last executing test programs: 15m33.826547299s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_sec\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca66baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x56}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)=@x86={0x3, 0x7, 0x5, 0x0, 0x3, 0xc9, 0x5, 0x7, 0xe, 0xb, 0x0, 0x2, 0x0, 0xe, 0x8, 0xfe, 0x6, 0x0, 0xc, '\x00', 0x6, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000300)={0x12, 0x6, 0xfa00, {0x0, 0xffffffffffffffff, r4}}, 0x18) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) 15m29.735664707s ago: executing program 0 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000009b40)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000022b40)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r6 = openat(0xffffffffffffff9c, &(0x7f0000022b80)='./file1\x00', 0x42, 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009965, r6, 0x0) dup(r1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000022c80)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000022cc0)={0x0, 0x0, &(0x7f0000022d00)={&(0x7f0000022d40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x4810) sendmsg$nl_route_sched(r8, &(0x7f0000022d80)={0x0, 0x0, &(0x7f0000022dc0)={&(0x7f0000022e00)=@newtfilter={0x2470, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x2440, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xf}, @TCA_FLOW_ACT={0x241c, 0x9, 0x0, 0x1, [@m_pedit={0xec0, 0xc, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x3, 0x2, 0x60, 0x1}, 0x0, 0xc, [{0xfffffffe, 0x4, 0x7, 0x1, 0x0, 0x7}]}, [{0xffff67b8, 0x6, 0x8, 0x0, 0x1}, {0x13, 0x8, 0x6, 0x3, 0x3}, {0x38, 0x3, 0x3ff, 0x5, 0x800, 0x9}, {0xe2ec4624, 0x5, 0x3b9, 0x0, 0x5de, 0x111de761}, {0xffffff23, 0x1, 0x7ff, 0x6, 0x4, 0x7}, {0xdc9, 0xb, 0x9, 0x4, 0x6, 0x12c}, {0x8, 0x401, 0x2, 0xfffffff9, 0x0, 0xa075}, {0x5, 0x5, 0xfffffffa, 0x6bb, 0x9, 0x4}, {0x3, 0xfffffadc, 0x3, 0x1, 0x7fff, 0x9}, {0x8, 0x8, 0x6, 0x3, 0x600000, 0x2}, {0x8, 0x40, 0xb563, 0x0, 0x2, 0x9}, {0x5, 0x8, 0x9, 0x6, 0x6, 0x2}, {0x40, 0x1, 0x1000, 0x1, 0xef, 0x1}, {0xffff, 0x6, 0x7, 0xa2, 0x1, 0xfffffffa}, {0x4800, 0x84f, 0x5, 0x100, 0x8, 0x6}, {0x1, 0xffffffff, 0x9, 0x5, 0x8, 0x7}, {0x9, 0x1, 0xa61, 0x341, 0x0, 0x8000}, {0x101, 0x4, 0x1, 0x2, 0x7ff, 0x7}, {0x40, 0xd532, 0x3, 0x400, 0x5, 0xa22}, {0xffff, 0xb, 0x8, 0x3, 0x800, 0xffffffff}, {0x5, 0x0, 0x1, 0x6d, 0x80000000, 0xfffffffa}, {0x0, 0x6, 0x359a, 0x3, 0x7, 0xfffffff9}, {0x80000000, 0x7f, 0x58, 0x7f, 0x9, 0x7}, {0x101, 0xffffffff, 0x80000000, 0xd, 0x100, 0x7}, {0x6, 0x9, 0x1000, 0x8, 0xfffffffb, 0x4}, {0x1, 0x13, 0x81, 0x6, 0x0, 0xff}, {0x4, 0x7, 0x5, 0x3, 0x6}, {0x2, 0x0, 0x80, 0x2, 0x5, 0x3}, {0x5, 0x9, 0x3ff, 0x101, 0x8, 0x8}, {0x752db12c, 0x200, 0x8, 0x6, 0x9, 0x1}, {0xc, 0xffffff01, 0x0, 0x2, 0x5, 0x3}, {0x0, 0x4, 0xca, 0x8, 0x9, 0x3d5}, {0x6, 0x7d9, 0x9, 0x89, 0x1000, 0x2}, {0x4, 0xffffff83, 0x9, 0xffff, 0xa431, 0xda60}, {0x80000001, 0xec7, 0x7, 0x8, 0x9, 0x200}, {0x5, 0x4, 0xb88, 0x4, 0x2, 0x3}, {0x1, 0x8, 0x1f, 0x3, 0xfffffff9, 0x6}, {0x0, 0x4c00e733, 0x10001, 0x9, 0x4, 0x5}, {0x9, 0x2, 0xd412, 0xffffe72d, 0x10001, 0x7}, {0xd939, 0x10000, 0xffffffff, 0x9, 0x100}, {0x4, 0x0, 0xac3, 0x0, 0x8001}, {0x3, 0x8, 0xb, 0x10100000, 0x2, 0x7}, {0x6, 0x6, 0xd6ab, 0x2, 0x5, 0x3ff}, {0x4e0f00, 0x6, 0x8, 0xa, 0x91c, 0x1}, {0x9, 0x3, 0x5, 0x800, 0x5, 0x5}, {0x0, 0xffff501b, 0xeeeb, 0xa2, 0x2, 0xefc5}, {0x51b, 0x1, 0x80, 0x5, 0x0, 0xffff}, {0x4, 0x8, 0x7a, 0x8, 0x6, 0x1}, {0x3, 0x9, 0xb, 0x9b, 0x40, 0x3}, {0x47df4562, 0x3bd8, 0x0, 0x7, 0x400, 0x2}, {0x80, 0xf5, 0xa2, 0xa, 0xad, 0x1}, {0x1000, 0x400, 0x6, 0x7, 0x7f, 0x3}, {0x0, 0x0, 0x1, 0xc60, 0x1000, 0x7}, {0x6, 0x8, 0x5, 0xd, 0x800, 0xff}, {0x8, 0x1, 0x101, 0x6, 0xfff, 0x5}, {0xff8000, 0x4, 0x2, 0x0, 0x8, 0xb}, {0x0, 0x0, 0x80000000, 0x2, 0xffffffff, 0x1}, {0x800, 0x8, 0x7, 0xc, 0x6, 0x3}, {0x401, 0x2, 0x2, 0x10001, 0x6, 0x3}, {0x8f, 0xa57, 0x401, 0x80, 0xffff, 0x5c2}, {0x4caf5d69, 0x54b8, 0x858, 0x3, 0x0, 0xff}, {0xd, 0x4, 0x326f, 0x5, 0x0, 0x6}, {0x2, 0x3, 0x7, 0x7, 0x1, 0x8}, {0xfa95, 0x80000000, 0x3, 0x7, 0x0, 0x8}, {0x6, 0x8, 0x2, 0x8, 0x3, 0x80000000}, {0x6, 0x0, 0xe, 0x0, 0x7, 0x26}, {0x1, 0x2, 0x1, 0x3, 0xfffffff7, 0x5}, {0x9, 0x9, 0xfffffff7, 0x2, 0x4}, {0x8, 0x1000, 0x1, 0xbf, 0x6, 0xff}, {0x7, 0x7fffffff, 0x8, 0x7, 0x8001, 0x10001}, {0x8, 0x401, 0x0, 0xfffffca2, 0x10, 0xb3f}, {0x521, 0x3ff, 0x1, 0x6, 0x56e, 0x800}, {0x2, 0x9b, 0x8, 0xeef, 0x2, 0x3}, {0x7, 0x5, 0xe7800000, 0x3, 0x7, 0xffff}, {0x7, 0x0, 0x10, 0xd, 0x2, 0x1}, {0x9, 0xffffffff, 0x1, 0x8, 0xd, 0xd18e}, {0xc, 0x9, 0x5, 0x4, 0x4, 0x4369}, {0xb, 0x1, 0x4e, 0x6, 0x1000, 0x1000}, {0x0, 0x8, 0x8, 0x6, 0x0, 0xcf3}, {0x0, 0x7fff, 0x8322, 0xff, 0x5}, {0x0, 0x5, 0x205, 0xffffffff, 0x2, 0x264}, {0x5, 0x3, 0xc, 0x7ff, 0x6, 0xfffffff7}, {0x24, 0x3fc, 0x5, 0x6, 0x3, 0x4e1}, {0x6, 0x2, 0xa, 0xe7, 0xc0, 0x3}, {0x101, 0x8, 0x6, 0x6, 0x210, 0x4}, {0x200, 0xfffffffe, 0x100, 0x5}, {0x23, 0x0, 0x7, 0x2, 0x7, 0x53634089}, {0x0, 0x2, 0x6b700ff8, 0x7ff, 0x5, 0x40}, {0x8, 0x3, 0x8, 0xffff5d3d, 0x9, 0x6}, {0x2, 0x0, 0x10000, 0x5, 0x6, 0x3}, {0x2, 0x8, 0x5, 0x8, 0x9, 0x9}, {0x9d, 0x10000, 0xea, 0x6, 0xfde, 0x6}, {0xab, 0x1, 0x7, 0x110, 0x1, 0x6}, {0xfffffffe, 0x1, 0x8, 0x88, 0x82b, 0x80000000}, {0x5, 0x0, 0x1, 0x80000000, 0x800, 0x6}, {0x1000, 0x3, 0x8, 0x1, 0x3}, {0x8, 0x2, 0x5, 0x1000, 0xfffffffa}, {0x1, 0x8000, 0xffffffff, 0x2, 0x9, 0x5}, {0x1ff, 0x56, 0x8, 0x5, 0x5}, {0x86b, 0x0, 0x8, 0x40, 0x9c, 0x3}, {0x4, 0xffff, 0x1, 0x6, 0x7, 0x93d}, {0x1, 0x6, 0x4ff1e92f, 0x6, 0x400, 0x3}, {0xff, 0x6, 0x1, 0xe, 0xfff}, {0x5, 0x8, 0x69, 0x1, 0xff, 0x100}, {0x3ae45953, 0x4, 0x80000000, 0x5, 0x3, 0xa67}, {0x3ff, 0x0, 0x4, 0x7, 0x3, 0x9}, {0x80000000, 0xfff, 0x3, 0x3, 0x9, 0x8}, {0x7, 0xbf98, 0x3b, 0x6, 0x5cca}, {0x4, 0x8, 0xc3, 0x1, 0xfffffff7, 0x635}, {0x60000, 0x2, 0x5, 0x2, 0x2029, 0x1000}, {0x800, 0x8, 0x4, 0x8, 0x2, 0x2}, {0xa, 0x81, 0xd0a, 0xb4c, 0x2, 0xffffff1b}, {0x6, 0x7, 0xb054, 0xffff, 0x9, 0x9}, {0x3, 0x7, 0x3, 0x8, 0x2, 0x400000}, {0x8000, 0x2716, 0x3, 0x621, 0x10000, 0x8}, {0x4, 0x2, 0x5, 0xd6, 0x1b22, 0x4b70}, {0x40, 0x56e6373a, 0x8, 0x10000, 0x0, 0x9}, {0xef, 0x6, 0xf6, 0x401, 0xb, 0x6}, {0x1, 0x3ff, 0x4, 0x80, 0x5, 0x1f3}, {0x402b22e6, 0x4, 0x7ff, 0x4f, 0x8}, {0x9, 0x4, 0x7, 0x6, 0xbd, 0x8}, {0x5, 0x4d9, 0x2, 0x2, 0x800, 0x3}, {0x7, 0xfffffff0, 0x7, 0x4, 0x3ff, 0x1}, {0x80000000, 0x400, 0x1, 0xd, 0xc1740000}, {0x6, 0x720000, 0x6, 0x4, 0xfffffffe, 0xb7e462e6}, {0x1, 0x4, 0x400, 0x3, 0x704, 0x1}, {0x719, 0xd, 0x4, 0x2, 0x8, 0x2}, {0x7, 0x5, 0x2, 0x10000, 0x1, 0x9}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x71d672ca7d47040d}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0xcaaa7b9a7e42a48b}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0xbec2f3b6f65cf372, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}]}}]}, {0x5b, 0x6, "c1910bd2fd7622818ac3cab63bf2b2ca9dc8da2093dc0e79e025aab4e5144eed46c64b0dc9030aff7a6ecd63516374882a46a3cbdc80f11aff4e35d321cf6dcd401498e50847f6da6f37b78bce3bfe8883bea99b5f705e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1164, 0xf, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x5b, 0x6, {0x4, 'security\x00', 0x0, 0x2, "e8a376f3594c16eab71f6e1cce23725628dcdcb0f3787dbeaa68e65862f49572167addbb867ac33074446d0ec7916ffc70"}}, @TCA_IPT_TARG={0x52, 0x6, {0x3, 'mangle\x00', 0xf, 0x6, "9fe99bd3c7dd6ca2bad9327dd5fc4c9b6c5a0fa554be47c6af1ed766e9d686d6eee8d9adf5301c95"}}, @TCA_IPT_TARG={0x49, 0x6, {0x1, 'raw\x00', 0x0, 0x8, "220f7d9a07f431648df53a2b2a453841a2846a4b2097d561af8e5030897878"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x150, 0xf, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x52b8, 0x4, 0x3, 0x5, 0x8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaab}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x20}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xe7, 0x6, "130e3b4e148ce253d8f4c4c27f59b763ba9923b9605e26e6242121df9ae3ee54186a45bf57a1e1be0a9e71401b97fc9681d0f7e35ae180c18fd270c2f54d8d22f3b8aca7c4f57fa63ff58bc6055e7d39b1c6a81265fc3359c84f5681f4bd39cbe2cf71c51ebe304ce246a4f97624392c512504e02d6efa91786aa4a1c4a6efd9249c8eac79986b7c176444906ad54e79b69cdb9cc525a75ce40c7da1805b0f2ce227744090eb4d592c591a750fd52eae8aa1d7356e96cb2cd6ee80c403ef9b43068e66b4a97ead86415766d5e9393e1fc483d48e990fed83583c872a1e45311a3415c0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xa4, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0x74, 0x6, "1a32e440c0c6f7adc636626e8a12f51705e18857b71f2fac083c6991ad01f050450214aca5b4c0ded07bc329e581ed6b96327fcc79142914e1d6785f220fc8d3032e3bdfbeeee49918c50ea62b89dce6f339918a8cd8484d3d0e8957bac6860064ef183024f5594ec2d4a81d3b8bf75e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0xdc, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0xb0, 0x6, "2acfc93f942d1f44488118f3b27874f4f54725052d92866e299a8cbf9b310ee2b3e06b74b7ac464e10bc80b532030119d8ee1aa58b7e24ebbb5da08b5bf3fbacd6dd9ed7388ba14934216812c7ef61044c4215a8f732426d81ae496f1254620ef5645f15f01cf41a8989c98d67d040042bef06d76edee73746f32d1223a2e40f1e2a9a0e2680d46c71ef524ee456a1f73f83487a95bfa839bff6f0ce513867d2653c1dba5f3c3c03722b1906"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x124, 0x7, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff71}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe}}]}, {0xc6, 0x6, "214ccbfa63878bf83576c01c1c2899a83f9a76d0ab078beae6f6b56a9ad66c6c419570ea5b8ce558bd3a65e7e549b478b728ebf59d140159efdc580f514c2e0bf0d43ae7636ea4cf3bd51f0c5117d30c0db75a19d327e471f38a3784fbaf9b29b70708ed840c698cd5ac7842e9ef152a72aabcc0d3d362c611aa707c7a77096f8f909037775c9b161a8ea0979c6e61df06ed07cf61ca6ae6b39d6a2be4ef008ea1f70af7dda0142852e2ac6d1fc94c1c46f50c2c758d6359d1385f0c471e5a6c4bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10c43}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x2470}}, 0x0) syz_open_procfs(0x0, &(0x7f0000025280)='oom_adj\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 15m27.566160685s ago: executing program 0 (id=16): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(r0, 0x6, &(0x7f0000000340)={0xffffffffffffffc5, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) write(r3, &(0x7f0000000300)='1', 0x1) 15m23.983898248s ago: executing program 0 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 15m23.884089746s ago: executing program 3 (id=27): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x301581, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x123000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000340)='/dev/iommu\x00', 0x431041, &(0x7f0000000380)={@align=0xffffffff, {0x61f, 0x6, 0xd, 0x8}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000700)=0x3}, 0x2, &(0x7f0000000900)=[{0x3, 0x200, &(0x7f0000000740)='/dev/iommu\x00', &(0x7f0000000780)="239b91aa67b0e5add153f3024b506f7cb4685b1b34f21a7519633bda0b23d3a6eecc6a65", 0x24, 0x10}, {0x1, 0x5, &(0x7f00000007c0)='*-.,\\\x00', &(0x7f0000000800)="e8dbd170af1c8fe9a3c93e750c18f8346fac45efef387ae148b055ec2160bcfe83a25cf6d4583847cf84af0eb3bbb41969aa432eaa98f64f53f9bd8f3af57bae0acbf1f6affcd6cf65cf41527522e8804b97bb0755508a33e653feb0e2d472cd94904f885be95f213a2a31741d44ea100e7ab9319a9355d18a208f7520a1db4ed73fd073981676cb25cd0c519f4deb72ed333d765a577121faa989883ed3e33b17514dc33c55a6008abf08953aa8a198f408bf4b0bfc7536dd5233ba1a864224be", 0xc1, 0x20}]}) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000b00)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000b40)='veth0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000b80)=ANY=[@ANYBLOB="aa2aaa0a13a5132a9818bfaedfaaaaaaaaaaaaaaaabb08004500001c0064001f480190353b1e1001ac14"], 0x0) (async) r6 = dup(r2) (async, rerun: 32) mkdir(&(0x7f00000009c0)='dir0\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000a00)='dir0\x00', &(0x7f0000000a40)='tracefs\x00', 0x80, 0x0) open$dir(&(0x7f0000000a80)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x40000, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000ac0)='dir0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0xc0d8, 0xa, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r7, 0xf) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x2, 0x2da690, 0x2e8afa}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) (async, rerun: 32) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80801, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000300)={0xffb2, 0x0, 0x0}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r12, 0xffffffffffffffff, 0x0) (async) ioctl(r11, 0x338e, &(0x7f0000000540)="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") writev(r12, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)="02a0", 0x2}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r10}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000500)={0xc, r8}) 15m23.497450381s ago: executing program 3 (id=29): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000240)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000058c0), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000012c0)={'veth0_to_team\x00', &(0x7f0000001300)=@ethtool_coalesce={0xe, 0xe0c, 0x9, 0x3, 0x5, 0xc, 0x80000001, 0x5, 0x9, 0x3, 0x0, 0x7, 0x6, 0xbd43, 0x5, 0xb3400000, 0xfffffffe, 0x7, 0x4, 0xff000000, 0x2000, 0xfffff1b5, 0x3}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x803, 0x1}, 0x6) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0x40000004, 0x0) r6 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffffd) keyctl$instantiate(0xc, r6, &(0x7f0000000240)=ANY=[], 0x2b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000001c0), 0xca, 0xfffffffffffffffe) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000005900)=0x2000015) 15m22.7123407s ago: executing program 3 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff016029", @ANYRES8=r0, @ANYBLOB="7ba9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000003700)={@broadcast, @broadcast}, &(0x7f0000003740)=0xc) close_range(r0, 0xffffffffffffffff, 0x0) 15m19.605686502s ago: executing program 3 (id=36): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) clock_settime(0x8d71ca88fffffffd, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000200)=@assoc_value, &(0x7f0000000600)=0x8) 15m19.288511734s ago: executing program 3 (id=37): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(r0, 0x6, &(0x7f0000000340)={0xffffffffffffffc5, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) write(r3, &(0x7f0000000300)='1', 0x1) 15m18.792180501s ago: executing program 3 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) (fail_nth: 8) 15m14.788938476s ago: executing program 4 (id=46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff016029", @ANYRES8=r0, @ANYBLOB="7ba9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000003700)={@broadcast, @broadcast}, &(0x7f0000003740)=0xc) close_range(r0, 0xffffffffffffffff, 0x0) 15m11.554392911s ago: executing program 4 (id=54): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1bb) mount$afs(0x0, &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x7044}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./mnt/@cell/foo@sys\x00') setresuid(0x0, 0xee00, 0x0) r5 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000a40)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000fc0)={r5, 0x13, 0x300}, &(0x7f0000001000)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000001040)) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') shmctl$SHM_UNLOCK(0x0, 0xc) 15m9.836692048s ago: executing program 4 (id=56): unshare(0x100000) 15m7.403360035s ago: executing program 32 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 15m7.376566153s ago: executing program 4 (id=60): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'netdevsim0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)="6d64300ab79c8e280ebbaaa7f89e35128cea08504f52f3e4c54b7e7d79960ecee906973cec520ada2ee155dffe6530717300a798cc25fde46350b4169510249017989a170099c89bd751f60e693ee9d0f353ca9d6ca9ed21aa5a524bcbfa441e3b90cbadbc5c2c1146bb611fda139d2dc7edc88ccab5a08fc5303f482b91548d1e333c7a0f7900d92ee306be36f159f8929791be5136174d929ffae35b3a9a1fee900a087f6950b78c89508252a8051f0d1207e9f86021356d4adb39b76058f3a1d411b4b94666", 0xca) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/level\x00', 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xdc87, 0x0) write(r1, &(0x7f0000000440)="3dce8044c275d2854d5885d472499580bc78abcecff0b7981e1c637e695fb834bd79f289c5e4e9f88bd070757d39f1c6f527b8182c5b961b94477287ac605d404eb858f06dead45217795953e5550000944ee40021faebb04ae4de8b50f4eb42bd4f7c7e2cee0e791f988301b11621b141a486ed5eabfd75a6d9f77777f52ab2f45665376f110b98898710f8e50fbc2db281d5399dd3ff16daabf7c0c119db5947f879ed1122d90ddd76f83fa3349602af5fcf944ee7baae993162003a6f3f887aab736d117dd987bad37d9eefabba24c5e25af7395b1889fdff0000", 0xdc) write(r2, &(0x7f0000000740)='raid1\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='1:0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/block/md0/md/new_dev\x00', 0x1, 0x38) write(r5, &(0x7f00000008c0)='1:1\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000940)='0\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r7, &(0x7f00000009c0)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r8, &(0x7f0000000a40)='writemostly\n', 0xc) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/dev-ram0/state\x00', 0x80000, 0x13) 15m6.286545324s ago: executing program 4 (id=62): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(r0, 0x6, &(0x7f0000000340)={0xffffffffffffffc5, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) write(r4, &(0x7f0000000300)='1', 0x1) 15m5.809848978s ago: executing program 4 (id=64): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4a7c, 0x2}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000140)=0x10000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000200)='es', 0x2) recvmmsg(r3, &(0x7f0000000240), 0x3ffffaf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000c80)={0x2020}, 0x2020) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000002cc0), 0x140000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000002d00)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) r9 = fsopen(&(0x7f0000000040)='esdfs\x00', 0x1) r10 = fsmount(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000002e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002ec0)=ANY=[@ANYBLOB="4be88fa3027b0180c200000186dd60122d9200083a0100080000000000000000000000000001000000000000000000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f00)={r11, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09002bbd7000fbdbdf250a00000008000300", @ANYRESDEC=r7, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40001) 15m2.689359499s ago: executing program 33 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) (fail_nth: 8) 14m49.69590826s ago: executing program 34 (id=64): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4a7c, 0x2}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000140)=0x10000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000200)='es', 0x2) recvmmsg(r3, &(0x7f0000000240), 0x3ffffaf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000c80)={0x2020}, 0x2020) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000002cc0), 0x140000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000002d00)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) r9 = fsopen(&(0x7f0000000040)='esdfs\x00', 0x1) r10 = fsmount(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000002e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002ec0)=ANY=[@ANYBLOB="4be88fa3027b0180c200000186dd60122d9200083a0100080000000000000000000000000001000000000000000000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f00)={r11, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09002bbd7000fbdbdf250a00000008000300", @ANYRESDEC=r7, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40001) 12.908634892s ago: executing program 6 (id=2201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x400, @empty}}, 0x3, 0x0, 0x800, 0x0, 0x32, 0x81}, 0x9c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.392036529s ago: executing program 6 (id=2205): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff7010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 10.976481222s ago: executing program 2 (id=2206): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rpc\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x188}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) fcntl$getownex(r0, 0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000580)='nf ::7.0.0.1 2\\000000\\0 l\\calhost\n', 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x960, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310400000000080000001600000018000180140002006e650300657673696d300000000000000500040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000894}, 0x20004010) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000640)={'pim6reg0\x00', @random="eb8b2eb022f4"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000680)) madvise(&(0x7f00008df000/0x3000)=nil, 0x3000, 0x13) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) 10.304269277s ago: executing program 6 (id=2209): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000180)='127.0.0.1:/export\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,lock']) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000d2fadeab2e699472030000000000090502030800000000"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x103) r3 