last executing test programs: 13.37843876s ago: executing program 3 (id=114): socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x80003, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, 0x0) r0 = syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000001740)={0x2, 0x0, 0x98, &(0x7f0000001680)={0x6, 0x2, 0x12}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80, 0x143) getdents64(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0xb8, 0x4, &(0x7f0000000000)="04000000") sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) 10.047615607s ago: executing program 3 (id=121): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001980)={&(0x7f00000019c0), 0xc, &(0x7f0000001a00)={&(0x7f0000001a40)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b80)={0x14, r1, 0x301}, 0x14}}, 0x0) 9.862404558s ago: executing program 3 (id=122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, 0x0, &(0x7f0000000380)) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000850) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="46ff23b760f19fd4a1ff7f00001ee134d76556be78b445eb3bcbfef33eb02b54547297d107f063b65b75c4b5e3bfad420cada1962cf94cc25a97d63d0d9d8b4c6582df6fe3a4976c8d4e80fd493bbfab4e5d2142fb657cc400"/99, @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x0, 0x4) 8.237769404s ago: executing program 2 (id=126): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) (async) close(r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x5, 0x8, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @cipso={0x86, 0x6, 0x3}, @generic={0x88, 0xc, "1597deaef79a90d4527a"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x5, 0x8, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @cipso={0x86, 0x6, 0x3}, @generic={0x88, 0xc, "1597deaef79a90d4527a"}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x34c, 0x12, 0x2, 0x70bd2c, 0x25dfdbfb, {0x10, 0x9, 0x9, 0x3, {0x4e22, 0x4e24, [0x9, 0x5, 0x943, 0x3], [0x8, 0x8, 0x7, 0x3], r2, [0x7fff, 0x4]}, 0x8, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "da819f68ddbf568bd82f3d0c60cc71747e62be4969b1c4c28ee3bf8305c771366ab62ba8f495a166e1bc8fe3652f97b201a090277a90449db7b6e5812ca1970138bedeffb95fba45a88bb4084593b7858630edfae88536304bfac14383021b98f5727d6a00d90ce224eb20b93570cd8ac527da70a8492e67353fd1bc"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "6cc31bec351c734db13855e59a2243a0950cf242e43e69b4ac887015ea0bdc3c8d98cdb29495c73f70884d4d341ba092f837585e518b1a769084be31658dc7562c50511f701c75b42efa6aab7ff06b8a8d26f061a31000f0bc470d8b0ac6421429e09604b9d35024c82099d261105c6bb5a5b62ecdb120064e06fa657b4fcb09d74fbf2066f5c1daeb7f3ae620029237ba86c4f2e5cbf115faab7bc17cae4065fe4381d991f2b273e79d6455412e159e6d17936355f5dde18f8e59d697af04b64fd7a027c6f8a6b572e70cc9e90f4bb38a21ffb9189ee5b0f9df4280c6234d912b70d9711d9b4451beacd8c6770f81f2d0b5"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "6eea659f48365f0e5412c7e7a3308788ceb72bf24828d843e64c5248701e82772ce07490c12dfe391d9c4387f4a2d2612199c9c3594252461ef403757df4ca8e8db6a02f45d4cd5a6d2840c733ba7f28de029082ca1ff9deb1af687d37936214efbccaaa5b51423a624343f9829058159f5433645bae75bb12f81857ce3e53cc8120034e8a2dce5bb5b9ce9dc2dc4797ca629485ead3b0ebf9a894c155a5b2faa8d1f466f99df5ae0936e43114b43a8e47b7245d05ec3f40362219923abf084a519695ffe516809086a44f129dff765e761b25e9fd8b2ba7924b89"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "b6a79045c490eb1c68e15544f1cd23bd5aabb3f544850cdb95219d33ac7e04d4"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "13d744bed419fc5149d7f035cea30b855be66c0afb58c3f380e7b7439fab0d8d18a9367f72732b16475eec3405217ab7409c94a4a59be55b4fb5cfb11fcd1057a2dfea48c2276dba0afca8ca15726f2f68fa51e5368dbb05fb1266a1cd9c9e99abe0144c45a264cc9ef2d74654862837ec45059e106a1e6f38ea0354"}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000}, 0x4003) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x400c850) (async) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x400c850) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x15, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa85}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000940)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) setfsgid(0xee00) (async) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000040)) (async) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000040)) r6 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3}, {0x0, @uvalue=0x8000}, {0x2, @svalue=0x9}, {0x3}]}}, {0x3e, '\x00', @buffer={"37dcf882d301f636bba1aeb8b9ff3b2e8a1433ce9a54973d8fcc7513cfef7ed6", 0x20}, 0xae3}, {0x2f, '\x00', @buffer={"fa6a4853c3f1768f932438e5ce80be3693f47208edd4c0ef2f099bfe6a64a74b", 0x20}, 0x800007}, {0x17, '\x00', @data=0x80, 0x6}, {0x3, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0xbf}, {0xd, '\x00', @buffer={"1a816702369279a72b8e9933995867aa9e96db00", 0x20}, 0x363}, {0x21, '\x00', @data=0x1, 0x40001b}, {0x1c, '\x00', @st={0x4, [{0x3, @svalue=0x5b4f128}, {0x3, @svalue=0x8}, {0x1, @uvalue=0xc9}, {0x3, @svalue=0xc}]}, 0x7}, {0x3b, '\x00', @buffer={"ab9a4d8ae2dbcc7c16701cc934c451737ae43e2e6bfbd71e2a9c089030881a0c", 0x20}, 0x5}]}) 7.747462943s ago: executing program 2 (id=129): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)='syz0:127.0.', 0xb) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000680)={0x2, 0x4000008d, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000780)={0x0, 