit: type=1400 audit(1792225692.987:7516): avc: denied { write } for pid=14003 comm="syz.4.1909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 905.827740][ T5741] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 906.758781][T14000] ceph: No mds server is up or the cluster is laggy [ 909.343146][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 909.343168][ T31] audit: type=1400 audit(1792225697.907:7534): avc: denied { create } for pid=14024 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 909.343204][ T31] audit: type=1400 audit(1792225697.947:7535): avc: denied { create } for pid=14024 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 909.554639][ T31] audit: type=1400 audit(1792225698.687:7536): avc: denied { write } for pid=14028 comm="syz.7.1903" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 909.599140][ T31] audit: type=1400 audit(1792225698.727:7537): avc: denied { read write } for pid=14028 comm="syz.7.1903" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 909.599188][ T31] audit: type=1400 audit(1792225698.727:7538): avc: denied { open } for pid=14028 comm="syz.7.1903" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 909.610946][ T31] audit: type=1400 audit(1792225698.737:7539): avc: denied { mount } for pid=14028 comm="syz.7.1903" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 909.612023][T14031] overlayfs: missing 'lowerdir' [ 909.681115][ T31] audit: type=1400 audit(1792225698.807:7540): avc: denied { mount } for pid=14028 comm="syz.7.1903" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 909.713496][ T31] audit: type=1400 audit(1792225698.847:7541): avc: denied { create } for pid=14028 comm="syz.7.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 909.715230][ T31] audit: type=1400 audit(1792225698.847:7542): avc: denied { write } for pid=14028 comm="syz.7.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 909.721157][ T31] audit: type=1400 audit(1792225698.847:7543): avc: denied { create } for pid=14028 comm="syz.7.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 909.853636][T12078] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 911.031140][T14035] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1915'. [ 911.248639][T14036] ip_tables: iptables: counters copy to user failed while replacing table [ 912.035252][ T50] rpcbind: server 127.0.0.1 not responding, timed out [ 914.862021][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 914.862054][ T31] audit: type=1400 audit(1792225703.977:7579): avc: denied { execute } for pid=14059 comm="syz.2.1912" name="file0" dev="tmpfs" ino=2288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 914.862187][ T31] audit: type=1400 audit(1792225703.977:7580): avc: denied { execute_no_trans } for pid=14059 comm="syz.2.1912" path="/391/file0" dev="tmpfs" ino=2288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 915.187943][ T31] audit: type=1400 audit(1792225704.317:7581): avc: denied { read write } for pid=14065 comm="syz.5.1924" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 915.188344][ T31] audit: type=1400 audit(1792225704.317:7582): avc: denied { open } for pid=14065 comm="syz.5.1924" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 915.245520][ T31] audit: type=1400 audit(1792225704.377:7583): avc: denied { map } for pid=14065 comm="syz.5.1924" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 915.365285][ T31] audit: type=1400 audit(1792225704.497:7584): avc: denied { module_request } for pid=14065 comm="syz.5.1924" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 915.453166][ T31] audit: type=1400 audit(1792225704.577:7585): avc: denied { sys_module } for pid=14065 comm="syz.5.1924" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 917.281985][T14084] ebt_limit: overflow, try lower: 0/0 [ 917.597850][ T31] audit: type=1400 audit(1792225706.727:7586): avc: denied { prog_run } for pid=14086 comm="syz.7.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 917.651219][ T31] audit: type=1400 audit(1792225706.777:7587): avc: denied { write } for pid=14086 comm="syz.7.1922" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 917.651460][ T31] audit: type=1400 audit(1792225706.777:7588): avc: denied { open } for pid=14086 comm="syz.7.1922" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 917.848753][T12078] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 920.151857][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 920.151911][ T31] audit: type=1400 audit(1792225709.267:7590): avc: denied { read write } for pid=14105 comm="syz.1.1931" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 920.152009][ T31] audit: type=1400 audit(1792225709.277:7591): avc: denied { open } for pid=14105 comm="syz.1.1931" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 920.999025][ T31] audit: type=1400 audit(1792225709.637:7592): avc: denied { read } for pid=14105 comm="syz.1.1931" name="set_event" dev="tracefs" ino=3278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 920.999070][ T31] audit: type=1400 audit(1792225709.687:7593): avc: denied { write } for pid=14105 comm="syz.1.1931" name="igmp" dev="proc" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 920.999105][ T31] audit: type=1400 audit(1792225709.687:7594): avc: denied { ioctl } for pid=14105 comm="syz.1.1931" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 922.796952][ T31] audit: type=1400 audit(1792225711.927:7595): avc: denied { bind } for pid=14121 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 922.830747][ T31] audit: type=1400 audit(1792225711.957:7596): avc: denied { setopt } for pid=14121 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 922.844726][T14125] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 922.844742][T14125] audit: out of memory in audit_log_start [ 922.844819][T14125] Bluetooth: MGMT ver 1.23 [ 923.850739][T14135] FAULT_INJECTION: forcing a failure. [ 923.850739][T14135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.850771][T14135] CPU: 0 UID: 0 PID: 14135 Comm: syz.4.1923 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.850796][T14135] Tainted: [L]=SOFTLOCKUP [ 923.850803][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 923.850815][T14135] Call Trace: [ 923.850821][T14135] [ 923.850829][T14135] dump_stack_lvl+0x100/0x190 [ 923.850863][T14135] should_fail_ex.cold+0x5/0xa [ 923.850891][T14135] _copy_from_iter+0x1f4/0x1690 [ 923.850926][T14135] ? __pfx__copy_from_iter+0x10/0x10 [ 923.850952][T14135] ? trace_kmalloc+0xeb/0x110 [ 923.850979][T14135] ? __kasan_kmalloc+0xaa/0xb0 [ 923.851006][T14135] ? __kmalloc_noprof+0x350/0x840 [ 923.851031][T14135] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 923.851061][T14135] kernfs_fop_write_iter+0x186/0x5f0 [ 923.851090][T14135] vfs_write+0x6af/0x1050 [ 923.851115][T14135] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 923.851142][T14135] ? __fget_files+0x34/0x3d0 [ 923.851176][T14135] ? __pfx_vfs_write+0x10/0x10 [ 923.851198][T14135] ? find_held_lock+0x2b/0x80 [ 923.851246][T14135] ksys_write+0x12a/0x250 [ 923.851269][T14135] ? __pfx_ksys_write+0x10/0x10 [ 923.851301][T14135] do_syscall_64+0x123/0x790 [ 923.851332][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.851352][T14135] RIP: 0033:0x7f3a86d9e559 [ 923.851369][T14135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.851388][T14135] RSP: 002b:00007f3a87cbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.851407][T14135] RAX: ffffffffffffffda RBX: 00007f3a87025fa0 RCX: 00007f3a86d9e559 [ 923.851420][T14135] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 923.851432][T14135] RBP: 00007f3a87cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 923.851444][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.851456][T14135] R13: 00007f3a87026038 R14: 00007f3a87025fa0 R15: 00007ffcfb7c40b8 [ 923.851484][T14135] [ 924.203504][T14139] ebt_limit: overflow, try lower: 0/0 [ 925.943834][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.943883][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.083110][T12078] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 929.538982][ T31] audit: type=1400 audit(1792225718.667:7597): avc: denied { read write } for pid=14160 comm="syz.2.1947" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 929.539251][ T31] audit: type=1400 audit(1792225718.667:7598): avc: denied { open } for pid=14160 comm="syz.2.1947" path="/dev/input/event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 929.541938][ T31] audit: type=1400 audit(1792225718.667:7599): avc: denied { ioctl } for pid=14160 comm="syz.2.1947" path="/dev/input/event1" dev="devtmpfs" ino=918 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 929.649115][ T31] audit: type=1400 audit(1792225718.777:7600): avc: denied { read } for pid=14160 comm="syz.2.1947" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 929.652140][ T31] audit: type=1400 audit(1792225718.777:7601): avc: denied { open } for pid=14160 comm="syz.2.1947" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 929.759715][ T31] audit: type=1400 audit(1792225718.887:7602): avc: denied { ioctl } for pid=14160 comm="syz.2.1947" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 930.069923][ T31] audit: type=1400 audit(1792225719.187:7603): avc: denied { map } for