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000000340)) futimesat(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf2500000000000000000000000000000000ac1e01010000000000000000000000004e2000004e2100020a00000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x46814) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x5a44, &(0x7f0000000640)={0x0, 0xfb01, 0x40000, 0x1}, &(0x7f00000006c0), &(0x7f0000000080), &(0x7f0000000740)) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000780)={0x0, 0xffff, 0x0, 0x0, 0x0}) tgkill(0x0, r7, 0x2) mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x12100b, &(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRES8=r6, @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x130, 0x0, 0x9, {0xffffffffffffffff, 0x40000008, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x1000, '\x00', 0xa, 0x8000, 0xb4ea, 0x2, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0xa}, {0x200000008, 0x9}, 0x8000, 0x4, 0x0, 0x9}}}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000b00)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10075089102c0c0"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000b80), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000c00)={'syzkaller1\x00', 0x1}) socket$unix(0x1, 0x3, 0x0) write(r9, &(0x7f0000000c40)="000008004500001c123400004011e5c8ac141401ac14140204d204d2", 0x1c) ioctl$HIDIOCSREPORT(r8, 0x400c4808, &(0x7f0000000c80)={0x2, 0x100}) 8.54775891s ago: executing program 5 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000199c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019980)={&(0x7f0000019a00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf252e0000000c009900020000002d0000001800490002ac0f000bac0f0001ac0f0006ac0f0002ac0f0004090000000066004c88000011001501e09f0c172cce2f2a00035c9c2d000000040008010c00490000ac0f000bac0f0008004a000bac0f0006006600040000000400440008004a000dac0f000800c9006c0900000800a0000b000000050019010800000005001801ff00000008009f0002000000050018012d00000005001901090000000800a000ff0f00000400e200311850fe7182825cc906000000d7da770ed49172f16e4898a5a5662b47a974fb5b1bffdc740b38"], 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="fcffffff18dd1200d507000000"], 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0044000040000000ff7f00eaffff"]) mknodat$null(r4, &(0x7f0000000400)='./file0\x00', 0x20, 0x103) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000019800)={0x1f, 0xffff, 0x3}, 0x6) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000019840), 0x0, 0x0) write(r5, &(0x7f0000019880)="2d000000010001", 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000198c0)=ANY=[], 0x50) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r6, &(0x7f0000000180)=0x800000000001e8, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', r8, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r9, 0x0, 0xe, 0x0, &(0x7f0000000700)="000000002d43d2531e0000257e26", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.986203133s ago: executing program 7 (id=2217): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000400)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x40, @mcast2, 0x3ff}, 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000500)=0x10000000, 0x4) r2 = socket(0x2b, 0x2, 0x9) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffbffff}, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000480)=0x5) ptrace$setregset(0x4205, r5, 0x206, &(0x7f0000000080)={&(0x7f00000005c0)="b58bf3469a1535cfb235db148ed070f7a4a84973de361c0ec21e75b9f9d01669fbc8e73db51a5c1cbfccc2b1b1895ffee7324575c02d764ba5f7e62ef8eba3b43264da9a19137eaac1e155fbdf3c7a4a3a925e01afd2e58deda5c38904f95ba092964a47d2fee4d0e03345585056fdd5445d0c123abd9051391c0b2909f1768b081dd77174127975bb9d4451ccd2d2c9c0", 0x91}) sched_rr_get_interval(r5, &(0x7f0000000540)) write(0xffffffffffffffff, &(0x7f00000003c0)="0e02d54228c260ac4631bb8cf4aff4b6fd", 0x11) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={r3, r4/1000+60000}, 0x10) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x418320, 0x0) sendfile(r2, r6, 0x0, 0x7ffffffffffffffb) landlock_restrict_self(r6, 0xf) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 7.975371648s ago: executing program 2 (id=2218): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x14, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) 7.804054682s ago: executing program 2 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b40000004400010029bd70000400000002000000040048809c00018008007700", @ANYRES32=0x0, @ANYBLOB="900022808900d98078003c807100200029ff9b3009a4ab5b7d5986cd2ba2c85b6ed1896451f8ef9a87626ab2c28a09b36184b6efeb4dfc2a4be3b2be8914a0390a9aac1a6d0999e48272818f5df67453c214c6de31379c14c3265826decab2050b6a7e2865c6dc16562b4a6afb54f0bb7a21b122e0c713c08af2511e3600000004000a007d08006700", @ANYRES32=r0, @ANYBLOB="0004"], 0xb4}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a7379c532033ec2756cecfa3858a17a20303030303030303030"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f00000001c0)='encrypted\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs\x00', 0x117) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'syzkaller0\x00'}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000588c4b10f0fff0ff0c630102030109021b000100000000090463000108b1c60009055121"], 0x0) 7.172336831s ago: executing program 5 (id=2220): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x1c, 0x2f, 0x9, 0x70bd25, 0xfffffffc, {0x3}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x40800c0) 7.122653616s ago: executing program 1 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x101, 0x9, 0x0, 0x10, 0x6, 0x1, 0x10, 0x1ff}}}}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtfilter={0x14c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_SEL={0x114, 0x5, {0xe, 0xb0, 0x7, 0x7, 0x616d, 0x1, 0x12, 0x2, [{0x0, 0x4, 0x7ff, 0x4000}, {0x800, 0xffff, 0x2, 0xa48}, {0x5, 0x10000, 0x0, 0x800}, {0x9, 0x1, 0x1, 0x9}, {0xffffff98, 0x2, 0x3, 0xdfa7}, {0x5, 0x7fffffff, 0x100, 0x56ab}, {0x4, 0x100, 0xe, 0x5}, {0x4, 0x0, 0x1000, 0x6}, {0x1, 0x1ff, 0x8, 0x6}, {0x7, 0xfff, 0x9, 0x13f}, {0x1, 0xfffffff7, 0x8, 0x9}, {0x40000, 0xcfd0, 0xe67, 0x9d}, {0xd9f1, 0x3, 0x8}, {0x8, 0x3, 0x6129, 0x6}, {0x1000, 0x9, 0x6, 0x5}, {0x9, 0x6, 0x7, 0x80000000}]}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.003541841s ago: executing program 6 (id=2222): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000009b40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000022b40)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat(0xffffffffffffff9c, &(0x7f0000022b80)='./file1\x00', 0x42, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) dup(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000022bc0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000022cc0)={0x0, 0x0, &(0x7f0000022d00)={0x0}}, 0x4810) sendmsg$nl_route_sched(r6, &(0x7f0000022d80)={0x0, 0x0, &(0x7f0000022dc0)={&(0x7f0000022e00)=@newtfilter={0x2440, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x2410, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xf}, @TCA_FLOW_ACT={0x23ec, 0x9, 0x0, 0x1, [@m_pedit={0xec0, 0xc, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x3, 0x2, 0x60, 0x1}, 0x0, 0xc, [{0xfffffffe, 0x4, 0x7, 0x1, 0x0, 0x7}]}, [{0xffff67b8, 0x6, 0x8, 0x0, 0x1}, {0x13, 0x8, 0x6, 0x3, 0x3}, {0x38, 0x3, 0x3ff, 0x5, 0x800, 0x9}, {0xe2ec4624, 0x5, 0x3b9, 0x0, 0x5de, 0x111de761}, {0xffffff23, 0x1, 0x7ff, 0x6, 0x4, 0x7}, {0xdc9, 0xb, 0x9, 0x4, 0x6, 0x12c}, {0x8, 0x401, 0x2, 0xfffffff9, 0x0, 0xa075}, {0x5, 0x5, 0xfffffffa, 0x6bb, 0x9, 0x4}, {0x3, 0xfffffadc, 0x3, 0x1, 0x7fff, 0x9}, {0x8, 0x8, 0x6, 0x3, 0x600000, 0x2}, {0x8, 0x40, 0xb563, 0x0, 0x2, 0x9}, {0x5, 0x8, 0x9, 0x6, 0x6, 0x2}, {0x40, 0x1, 0x1000, 0x1, 0xef, 0x1}, {0xffff, 0x6, 0x7, 0xa2, 0x1, 0xfffffffa}, {0x4800, 0x84f, 0x5, 0x100, 0x8, 0x6}, {0x1, 0xffffffff, 0x9, 0x5, 0x8, 0x7}, {0x9, 0x1, 0xa61, 0x341, 0x0, 0x8000}, {0x101, 0x4, 0x1, 0x2, 0x7ff, 0x7}, {0x40, 0xd532, 0x3, 0x400, 0x5, 0xa22}, {0xffff, 0xb, 0x8, 0x3, 0x800, 0xffffffff}, {0x5, 0x0, 0x1, 0x6d, 0x80000000, 0xfffffffa}, {0x0, 0x6, 0x359a, 0x3, 0x7, 0xfffffff9}, {0x80000000, 0x7f, 0x58, 0x7f, 0x9, 0x7}, {0x101, 0xffffffff, 0x80000000, 0xd, 0x100, 0x7}, {0x6, 0x9, 0x1000, 0x8, 0xfffffffb, 0x4}, {0x1, 0x13, 0x81, 0x6, 0x0, 0xff}, {0x4, 0x7, 0x5, 0x3, 0x6}, {0x2, 0x0, 0x80, 0x2, 0x5, 0x3}, {0x5, 0x9, 0x3ff, 0x101, 0x8, 0x8}, {0x752db12c, 0x200, 0x8, 0x6, 0x9, 0x1}, {0xc, 0xffffff01, 0x0, 0x2, 0x5, 0x3}, {0x0, 0x4, 0xca, 0x8, 0x9, 0x3d5}, {0x6, 0x7d9, 0x9, 0x89, 0x1000, 0x2}, {0x4, 0xffffff83, 0x9, 0xffff, 0xa431, 0xda60}, {0x80000001, 0xec7, 0x7, 0x8, 0x9, 0x200}, {0x5, 0x4, 0xb88, 0x4, 0x2, 0x3}, {0x1, 0x8, 0x1f, 0x3, 0xfffffff9, 0x6}, {0x0, 0x4c00e733, 0x10001, 0x9, 0x4, 0x5}, {0x9, 0x2, 0xd412, 0xffffe72d, 0x10001, 0x7}, {0xd939, 0x10000, 0xffffffff, 0x9, 0x100}, {0x4, 0x0, 0xac3, 0x0, 0x8001}, {0x3, 0x8, 0xb, 0x10100000, 0x2, 0x7}, {0x6, 0x6, 0xd6ab, 0x2, 0x5, 0x3ff}, {0x4e0f00, 0x6, 0x8, 0xa, 0x91c, 0x1}, {0x9, 0x3, 0x5, 0x800, 0x5, 0x5}, {0x0, 0xffff501b, 0xeeeb, 0xa2, 0x2, 0xefc5}, {0x51b, 0x1, 0x80, 0x5, 0x0, 0xffff}, {0x4, 0x8, 0x7a, 0x8, 0x6, 0x1}, {0x3, 0x9, 0xb, 0x9b, 0x40, 0x3}, {0x47df4562, 0x3bd8, 0x0, 0x7, 0x400, 0x2}, {0x80, 0xf5, 0xa2, 0xa, 0xad, 0x1}, {0x1000, 0x400, 0x6, 0x7, 0x7f, 0x3}, {0x0, 0x0, 0x1, 0xc60, 0x1000, 0x7}, {0x6, 0x8, 0x5, 0xd, 0x800, 0xff}, {0x8, 0x1, 0x101, 0x6, 0xfff, 0x5}, {0xff8000, 0x4, 0x2, 0x0, 0x8, 0xb}, {0x0, 0x0, 0x80000000, 0x2, 0xffffffff, 0x1}, {0x800, 0x8, 0x7, 0xc, 0x6, 0x3}, {0x401, 0x2, 0x2, 0x10001, 0x6, 0x3}, {0x8f, 0xa57, 0x401, 0x80, 0xffff, 0x5c2}, {0x4caf5d69, 0x54b8, 0x858, 0x3, 0x0, 0xff}, {0xd, 0x4, 0x326f, 0x5, 0x0, 0x6}, {0x2, 0x3, 0x7, 0x7, 0x1, 0x8}, {0xfa95, 0x80000000, 0x3, 0x7, 0x0, 0x8}, {0x6, 0x8, 0x2, 0x8, 0x3, 0x80000000}, {0x6, 0x0, 0xe, 0x0, 0x7, 0x26}, {0x1, 0x2, 0x1, 0x3, 0xfffffff7, 0x5}, {0x9, 0x9, 0xfffffff7, 0x2, 0x4}, {0x8, 0x1000, 0x1, 0xbf, 0x6, 0xff}, {0x7, 0x7fffffff, 0x8, 0x7, 0x8001, 0x10001}, {0x8, 0x401, 0x0, 0xfffffca2, 0x10, 0xb3f}, {0x521, 0x3ff, 0x1, 0x6, 0x56e, 0x800}, {0x2, 0x9b, 0x8, 0xeef, 0x2, 0x3}, {0x7, 0x5, 0xe7800000, 0x3, 0x7, 0xffff}, {0x7, 0x0, 0x10, 0xd, 0x2, 0x1}, {0x9, 0xffffffff, 0x1, 0x8, 0xd, 0xd18e}, {0xc, 0x9, 0x5, 0x4, 0x4, 0x4369}, {0xb, 0x1, 0x4e, 0x6, 0x1000, 0x1000}, {0x0, 0x8, 0x8, 0x6, 0x0, 0xcf3}, {0x0, 0x7fff, 0x8322, 0xff, 0x5}, {0x0, 0x5, 0x205, 0xffffffff, 0x2, 0x264}, {0x5, 0x3, 0xc, 0x7ff, 0x6, 0xfffffff7}, {0x24, 0x3fc, 0x5, 0x6, 0x3, 0x4e1}, {0x6, 0x2, 0xa, 0xe7, 0xc0, 0x3}, {0x101, 0x8, 0x6, 0x6, 0x210, 0x4}, {0x200, 0xfffffffe, 0x100, 0x5}, {0x23, 0x0, 0x7, 0x2, 0x7, 0x53634089}, {0x0, 0x2, 0x6b700ff8, 0x7ff, 0x5, 0x40}, {0x8, 0x3, 0x8, 0xffff5d3d, 0x9, 0x6}, {0x2, 0x0, 0x10000, 0x5, 0x6, 0x3}, {0x2, 0x8, 0x5, 0x8, 0x9, 0x9}, {0x9d, 0x10000, 0xea, 0x6, 0xfde, 0x6}, {0xab, 0x1, 0x7, 0x110, 0x1, 0x6}, {0xfffffffe, 0x1, 0x8, 0x88, 0x82b, 0x80000000}, {0x5, 0x0, 0x1, 0x80000000, 0x800, 0x6}, {0x1000, 0x3, 0x8, 0x1, 0x3}, {0x8, 0x2, 0x5, 0x1000, 0xfffffffa}, {0x1, 0x8000, 0xffffffff, 0x2, 0x9, 0x5}, {0x1ff, 0x56, 0x8, 0x5, 0x5}, {0x86b, 0x0, 0x8, 0x40, 0x9c, 0x3}, {0x4, 0xffff, 0x1, 0x6, 0x7, 0x93d}, {0x1, 0x6, 0x4ff1e92f, 0x6, 0x400, 0x3}, {0xff, 0x6, 0x1, 0xe, 0xfff}, {0x5, 0x8, 0x69, 0x1, 0xff, 0x100}, {0x3ae45953, 0x4, 0x80000000, 0x5, 0x3, 0xa67}, {0x3ff, 0x0, 0x4, 0x7, 0x3, 0x9}, {0x80000000, 0xfff, 0x3, 0x3, 0x9, 0x8}, {0x7, 0xbf98, 0x3b, 0x6, 0x5cca}, {0x4, 0x8, 0xc3, 0x1, 0xfffffff7, 0x635}, {0x60000, 0x2, 0x5, 0x2, 0x2029, 0x1000}, {0x800, 0x8, 0x4, 0x8, 0x2, 0x2}, {0xa, 0x81, 0xd0a, 0xb4c, 0x2, 0xffffff1b}, {0x6, 0x7, 0xb054, 0xffff, 0x9, 0x9}, {0x3, 0x7, 0x3, 0x8, 0x2, 0x400000}, {0x8000, 0x2716, 0x3, 0x621, 0x10000, 0x8}, {0x4, 0x2, 0x5, 0xd6, 0x1b22, 0x4b70}, {0x40, 0x56e6373a, 0x8, 0x10000, 0x0, 0x9}, {0xef, 0x6, 0xf6, 0x401, 0xb, 0x6}, {0x1, 0x3ff, 0x4, 0x80, 0x5, 0x1f3}, {0x402b22e6, 0x4, 0x7ff, 0x4f, 0x8}, {0x9, 0x4, 0x7, 0x6, 0xbd, 0x8}, {0x5, 0x4d9, 0x2, 0x2, 0x800, 0x3}, {0x7, 0xfffffff0, 0x7, 0x4, 0x3ff, 0x1}, {0x80000000, 0x400, 0x1, 0xd, 0xc1740000}, {0x6, 0x720000, 0x6, 0x4, 0xfffffffe, 0xb7e462e6}, {0x1, 0x4, 0x400, 0x3, 0x704, 0x1}, {0x719, 0xd, 0x4, 0x2, 0x8, 0x2}, {0x7, 0x5, 0x2, 0x10000, 0x1, 0x9}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x71d672ca7d47040d}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0xcaaa7b9a7e42a48b}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0xbec2f3b6f65cf372, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}]}}]}, {0x5b, 0x6, "c1910bd2fd7622818ac3cab63bf2b2ca9dc8da2093dc0e79e025aab4e5144eed46c64b0dc9030aff7a6ecd63516374882a46a3cbdc80f11aff4e35d321cf6dcd401498e50847f6da6f37b78bce3bfe8883bea99b5f705e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1164, 0xf, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x5b, 0x6, {0x4, 'security\x00', 0x0, 0x2, "e8a376f3594c16eab71f6e1cce23725628dcdcb0f3787dbeaa68e65862f49572167addbb867ac33074446d0ec7916ffc70"}}, @TCA_IPT_TARG={0x52, 0x6, {0x3, 'mangle\x00', 0xf, 0x6, "9fe99bd3c7dd6ca2bad9327dd5fc4c9b6c5a0fa554be47c6af1ed766e9d686d6eee8d9adf5301c95"}}, @TCA_IPT_TARG={0x49, 0x6, {0x1, 'raw\x00', 0x0, 0x8, "220f7d9a07f431648df53a2b2a453841a2846a4b2097d561af8e5030897878"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x150, 0xf, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x52b8, 0x4, 0x3, 0x5, 0x8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaab}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x20}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xe7, 0x6, "130e3b4e148ce253d8f4c4c27f59b763ba9923b9605e26e6242121df9ae3ee54186a45bf57a1e1be0a9e71401b97fc9681d0f7e35ae180c18fd270c2f54d8d22f3b8aca7c4f57fa63ff58bc6055e7d39b1c6a81265fc3359c84f5681f4bd39cbe2cf71c51ebe304ce246a4f97624392c512504e02d6efa91786aa4a1c4a6efd9249c8eac79986b7c176444906ad54e79b69cdb9cc525a75ce40c7da1805b0f2ce227744090eb4d592c591a750fd52eae8aa1d7356e96cb2cd6ee80c403ef9b43068e66b4a97ead86415766d5e9393e1fc483d48e990fed83583c872a1e45311a3415c0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xa4, 0xc, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0x74, 0x6, "1a32e440c0c6f7adc636626e8a12f51705e18857b71f2fac083c6991ad01f050450214aca5b4c0ded07bc329e581ed6b96327fcc79142914e1d6785f220fc8d3032e3bdfbeeee49918c50ea62b89dce6f339918a8cd8484d3d0e8957bac6860064ef183024f5594ec2d4a81d3b8bf75e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0xdc, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0xb0, 0x6, "2acfc93f942d1f44488118f3b27874f4f54725052d92866e299a8cbf9b310ee2b3e06b74b7ac464e10bc80b532030119d8ee1aa58b7e24ebbb5da08b5bf3fbacd6dd9ed7388ba14934216812c7ef61044c4215a8f732426d81ae496f1254620ef5645f15f01cf41a8989c98d67d040042bef06d76edee73746f32d1223a2e40f1e2a9a0e2680d46c71ef524ee456a1f73f83487a95bfa839bff6f0ce513867d2653c1dba5f3c3c03722b1906"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xf4, 0x7, 0x0, 0x0, {{0xc}, {0x4}, {0xc6, 0x6, "214ccbfa63878bf83576c01c1c2899a83f9a76d0ab078beae6f6b56a9ad66c6c419570ea5b8ce558bd3a65e7e549b478b728ebf59d140159efdc580f514c2e0bf0d43ae7636ea4cf3bd51f0c5117d30c0db75a19d327e471f38a3784fbaf9b29b70708ed840c698cd5ac7842e9ef152a72aabcc0d3d362c611aa707c7a77096f8f909037775c9b161a8ea0979c6e61df06ed07cf61ca6ae6b39d6a2be4ef008ea1f70af7dda0142852e2ac6d1fc94c1c46f50c2c758d6359d1385f0c471e5a6c4bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10c43}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x2440}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000025280)='oom_adj\x00') writev(r7, &(0x7f00000252c0)=[{&(0x7f0000025300)='15', 0x2}], 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) 6.187148857s ago: executing program 6 (id=2223): getrlimit(0x5d8c14f57b6356a6, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./cgroup\x00', &(0x7f00000003c0)='udf\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000100)=""/153, 0x99) syz_clone3(&(0x7f00000001c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x5, 0x0, 0x0, 0xa00, 0x1e, 0x0, 0x8, 0xa}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040440621804000010203010902a100030901c010080b0002010130070904000000010130000a2401103d0007000000132403050101060250ff07000007000900ff010c240b0701fcffffff08060014240202040405070f000000030006000200ff010904"], 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x5f4) 6.124963974s ago: executing program 7 (id=2224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000001c0)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r5, &(0x7f0000002980)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f000001b980)=0x7) clock_gettime(0x8, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1404, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000000)) r7 = syz_open_dev$sndctrl(&(0x7f000001ba80), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001bac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f000001bb00)='./trace\x00', &(0x7f000001bb40)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000001bb80)='./trace/current_tracer\x00', 0x1, 0x0) write(r8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r1) 6.068616966s ago: executing program 1 (id=2225): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000008000000811104000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x6) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000001040500000000f01c4994e0656c6a030500010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x44800) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000f00)=[{&(0x7f0000000f40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000001000)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f0000001040)=[{&(0x7f0000001080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000001140)) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./config\x00', &(0x7f0000001200)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x3, 0x0) bind$packet(r5, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) 5.06241274s ago: executing program 1 (id=2226): syz_usb_connect(0x0, 0x4b, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401"], 0x0) syz_open_dev$dvb_demux(&(0x7f0000000700), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x52) bpf$PROG_LOAD(0x5, 0x0, 0xfece) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x80200, 0x0) setns(0xc9, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000029c0)={@my=0x0}) socket$vsock_stream(0x28, 0x1, 0x0) mount(0x0, &(0x7f0000002a40)='./config\x00', &(0x7f0000002a80)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r1, &(0x7f0000002bc0)='2', 0x1) socket$tipc(0x1e, 0x5, 0x0) 4.28052438s ago: executing program 5 (id=2227): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2010030, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/225, 0xe1}], 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x118000, 0x3}) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/zswap/parameters/compressor\x00', 0xa002, 0x0) write(r2, &(0x7f0000000700)='lz4hc', 0x5) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x3, 'batadv_slave_0\x00', {}, 0x8555}) write(r4, 0x0, 0x0) read(r3, &(0x7f0000000780)=""/64, 0x40) write(r4, 0x0, 0x0) read(r3, &(0x7f00000007c0)=""/64, 0x40) write(r4, 0x0, 0x0) read(r3, &(0x7f0000000800)=""/64, 0x40) write(r4, &(0x7f0000000840)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x3e) read(r3, &(0x7f0000000880)=""/64, 0x40) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0xc) mlock(&(0x7f0000000000/0x900000)=nil, 0x900000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) 4.279183634s ago: executing program 7 (id=2228): sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x400, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) syz_open_dev$dri(&(0x7f00000002c0), 0xa00, 0x801) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05f62a20"], 0x8) 4.173791788s ago: executing program 2 (id=2229): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x14, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) 4.109291708s ago: executing program 2 (id=2230): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000199c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000019980)={&(0x7f0000019a00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf252e0000000c009900020000002d0000001800490002ac0f000bac0f0001ac0f0006ac0f0002ac0f0004090000000066004c88000011001501e09f0c172cce2f2a00035c9c2d000000040008010c00490000ac0f000bac0f0008004a000bac0f0006006600040000000400440008004a000dac0f000800c9006c0900000800a0000b000000050019010800000005001801ff00000008009f0002000000050018012d00000005001901090000000800a000ff0f00000400e200311850fe7182825cc906000000d7da770ed49172f16e4898a5a5662b47a974fb5b1bffdc740b38"], 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="fcffffff18dd1200d507000000"], 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0044000040000000ff7f00eaffff"]) mknodat$null(r4, &(0x7f0000000400)='./file0\x00', 0x20, 0x103) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000019800)={0x1f, 0xffff, 0x3}, 0x6) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000019840), 0x0, 0x0) write(r5, &(0x7f0000019880)="2d000000010001", 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000198c0)=ANY=[], 0x50) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r6, &(0x7f0000000180)=0x800000000001e8, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', r8, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r9, 0x0, 0xe, 0x0, &(0x7f0000000700)="000000002d43d2531e0000257e26", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.148206371s ago: executing program 2 (id=2231): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x22, &(0x7f00000002c0)={0x0, 0x20000036, 0x100, 0x2, 