0x0}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000800)=0x81, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000840)={0x1000000000000166, 0x0, [{0x4000008d, 0x0, 0x40}]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000880)={"128520dc", 0xe36c, 0xe7, 0x0, 0x1ff, 0xbe2, "568ec15d152297cb20265de8be0211", "85fc0aec", "cd400a01", "03001b00", ["0404409defedfbfaf833f0a1", "f7cb0512b590dfdb33170270", "a09b328feeed6da9dad97c2c", "84ab01f777e2b21ef294c413"]}) 6.982367044s ago: executing program 0 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e796d0986ffdf"], 0x44}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r6 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r6, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.201616035s ago: executing program 3 (id=132): syz_open_dev$vim2m(&(0x7f00000002c0), 0x7fffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r0) getpid() syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1006, 0x268, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7a, 0x80, 0x1, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x0, 0x1d4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x388c9fe3, @local, 0xfffffffb}}}, 0x3a) 6.201094935s ago: executing program 2 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="20002abd7000fedbdf25060000000820040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/snmp\x00') readv(r2, &(0x7f0000000340)=[{&(0x7f0000000380)=""/168, 0xa8}], 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000440)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x30}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="e6", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000008400000005000000200000000008000012000000000000008400000006000000070000000000000030"], 0x60, 0x8890}, 0x24000052) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000700)=0xffffffffffffffff, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000"], 0x30}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000900)={&(0x7f0000000940)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000290000000400000073000000000000001400000000000000290000000b000000000000060000000073d54bd744de8a74841757fd610317f34cf5d03455070b785777fb7c74abba7be4aa1643d03b09b68b741cf21df4d9ee5d7613b443e0998927795f4740dd49253ddf56813bb47db936e6b6a8174507a64758f9afc115951e99651fa936ea340ed3d27686d05d7ce901adb6acc369fe517995ee555213f35bf642b8afd6baaf4086a48260e7878f988ce2963c3e7a0728dae240ca97e1b211dea108ea8e9579cf33fa066eb8cd69b1c8b4bb0f91000d56af3db8c0fd4f33656bbb615e7daacebbfc97831a7ee41380b3837d9ac3bb9f"], 0x30}, 0x922bac8556bdad8e) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000407e04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) 6.063516538s ago: executing program 4 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="300000001c000104010000000a0000002d0000000100000080000001050001001c0000000e0002000000000000000000300000001c00010401000000000000002d00000001007f0000000000000001001d0000000a000200f5cc5da9cab6ee9b300000001c00010401000200000000002d0000000100000080000001050001001e0000000a0002000000000000000000300000001c0001040100000000000007000000000000000080000001050001001f0000000a000200000000000000000030", 0xc1) 5.887567539s ago: executing program 0 (id=135): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r0, &(0x7f0000000100)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=n', 0x90) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120101027f99c6100900000000000000030109021b00020302500b090401df003ff709f60904000000e001030f8632e7517c852ba187e093f542532d5d70d7b4f512edbf1801d978f7eedbf8a3ea02ebbd78f9b18a6cb464549e6bb43b0f38ec9cfc1c55b650374258cf7fa9892030c52e368cdfda18d1ea9e6dde10a751fb30f7dc8289650438bfc5"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 5.783454353s ago: executing program 4 (id=136): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) (async, rerun: 64) preadv(r0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/120, 0x78}], 0x1, 0x6, 0xffff) (async, rerun: 64) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x0, 0x4}) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) ioctl$DVB_DEMUX_DMX_GET_STC(0xffffffffffffffff, 0xc0106f32, &(0x7f0000000780)={0x50b}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a"], 0x12c}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) (async, rerun: 32) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (rerun: 32) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_usb_control_io$hid(r10, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00222200000096010006010083000000002a74a08538b3c83e25038a39942bb09ea54983"], 0x0}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) (async) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x202, 0x255, 0x0, r12}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xaf, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1e, 0x2, 0x2, 0x8000024c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.255677977s ago: executing program 1 (id=137): r0 = syz_create_resource$futex(&(0x7f00000000c0)) msgget$private(0x0, 0x69) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) futex$unlock_wake_list64(r0, 0x28a, 0x0, &(0x7f0000000040)={r2, r3+10000000}, &(0x7f0000000080)=0x6, 0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0xd6d1b000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000a00)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019a00)=0x7) process_vm_readv(r4, &(0x7f0000019a40)=[{&(0x7f0000019a80)=""/7, 