pid=14160 comm="syz.2.1947" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 930.085001][ T31] audit: type=1400 audit(1792225719.207:7604): avc: denied { read write } for pid=14160 comm="syz.2.1947" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 930.343349][T12512] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 930.492687][T12512] usb 5-1: Using ep0 maxpacket: 16 [ 930.493417][T12512] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 930.494426][T12512] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 930.494449][T12512] usb 5-1: config 1 has no interface number 0 [ 930.494482][T12512] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 930.494505][T12512] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 930.494528][T12512] usb 5-1: config 1 interface 105 has no altsetting 0 [ 930.496559][T12512] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 930.496580][T12512] usb 5-1: Product: syz [ 930.496594][T12512] usb 5-1: Manufacturer: syz [ 930.496609][T12512] usb 5-1: SerialNumber: syz [ 930.501735][T14168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 930.501844][T14168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 931.080169][ T31] audit: type=1400 audit(1792225720.207:7605): avc: denied { unlink } for pid=14164 comm="syz.4.1943" name="#33" dev="tmpfs" ino=2307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 931.081716][ T31] audit: type=1400 audit(1792225720.207:7606): avc: denied { mount } for pid=14164 comm="syz.4.1943" name="/" dev="overlay" ino=2302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 931.171718][T14168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 931.171835][T14168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 931.595415][T12512] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 931.598179][T12512] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 932.771407][T14186] overlayfs: missing 'lowerdir' [ 936.509123][T14023] rpcbind: server 127.0.0.1 not responding, timed out [ 937.520855][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 937.843430][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 937.843444][ T31] audit: type=1400 audit(1792225726.977:7609): avc: denied { bind } for pid=14217 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 937.908909][ T5741] usb 5-1: USB disconnect, device number 72 [ 937.931878][ T31] audit: type=1400 audit(1792225727.057:7610): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 938.620630][ T5601] Bluetooth: hci6: command 0x0406 tx timeout [ 941.244168][ T83] rpcbind: server 127.0.0.1 not responding, timed out [ 941.564256][T12078] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 944.051427][ T32] INFO: task syz-executor:12191 blocked for more than 144 seconds. [ 944.051460][ T32] Tainted: G L syzkaller #0 [ 944.051470][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.051478][ T32] task:syz-executor state:D stack:23688 pid:12191 tgid:12191 ppid:1 ** replaying previous printk message ** [ 944.051478][ T32] task:syz-executor state:D stack:23688 pid:12191 tgid:12191 ppid:1 task_flags:0x400140 flags:0x00080002 [ 944.051530][ T32] Call Trace: [ 944.051537][ T32] [ 944.051549][ T32] __schedule+0x1259/0x6920 [ 944.051578][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 944.051605][ T32] ? do_raw_spin_lock+0x128/0x260 [ 944.051636][ T32] ? __pfx___schedule+0x10/0x10 [ 944.051658][ T32] ? find_held_lock+0x2b/0x80 [ 944.051684][ T32] ? schedule+0x225/0x2c0 [ 944.051709][ T32] schedule+0xdd/0x2c0 [ 944.051732][ T32] schedule_preempt_disabled+0x13/0x30 [ 944.051756][ T32] __mutex_lock+0xccb/0x1bd0 [ 944.051784][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 944.051816][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 944.051848][ T32] ? net_generic+0x25/0x2a0 [ 944.051873][ T32] ? net_generic+0xea/0x2a0 [ 944.051897][ T32] ? net_generic+0xea/0x2a0 [ 944.051927][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 944.051951][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 944.051978][ T32] nfsd_umount+0x3b/0x60 [ 944.052006][ T32] deactivate_locked_super+0xbd/0x130 [ 944.052030][ T32] deactivate_super+0xea/0x110 [ 944.052055][ T32] cleanup_mnt+0xb7/0x160 [ 944.052078][ T32] task_work_run+0x150/0x240 [ 944.052107][ T32] ? __pfx_task_work_run+0x10/0x10 [ 944.052144][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 944.052169][ T32] ? rcu_is_watching+0x13/0xc0 [ 944.052199][ T32] do_syscall_64+0x661/0x790 [ 944.052228][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.052248][ T32] RIP: 0033:0x7f11ce59f797 [ 944.052264][ T32] RSP: 002b:00007ffdd82c7ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 