0x1db}, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x5112b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_usb_connect$uac2(0x7, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.116589904s ago: executing program 1 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000cc0)={0x0, 0x3f00, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60040880}, 0x20000000) 2.937110424s ago: executing program 1 (id=2233): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf, 0xfc, 0x68}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0xa2436ee532899ee5, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x23, 0x1, 0x7, 0x1, 0x3, 0x64, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0xc7, 0x4, 0x40, 0x7}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x89, 0x7f, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x91b4, 0xf000, 0x0, [0xf, 0x0, 0x30, 0x7ec0, 0xffc00f, 0xff0030]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x99, &(0x7f0000000200)=@string={0x99, 0x3, "fd0e9c92e1febb471d3a5378b6d9f02e4842419df313461a734f477322091011e0abd80d41e1f0affcb9209cd17120f1eecedb12449b7a5aa0a8dda531f43154fc5037abee6797bc4646c9caaa61cd30c464fec421512229a8acc21998d19dab009ee8a321b58f911b676b7b618a36b79d39abf3fa78072ef7ab3d88060310f084922d2e2ddbcadeea57ebdf5bee90856da1894b33e8e8"}}]}) syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x0, 0x21, 0x5e, {0x5e, 0xb, "72c46d944380418fecedc0d457a32a89be61c525db69b9be44490e51f80ffbe282fa9f9aab135fb8cabea1aa53d2adde771c174a8d6fd6c5a7d35b6f54e8c71989255bc6b909fed375091410a895ec8a5d5ad1ad39892dec3340b994"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x40, 0xb, 0x1e, "78d8cd8e6615ac6fd187ae950201300a9d81af05177d1be6f05cbebbaa0f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x34}, &(0x7f00000004c0)={0x20, 0x0, 0x33, {0x31, "0450b6f11fd86a79378c99e87b6890cd1e480fc0103bfaa3e16d92e3750d4609097f752f6a1d469ef1da8af7dfe12fc369"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) 2.585088092s ago: executing program 5 (id=2234): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 2.301009967s ago: executing program 1 (id=2235): r0 = socket(0x2, 0x2, 0x5) sendto(r0, 0x0, 0x0, 0x4040800, &(0x7f0000000080)=@ethernet={0x306}, 0x80) (async) unshare(0x78040280) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000a0b000/0x1000)=nil}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000180)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x401, 0x3a, 0x0, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04250c20"], 0x7) (async) write$tun(r5, &(0x7f00000002c0)=ANY=[], 0xfdef) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) gettid() (async) timer_create(0x1, &(0x7f0000000300)={0x0, 0x4021, 0x800000000004, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="3c8f1f5e304928c404ca6726da54acb08e35044cae"}}, &(0x7f0000000340)) (async) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x7e, &(0x7f0000001480)="dd1bca8100880594a0bfa995d40fa042eb4d4e7763095b7fb3e2a9791cb99c3ec4415748e8c10cad350138e6be613d0b94512099ff1333045c02bc5c901a6983ebbe83ac48aa83597ed0853c8baac2588793877a47a4f427121d3cabae58bd8b23f78c0bd8a9ad8a6140b7e09dd383c1f9f2acb81c4db6ebbc3ab4d6b2bb") ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) 2.117221593s ago: executing program 7 (id=2236): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000008000000811104000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x6) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000001040500000000f01c4994e0656c6a030500010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x44800) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000f00)=[{&(0x7f0000000f40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000001000)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f0000001040)=[{&(0x7f0000001080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000001140)) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./config\x00', &(0x7f0000001200)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x3, 0x0) bind$packet(r5, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) 1.936356636s ago: executing program 5 (id=2237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0xe00, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 1.801374384s ago: executing program 6 (id=2238): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@empty, @private=0xa010101}) (fail_nth: 3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xa90a}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x30, 0xffffffffffffffff, 0xffffe000) r4 = socket(0x1, 0x1, 0x1) r5 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000180)={0x3, 0x1, 0x7e, 0x800, 0x0, 0x1}) r6 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x128) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1.034261967s ago: executing program 7 (id=2239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000001c0)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r5, &(0x7f0000002980)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f000001b980)=0x7) clock_gettime(0x8, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r6}) r7 = syz_open_dev$sndctrl(&(0x7f000001ba80), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001bac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f000001bb00)='./trace\x00', &(0x7f000001bb40)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000001bb80)='./trace/current_tracer\x00', 0x1, 0x0) write(r8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r1) 131.170845ms ago: executing program 7 (id=2240): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x14, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) 0s ago: executing program 5 (id=2241): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, 'E r', 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "8108f9", 0xfffb, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback}}}}}}}, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x4000000000001e9, 0x10162, 0x0) (fail_nth: 3) r4 = socket(0x15, 0x5, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20004044) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000003c0)) 0s ago: executing program 1 (id=2247): openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0x2002, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc100092e) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x1c, &(0x7f00000007c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000800)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000840)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000900)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000080)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000280)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700)=r9, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=r9, 0x4) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f00000005c0)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r10 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) close_range(r10, r10, 0x0) kernel console output (not intermixed with test programs): context=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 759.168452][ T13] net_ratelimit: 92 callbacks suppressed [ 759.278889][T12460] bond2: entered promiscuous mode [ 759.281072][T12460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.648747][T12478] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1563'. [ 762.550815][T12503] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1578'. [ 762.638529][T12505] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1580'. [ 764.533062][ C1] net_ratelimit: 77 callbacks suppressed [ 764.723016][T12521] xt_ecn: cannot match TCP bits for non-tcp packets [ 766.009457][T12530] ubi0: attaching mtd0 [ 766.027050][T12530] ubi0: scanning is finished [ 766.347270][T12530] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 766.347296][T12530] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 766.347315][T12530] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 766.347332][T12530] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 766.347350][T12530] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 766.347366][T12530] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 766.347383][T12530] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1443427545 [ 766.347402][T12530] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 766.347465][T12538] ubi0: background thread "ubi_bgt0d" started, PID 12538 [ 766.347537][T12533] ubi0: detaching mtd0 [ 766.382447][T12533] ubi0: mtd0 is detached [ 767.557809][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 767.563751][T12554] ipvlan2: entered allmulticast mode [ 767.790662][ T31] audit: type=1800 audit(1792187228.830:957): pid=12557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1592" name="SYSV00000000" dev="tmpfs" ino=12 res=0 errno=0 [ 770.267758][ T1466] net_ratelimit: 225 callbacks suppressed [ 774.416811][T12606] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1606'. [ 774.445103][T12605] nfs4: Bad value for 'timeo' [ 774.756074][ T31] audit: type=1400 audit(1792187235.349:958): avc: denied { write } for pid=12608 comm="syz.2.1607" name="usb_gadget" dev="configfs" ino=3325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 774.815356][ T31] audit: type=1400 audit(1792187235.396:959): avc: denied { write } for pid=12608 comm="syz.2.1607" name="configs" dev="configfs" ino=33475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 774.930484][T12616] trusted_key: encrypted_key: insufficient parameters specified [ 775.347534][ T31] audit: type=1400 audit(1792187235.901:961): avc: denied { write } for pid=12608 comm="syz.2.1607" name="UDC" dev="configfs" ino=33484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 775.347779][ T31] audit: type=1400 audit(1792187235.901:962): avc: denied { open } for pid=12608 comm="syz.2.1607" path="/337/mnt/usb_gadget/g1/UDC" dev="configfs" ino=33484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 775.371500][ T31] audit: type=1400 audit(1792187235.883:960): avc: denied { write } for pid=12608 comm="syz.2.1607" name="c.1" dev="configfs" ino=33479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 775.376920][ T31] audit: type=1400 audit(1792187235.929:963): avc: denied { create } for pid=12608 comm="syz.2.1607" name="geth.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 775.391076][T12613] Config c/1 of g1 needs at least one function. [ 775.403758][T12613] udc dummy_udc.0: failed to start g1: -22 [ 775.403780][T12613] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 775.548962][ T31] audit: type=1400 audit(1792187236.088:964): avc: denied { ioctl } for pid=12608 comm="syz.2.1607" path="/337/mnt/usb_gadget/g1/UDC" dev="configfs" ino=33484 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 775.704586][T12613] UDC core: g1: couldn't find an available UDC or it's busy [ 775.742181][ T973] net_ratelimit: 112 callbacks suppressed [ 775.767723][ T31] audit: type=1400 audit(1792187236.294:965): avc: denied { read } for pid=12629 comm="syz.1.1603" path="socket:[33500]" dev="sockfs" ino=33500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 777.217924][ T25] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 777.404375][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 777.407455][ T25] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 777.409592][ T25] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 777.409615][ T25] usb 3-1: config 0 has no interface number 0 [ 777.409644][ T25] usb 3-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 777.409659][ T25] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 777.447209][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.447231][ T25] usb 3-1: Product: syz [ 777.447258][ T25] usb 3-1: Manufacturer: syz [ 777.447274][ T25] usb 3-1: SerialNumber: syz [ 777.510561][ T25] usb 3-1: config 0 descriptor?? [ 777.522884][ T25] usbtest 3-1:0.99: usb test device [ 777.522900][ T25] usbtest 3-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 777.793805][ T5728] usb 3-1: USB disconnect, device number 68 [ 779.513359][ T31] audit: type=1400 audit(1792187239.792:966): avc: denied { mount } for pid=12668 comm="syz.2.1621" name="/" dev="rpc_pipefs" ino=33839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 779.882321][ T31] audit: type=1400 audit(1792187240.139:967): avc: denied { ioctl } for pid=12670 comm="syz.1.1623" path="socket:[33567]" dev="sockfs" ino=33567 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 781.322194][ T8075] net_ratelimit: 70 callbacks suppressed [ 782.037547][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1626'. [ 782.043792][T12684] ipvlan2: entered allmulticast mode [ 782.861122][ T5793] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 783.524765][ T5793] usb 3-1: Using ep0 maxpacket: 8 [ 783.526887][ T5793] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 783.527993][ T5793] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.528008][ T5793] usb 3-1: config 0 interface 0 has no altsetting 0 [ 783.528036][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.529674][ T5793] usb 3-1: config 0 descriptor?? [ 783.570903][ T5793] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 783.635924][ T31] audit: type=1400 audit(1792187243.646:968): avc: denied { audit_write } for pid=12711 comm="syz.5.1634" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 783.936742][ T4957] bcm5974 3-1:0.0: could not read from device [ 784.443756][ T4957] bcm5974 3-1:0.0: could not read from device [ 784.484734][ T4957] bcm5974 3-1:0.0: could not read from device [ 784.507631][ T5793] usb 3-1: USB disconnect, device number 69 [ 784.575936][ T4957] bcm5974 3-1:0.0: could not read from device [ 785.184097][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1638'. [ 785.226531][T12729] x_tables: duplicate underflow at hook 1 [ 786.684258][ C0] net_ratelimit: 73 callbacks suppressed [ 786.916636][T12737] ip_tables: iptables: counters copy to user failed while replacing table [ 788.944638][T12753] overlay: ./file0 is not a directory [ 788.971700][ T31] audit: type=1400 audit(1792187248.641:969): avc: denied { create } for pid=12752 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 789.448922][ T31] audit: type=1400 audit(1792187249.090:970): avc: denied { write } for pid=12752 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 789.802431][ T968] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 790.489037][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 790.498402][ T968] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 790.499800][ T968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.499821][ T968] usb 3-1: config 0 has no interfaces? [ 790.540183][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.540201][ T968] usb 3-1: Product: syz [ 790.540209][ T968] usb 3-1: Manufacturer: syz [ 790.540218][ T968] usb 3-1: SerialNumber: syz [ 790.571436][ T968] usb 3-1: config 0 descriptor?? [ 790.784475][ T31] audit: type=1400 audit(1792187250.344:971): avc: denied { bind } for pid=12769 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 790.785427][ T31] audit: type=1400 audit(1792187250.344:972): avc: denied { setopt } for pid=12769 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 790.837353][ T31] audit: type=1400 audit(1792187250.391:973): avc: denied { connect } for pid=12769 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 790.873398][ T968] usb 3-1: USB disconnect, device number 70 [ 791.031430][ T31] audit: type=1400 audit(1792187250.568:974): avc: denied { write } for pid=12775 comm="syz.7.1653" path="socket:[34110]" dev="sockfs" ino=34110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 792.137696][ T1466] net_ratelimit: 89 callbacks suppressed [ 792.138761][ T31] audit: type=1400 audit(1792187251.607:975): avc: denied { execute } for pid=12775 comm="syz.7.1653" name="file0" dev="ramfs" ino=34112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 792.179421][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.179449][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.465989][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 792.466009][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 792.466028][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0856 instead [ 792.500789][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd2b3 instead [ 792.500809][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 792.500826][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 792.500844][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 792.500866][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 792.500899][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 792.500943][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 792.500961][T12786] jffs2: Further such events for this erase block will not be printed [ 792.501913][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 792.501934][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 792.501954][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0856 instead [ 792.501973][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd2b3 instead [ 792.501998][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 792.502015][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 792.502033][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 792.502054][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 792.502084][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 792.502116][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 792.502131][T12786] jffs2: Further such events for this erase block will not be printed [ 792.504153][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 792.504175][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 792.504195][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x0856 instead [ 792.504225][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd2b3 instead [ 792.504277][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 792.504294][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 792.504324][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0856 instead [ 792.504346][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd2b3 instead [ 792.504407][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 792.504435][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 792.504455][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x0856 instead [ 792.504485][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd2b3 instead [ 792.504545][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 792.504563][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 792.504581][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0856 instead [ 792.504602][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd2b3 instead [ 792.504652][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 792.504669][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 792.504687][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x0856 instead [ 792.504717][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd2b3 instead [ 792.504776][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 792.504794][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 792.504813][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0856 instead [ 792.504834][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd2b3 instead [ 792.504881][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 792.504897][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 792.504914][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x0856 instead [ 792.504934][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd2b3 instead [ 792.504989][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 792.505008][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 792.505027][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x0856 instead [ 792.505049][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd2b3 instead [ 792.505099][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 792.505117][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 792.505135][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0856 instead [ 792.505155][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd2b3 instead [ 792.505201][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 792.505218][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 792.505235][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x0856 instead [ 792.505253][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd2b3 instead [ 792.505611][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 792.505630][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 792.505647][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x0856 instead [ 792.505664][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd2b3 instead [ 792.505708][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 792.505725][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 792.505743][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0856 instead [ 792.505762][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd2b3 instead [ 792.505809][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 792.505825][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 792.505843][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x0856 instead [ 792.505863][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd2b3 instead [ 792.505908][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 792.505925][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 