0x7}, {0x0}], 0x14, &(0x7f0000019ac0), 0x26a, 0x0) 4.987912035s ago: executing program 3 (id=138): connect$inet6(0xffffffffffffffff, &(0x7f0000000c80)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x134, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x430533a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fd70243}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x185d856f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54754da7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x515a6553}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38e68284}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x99b9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bf1ba68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a11ed53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bde19aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee6a17e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158c0cb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495b4e92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5220dd48}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd1bcd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16b8e8eb}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25d06a56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7495d80c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f2bfff8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000940)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./config\x00', &(0x7f00000009c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a00)='./config/usb_gadget/g1\x00', 0xd) mkdir(&(0x7f0000000a40)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0xcb) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000700000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000e00)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mount(&(0x7f0000000500)=@filename='./lower\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ecryptfs\x00', 0x0, &(0x7f00000005c0)='ecryptfs_sig=0123456789abcdef\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB="ebe3025c94adc97c5aaa4d56629b7145f1ecbd8e3b10513c9bca32440ac451996a0c44a50170934199b52e1b499882a179f99ab2118c70c972cce0e694567ef514f7b7f0b96fa2f2932bb725967daf309861b42484af6ff85105f748083cebdc28d1ac4dcc11bd83b5c8c7a852978a3d304610146378d46883a06cb3316473"], 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.686569265s ago: executing program 2 (id=139): r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000180), &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES64=r1], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4800) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="80349c0d9e8f", 0x6}], 0x1}}], 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000086a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x28011, r5, 0x4f686000) fadvise64(r5, 0x3, 0x4000000004, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f00000004c0)=0x7) prlimit64(r9, 0xe, &(0x7f0000000500)={0x9, 0x1}, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xffffc000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r6], 0x7c}, 0x1, 0x0, 0x0, 0x8004021}, 0x80) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r11, 0x6, 0x2, &(0x7f0000000340)=0x2800, 0x4) 4.323523396s ago: executing program 0 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e796d0986ffdf"], 0x44}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r2 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000600)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x8, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x3, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0xf916, 0x0, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r7, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3.797641597s ago: executing program 1 (id=141): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3.185307116s ago: executing program 0 (id=142): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c45, 0x0) flock(r0, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a40), 0x0, 0x10, &(0x7f0000000a80), 0xfffffffffffffd00}, 0x48) (async) semtimedop(0x0, &(0x7f0000000ac0)=[{0x3, 0x0, 0x1000}], 0x1, &(0x7f0000000b00)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x15, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000ff070000000000000010000018110000683af097d62a4e8debe3a282a8e15647ca1423f6795d9772fc3c261d434d97cba36f07fa65151eab81a658ab5bf05d40e8674fca655f510719c8e2f08f47d85c797bc41ad2bba13a6fe89fe03ae740fa46e85655f41eeb0c7ed27768b77d54a81a63f9c523c8d50416035aab12d2140e3c827ab64a64be216d2630622dd28600", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007cbbfefffcffffff9500000000000000180000000000000000000000fbffffff18360000050000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000d00)='GPL\x00', 0xc0, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000d80)=[r2, r2, r2], &(0x7f0000000dc0)=[{0x4, 0x1, 0x3}, {0x0, 0x4, 0xe, 0x6}, {0x0, 0x3, 0xf, 0x6}, {0x1, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x9, 0x9}, {0x5, 0x1, 0xa, 0x4}, {0x0, 0x4, 0x3, 0xb}, {0x0, 0x2, 0x8, 0xb}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x81}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ec0)={@map=r2, 0x34, 0x0, 