944.052282][ T32] RAX: 0000000000000000 RBX: 00007f11ce634efb RCX: 00007f11ce59f797 [ 944.052294][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd82c7da0 [ 944.052306][ T32] RBP: 00007ffdd82c7da0 R08: 00007ffdd82c8da0 R09: 00000000ffffffff [ 944.052319][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd82c8e30 [ 944.052331][ T32] R13: 00007f11ce634efb R14: 00000000000c221b R15: 00007ffdd82c8e70 [ 944.052358][ T32] [ 944.052378][ T32] [ 944.052378][ T32] Showing all locks held in the system: [ 944.052389][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 944.052402][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 944.052481][ T32] locks held by getty/5353: 2, on CPU#1: [ 944.052494][ T32] #0: ffff888034ab80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 944.052544][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 944.052591][ T32] locks held by syz-executor/5599: 1, last CPU#1: [ 944.052663][ T32] #0: ffff888034cc2ce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5a/0x520 [ 944.052714][ T32] locks held by syz-executor/5607: 4, last CPU#1: [ 944.052729][ T32] #0: ffffffff8ff3de50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x5079/0x8430 [ 944.071867][ T32] #1: ffff88802ce04cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 944.071911][ T32] #2: ffff88807c9e7180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 944.071964][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 944.072011][ T32] locks held by kworker/1:4/5719: 2, last CPU#1: [ 944.072023][ T32] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 944.072069][ T32] #1: ffffc900044dfd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 944.072116][ T32] locks held by kworker/u8:11/6237: 2, last CPU#0: [ 944.072127][ T32] #0: ffff88803550f940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 944.072172][ T32] #1: ffffc900032bfd08 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 944.072225][ T32] locks held by syz.0.1440/12061: 3, on CPU#1: [ 944.072237][ T32] #0: ffff888073e0a470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 944.072272][ T32] #1: ffff88807f34a460 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 944.072315][ T32] #2: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 944.072352][ T32] locks held by syz-executor/12191: 2, on CPU#0: [ 944.072364][ T32] #0: ffff888030ee60e8 (&type->s_umount_key#80){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 944.072407][ T32] #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 944.072454][ T32] locks held by syz-executor/13223: 2, last CPU#1: [ 944.072465][ T32] #0: ffff888084bd6460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 944.072513][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x2c/0x5f0 [ 944.072553][ T32] locks held by syz.5.1957/14232: 2, last CPU#1: [ 944.072565][ T32] #0: ffff88802e898340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 944.072748][ T32] #1: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 944.072791][ T32] locks held by syz.1.1961/14238: 3, last CPU#1: [ 944.072802][ T32] #0: ffff8880312ba460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 944.072844][ T32] #1: ffff88807580acc0 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 944.072889][ T32] #2: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: avc_has_perm_noaudit+0x56/0x470 [ 944.072933][ T32] locks held by syz.4.1963/14250: 2, on CPU#0: [ 944.072944][ T32] #0: ffff8880752c9940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 944.074554][ T32] #1: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 944.074608][ T32] [ 944.074613][ T32] ============================================= [ 944.074613][ T32] [ 944.074621][ T32] NMI backtrace for cpu 1 [ 944.074633][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 944.074655][ T32] Tainted: [L]=SOFTLOCKUP [ 944.074660][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 944.074670][ T32] Call Trace: [ 944.074676][ T32] [ 944.074683][ T32] dump_stack_lvl+0x100/0x190 [ 944.074709][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 944.074735][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 944.074755][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 944.074778][ T32] sys_info+0x141/0x190 [ 944.074794][ T32] watchdog+0xcb1/0x1030 [ 944.074819][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 944.074842][ T32] ? __pfx_watchdog+0x10/0x10 [ 944.074862][ T32] ? __kthread_parkme+0x18f/0x230 [ 944.074885][ T32] ? kthread+0x13a/0x450 [ 944.074908][ T32] ? __pfx_watchdog+0x10/0x10 [ 944.074926][ T32] kthread+0x373/0x450 [ 944.074952][ T32] ? __pfx_kthread+0x10/0x10 [ 944.074976][ T32] ret_from_fork+0x730/0xd60 [ 944.074995][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 944.075015][ T32] ? __switch_to+0x800/0x10f0 [ 944.075038][ T32] ? __pfx_kthread+0x10/0x10 [ 944.075061][ T32] ret_from_fork_asm+0x1a/0x30 [ 944.075089][ T32] [ 944.075105][ T32] Sending NMI from CPU 1 to CPUs 0: [ 944.075125][ C0] NMI backtrace for cpu 0 [ 944.075137][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.075157][ C0] Tainted: [L]=SOFTLOCKUP [ 944.075162][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 944.075170][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 944.075193][ C0] Code: 88 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 88 c9 cd fc eb a2 e8 11 ca [ 944.075206][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 944.075219][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 944.075228][ C0] RDX: 00000000000003fd RSI: ffffffff85b2ced0 RDI: ffffffff9cc7e660 [ 944.075238][ C0] RBP: ffffffff9cc7e620 R08: 0000000000000001 R09: 000000000000001f [ 944.075247][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 944.075256][ C0] R13: 0000000000000020 R14: fffffbfff398fd21 R15: dffffc0000000000 [ 944.075266][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 944.075280][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.075290][ C0] CR2: 00007f3a86debc40 CR3: 0000000076614000 CR4: 00000000003526f0 [ 944.075300][ C0] DR0: ffffffffffffffff DR1: 0000000000000009 DR2: 0000000000000083 [ 944.075310][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 944.075320][ C0] Call Trace: [ 944.075324][ C0] [ 944.075331][ C0] wait_for_lsr+0x13a/0x210 [ 944.075347][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 944.075363][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 944.075377][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 944.075398][ C0] serial8250_console_write+0x1108/0x14f0 [ 944.075416][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 944.075438][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 944.075454][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 944.075473][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 944.075491][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 944.075506][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 944.075520][ C0] ? do_raw_spin_lock+0xb0/0x260 [ 944.075541][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 944.075560][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 944.075580][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 944.075595][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 944.075612][ C0] nbcon_kthread_func+0x613/0x7d0 [ 944.075628][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 944.075647][ C0] ? __kthread_parkme+0x18f/0x230 [ 944.075665][ C0] ? kthread+0x13a/0x450 [ 944.075682][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 944.075696][ C0] kthread+0x373/0x450 [ 944.075714][ C0] ? __pfx_kthread+0x10/0x10 [ 944.075733][ C0] ret_from_fork+0x730/0xd60 [ 944.075749][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 944.075765][ C0] ? __switch_to+0x800/0x10f0 [ 944.075784][ C0] ? __pfx_kthread+0x10/0x10 [ 944.075803][ C0] ret_from_fork_asm+0x1a/0x30 [ 944.075823][ C0] [ 944.127574][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 945.109834][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 945.120502][ T32] Tainted: [L]=SOFTLOCKUP [ 945.124817][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 945.134848][ T32] Call Trace: [ 945.138104][ T32] [ 945.141018][ T32] dump_stack_lvl+0x100/0x190 [ 945.145676][ T32] vpanic+0x553/0x970 [ 945.149630][ T32] ? __pfx_vpanic+0x10/0x10 [ 945.154108][ T32] panic+0xd1/0xe0 [ 945.157802][ T32] ? __pfx_panic+0x10/0x10 [ 945.162201][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 945.168336][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 945.174496][ T32] ? watchdog.cold+0x1ec/0x234 [ 945.179261][ T32] watchdog.cold+0x1fd/0x234 [ 945.183854][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 945.189660][ T32] ? __pfx_watchdog+0x10/0x10 [ 945.194330][ T32] ? __kthread_parkme+0x18f/0x230 [ 945.199352][ T32] ? kthread+0x13a/0x450 [ 945.203572][ T32] ? __pfx_watchdog+0x10/0x10 [ 945.208222][ T32] kthread+0x373/0x450 [ 945.212279][ T32] ? __pfx_kthread+0x10/0x10 [ 945.216845][ T32] ret_from_fork+0x730/0xd60 [ 945.221409][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 945.226496][ T32] ? __switch_to+0x800/0x10f0 [ 945.231159][ T32] ? __pfx_kthread+0x10/0x10 [ 945.235726][ T32] ret_from_fork_asm+0x1a/0x30 [ 945.240467][ T32] [ 945.243662][ T32] Kernel Offset: disabled [ 945.247959][ T32] Rebooting in 86400 seconds..