792.505943][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0856 instead [ 792.505962][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd2b3 instead [ 792.506020][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 792.506037][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 792.506056][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x0856 instead [ 792.506077][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd2b3 instead [ 792.506122][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 792.506139][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 792.506157][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x0856 instead [ 792.506176][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd2b3 instead [ 792.506224][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 792.506240][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 792.506258][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x0856 instead [ 792.506277][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd2b3 instead [ 792.506320][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 792.506336][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 792.506355][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x0856 instead [ 792.506376][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd2b3 instead [ 792.506435][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 792.506451][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 792.506470][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x0856 instead [ 792.506490][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd2b3 instead [ 792.506535][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 792.506551][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 792.506570][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x0856 instead [ 792.506589][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd2b3 instead [ 792.506639][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 792.506655][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 792.506672][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0856 instead [ 792.506691][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd2b3 instead [ 792.506737][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 792.506753][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 792.506771][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x0856 instead [ 792.506789][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd2b3 instead [ 792.506837][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 792.506854][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 792.506872][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x0856 instead [ 792.506891][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd2b3 instead [ 792.506938][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 792.506955][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 792.506973][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0856 instead [ 792.507001][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd2b3 instead [ 792.507050][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 792.507067][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 792.507085][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x0856 instead [ 792.507105][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd2b3 instead [ 792.507147][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 792.507163][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 792.507330][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x0856 instead [ 792.507400][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd2b3 instead [ 792.507459][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 792.507477][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 792.507496][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0856 instead [ 792.507517][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd2b3 instead [ 792.507568][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 792.507586][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 792.507605][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x0856 instead [ 792.507625][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd2b3 instead [ 792.507672][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 792.507689][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 792.507707][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x0856 instead [ 792.507727][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd2b3 instead [ 792.507776][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 792.507793][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 792.507811][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x0856 instead [ 792.507831][T12786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd2b3 instead [ 792.507869][T12786] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 792.507878][T12786] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 796.385902][T12800] siw: device registration error -23 [ 796.680056][T12803] FAULT_INJECTION: forcing a failure. [ 796.680056][T12803] name failslab, interval 1, probability 0, space 0, times 0 [ 796.680080][T12803] CPU: 0 UID: 0 PID: 12803 Comm: syz.6.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.680099][T12803] Tainted: [L]=SOFTLOCKUP [ 796.680104][T12803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 796.680112][T12803] Call Trace: [ 796.680117][T12803] [ 796.680122][T12803] dump_stack_lvl+0x100/0x190 [ 796.680155][T12803] should_fail_ex.cold+0x5/0xa [ 796.680174][T12803] should_failslab+0xc2/0x120 [ 796.680192][T12803] kmem_cache_alloc_noprof+0x92/0x6a0 [ 796.680208][T12803] ? skb_clone+0x190/0x400 [ 796.680223][T12803] skb_clone+0x190/0x400 [ 796.680236][T12803] netlink_deliver_tap+0xaed/0xcc0 [ 796.680258][T12803] netlink_unicast+0x77b/0x950 [ 796.680279][T12803] ? __pfx_netlink_unicast+0x10/0x10 [ 796.680297][T12803] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 796.680316][T12803] netlink_ack+0x655/0xb80 [ 796.680338][T12803] netlink_rcv_skb+0x333/0x420 [ 796.680356][T12803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 796.680372][T12803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 796.680397][T12803] ? netlink_deliver_tap+0x1ae/0xcc0 [ 796.680418][T12803] netlink_unicast+0x65f/0x950 [ 796.680438][T12803] ? __pfx_netlink_unicast+0x10/0x10 [ 796.680460][T12803] netlink_sendmsg+0x8b0/0xda0 [ 796.680481][T12803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.680500][T12803] ? selinux_socket_sendmsg+0x198/0x2f0 [ 796.680519][T12803] ____sys_sendmsg+0xa4d/0xbe0 [ 796.680533][T12803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.680552][T12803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.680576][T12803] ___sys_sendmsg+0x190/0x1e0 [ 796.680593][T12803] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.680609][T12803] ? futex_wait+0x11e/0x370 [ 796.680629][T12803] ? find_held_lock+0x2b/0x80 [ 796.680661][T12803] __sys_sendmsg+0x160/0x210 [ 796.680674][T12803] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.680696][T12803] do_syscall_64+0x123/0x790 [ 796.680714][T12803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.680727][T12803] RIP: 0033:0x7fe305d9e559 [ 796.680737][T12803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.680748][T12803] RSP: 002b:00007fe306bdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.680760][T12803] RAX: ffffffffffffffda RBX: 00007fe306025fa0 RCX: 00007fe305d9e559 [ 796.680768][T12803] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 796.680775][T12803] RBP: 00007fe305e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 796.680782][T12803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.680790][T12803] R13: 00007fe306026038 R14: 00007fe306025fa0 R15: 00007ffde8fa3e78 [ 796.680807][T12803] [ 797.194672][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1666'. [ 797.252610][T12811] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1666'. [ 797.256032][ T31] audit: type=1400 audit(1792187256.386:976): avc: denied { read } for pid=12808 comm="syz.2.1657" name="idVendor" dev="configfs" ino=34172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 797.545483][ C0] net_ratelimit: 69 callbacks suppressed [ 797.712696][ T31] audit: type=1400 audit(1792187256.817:977): avc: denied { read } for pid=12813 comm="syz.1.1661" name="nfsv4gracetime" dev="nfsd" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 797.752313][ T31] audit: type=1400 audit(1792187256.864:978): avc: denied { create } for pid=12813 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 797.757563][ T31] audit: type=1400 audit(1792187256.864:979): avc: denied { setopt } for pid=12813 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 797.853317][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1668'. [ 797.871442][T12816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=12816 comm=syz.6.1668 [ 797.872147][T12816] netlink: 'syz.6.1668': attribute type 25 has an invalid length. [ 797.921631][ T31] audit: type=1400 audit(1792187257.023:980): avc: denied { kexec_image_load } for pid=12815 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 798.332851][T12824] tipc: Enabling of bearer rejected, failed to enable media [ 798.900667][T12838] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1672'. [ 798.913324][T12838] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1672'. [ 798.914081][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1672'. [ 798.914770][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'. [ 799.307495][ T31] audit: type=1400 audit(1792187258.313:981): avc: denied { node_bind } for pid=12823 comm="syz.7.1667" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 799.341037][ T8073] IPVS: starting estimator thread 0... [ 799.973540][T12841] IPVS: using max 53 ests per chain, 127200 per kthread [ 801.420079][T12865] netlink: 'syz.6.1680': attribute type 1 has an invalid length. [ 801.583023][T12865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.683988][T12873] bond5: (slave geneve0): making interface the new active one [ 801.701984][T12873] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 801.704203][ T1466] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.718803][ T1466] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.718844][ T1466] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.718877][ T1466] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.718910][ T1466] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.718943][ T1466] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.718976][ T1466] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.719009][ T1466] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.719041][ T1466] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.719074][ T1466] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.719107][ T1466] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.719140][ T1466] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.796712][T12880] macsec1: entered promiscuous mode [ 801.796734][T12880] bridge0: entered promiscuous mode [ 802.934279][ T968] net_ratelimit: 81 callbacks suppressed [ 802.992271][ T31] audit: type=1400 audit(1792187261.765:982): avc: denied { create } for pid=12864 comm="syz.6.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 802.993939][ T31] audit: type=1400 audit(1792187261.765:983): avc: denied { ioctl } for pid=12864 comm="syz.6.1680" path="socket:[34857]" dev="sockfs" ino=34857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 803.104190][T12891] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1687'. [ 803.422563][ T31] audit: type=1400 audit(1792187262.158:984): avc: denied { write } for pid=12892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.032388][ T31] audit: type=1400 audit(1792187262.729:985): avc: denied { write } for pid=12910 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.382985][ T31] audit: type=1400 audit(1792187263.065:986): avc: denied { bind } for pid=12918 comm="syz.7.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 804.383545][ T31] audit: type=1400 audit(1792187263.065:987): avc: denied { listen } for pid=12918 comm="syz.7.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 804.411542][ T31] audit: type=1400 audit(1792187263.093:988): avc: denied { connect } for pid=12918 comm="syz.7.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 804.512209][ T31] audit: type=1400 audit(1792187263.177:989): avc: denied { accept } for pid=12918 comm="syz.7.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 804.719061][T12933] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1692'. [ 805.900545][ T31] audit: type=1400 audit(1792187264.478:990): avc: denied { write } for pid=12920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.127821][ T31] audit: type=1400 audit(1792187264.581:991): avc: denied { write } for pid=12953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.363144][ T8084] net_ratelimit: 88 callbacks suppressed [ 808.984473][ T31] audit: type=1400 audit(1792187267.359:992): avc: denied { bind } for pid=12985 comm="syz.2.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 809.851046][ T31] audit: type=1400 audit(1792187268.182:993): avc: denied { write } for pid=12956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.425694][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 810.446812][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 811.335185][ T31] audit: type=1400 audit(1792187269.557:994): avc: denied { write } for pid=13009 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.685827][T13023] bridge_slave_0: left allmulticast mode [ 811.685846][T13023] bridge_slave_0: left promiscuous mode [ 811.689354][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.813674][T13023] bridge_slave_1: left allmulticast mode [ 811.813692][T13023] bridge_slave_1: left promiscuous mode [ 811.813875][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.955717][T13023] bond0: (slave bond_slave_0): Releasing backup interface [ 812.023466][T13023] bond0: (slave bond_slave_1): Releasing backup interface [ 812.074024][ T5728] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 812.105402][T13023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.105420][T13023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.137155][ T31] audit: type=1400 audit(1792187270.315:995): avc: denied { write } for pid=13030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.138392][T13023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.138411][T13023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.256996][ T5728] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 812.260432][ T5728] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.260462][ T5728] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 812.260484][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.270078][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 812.270098][ T5728] usb 3-1: Product: syz [ 812.270114][ T5728] usb 3-1: Manufacturer: syz [ 812.270129][ T5728] usb 3-1: SerialNumber: syz [ 812.272839][ T5728] usb 3-1: config 0 descriptor?? [ 812.301628][ T5728] usb 3-1: selecting invalid altsetting 0 [ 812.348638][ T31] audit: type=1400 audit(1792187270.511:996): avc: denied { write } for pid=13050 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.374904][ T5729] usb 3-1: USB disconnect, device number 71 [ 813.643495][T13064] udevd[13064]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.053048][ T8073] net_ratelimit: 98 callbacks suppressed [ 815.533740][ T31] audit: type=1400 audit(1792187273.495:997): avc: denied { write } for pid=13054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.886352][ T31] audit: type=1400 audit(1792187273.822:998): avc: denied { write } for pid=13089 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.947380][T13092] siw: device registration error -23 [ 819.444958][ T8070] net_ratelimit: 87 callbacks suppressed [ 819.541816][ T31] audit: type=1400 audit(1792187277.237:999): avc: denied { write } for pid=13128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.681574][ T31] audit: type=1400 audit(1792187277.368:1000): avc: denied { write } for pid=13139 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.941202][T13165] FAULT_INJECTION: forcing a failure. [ 820.941202][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 820.941234][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.2.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.941263][T13165] Tainted: [L]=SOFTLOCKUP [ 820.941270][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.941281][T13165] Call Trace: [ 820.941288][T13165] [ 820.941296][T13165] dump_stack_lvl+0x100/0x190 [ 820.941334][T13165] should_fail_ex.cold+0x5/0xa [ 820.941363][T13165] should_failslab+0xc2/0x120 [ 820.941393][T13165] kmem_cache_alloc_noprof+0x92/0x6a0 [ 820.941420][T13165] ? security_file_alloc+0x34/0x2c0 [ 820.941456][T13165] security_file_alloc+0x34/0x2c0 [ 820.941486][T13165] init_file+0x95/0x480 [ 820.941515][T13165] alloc_empty_file+0x79/0x1c0 [ 820.941535][T13165] alloc_file_pseudo+0x183/0x290 [ 820.941555][T13165] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 820.941577][T13165] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 820.941624][T13165] sock_alloc_file+0x50/0x210 [ 820.941650][T13165] __sys_socketpair+0x321/0x5b0 [ 820.941684][T13165] ? __pfx___sys_socketpair+0x10/0x10 [ 820.941716][T13165] ? xfd_validate_state+0x129/0x190 [ 820.941749][T13165] __x64_sys_socketpair+0x96/0x100 [ 820.941777][T13165] ? lockdep_hardirqs_on+0x7d/0x110 [ 820.941806][T13165] do_syscall_64+0x123/0x790 [ 820.941838][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.941861][T13165] RIP: 0033:0x7f8944f9e559 [ 820.941878][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.941899][T13165] RSP: 002b:00007f8945df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 820.941921][T13165] RAX: ffffffffffffffda RBX: 00007f8945225fa0 RCX: 00007f8944f9e559 [ 820.941937][T13165] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 820.941951][T13165] RBP: 00007f89450358b0 R08: 0000000000000000 R09: 0000000000000000 [ 820.941965][T13165] R10: 00002000000012c0 R11: 0000000000000246 R12: 0000000000000000 [ 820.941977][T13165] R13: 00007f8945226038 R14: 00007f8945225fa0 R15: 00007ffce57ff008 [ 820.942007][T13165] [ 822.748979][T13165] loop3: detected capacity change from 0 to 7 [ 822.780191][T13165] Dev loop3: unable to read RDB block 7 [ 822.780230][T13165] loop3: unable to read partition table [ 822.780457][T13165] loop3: partition table beyond EOD, truncated [ 822.780497][T13165] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 824.451407][ T31] audit: type=1400 audit(1792187281.829:1001): avc: denied { write } for pid=13178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.451487][T13209] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1739'. [ 824.828177][ T8070] net_ratelimit: 90 callbacks suppressed [ 824.864333][ T31] audit: type=1400 audit(1792187282.222:1002): avc: denied { write } for pid=13212 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.241084][T13218] geneve2: entered promiscuous mode [ 825.241096][T13218] geneve2: entered allmulticast mode [ 825.255683][ T973] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.256288][ T973] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.256324][ T973] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.256355][ T973] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 826.159081][T13232] netlink: 'syz.7.1747': attribute type 142 has an invalid length. [ 826.159092][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1747'. [ 827.303442][T13264] x_tables: duplicate underflow at hook 1 [ 827.555908][T13268] siw: device registration error -23 [ 828.427405][T13276] FAULT_INJECTION: forcing a failure. [ 828.427405][T13276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.427464][T13276] CPU: 1 UID: 0 PID: 13276 Comm: syz.6.1758 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.427494][T13276] Tainted: [L]=SOFTLOCKUP [ 828.427502][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 828.427515][T13276] Call Trace: [ 828.427523][T13276] [ 828.427532][T13276] dump_stack_lvl+0x100/0x190 [ 828.427567][T13276] should_fail_ex.cold+0x5/0xa [ 828.427597][T13276] _copy_from_user+0x2e/0xd0 [ 828.427625][T13276] kstrtouint_from_user+0xd6/0x1d0 [ 828.427647][T13276] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 828.427675][T13276] ? lock_acquire+0x1d1/0x380 [ 828.427705][T13276] proc_fail_nth_write+0x83/0x220 [ 828.427733][T13276] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 828.427768][T13276] vfs_write+0x2aa/0x1050 [ 828.427793][T13276] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 828.427820][T13276] ? lock_acquire+0x1d1/0x380 [ 828.427842][T13276] ? __fget_files+0x34/0x3d0 [ 828.427869][T13276] ? __pfx_vfs_write+0x10/0x10 [ 828.427891][T13276] ? find_held_lock+0x2b/0x80 [ 828.427920][T13276] ? __fget_files+0x215/0x3d0 [ 828.427952][T13276] ? __fget_files+0x21f/0x3d0 [ 828.427996][T13276] ksys_write+0x12a/0x250 [ 828.428021][T13276] ? __pfx_ksys_write+0x10/0x10 [ 828.428054][T13276] do_syscall_64+0x123/0x790 [ 828.428085][T13276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.428106][T13276] RIP: 0033:0x7fe305d5ed8e [ 828.428124][T13276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 828.428142][T13276] RSP: 002b:00007fe306bdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.428162][T13276] RAX: ffffffffffffffda RBX: 00007fe306bdb6c0 RCX: 00007fe305d5ed8e [ 828.428176][T13276] RDX: 0000000000000001 RSI: 00007fe306bdb0a0 RDI: 0000000000000004 [ 828.428189][T13276] RBP: 00007fe306bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 828.428201][T13276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.428213][T13276] R13: 00007fe306026038 R14: 00007fe306025fa0 R15: 00007ffde8fa3e78 [ 828.428243][T13276] [ 829.792374][T13281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 830.389222][ T8084] net_ratelimit: 103 callbacks suppressed [ 830.579546][ T5793] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 830.751334][ T5793] usb 3-1: Using ep0 maxpacket: 16 [ 830.752980][ T5793] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 830.759421][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.759448][ T5793] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 830.759503][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.812564][ T5793] usb 3-1: config 0 descriptor?? [ 831.019969][ T31] audit: type=1400 audit(1792187287.984:1003): avc: denied { write } for pid=13304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.903365][ T5793] hid_parser_main: 27 callbacks suppressed [ 831.903380][ T5793] microsoft 0003:045E:07DA.0010: unknown main item tag 0x5 [ 831.903406][ T5793] microsoft 0003:045E:07DA.0010: item fetching failed at offset 26/34 [ 831.915589][ T5793] microsoft 0003:045E:07DA.0010: parse failed [ 831.915687][ T5793] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 832.107734][T13329] FAULT_INJECTION: forcing a failure. [ 832.107734][T13329] name failslab, interval 1, probability 0, space 0, times 0 [ 832.107762][T13329] CPU: 1 UID: 0 PID: 13329 Comm: syz.7.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.107791][T13329] Tainted: [L]=SOFTLOCKUP [ 832.107798][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.107810][T13329] Call Trace: [ 832.107817][T13329] [ 832.107825][T13329] dump_stack_lvl+0x100/0x190 [ 832.107859][T13329] should_fail_ex.cold+0x5/0xa [ 832.107889][T13329] should_failslab+0xc2/0x120 [ 832.107917][T13329] __kmalloc_noprof+0xfc/0x840 [ 832.107943][T13329] ? tomoyo_encode2+0xfb/0x3c0 [ 832.107978][T13329] tomoyo_encode2+0xfb/0x3c0 [ 832.108007][T13329] ? __get_fs_type+0xe3/0x200 [ 832.108030][T13329] tomoyo_encode+0x29/0x50 [ 832.108057][T13329] tomoyo_mount_acl+0x388/0x8b0 [ 832.108085][T13329] ? is_bpf_text_address+0x8a/0x1a0 [ 832.108112][T13329] ? is_bpf_text_address+0x8a/0x1a0 [ 832.108141][T13329] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.108162][T13329] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 832.108186][T13329] ? kernel_text_address+0x8d/0x100 [ 832.108206][T13329] ? unwind_get_return_address+0x59/0xa0 [ 832.108232][T13329] ? arch_stack_walk+0xa6/0xf0 [ 832.108260][T13329] ? __lock_acquire+0x5c0/0x1f40 [ 832.108289][T13329] ? tomoyo_mount_permission+0x1f6/0x460 [ 832.108319][T13329] ? tomoyo_domain+0xb2/0x150 [ 832.108338][T13329] ? tomoyo_profile+0x47/0x60 [ 832.108362][T13329] tomoyo_mount_permission+0x214/0x460 [ 832.108388][T13329] ? tomoyo_mount_permission+0x1f6/0x460 [ 832.108415][T13329] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 832.108460][T13329] security_sb_mount+0xdd/0x270 [ 832.108487][T13329] path_mount+0x158/0x2850 [ 832.108513][T13329] ? __pfx_path_mount+0x10/0x10 [ 832.108532][T13329] ? lockdep_hardirqs_on+0x7d/0x110 [ 832.108562][T13329] ? putname+0xb1/0x110 [ 832.108578][T13329] ? kmem_cache_free+0x127/0x6c0 [ 832.108609][T13329] ? __x64_sys_mount+0x293/0x310 [ 832.108628][T13329] __x64_sys_mount+0x293/0x310 [ 832.108649][T13329] ? __pfx___x64_sys_mount+0x10/0x10 [ 832.108686][T13329] do_syscall_64+0x123/0x790 [ 832.108715][T13329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.108735][T13329] RIP: 0033:0x7f167199e559 [ 832.108751][T13329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.108769][T13329] RSP: 002b:00007f1672824028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 832.108788][T13329] RAX: ffffffffffffffda RBX: 00007f1671c25fa0 RCX: 00007f167199e559 [ 832.108801][T13329] RDX: 0000200000000cc0 RSI: 0000200000000c80 RDI: 0000200000000c40 [ 832.108814][T13329] RBP: 00007f1672824090 R08: 0000200000000d00 R09: 0000000000000000 [ 832.108826][T13329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.108838][T13329] R13: 00007f1671c26038 R14: 00007f1671c25fa0 R15: 00007ffc07b06888 [ 832.108867][T13329] [ 832.339484][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 832.407277][ T31] audit: type=1400 audit(1792187289.275:1004): avc: denied { write } for pid=13333 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.413373][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.432728][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.458228][T13307] x_tables: duplicate underflow at hook 1 [ 832.471918][T13335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13335 comm=syz.1.1765 [ 834.381471][ T31] audit: type=1400 audit(1792187291.118:1005): avc: denied { write } for pid=13347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.442769][ T5729] usb 3-1: USB disconnect, device number 72 [ 835.486573][ T5729] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 835.764426][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 835.765053][ T5729] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 835.766444][ T5729] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 835.766467][ T5729] usb 3-1: config 0 has no interface number 0 [ 835.766504][ T5729] usb 3-1: config 0 interface 184 has no altsetting 0 [ 835.816599][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.816618][ T5729] usb 3-1: Product: syz [ 835.816633][ T5729] usb 3-1: Manufacturer: syz [ 835.816648][ T5729] usb 3-1: SerialNumber: syz [ 835.946911][ T8084] net_ratelimit: 84 callbacks suppressed [ 836.221093][ T5729] usb 3-1: config 0 descriptor?? [ 836.342666][ T31] audit: type=1400 audit(1792187292.951:1006): avc: denied { write } for pid=13376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.501741][ T5729] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 837.501768][ T5729] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 839.123313][T13410] x_tables: duplicate underflow at hook 1 [ 839.130540][ T5729] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 839.130566][ T5729] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 839.130587][ T5729] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 839.130793][ T5729] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 839.168062][ T5729] usb 3-1: USB disconnect, device number 73 [ 839.333920][ T31] audit: type=1400 audit(1792187295.748:1007): avc: denied { write } for pid=13399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.438675][ T31] audit: type=1400 audit(1792187295.851:1008): avc: denied { write } for pid=13417 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.535363][T13420] netlink: 'syz.5.1794': attribute type 1 has an invalid length. [ 839.717146][T13420] 8021q: adding VLAN 0 to HW filter on device bond7 [ 840.111376][T13440] overlayfs: missing 'lowerdir' [ 841.436112][ T31] audit: type=1400 audit(1792187297.722:1009): avc: denied { write } for pid=13428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.481945][T13461] net_ratelimit: 92 callbacks suppressed [ 841.643583][T13463] siw: device registration error -23 [ 841.731269][ T31] audit: type=1400 audit(1792187298.002:1010): avc: denied { write } for pid=13466 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.273635][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1805'. [ 843.279566][T13485] ipvlan2: entered allmulticast mode [ 843.899993][ T30] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 844.061903][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 844.062711][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 844.063866][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.063894][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.063950][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.070407][ T30] usb 3-1: config 0 descriptor?? [ 844.258105][ T31] audit: type=1400 audit(1792187300.360:1011): avc: denied { write } for pid=13479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.538509][ T31] audit: type=1400 audit(1792187300.622:1012): avc: denied { write } for pid=13508 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.587963][ T30] microsoft 0003:045E:07DA.0011: unknown main item tag 0x5 [ 844.587998][ T30] microsoft 0003:045E:07DA.0011: item fetching failed at offset 26/34 [ 844.588578][ T30] microsoft 0003:045E:07DA.0011: parse failed [ 844.588669][ T30] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22 [ 845.434044][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.434655][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.469752][T13517] x_tables: duplicate underflow at hook 1 [ 846.797884][T13532] overlayfs: missing 'lowerdir' [ 846.975893][ T8073] net_ratelimit: 84 callbacks suppressed [ 847.591045][ T5729] usb 3-1: USB disconnect, device number 74 [ 847.949290][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1820'. [ 847.949311][T13554] nbd: must specify a size in bytes for the device [ 848.026632][ T5729] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 848.182007][ T31] audit: type=1400 audit(1792187304.026:1013): avc: denied { write } for pid=13525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.254188][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 848.256925][ T5729] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 848.263105][ T5729] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 848.263139][ T5729] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 848.263165][ T5729] usb 3-1: config 0 interface 0 has no altsetting 0 [ 848.263211][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.277583][ T5729] usb 3-1: config 0 descriptor?? [ 848.490303][ T31] audit: type=1400 audit(1792187304.298:1014): avc: denied { remount } for pid=13560 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 848.563640][ T31] audit: type=1400 audit(1792187304.391:1015): avc: denied { write } for pid=13559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.340203][ T5729] usbhid 3-1:0.0: can't add hid device: -71 [ 849.340333][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 849.404780][ T5729] usb 3-1: USB disconnect, device number 75 [ 851.071340][ T31] audit: type=1400 audit(1792187306.730:1016): avc: denied { write } for pid=13573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.412995][ T8081] net_ratelimit: 76 callbacks suppressed [ 852.448247][ T31] audit: type=1400 audit(1792187308.021:1017): avc: denied { write } for pid=13604 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.463401][T13607] overlayfs: missing 'lowerdir' [ 852.620690][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1832'. [ 852.620712][T13617] nbd: must specify a size in bytes for the device [ 852.780806][T13609] syzkaller0: entered promiscuous mode [ 852.780821][T13609] syzkaller0: entered allmulticast mode [ 853.539680][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1835'. [ 853.539731][T13635] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1835'. [ 857.133064][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1843'. [ 857.133081][T13661] nbd: must specify a size in bytes for the device [ 857.634713][ T31] audit: type=1400 audit(1792187312.875:1018): avc: denied { write } for pid=13637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.759760][ T31] audit: type=1400 audit(1792187312.988:1019): avc: denied { write } for pid=13675 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.840518][ C0] net_ratelimit: 69 callbacks suppressed [ 857.857589][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 857.857637][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.542493][T13685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1848'. [ 858.728228][T13685] bond_slave_0: entered promiscuous mode [ 858.728239][T13685] bond_slave_0: entered allmulticast mode [ 860.020104][T13700] x_tables: duplicate underflow at hook 1 [ 860.276691][ T31] audit: type=1400 audit(1792187315.345:1020): avc: denied { write } for pid=13681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.519306][ T31] audit: type=1400 audit(1792187315.569:1021): avc: denied { write } for pid=13714 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.357205][T13728] siw: device registration error -23 [ 863.495171][ C0] net_ratelimit: 81 callbacks suppressed [ 863.724801][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1863'. [ 863.730711][T13757] ipvlan2: entered allmulticast mode [ 863.730720][T13757] syz_tun: entered allmulticast mode [ 866.132651][ T31] audit: type=1400 audit(1792187320.817:1022): avc: denied { write } for pid=13730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.498238][ T31] audit: type=1400 audit(1792187321.163:1023): avc: denied { write } for pid=13788 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.873331][ C0] net_ratelimit: 75 callbacks suppressed [ 869.000195][T13805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.493937][ T31] audit: type=1400 audit(1792187327.711:1024): avc: denied { write } for pid=13812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.102518][ T31] audit: type=1400 audit(1792187328.272:1025): avc: denied { write } for pid=13844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.261648][ C0] net_ratelimit: 66 callbacks suppressed [ 875.405465][T13692] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 876.197089][T13692] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 876.200110][T13692] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 876.200132][T13692] usb 3-1: config 0 has no interface number 0 [ 876.200167][T13692] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 876.200191][T13692] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 876.200246][T13692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.203996][T13692] usb 3-1: config 0 descriptor?? [ 876.208521][T13859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 876.275206][T13692] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 877.557665][ T31] audit: type=1400 audit(1792187331.031:1026): avc: denied { read append } for pid=13858 comm="syz.2.1886" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 877.557713][ T31] audit: type=1400 audit(1792187331.031:1027): avc: denied { open } for pid=13858 comm="syz.2.1886" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 877.581503][T13877] overlayfs: missing 'lowerdir' [ 877.624048][T13859] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 877.627629][ T31] audit: type=1400 audit(1792187331.574:1028): avc: denied { ioctl } for pid=13858 comm="syz.2.1886" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 877.627672][ T31] audit: type=1400 audit(1792187331.574:1029): avc: denied { ioctl } for pid=13858 comm="syz.2.1886" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 877.654031][ T5729] usb 3-1: USB disconnect, device number 76 [ 878.608065][ T31] audit: type=1400 audit(1792187332.491:1030): avc: denied { write } for pid=13876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.719867][ T31] audit: type=1400 audit(1792187332.603:1031): avc: denied { write } for pid=13897 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.567260][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1890'. [ 879.573128][T13901] ipvlan2: entered allmulticast mode [ 879.651463][ C0] net_ratelimit: 76 callbacks suppressed [ 880.994571][ T31] audit: type=1400 audit(1792187334.717:1032): avc: denied { write } for pid=13899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.461204][ T31] audit: type=1400 audit(1792187335.157:1033): avc: denied { write } for pid=13929 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.034155][ T5701] net_ratelimit: 73 callbacks suppressed [ 885.157523][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 886.032055][ T31] audit: type=1400 audit(1792187339.441:1034): avc: denied { write } for pid=13941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.691465][ T31] audit: type=1400 audit(1792187340.049:1035): avc: denied { write } for pid=13985 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.049583][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 888.110430][T14004] ipvlan2: entered allmulticast mode [ 888.110462][T14004] syz_tun: entered allmulticast mode [ 890.425646][ C0] net_ratelimit: 78 callbacks suppressed [ 891.709002][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1920'. [ 891.714890][T14033] ipvlan2: entered allmulticast mode [ 892.366227][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1917'. [ 892.393976][ T968] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 893.175840][ T968] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 893.176951][ T968] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 893.176978][ T968] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 893.177001][ T968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 893.179244][ T968] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 893.179265][ T968] usb 3-1: Product: syz [ 893.179280][ T968] usb 3-1: Manufacturer: syz [ 893.179295][ T968] usb 3-1: SerialNumber: syz [ 893.207643][ T968] usb 3-1: config 0 descriptor?? [ 893.266061][ T968] usb 3-1: selecting invalid altsetting 0 [ 893.925450][ T10] usb 3-1: USB disconnect, device number 77 [ 895.692903][ T31] audit: type=1400 audit(1792187348.467:1036): avc: denied { write } for pid=14065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.803998][T14089] net_ratelimit: 72 callbacks suppressed [ 895.804031][T14089] netlink: zone id is out of range [ 895.804137][T14089] netlink: zone id is out of range [ 895.804146][T14089] netlink: zone id is out of range [ 895.804154][T14089] netlink: zone id is out of range [ 895.804162][T14089] netlink: zone id is out of range [ 895.804176][T14089] netlink: zone id is out of range [ 895.804187][T14089] netlink: zone id is out of range [ 895.804194][T14089] netlink: zone id is out of range [ 895.804202][T14089] netlink: zone id is out of range [ 895.804210][T14089] netlink: zone id is out of range [ 895.866546][ T31] audit: type=1400 audit(1792187348.636:1037): avc: denied { write } for pid=14088 comm="syz.2.1928" name="c.1" dev="configfs" ino=33479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 895.946272][ T31] audit: type=1400 audit(1792187348.710:1038): avc: denied { write } for pid=14092 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.638498][T13692] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 896.799800][T13692] usb 3-1: Using ep0 maxpacket: 16 [ 896.803705][T13692] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 896.806796][T13692] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 896.806818][T13692] usb 3-1: config 0 has no interface number 0 [ 896.806852][T13692] usb 3-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 896.806875][T13692] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 896.910926][T13692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.910953][T13692] usb 3-1: Product: syz [ 896.910968][T13692] usb 3-1: Manufacturer: syz [ 896.910984][T13692] usb 3-1: SerialNumber: syz [ 896.927995][T13692] usb 3-1: config 0 descriptor?? [ 896.959384][T13692] usbtest 3-1:0.99: usb test device [ 896.959400][T13692] usbtest 3-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 897.155416][ T5704] usb 3-1: USB disconnect, device number 78 [ 897.263125][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1934'. [ 898.179967][ T31] audit: type=1400 audit(1792187350.796:1039): avc: denied { write } for pid=14128 comm="syz.2.1938" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 899.627343][T14142] bond0: option slaves: interface -b does not exist! [ 899.641962][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1942'. [ 901.201880][ C0] net_ratelimit: 104 callbacks suppressed [ 904.953820][ T31] audit: type=1400 audit(1792187357.101:1040): avc: denied { write } for pid=14164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.008335][ T31] audit: type=1400 audit(1792187357.195:1041): avc: denied { write } for pid=14197 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.465851][ T31] audit: type=1400 audit(1792187358.551:1042): avc: denied { write } for pid=14204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.469742][T14220] overlayfs: missing 'workdir' [ 906.590197][ C0] net_ratelimit: 90 callbacks suppressed [ 906.610562][ T31] audit: type=1400 audit(1792187358.682:1043): avc: denied { write } for pid=14226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.219840][ T968] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 909.382938][ T968] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 909.383997][ T968] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.384019][ T968] usb 3-1: config 0 has no interface number 0 [ 909.387823][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.387843][ T968] usb 3-1: Product: syz [ 909.387858][ T968] usb 3-1: Manufacturer: syz [ 909.387872][ T968] usb 3-1: SerialNumber: syz [ 909.445900][ T968] usb 3-1: config 0 descriptor?? [ 909.452187][ T968] usb 3-1: selecting invalid altsetting 1 [ 909.452329][ T968] dvb_ttusb_budget: ttusb_init_controller: error [ 909.452344][ T968] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 909.732940][ T968] DVB: Unable to find symbol stv0299_attach() [ 910.011905][ T968] DVB: Unable to find symbol tda8083_attach() [ 910.011912][ T968] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 910.488473][ T968] usb 3-1: USB disconnect, device number 79 [ 910.710131][T14261] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 911.196077][ T31] audit: type=1400 audit(1792187362.966:1044): avc: denied { append } for pid=14251 comm="syz.6.1963" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 911.988632][ C0] net_ratelimit: 86 callbacks suppressed [ 912.094066][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 912.100067][T14271] ipvlan2: entered allmulticast mode [ 912.188486][ T31] audit: type=1400 audit(1792187363.901:1045): avc: denied { write } for pid=14251 comm="syz.6.1963" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 912.598117][T14280] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 913.410432][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 913.581355][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 913.582058][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 913.583072][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 913.630059][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.630079][ T9] usb 3-1: Product: syz [ 913.630094][ T9] usb 3-1: Manufacturer: syz [ 913.630109][ T9] usb 3-1: SerialNumber: syz [ 913.632982][ T9] usb 3-1: config 0 descriptor?? [ 913.634310][T14275] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 914.204536][ T9] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 916.535077][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 916.535226][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 916.537235][ T5704] usb 3-1: USB disconnect, device number 80 [ 916.540196][ T5704] mcba_usb 3-1:0.0 can0: device disconnected [ 917.400142][ T1466] net_ratelimit: 68 callbacks suppressed [ 918.058313][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 918.116955][T14311] ipvlan2: entered allmulticast mode [ 918.736712][T14315] overlayfs: missing 'workdir' [ 920.391572][ T31] audit: type=1400 audit(1792187371.572:1046): avc: denied { write } for pid=14316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.489214][ T31] audit: type=1400 audit(1792187372.488:1047): avc: denied { write } for pid=14348 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.493853][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1986'. [ 922.850109][ C0] net_ratelimit: 61 callbacks suppressed [ 923.397958][ T10] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 923.525810][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.525853][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 923.593495][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 923.596286][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.596312][ T10] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 923.607023][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.607048][ T10] usb 3-1: Product: syz [ 923.607063][ T10] usb 3-1: Manufacturer: syz [ 923.607076][ T10] usb 3-1: SerialNumber: syz [ 923.665216][ T10] usb 3-1: selecting invalid altsetting 1 [ 923.665234][ T10] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 923.665243][ T10] usb 3-1: unable to init card! (ret=-5) [ 923.665568][ T10] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 924.078958][ T31] audit: type=1400 audit(1792187375.023:1048): avc: denied { write } for pid=14361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 924.434471][T14399] FAULT_INJECTION: forcing a failure. [ 924.434471][T14399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.434493][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.1.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.434509][T14399] Tainted: [L]=SOFTLOCKUP [ 924.434513][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 924.434521][T14399] Call Trace: [ 924.434526][T14399] [ 924.434531][T14399] dump_stack_lvl+0x100/0x190 [ 924.434553][T14399] should_fail_ex.cold+0x5/0xa [ 924.434571][T14399] _copy_from_user+0x2e/0xd0 [ 924.434589][T14399] io_uring_setup+0xc0/0x160 [ 924.434607][T14399] ? lock_acquire+0x1d1/0x380 [ 924.434621][T14399] ? avc_has_perm_noaudit+0x56/0x470 [ 924.434634][T14399] ? __pfx_io_uring_setup+0x10/0x10 [ 924.434650][T14399] ? find_held_lock+0x2b/0x80 [ 924.434667][T14399] ? avc_has_perm_noaudit+0x11e/0x470 [ 924.434678][T14399] ? avc_has_perm_noaudit+0x11e/0x470 [ 924.434701][T14399] ? ksys_write+0x1ac/0x250 [ 924.434716][T14399] ? __pfx_ksys_write+0x10/0x10 [ 924.434733][T14399] __x64_sys_io_uring_setup+0xc2/0x170 [ 924.434751][T14399] do_syscall_64+0x123/0x790 [ 924.434769][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.434781][T14399] RIP: 0033:0x7fd943d9e559 [ 924.434791][T14399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.434802][T14399] RSP: 002b:00007fd944d13ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 924.434814][T14399] RAX: ffffffffffffffda RBX: 00002000000007c8 RCX: 00007fd943d9e559 [ 924.434822][T14399] RDX: 0000200000000848 RSI: 00002000000007c8 RDI: 00000000000003c9 [ 924.434830][T14399] RBP: 00002000000007c0 R08: 0000000000000000 R09: 0000000000000000 [ 924.434837][T14399] R10: 0000200000000850 R11: 0000000000000206 R12: 0000200000000848 [ 924.434844][T14399] R13: 0000200000000850 R14: 00007fd944d13fd8 R15: 0000000000000000 [ 924.434860][T14399] [ 924.440287][ T31] audit: type=1400 audit(1792187375.360:1049): avc: denied { write } for pid=14397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.257554][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1988'. [ 926.327025][ T10] usb 3-1: USB disconnect, device number 81 [ 928.195464][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 928.313558][ T8084] net_ratelimit: 52 callbacks suppressed [ 928.379301][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 928.380142][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 928.381297][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.381323][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 928.381379][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.391094][ T10] usb 3-1: config 0 descriptor?? [ 928.833250][T14433] 9p: Bad value for 'rfdno' [ 928.842173][ T31] audit: type=1400 audit(1792187379.466:1050): avc: denied { mounton } for pid=14432 comm="syz.6.1991" path="/367/proc/sys/kernel/hostname" dev="proc" ino=37478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_kernel_t tclass=file permissive=1 [ 929.150703][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x5 [ 929.151106][ T10] microsoft 0003:045E:07DA.0012: item fetching failed at offset 26/34 [ 929.187644][ T10] microsoft 0003:045E:07DA.0012: parse failed [ 929.189148][ T10] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 929.310259][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.311546][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.313380][T14423] x_tables: duplicate underflow at hook 1 [ 931.384905][T13692] usb 3-1: USB disconnect, device number 82 [ 931.467467][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2004'. [ 933.382431][T14486] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2009'. [ 933.701091][ C1] net_ratelimit: 67 callbacks suppressed [ 935.275345][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2018'. [ 935.337095][T13692] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 935.499114][T13692] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 935.501164][T13692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.532010][T13692] usb 3-1: config 0 descriptor?? [ 935.586632][ T31] audit: type=1400 audit(1792187385.790:1051): avc: denied { watch_reads } for pid=14538 comm="syz.6.2020" path="/373" dev="tmpfs" ino=2162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 936.847851][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 936.854699][T14543] ipvlan2: entered allmulticast mode [ 938.286709][T13692] usb 3-1: Cannot read MAC address [ 938.286904][T13692] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 938.340323][T13692] usb 3-1: USB disconnect, device number 83 [ 939.194870][ T8084] net_ratelimit: 42 callbacks suppressed [ 942.605093][T14583] kAFS: Can only specify source 'none' with -o dyn [ 943.532062][T14587] overlayfs: failed to clone upperpath [ 943.677844][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2030'. [ 944.168337][T14596] fuse: Bad value for 'fd' [ 944.563372][ T8084] net_ratelimit: 77 callbacks suppressed [ 945.418169][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.777256][T14604] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 945.891764][T14609] FAULT_INJECTION: forcing a failure. [ 945.891764][T14609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.891797][T14609] CPU: 0 UID: 0 PID: 14609 Comm: syz.6.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.891826][T14609] Tainted: [L]=SOFTLOCKUP [ 945.891835][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 945.891848][T14609] Call Trace: [ 945.891856][T14609] [ 945.891866][T14609] dump_stack_lvl+0x100/0x190 [ 945.891903][T14609] should_fail_ex.cold+0x5/0xa [ 945.891934][T14609] _copy_to_user+0x32/0xd0 [ 945.891966][T14609] put_timespec64+0xb5/0x130 [ 945.891993][T14609] ? __pfx_put_timespec64+0x10/0x10 [ 945.892016][T14609] ? lockdep_hardirqs_on+0x7d/0x110 [ 945.892046][T14609] ? ktime_get_ts64+0x318/0x420 [ 945.892072][T14609] ? ktime_get_ts64+0x257/0x420 [ 945.892097][T14609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 945.892126][T14609] poll_select_finish+0x54b/0x670 [ 945.892156][T14609] ? __pfx_poll_select_finish+0x10/0x10 [ 945.892189][T14609] ? __pfx_set_user_sigmask+0x10/0x10 [ 945.892212][T14609] ? ktime_get_ts64+0x318/0x420 [ 945.892237][T14609] ? ktime_get_ts64+0x257/0x420 [ 945.892266][T14609] do_pselect.constprop.0+0x24c/0x270 [ 945.892299][T14609] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 945.892338][T14609] ? __x64_sys_futex+0x358/0x4d0 [ 945.892375][T14609] ? xfd_validate_state+0x129/0x190 [ 945.892406][T14609] __x64_sys_pselect6+0x149/0x1c0 [ 945.892441][T14609] do_syscall_64+0x123/0x790 [ 945.892473][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.892495][T14609] RIP: 0033:0x7fe305d9e559 [ 945.892514][T14609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.892533][T14609] RSP: 002b:00007fe306bba028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 945.892554][T14609] RAX: ffffffffffffffda RBX: 00007fe306026090 RCX: 00007fe305d9e559 [ 945.892570][T14609] RDX: 0000200000000b40 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.892583][T14609] RBP: 00007fe305e358b0 R08: 0000200000000b80 R09: 0000000000000000 [ 945.892597][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.892610][T14609] R13: 00007fe306026128 R14: 00007fe306026090 R15: 00007ffde8fa3e78 [ 945.892640][T14609] [ 946.468507][T14620] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 946.509719][ T31] audit: type=1400 audit(1792187396.014:1052): avc: denied { relabelto } for pid=14616 comm="syz.1.2046" name="342" dev="tmpfs" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 946.509765][ T31] audit: type=1400 audit(1792187396.014:1053): avc: denied { associate } for pid=14616 comm="syz.1.2046" name="342" dev="tmpfs" ino=1975 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 946.718136][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2046'. [ 946.893411][ T5704] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 947.024969][ T31] audit: type=1400 audit(1792187396.491:1054): avc: denied { write } for pid=14616 comm="syz.1.2046" name="342" dev="tmpfs" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 947.027701][ T31] audit: type=1400 audit(1792187396.491:1055): avc: denied { add_name } for pid=14616 comm="syz.1.2046" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 947.028477][ T31] audit: type=1400 audit(1792187396.491:1056): avc: denied { create } for pid=14616 comm="syz.1.2046" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 947.028763][ T31] audit: type=1400 audit(1792187396.491:1057): avc: denied { associate } for pid=14616 comm="syz.1.2046" name="memory.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 947.062364][ T5704] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 947.063612][ T5704] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 947.063654][ T5704] usb 3-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 947.063676][ T5704] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 947.066350][ T5704] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 947.066398][ T5704] usb 3-1: config 2 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 947.066420][ T5704] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 947.087705][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.087725][ T5704] usb 3-1: Product: syz [ 947.087740][ T5704] usb 3-1: Manufacturer: syz [ 947.087755][ T5704] usb 3-1: SerialNumber: syz [ 947.150768][ T31] audit: type=1400 audit(1792187396.491:1058): avc: denied { append open } for pid=14616 comm="syz.1.2046" path="/342/memory.stat" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 947.184212][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2049'. [ 947.283161][ T5704] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 947.283400][ T5704] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 947.347055][ T31] audit: type=1400 audit(1792187396.790:1059): avc: denied { ioctl } for pid=14616 comm="syz.1.2046" path="/342/memory.stat" dev="tmpfs" ino=1980 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 948.281772][T14064] usb 3-1: USB disconnect, device number 84 [ 948.519399][T14636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.539498][T14636] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2052'. [ 949.726499][ T31] audit: type=1400 audit(1792187399.007:1060): avc: denied { write } for pid=7153 comm="syz-executor" name="342" dev="tmpfs" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 949.726547][ T31] audit: type=1400 audit(1792187399.007:1061): avc: denied { remove_name } for pid=7153 comm="syz-executor" name="memory.stat" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 950.036670][ C0] net_ratelimit: 62 callbacks suppressed [ 950.182787][T14663] ip_tables: iptables: counters copy to user failed while replacing table [ 950.667847][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2062'. [ 950.918540][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 951.570217][T14688] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 952.439469][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 952.439483][ T31] audit: type=1400 audit(1792187401.551:1068): avc: denied { create } for pid=14692 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 953.246472][T14698] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2069'. [ 953.249952][T14698] FAULT_INJECTION: forcing a failure. [ 953.249952][T14698] name failslab, interval 1, probability 0, space 0, times 0 [ 953.249979][T14698] CPU: 0 UID: 0 PID: 14698 Comm: syz.7.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.249996][T14698] Tainted: [L]=SOFTLOCKUP [ 953.250000][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 953.250008][T14698] Call Trace: [ 953.250012][T14698] [ 953.250018][T14698] dump_stack_lvl+0x100/0x190 [ 953.250041][T14698] should_fail_ex.cold+0x5/0xa [ 953.250065][T14698] should_failslab+0xc2/0x120 [ 953.250084][T14698] kmem_cache_alloc_noprof+0x92/0x6a0 [ 953.250101][T14698] ? do_getname+0x35/0x390 [ 953.250117][T14698] do_getname+0x35/0x390 [ 953.250130][T14698] do_sys_openat2+0xc7/0x1e0 [ 953.250143][T14698] ? __pfx_do_sys_openat2+0x10/0x10 [ 953.250153][T14698] ? kasan_quarantine_put+0x104/0x240 [ 953.250174][T14698] __x64_sys_open+0xfe/0x1d0 [ 953.250185][T14698] ? __pfx___x64_sys_open+0x10/0x10 [ 953.250202][T14698] do_syscall_64+0x123/0x790 [ 953.250221][T14698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.250233][T14698] RIP: 0033:0x7f167199e559 [ 953.250245][T14698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.250256][T14698] RSP: 002b:00007f1672803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 953.250268][T14698] RAX: ffffffffffffffda RBX: 00007f1671c26090 RCX: 00007f167199e559 [ 953.250276][T14698] RDX: 00000000000000b3 RSI: 0000000000290100 RDI: 00002000000000c0 [ 953.250283][T14698] RBP: 00007f1671a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 953.250290][T14698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.250297][T14698] R13: 00007f1671c26128 R14: 00007f1671c26090 R15: 00007ffc07b06888 [ 953.250313][T14698] [ 953.254593][T14698] ebt_limit: overflow, try lower: 0/0 [ 954.791132][T14705] FAULT_INJECTION: forcing a failure. [ 954.791132][T14705] name failslab, interval 1, probability 0, space 0, times 0 [ 954.791156][T14705] CPU: 1 UID: 0 PID: 14705 Comm: syz.6.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.791174][T14705] Tainted: [L]=SOFTLOCKUP [ 954.791179][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 954.791187][T14705] Call Trace: [ 954.791192][T14705] [ 954.791197][T14705] dump_stack_lvl+0x100/0x190 [ 954.791221][T14705] should_fail_ex.cold+0x5/0xa [ 954.791240][T14705] should_failslab+0xc2/0x120 [ 954.791258][T14705] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 954.791274][T14705] ? find_held_lock+0x2b/0x80 [ 954.791292][T14705] ? alloc_inode+0x183/0x250 [ 954.791309][T14705] alloc_inode+0x183/0x250 [ 954.791323][T14705] path_from_stashed+0x25b/0x760 [ 954.791334][T14705] ? do_raw_spin_unlock+0x145/0x1e0 [ 954.791353][T14705] ns_get_path+0x60/0x80 [ 954.791365][T14705] proc_ns_get_link+0x260/0x2e0 [ 954.791378][T14705] ? __pfx_proc_ns_get_link+0x10/0x10 [ 954.791395][T14705] pick_link+0xd17/0x13c0 [ 954.791408][T14705] ? rcu_is_watching+0x13/0xc0 [ 954.791426][T14705] ? __pfx_proc_ns_get_link+0x10/0x10 [ 954.791440][T14705] step_into_slowpath+0x9b3/0x1150 [ 954.791455][T14705] ? proc_ns_dir_lookup+0x1da/0x390 [ 954.791473][T14705] ? __pfx_step_into_slowpath+0x10/0x10 [ 954.791495][T14705] path_openat+0xfab/0x2440 [ 954.791515][T14705] ? __pfx_path_openat+0x10/0x10 [ 954.791536][T14705] do_file_open+0x20e/0x430 [ 954.791554][T14705] ? __pfx_do_file_open+0x10/0x10 [ 954.791582][T14705] ? _raw_spin_unlock+0x28/0x50 [ 954.791597][T14705] ? alloc_fd+0x471/0x7a0 [ 954.791619][T14705] do_sys_openat2+0x10f/0x1e0 [ 954.791631][T14705] ? __pfx_do_sys_openat2+0x10/0x10 [ 954.791644][T14705] ? __do_sys_file_getattr+0x30f/0x530 [ 954.791667][T14705] __x64_sys_openat+0x12d/0x210 [ 954.791679][T14705] ? __pfx___x64_sys_openat+0x10/0x10 [ 954.791697][T14705] do_syscall_64+0x123/0x790 [ 954.791715][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.791727][T14705] RIP: 0033:0x7fe305d5ed8e [ 954.791740][T14705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 954.791751][T14705] RSP: 002b:00007fe306bdaf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 954.791763][T14705] RAX: ffffffffffffffda RBX: 00007fe306bdb6c0 RCX: 00007fe305d5ed8e [ 954.791771][T14705] RDX: 0000000000000000 RSI: 00007fe305e34fde RDI: ffffffffffffff9c [ 954.791779][T14705] RBP: 00007fe305e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 954.791786][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.791793][T14705] R13: 00007fe306026038 R14: 00007fe306025fa0 R15: 00007ffde8fa3e78 [ 954.791809][T14705] [ 954.849588][T14707] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2075'. [ 955.510077][ C1] net_ratelimit: 63 callbacks suppressed [ 958.249203][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2081'. [ 958.249285][T14732] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2081'. [ 958.915403][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 959.880372][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2087'. [ 961.081670][ T5699] net_ratelimit: 67 callbacks suppressed [ 961.144922][T14064] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 961.188970][T14766] /dev/nullb0: Can't lookup blockdev [ 961.400533][T14064] usb 3-1: Using ep0 maxpacket: 32 [ 961.405893][T14064] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 961.410216][T14064] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 961.410249][T14064] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 961.410266][T14064] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 961.410290][T14064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 961.410302][T14064] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 961.410314][T14064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 961.410325][T14064] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 961.410337][T14064] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 961.410371][T14064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.533609][T14064] usb 3-1: config 0 descriptor?? [ 962.445737][T14760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.464740][T14760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.496775][T14760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.498601][T14760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.557504][T14064] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 962.609159][T14064] usb 3-1: USB disconnect, device number 85 [ 962.663718][T14064] usblp0: removed [ 964.060967][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2097'. [ 965.051006][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2101'. [ 966.163910][ T31] audit: type=1400 audit(1792187414.394:1069): avc: denied { create } for pid=14806 comm="syz.2.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 966.202689][ T31] audit: type=1400 audit(1792187414.422:1070): avc: denied { setopt } for pid=14806 comm="syz.2.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 966.884758][ C0] net_ratelimit: 65 callbacks suppressed [ 970.197350][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2095'. [ 970.203354][T14835] ipvlan2: entered allmulticast mode [ 970.277366][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2110'. [ 970.937209][ T5704] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 971.719424][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 971.738567][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 971.738584][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 971.740721][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 971.740732][ T5704] usb 3-1: SerialNumber: syz [ 971.780614][T14834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.029494][T14853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2109'. [ 972.165256][T14834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 972.335753][T14859] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2114'. [ 972.694211][T14864] net_ratelimit: 81 callbacks suppressed [ 972.733073][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 972.733101][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 972.742653][ T5704] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 972.796187][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 972.796206][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 972.870516][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 972.870550][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 972.909739][T14868] ip_tables: iptables: counters copy to user failed while replacing table [ 973.062433][T14873] ip_tables: iptables: counters copy to user failed while replacing table [ 973.129224][T13692] usb 3-1: USB disconnect, device number 86 [ 973.154426][T13692] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 973.208328][T14876] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 973.872022][T14890] x_tables: duplicate underflow at hook 1 [ 974.344856][ T31] audit: type=1400 audit(1792187422.036:1071): avc: denied { write } for pid=14881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.531079][ T31] audit: type=1400 audit(1792187424.094:1072): avc: denied { write } for pid=14902 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.567250][T14907] FAULT_INJECTION: forcing a failure. [ 976.567250][T14907] name failslab, interval 1, probability 0, space 0, times 0 [ 976.567279][T14907] CPU: 1 UID: 0 PID: 14907 Comm: syz.2.2123 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.567304][T14907] Tainted: [L]=SOFTLOCKUP [ 976.567312][T14907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.567326][T14907] Call Trace: [ 976.567334][T14907] [ 976.567342][T14907] dump_stack_lvl+0x100/0x190 [ 976.567376][T14907] should_fail_ex.cold+0x5/0xa [ 976.567405][T14907] should_failslab+0xc2/0x120 [ 976.567431][T14907] __kmalloc_cache_noprof+0x91/0x6d0 [ 976.567444][T14907] ? inode_doinit_with_dentry+0x70b/0x1340 [ 976.567461][T14907] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 976.567481][T14907] inode_doinit_with_dentry+0x7b1/0x1340 [ 976.567500][T14907] ? inode_set_ctime_current+0x283/0x850 [ 976.567512][T14907] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 976.567529][T14907] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 976.567540][T14907] ? new_inode+0x15a/0x1c0 [ 976.567557][T14907] selinux_d_instantiate+0x26/0x40 [ 976.567574][T14907] security_d_instantiate+0x14c/0x1b0 [ 976.567587][T14907] d_make_persistent+0x64/0x180 [ 976.567617][T14907] __debugfs_create_file+0x261/0x500 [ 976.567634][T14907] debugfs_create_file_full+0x41/0x60 [ 976.567650][T14907] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 976.567664][T14907] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 976.567676][T14907] ? __pfx___schedule+0x10/0x10 [ 976.567705][T14907] ? alloc_netdev_mqs+0x2a3/0x15c0 [ 976.567720][T14907] ? __pfx_tun_setup+0x10/0x10 [ 976.567736][T14907] alloc_netdev_mqs+0x314/0x15c0 [ 976.567747][T14907] ? security_tun_dev_create+0x2f/0x1c0 [ 976.567769][T14907] __tun_chr_ioctl+0x197b/0x4880 [ 976.567786][T14907] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 976.567799][T14907] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 976.567820][T14907] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 976.567836][T14907] ? __fget_files+0x34/0x3d0 [ 976.567860][T14907] ? selinux_file_ioctl+0x13b/0x290 [ 976.567875][T14907] ? selinux_file_ioctl+0xb6/0x290 [ 976.567893][T14907] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 976.567911][T14907] __x64_sys_ioctl+0x18e/0x210 [ 976.567926][T14907] do_syscall_64+0x123/0x790 [ 976.567945][T14907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.567958][T14907] RIP: 0033:0x7f8944f9e559 [ 976.567969][T14907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.567981][T14907] RSP: 002b:00007f8945df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.567992][T14907] RAX: ffffffffffffffda RBX: 00007f8945225fa0 RCX: 00007f8944f9e559 [ 976.568000][T14907] RDX: 0000200000000500 RSI: 00000000400454ca RDI: 0000000000000004 [ 976.568007][T14907] RBP: 00007f8945df5090 R08: 0000000000000000 R09: 0000000000000000 [ 976.568014][T14907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.568021][T14907] R13: 00007f8945226038 R14: 00007f8945225fa0 R15: 00007ffce57ff008 [ 976.568074][T14907] [ 977.053293][T14926] __nla_validate_parse: 1 callbacks suppressed [ 977.053306][T14926] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2127'. [ 978.145776][ C0] net_ratelimit: 90 callbacks suppressed [ 978.153020][T14954] netlink: zone id is out of range [ 978.153031][T14954] netlink: zone id is out of range [ 978.153040][T14954] netlink: zone id is out of range [ 978.153047][T14954] netlink: zone id is out of range [ 978.153055][T14954] netlink: zone id is out of range [ 978.153063][T14954] netlink: zone id is out of range [ 978.153071][T14954] netlink: zone id is out of range [ 978.153078][T14954] netlink: zone id is out of range [ 978.153086][T14954] netlink: zone id is out of range [ 978.221817][ T31] audit: type=1400 audit(1792187425.675:1073): avc: denied { write } for pid=14932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.767826][ T31] audit: type=1400 audit(1792187426.180:1074): avc: denied { write } for pid=14965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.432284][ T5704] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 979.631798][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 979.632497][ T5704] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 979.637193][ T5704] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 979.637212][ T5704] usb 3-1: config 0 has no interface number 0 [ 979.637235][ T5704] usb 3-1: config 0 interface 184 has no altsetting 0 [ 979.761618][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.761639][ T5704] usb 3-1: Product: syz [ 979.761655][ T5704] usb 3-1: Manufacturer: syz [ 979.761670][ T5704] usb 3-1: SerialNumber: syz [ 979.775316][ T5704] usb 3-1: config 0 descriptor?? [ 980.507294][ T5704] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 980.507321][ T5704] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 981.832418][ T5704] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 981.832444][ T5704] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 981.832466][ T5704] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 981.832695][ T5704] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 981.887481][ T5704] usb 3-1: USB disconnect, device number 87 [ 982.494127][T14996] rxe_eth0 speed is unknown, defaulting to 1000 [ 983.979902][ T5704] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 984.160826][ C1] net_ratelimit: 150 callbacks suppressed [ 984.760462][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 984.776056][ T5704] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 984.854871][ T5704] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 984.854884][ T5704] usb 3-1: config 0 has no interface number 0 [ 984.854906][ T5704] usb 3-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 984.854924][ T5704] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 984.864346][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.864367][ T5704] usb 3-1: Product: syz [ 984.864383][ T5704] usb 3-1: Manufacturer: syz [ 984.864398][ T5704] usb 3-1: SerialNumber: syz [ 984.946967][ T5704] usb 3-1: config 0 descriptor?? [ 984.980303][ T5704] usbtest 3-1:0.99: usb test device [ 984.980312][ T5704] usbtest 3-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 985.226458][ T25] usb 3-1: USB disconnect, device number 88 [ 988.140212][ T31] audit: type=1400 audit(1792187434.945:1075): avc: denied { mounton } for pid=15048 comm="syz.6.2161" path="/401/sys_sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 988.250912][ T31] audit: type=1400 audit(1792187435.048:1076): avc: denied { connect } for pid=15048 comm="syz.6.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 989.216208][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.216266][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.976474][ C1] net_ratelimit: 56 callbacks suppressed [ 990.751611][T15136] FAULT_INJECTION: forcing a failure. [ 990.751611][T15136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.751639][T15136] CPU: 1 UID: 0 PID: 15136 Comm: syz.2.2175 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.751668][T15136] Tainted: [L]=SOFTLOCKUP [ 990.751676][T15136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 990.751689][T15136] Call Trace: [ 990.751696][T15136] [ 990.751705][T15136] dump_stack_lvl+0x100/0x190 [ 990.751739][T15136] should_fail_ex.cold+0x5/0xa [ 990.751769][T15136] _copy_from_user+0x2e/0xd0 [ 990.751799][T15136] raw_ioctl_init+0xa8/0x850 [ 990.751829][T15136] ? __pfx_raw_ioctl_init+0x10/0x10 [ 990.751855][T15136] ? tomoyo_path_number_perm+0x188/0x580 [ 990.751905][T15136] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 990.751929][T15136] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 990.751961][T15136] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 990.751998][T15136] raw_ioctl+0x138a/0x2b80 [ 990.752031][T15136] ? __pfx_raw_ioctl+0x10/0x10 [ 990.752057][T15136] ? selinux_file_ioctl+0x13b/0x290 [ 990.752082][T15136] ? selinux_file_ioctl+0xb6/0x290 [ 990.752112][T15136] ? __pfx_raw_ioctl+0x10/0x10 [ 990.752139][T15136] __x64_sys_ioctl+0x18e/0x210 [ 990.752166][T15136] do_syscall_64+0x123/0x790 [ 990.752199][T15136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.752220][T15136] RIP: 0033:0x7f8944f9e1eb [ 990.752237][T15136] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 990.752256][T15136] RSP: 002b:00007f8945df2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.752276][T15136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8944f9e1eb [ 990.752290][T15136] RDX: 00007f8945df3fd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 990.752304][T15136] RBP: 00007f8945df3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 990.752317][T15136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8945df2fa0 [ 990.752331][T15136] R13: 0000200000000000 R14: 0000000000000002 R15: 0000000000000000 [ 990.752360][T15136] [ 996.297330][ T31] audit: type=1400 audit(1792187442.569:1077): avc: denied { setopt } for pid=15185 comm="syz.1.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 996.305616][ C1] net_ratelimit: 61 callbacks suppressed [ 997.827507][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2200'. [ 997.833738][T15203] ipvlan2: entered allmulticast mode [ 997.891165][T15204] netlink: 'syz.2.2189': attribute type 1 has an invalid length. [ 997.993601][T15204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.019678][T15210] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 998.083082][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 998.114281][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2205'. [ 998.149494][T15204] bridge2: entered promiscuous mode [ 998.207198][T15204] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 998.207326][T15212] bridge_slave_1: left promiscuous mode [ 998.207622][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.239939][T15212] bridge_slave_0: left allmulticast mode [ 998.239959][T15212] bridge_slave_0: left promiscuous mode [ 998.240146][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.093635][ T31] audit: type=1400 audit(1792187447.058:1078): avc: denied { ioctl } for pid=15253 comm="syz.1.2215" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048701 ioctlcmd=0x7c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1001.534721][ T31] audit: type=1400 audit(1792187447.470:1079): avc: denied { write } for pid=15258 comm="syz.7.2217" name="usb_gadget" dev="configfs" ino=3325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1001.538331][ T31] audit: type=1400 audit(1792187447.479:1080): avc: denied { write } for pid=15258 comm="syz.7.2217" name="functions" dev="configfs" ino=39795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1001.693493][ T8081] net_ratelimit: 74 callbacks suppressed [ 1002.232192][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 1002.239859][T15269] ipvlan2: entered allmulticast mode [ 1002.400529][T13692] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1003.257439][T13692] usb 3-1: Using ep0 maxpacket: 16 [ 1003.262297][T13692] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 1003.281242][T13692] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 1003.281265][T13692] usb 3-1: config 0 has no interface number 0 [ 1003.281301][T13692] usb 3-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1003.281325][T13692] usb 3-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1003.334111][T13692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.334131][T13692] usb 3-1: Product: syz [ 1003.334145][T13692] usb 3-1: Manufacturer: syz [ 1003.334160][T13692] usb 3-1: SerialNumber: syz [ 1003.339890][T13692] usb 3-1: config 0 descriptor?? [ 1003.373215][T13692] usbtest 3-1:0.99: usb test device [ 1003.373230][T13692] usbtest 3-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 1003.652898][ T10] usb 3-1: USB disconnect, device number 89 [ 1005.316435][T15301] /dev/nbd6: Can't lookup blockdev [ 1005.945955][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1005.969581][T15309] ipvlan2: entered allmulticast mode [ 1006.959963][T15324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.960389][T15324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.036157][T15324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.053226][T15324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.218783][T15327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.234164][T15327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.240488][T15327] net_ratelimit: 66 callbacks suppressed [ 1007.268073][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.268186][T15327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.273489][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.273589][T15327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.368111][T15327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.391295][T15327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.609032][T15327] veth1_vlan: left promiscuous mode [ 1007.615560][T15327] veth0_vlan: left promiscuous mode [ 1007.655135][T15327] veth0_vlan: entered promiscuous mode [ 1007.970575][T15327] veth1_vlan: entered promiscuous mode [ 1008.142444][T15352] FAULT_INJECTION: forcing a failure. [ 1008.142444][T15352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.142474][T15352] CPU: 0 UID: 0 PID: 15352 Comm: syz.6.2238 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.142501][T15352] Tainted: [L]=SOFTLOCKUP [ 1008.142509][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1008.142521][T15352] Call Trace: [ 1008.142528][T15352] [ 1008.142537][T15352] dump_stack_lvl+0x100/0x190 [ 1008.142570][T15352] should_fail_ex.cold+0x5/0xa [ 1008.142607][T15352] _copy_from_user+0x2e/0xd0 [ 1008.142636][T15352] sock_ioctl_inout+0x59/0x170 [ 1008.142663][T15352] ipmr_sk_ioctl+0xf1/0x1b0 [ 1008.142687][T15352] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 1008.142708][T15352] ? kfree+0x22b/0x6d0 [ 1008.142727][T15352] ? tomoyo_path_number_perm+0x46d/0x580 [ 1008.142753][T15352] ? security_file_ioctl+0xd3/0x230 [ 1008.142787][T15352] ? lock_acquire+0x1d1/0x380 [ 1008.142810][T15352] ? avc_has_extended_perms+0x201/0x1080 [ 1008.142833][T15352] ? find_held_lock+0x2b/0x80 [ 1008.142864][T15352] sk_ioctl+0x278/0x360 [ 1008.142888][T15352] ? __pfx_sk_ioctl+0x10/0x10 [ 1008.142912][T15352] ? avc_has_extended_perms+0x484/0x1080 [ 1008.142936][T15352] inet_ioctl+0x368/0x3f0 [ 1008.142960][T15352] ? __pfx_inet_ioctl+0x10/0x10 [ 1008.142999][T15352] ? tomoyo_path_number_perm+0x188/0x580 [ 1008.143032][T15352] sock_do_ioctl+0x118/0x280 [ 1008.143057][T15352] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1008.143080][T15352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1008.143110][T15352] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1008.143133][T15352] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1008.143164][T15352] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1008.143198][T15352] sock_ioctl+0x599/0x6b0 [ 1008.143224][T15352] ? __pfx_sock_ioctl+0x10/0x10 [ 1008.143257][T15352] ? selinux_file_ioctl+0x13b/0x290 [ 1008.143282][T15352] ? selinux_file_ioctl+0xb6/0x290 [ 1008.143311][T15352] ? __pfx_sock_ioctl+0x10/0x10 [ 1008.143338][T15352] __x64_sys_ioctl+0x18e/0x210 [ 1008.143364][T15352] do_syscall_64+0x123/0x790 [ 1008.143395][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.143418][T15352] RIP: 0033:0x7fe305d9e559 [ 1008.143435][T15352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.143453][T15352] RSP: 002b:00007fe306bdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.143472][T15352] RAX: ffffffffffffffda RBX: 00007fe306025fa0 RCX: 00007fe305d9e559 [ 1008.143486][T15352] RDX: 0000200000000000 RSI: 00000000000089e1 RDI: 0000000000000003 [ 1008.143498][T15352] RBP: 00007fe306bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.143511][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.143522][T15352] R13: 00007fe306026038 R14: 00007fe306025fa0 R15: 00007ffde8fa3e78 [ 1008.143551][T15352] [ 1008.209847][T15355] block nbd0: server does not support multiple connections per device. [ 1008.262249][T15355] block nbd0: shutting down sockets [ 1008.403566][T15327] veth1_macvtap: left promiscuous mode [ 1008.404984][T15327] veth0_macvtap: left promiscuous mode [ 1008.412296][T15327] veth0_macvtap: entered promiscuous mode [ 1008.415552][T15327] veth1_macvtap: entered promiscuous mode [ 1008.440378][T15327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1008.444055][T15327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.447592][T15327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.452007][T15327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.464539][T15327] bond1: left promiscuous mode [ 1008.467607][T15327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.500581][T15327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1008.508443][T15327] bridge2: left promiscuous mode [ 1010.781706][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1010.955359][ T10] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1010.956509][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.080693][ T31] audit: type=1400 audit(1792187456.412:1081): avc: denied { cmd } for pid=15380 comm="iou-wrk-15381" path="socket:[41026]" dev="sockfs" ino=41026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1012.738071][ C1] net_ratelimit: 228 callbacks suppressed [ 1012.787161][ T4935] sd 0:0:1:0: cmd ffff88802fd9c7d0 CDB: 0x2a [ 1012.787198][ T4935] Added buffer head 464 to ffff888028cb5c00 [ 1012.788503][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 1012.788518][ C0] kcov: kcov_start: t = ffff88805ed94b00, size = 262144, area = ffffc900020e1000 [ 1012.788575][ C0] PN533 RX: 83 0d 00 00 10 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788585][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788595][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788604][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788614][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788625][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788633][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788642][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788650][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788659][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788672][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788680][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788689][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788697][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788706][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788714][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788723][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788731][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788740][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788748][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788757][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788765][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788774][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788783][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788791][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788799][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788808][ C0] PN533 RX: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788817][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788825][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788834][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788843][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788851][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788860][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788868][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788877][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788885][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788894][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788902][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788911][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788919][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788929][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788942][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788957][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788972][ C0] PN533 RX: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.788992][ C0] ================================================================== [ 1012.789002][ C0] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0xbc4/0xc60 [ 1012.789024][ C0] Read of size 1 at addr ffff888036d44c80 by task syz.1.2247/15388 [ 1012.789036][ C0] [ 1012.789046][ C0] CPU: 0 UID: 0 PID: 15388 Comm: syz.1.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.789068][ C0] Tainted: [L]=SOFTLOCKUP [ 1012.789074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1012.789084][ C0] Call Trace: [ 1012.789089][ C0] [ 1012.789096][ C0] dump_stack_lvl+0x100/0x190 [ 1012.789133][ C0] print_report+0x13d/0x4b0 [ 1012.789157][ C0] ? __virt_addr_valid+0x239/0x430 [ 1012.789174][ C0] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1012.789189][ C0] kasan_report+0xdf/0x1c0 [ 1012.789213][ C0] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1012.789230][ C0] hex_dump_to_buffer+0xbc4/0xc60 [ 1012.789248][ C0] print_hex_dump+0x14a/0x1f0 [ 1012.789264][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 1012.789279][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1012.789306][ C0] ? __alloc_skb+0x4e9/0x710 [ 1012.789318][ C0] ? find_held_lock+0x2b/0x80 [ 1012.789342][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1012.789365][ C0] ? kcov_remote_start+0x2e6/0x6d0 [ 1012.789384][ C0] ? kcov_remote_start+0x2e6/0x6d0 [ 1012.789405][ C0] pn533_recv_frame+0x48e/0x6d0 [ 1012.789423][ C0] ? pn533_recv_response+0x7c/0x200 [ 1012.789446][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 1012.789467][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1012.789488][ C0] dummy_timer+0xdaf/0x3820 [ 1012.789515][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1012.789539][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1012.789560][ C0] ? mark_held_locks+0x40/0x70 [ 1012.789577][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1012.789598][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1012.789621][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1012.789648][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1012.789664][ C0] handle_softirqs+0x1e6/0x9d0 [ 1012.789682][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1012.789698][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1012.789716][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1012.789732][ C0] __irq_exit_rcu+0x16a/0x210 [ 1012.789748][ C0] irq_exit_rcu+0x9/0x30 [ 1012.789763][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1012.789784][ C0] [ 1012.789789][ C0] [ 1012.789795][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1012.789812][ C0] RIP: 0010:xas_load+0x38d/0x5c0 [ 1012.789836][ C0] Code: ff ff e8 b6 f6 39 f6 49 8d 7e 18 be ff ff ff ff e8 88 10 02 00 31 ff 41 89 c6 89 c6 e8 0c f1 39 f6 45 85 f6 0f 85 0a fe ff ff 8e f6 39 f6 e8 09 bf 1c f6 31 ff 41 89 c6 89 c6 e8 ed f0 39 f6 [ 1012.789851][ C0] RSP: 0018:ffffc90003726ba0 EFLAGS: 00000246 [ 1012.789864][ C0] RAX: 0000000000000000 RBX: ffff888068fd4dc2 RCX: ffffffff8bd25ff4 [ 1012.789874][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805ed94b00 [ 1012.789884][ C0] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 1012.789893][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003726c00 [ 1012.789902][ C0] R13: ffff888068e4a3c0 R14: 0000000000000000 R15: 0000000000000001 [ 1012.789914][ C0] ? xas_load+0x384/0x5c0 [ 1012.789940][ C0] filemap_get_entry+0x115/0x450 [ 1012.789964][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 1012.789992][ C0] shmem_get_folio_gfp+0x5ab/0x1980 [ 1012.790009][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1012.790026][ C0] ? vm_normal_page+0x1d1/0x380 [ 1012.790049][ C0] ? __pfx_vm_normal_page+0x10/0x10 [ 1012.790074][ C0] shmem_write_begin+0x1a4/0x420 [ 1012.790103][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 1012.790124][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1012.790150][ C0] generic_perform_write+0x292/0xa40 [ 1012.790184][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1012.790222][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 1012.790263][ C0] ? file_update_time_flags+0x38c/0x520 [ 1012.790296][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1012.790332][ C0] shmem_file_write_iter+0x10e/0x140 [ 1012.790370][ C0] __kernel_write_iter+0x2ac/0x930 [ 1012.790405][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 1012.790448][ C0] ? __up_read+0x333/0x980 [ 1012.790493][ C0] ? dump_user_range+0x65e/0xad0 [ 1012.790530][ C0] ? copy_mc_enhanced_fast_string+0x6/0xf [ 1012.790560][ C0] dump_user_range+0x3f9/0xad0 [ 1012.790596][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1012.790642][ C0] ? __pfx_writenote+0x10/0x10 [ 1012.790677][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 1012.790716][ C0] elf_core_dump+0x2d68/0x3d20 [ 1012.790763][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1012.790803][ C0] ? kasan_save_stack+0x3f/0x50 [ 1012.790842][ C0] ? kasan_save_stack+0x30/0x50 [ 1012.790880][ C0] ? kasan_save_track+0x14/0x30 [ 1012.790918][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1012.790955][ C0] ? vfs_coredump+0x21f6/0x54a0 [ 1012.790990][ C0] ? get_signal+0x1f2a/0x21e0 [ 1012.791021][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1012.791078][ C0] ? 0xffffffffff600000 [ 1012.791126][ C0] ? lock_acquire+0x1d1/0x380 [ 1012.791161][ C0] ? get_signal+0x1f2a/0x21e0 [ 1012.791199][ C0] ? vfs_coredump+0x281a/0x54a0 [ 1012.791236][ C0] vfs_coredump+0x281a/0x54a0 [ 1012.791280][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1012.791318][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1012.791355][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1012.791391][ C0] ? lock_acquire+0x1d1/0x380 [ 1012.791423][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1012.791470][ C0] ? lock_acquire+0x1d1/0x380 [ 1012.791507][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 1012.791535][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1012.791574][ C0] ? arch_stack_walk+0xa6/0xf0 [ 1012.791618][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 1012.791662][ C0] ? stack_trace_save+0x8e/0xc0 [ 1012.791692][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1012.791728][ C0] ? stack_depot_save_flags+0x27/0x9f0 [ 1012.791759][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1012.791820][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 1012.791862][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1012.791907][ C0] ? rcu_is_watching+0x13/0xc0 [ 1012.791957][ C0] get_signal+0x1f2a/0x21e0 [ 1012.791997][ C0] ? __pfx_get_signal+0x10/0x10 [ 1012.792044][ C0] ? __pfx_force_sig_fault+0x10/0x10 [ 1012.792083][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1012.792139][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1012.792198][ C0] irqentry_exit+0x402/0xa10 [ 1012.792245][ C0] asm_exc_page_fault+0x26/0x30 [ 1012.792277][ C0] RIP: 0033:0x0 [ 1012.792297][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1012.792313][ C0] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 1012.792337][ C0] RAX: 0000000000000000 RBX: 00007fd944025fa0 RCX: 00007fd943d9e559 [ 1012.792357][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000020000 [ 1012.792376][ C0] RBP: 00007fd943e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1012.792397][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1012.792416][ C0] R13: 00007fd944026038 R14: 00007fd944025fa0 R15: 00007ffd0f60ded8 [ 1012.792448][ C0] [ 1012.792459][ C0] [ 1012.792466][ C0] Allocated by task 15388: [ 1012.792488][ C0] kasan_save_stack+0x30/0x50 [ 1012.792529][ C0] kasan_save_track+0x14/0x30 [ 1012.792568][ C0] __kasan_slab_alloc+0x89/0x90 [ 1012.792608][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 1012.792645][ C0] kmalloc_reserve+0x148/0x350 [ 1012.792679][ C0] __alloc_skb+0x185/0x710 [ 1012.792701][ C0] pn533_recv_response+0x100/0x200 [ 1012.792744][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 1012.792783][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1012.792820][ C0] dummy_timer+0xdaf/0x3820 [ 1012.792860][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1012.792904][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1012.792928][ C0] handle_softirqs+0x1e6/0x9d0 [ 1012.792958][ C0] __irq_exit_rcu+0x16a/0x210 [ 1012.792987][ C0] irq_exit_rcu+0x9/0x30 [ 1012.793016][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1012.793054][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1012.793084][ C0] [ 1012.793091][ C0] The buggy address belongs to the object at ffff888036d449c0 [ 1012.793091][ C0] which belongs to the cache skbuff_small_head of size 704 [ 1012.793124][ C0] The buggy address is located 0 bytes to the right of [ 1012.793124][ C0] allocated 704-byte region [ffff888036d449c0, ffff888036d44c80) [ 1012.793155][ C0] [ 1012.793167][ C0] The buggy address belongs to the physical page: [ 1012.793184][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036d463c0 pfn:0x36d44 [ 1012.793215][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1012.793240][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1012.793274][ C0] page_type: f5(slab) [ 1012.793298][ C0] raw: 00fff00000000240 ffff888021aa7780 ffffea00014c5b10 ffffea000149e010 [ 1012.793326][ C0] raw: ffff888036d463c0 0000000200130011 00000000f5000000 0000000000000000 [ 1012.793356][ C0] head: 00fff00000000240 ffff888021aa7780 ffffea00014c5b10 ffffea000149e010 [ 1012.793384][ C0] head: ffff888036d463c0 0000000200130011 00000000f5000000 0000000000000000 [ 1012.793414][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1012.793443][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1012.793461][ C0] page dumped because: kasan: bad access detected [ 1012.793479][ C0] page_owner tracks the page as allocated [ 1012.793489][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9463, tgid 9462 (syz.5.823), ts 448682187861 [ 1012.793539][ C0] post_alloc_hook+0xfd/0x120 [ 1012.793567][ C0] get_page_from_freelist+0x110d/0x35d0 [ 1012.793600][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1012.793633][ C0] new_slab+0xa9/0x6e0 [ 1012.793661][ C0] refill_objects+0xe3/0x410 [ 1012.793692][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 1012.793723][ C0] kmem_cache_alloc_node_noprof+0x4f2/0x6e0 [ 1012.793761][ C0] kmalloc_reserve+0x148/0x350 [ 1012.793797][ C0] __alloc_skb+0x185/0x710 [ 1012.793820][ C0] tipc_buf_acquire+0x26/0xe0 [ 1012.793856][ C0] tipc_msg_build+0x112/0x1100 [ 1012.793893][ C0] tipc_send_group_bcast+0x736/0xa20 [ 1012.793918][ C0] __tipc_sendmsg+0x4a3/0x1ab0 [ 1012.793951][ C0] tipc_sendmsg+0x4f/0x70 [ 1012.793981][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1012.794014][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1012.794050][ C0] page last free pid 9382 tgid 9382 ts 441776283909 stack trace: [ 1012.794069][ C0] __free_frozen_pages+0x79f/0x10f0 [ 1012.794120][ C0] qlist_free_all+0x47/0xf0 [ 1012.794156][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1012.794197][ C0] __kasan_slab_alloc+0x69/0x90 [ 1012.794236][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1012.794273][ C0] __anon_vma_prepare+0xae/0x690 [ 1012.794301][ C0] __vmf_anon_prepare+0x11f/0x250 [ 1012.794340][ C0] do_anonymous_page+0x47d/0x2050 [ 1012.794365][ C0] __handle_mm_fault+0x1ff3/0x2f60 [ 1012.794391][ C0] handle_mm_fault+0x363/0xa20 [ 1012.794417][ C0] do_user_addr_fault+0x59c/0x12f0 [ 1012.794456][ C0] exc_page_fault+0x6f/0xd0 [ 1012.794494][ C0] asm_exc_page_fault+0x26/0x30 [ 1012.794522][ C0] [ 1012.794529][ C0] Memory state around the buggy address: [ 1012.794546][ C0] ffff888036d44b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.794569][ C0] ffff888036d44c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1012.794581][ C1] virtqueue callback for ffff888028cb5c00 (ffffffff86a2d1c0) [ 1012.794591][ C0] >ffff888036d44c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1012.794607][ C0] ^ [ 1012.794606][ C1] sd 0:0:1:0: cmd ffff88802fd9c7d0 response 0 status 0x0 sense_len 0 [ 1012.794621][ C0] ffff888036d44d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1012.794638][ C1] No more buffers in queue [ 1012.794644][ C0] ffff888036d44d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1012.794658][ C0] ================================================================== [ 1012.794677][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1014.314561][ C0] CPU: 0 UID: 0 PID: 15388 Comm: syz.1.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.325497][ C0] Tainted: [L]=SOFTLOCKUP [ 1014.329794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1014.339822][ C0] Call Trace: [ 1014.343076][ C0] [ 1014.345898][ C0] dump_stack_lvl+0x100/0x190 [ 1014.350558][ C0] vpanic+0x553/0x970 [ 1014.354515][ C0] ? __pfx_vpanic+0x10/0x10 [ 1014.358997][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1014.364006][ C0] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1014.369179][ C0] panic+0xd1/0xe0 [ 1014.372874][ C0] ? __pfx_panic+0x10/0x10 [ 1014.377273][ C0] ? end_report.part.0+0x23/0x90 [ 1014.382199][ C0] ? rcu_is_watching+0x13/0xc0 [ 1014.386948][ C0] ? end_report.part.0+0x23/0x90 [ 1014.391898][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1014.397256][ C0] end_report.part.0+0x3a/0x90 [ 1014.402010][ C0] kasan_report.cold+0xe/0x18 [ 1014.406675][ C0] ? hex_dump_to_buffer+0xbc4/0xc60 [ 1014.411939][ C0] hex_dump_to_buffer+0xbc4/0xc60 [ 1014.416946][ C0] print_hex_dump+0x14a/0x1f0 [ 1014.421607][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 1014.426782][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1014.432233][ C0] ? __alloc_skb+0x4e9/0x710 [ 1014.436796][ C0] ? find_held_lock+0x2b/0x80 [ 1014.441474][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1014.446399][ C0] ? kcov_remote_start+0x2e6/0x6d0 [ 1014.451489][ C0] ? kcov_remote_start+0x2e6/0x6d0 [ 1014.456582][ C0] pn533_recv_frame+0x48e/0x6d0 [ 1014.461411][ C0] ? pn533_recv_response+0x7c/0x200 [ 1014.466605][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 1014.471961][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1014.477159][ C0] dummy_timer+0xdaf/0x3820 [ 1014.481654][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1014.487444][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1014.492386][ C0] ? mark_held_locks+0x40/0x70 [ 1014.497129][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1014.502912][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1014.507831][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1014.513019][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1014.518120][ C0] handle_softirqs+0x1e6/0x9d0 [ 1014.522864][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1014.528129][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1014.532962][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1014.538576][ C0] __irq_exit_rcu+0x16a/0x210 [ 1014.543228][ C0] irq_exit_rcu+0x9/0x30 [ 1014.547459][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1014.553079][ C0] [ 1014.555984][ C0] [ 1014.558891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.564853][ C0] RIP: 0010:xas_load+0x38d/0x5c0 [ 1014.569803][ C0] Code: ff ff e8 b6 f6 39 f6 49 8d 7e 18 be ff ff ff ff e8 88 10 02 00 31 ff 41 89 c6 89 c6 e8 0c f1 39 f6 45 85 f6 0f 85 0a fe ff ff 8e f6 39 f6 e8 09 bf 1c f6 31 ff 41 89 c6 89 c6 e8 ed f0 39 f6 [ 1014.589388][ C0] RSP: 0018:ffffc90003726ba0 EFLAGS: 00000246 [ 1014.595440][ C0] RAX: 0000000000000000 RBX: ffff888068fd4dc2 RCX: ffffffff8bd25ff4 [ 1014.603385][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805ed94b00 [ 1014.611331][ C0] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 1014.619278][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003726c00 [ 1014.627224][ C0] R13: ffff888068e4a3c0 R14: 0000000000000000 R15: 0000000000000001 [ 1014.635176][ C0] ? xas_load+0x384/0x5c0 [ 1014.639502][ C0] filemap_get_entry+0x115/0x450 [ 1014.644440][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 1014.649889][ C0] shmem_get_folio_gfp+0x5ab/0x1980 [ 1014.655081][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1014.660694][ C0] ? vm_normal_page+0x1d1/0x380 [ 1014.665526][ C0] ? __pfx_vm_normal_page+0x10/0x10 [ 1014.670703][ C0] shmem_write_begin+0x1a4/0x420 [ 1014.675617][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 1014.681065][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1014.687911][ C0] generic_perform_write+0x292/0xa40 [ 1014.693197][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1014.699015][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 1014.704804][ C0] ? file_update_time_flags+0x38c/0x520 [ 1014.710329][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1014.716113][ C0] shmem_file_write_iter+0x10e/0x140 [ 1014.721383][ C0] __kernel_write_iter+0x2ac/0x930 [ 1014.726475][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 1014.732089][ C0] ? __up_read+0x333/0x980 [ 1014.736493][ C0] ? dump_user_range+0x65e/0xad0 [ 1014.741416][ C0] ? copy_mc_enhanced_fast_string+0x6/0xf [ 1014.747133][ C0] dump_user_range+0x3f9/0xad0 [ 1014.751886][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1014.757162][ C0] ? __pfx_writenote+0x10/0x10 [ 1014.762011][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 1014.766929][ C0] elf_core_dump+0x2d68/0x3d20 [ 1014.771679][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1014.776769][ C0] ? kasan_save_stack+0x3f/0x50 [ 1014.781602][ C0] ? kasan_save_stack+0x30/0x50 [ 1014.786435][ C0] ? kasan_save_track+0x14/0x30 [ 1014.791281][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1014.796042][ C0] ? vfs_coredump+0x21f6/0x54a0 [ 1014.800887][ C0] ? get_signal+0x1f2a/0x21e0 [ 1014.805553][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1014.811261][ C0] ? 0xffffffffff600000 [ 1014.815400][ C0] ? lock_acquire+0x1d1/0x380 [ 1014.820052][ C0] ? get_signal+0x1f2a/0x21e0 [ 1014.824713][ C0] ? vfs_coredump+0x281a/0x54a0 [ 1014.829545][ C0] vfs_coredump+0x281a/0x54a0 [ 1014.834207][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1014.839210][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1014.844133][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1014.849048][ C0] ? lock_acquire+0x1d1/0x380 [ 1014.853710][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1014.858822][ C0] ? lock_acquire+0x1d1/0x380 [ 1014.863481][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 1014.868240][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1014.874384][ C0] ? arch_stack_walk+0xa6/0xf0 [ 1014.879150][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 1014.884000][ C0] ? stack_trace_save+0x8e/0xc0 [ 1014.888838][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1014.894191][ C0] ? stack_depot_save_flags+0x27/0x9f0 [ 1014.899631][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1014.904582][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 1014.910199][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1014.916168][ C0] ? rcu_is_watching+0x13/0xc0 [ 1014.920959][ C0] get_signal+0x1f2a/0x21e0 [ 1014.925448][ C0] ? __pfx_get_signal+0x10/0x10 [ 1014.930294][ C0] ? __pfx_force_sig_fault+0x10/0x10 [ 1014.935667][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1014.941204][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1014.947356][ C0] irqentry_exit+0x402/0xa10 [ 1014.951938][ C0] asm_exc_page_fault+0x26/0x30 [ 1014.956773][ C0] RIP: 0033:0x0 [ 1014.960215][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1014.967642][ C0] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 1014.973698][ C0] RAX: 0000000000000000 RBX: 00007fd944025fa0 RCX: 00007fd943d9e559 [ 1014.981645][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000020000 [ 1014.990388][ C0] RBP: 00007fd943e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1014.998352][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1015.006414][ C0] R13: 00007fd944026038 R14: 00007fd944025fa0 R15: 00007ffd0f60ded8 [ 1015.014379][ C0] [ 1015.017620][ C0] Kernel Offset: disabled [ 1015.021928][ C0] Rebooting in 86400 seconds..