0x6, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001000)={r2, 0x0, 0x25, 0x0, @val=@iter={&(0x7f0000001040)=@task, 0x10}}, 0x20) (async) faccessat2(r4, &(0x7f0000001080)='./cgroup.cpu/cgroup.procs\x00', 0x140, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000010c0)={@map=r2, r3, 0x5, 0x2000, r4, @value=r6, @void, @void, @void, r5}, 0x20) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001100)={r0, r0, 0x2, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r5}}, 0x1c) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x82) flock(r7, 0x1) flock(r7, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001140)={'bridge0\x00', &(0x7f0000001180)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6b, 0x805, 0x6, 0x6, 0xfffffffa, 0x7]}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x402, 0x0) write(r9, &(0x7f0000000180)='p:s/p ./file0:0\n', 0x10) 3.101312121s ago: executing program 1 (id=143): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x0, 0x30, 0x12}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x108843, 0x55) fcntl$setlease(r4, 0x400, 0x0) close(0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) fchdir(r0) memfd_secret(0x80000) 2.379721562s ago: executing program 4 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e796d0986ffdf"], 0x44}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000600)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x8, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x3, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0xf916, 0x0, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r6 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r6, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.714547631s ago: executing program 1 (id=145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff0c2a}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 1.667676925s ago: executing program 2 (id=146): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000006000000040000000100000081000000", @ANYRES32=r3, @ANYBLOB], 0x50) (fail_nth: 9) 1.595345727s ago: executing program 0 (id=147): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000000)="99b17c5686110878c414f01e12cc1b93fbb8dde6313780bec59a573868a35d5c51395314cb2af5b2f2da71144b5c88649ced76cf49d9029b5f91fec2213faa3324ab925abc420847aa05839428339dda60fca9ee16203c4cc90e9a06a13d", 0x5e) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000740), &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000900)='4', 0x1}], 0x1) r5 = syz_open_dev$cec(&(0x7f0000002040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000002080), 0x5, 0x0) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f00000020c0)={0x8001, 0x3, 0x9, 0x4, 0x5, 0x2, 0xb41}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000002100)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./proc\x00', 0x1ff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r9}, &(0x7f0000000540)=0x20000, &(0x7f0000000580)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r7, &(0x7f0000000600), 0x0}, 0x20) mount(0x0, &(0x7f0000002180)='./proc\x00', &(0x7f00000021c0)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./proc/swaps\x00', 0x0, 0x2) pread64(r10, &(0x7f0000002240)=""/4096, 0x1000, 0x60e7) preadv(r10, &(0x7f0000003240)=[{&(0x7f0000003280)=""/139, 0x8b}], 0x1, 0x1, 0x8) bind$bt_hci(r3, &(0x7f0000003340)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 1.067868633s ago: executing program 4 (id=148): ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xb, 0x5, 0xfff, 0x80000000, 0x8, 0x80000000, 0x200, 0x9}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) ftruncate(r4, 0x300007) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100), 0xf00) close(r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r6, &(0x7f00000000c0), 0x400030f, 0x0, 0x0) listen(r6, 0x200d3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r7, &(0x7f0000000300)='p:_est/_vent1 ./file0:0', 0x17) 928.555517ms ago: executing program 3 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="20002abd7000fedbdf25060000000820040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/snmp\x00') readv(r2, &(0x7f0000000340)=[{&(0x7f0000000380)=""/168, 0xa8}], 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000440)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x30}}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)="e6", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000008400000005000000200000000008000012000000000000008400000006000000070000000000000030"], 0x60, 0x8890}, 0x24000052) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000700)=0xffffffffffffffff, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000"], 0x30}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000900)={&(0x7f0000000940)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000290000000400000073000000000000001400000000000000290000000b000000000000060000000073d54bd744de8a74841757fd610317f34cf5d03455070b785777fb7c74abba7be4aa1643d03b09b68b741cf21df4d9ee5d7613b443e0998927795f4740dd49253ddf56813bb47db936e6b6a8174507a64758f9afc115951e99651fa936ea340ed3d27686d05d7ce901adb6acc369fe517995ee555213f35bf642b8afd6baaf4086a48260e7878f988ce2963c3e7a0728dae240ca97e1b211dea108ea8e9579cf33fa066eb8cd69b1c8b4bb0f91000d56af3db8c0fd4f33656bbb615e7daacebbfc97831a7ee41380b3837d9ac3bb9f"], 0x30}, 0x922bac8556bdad8e) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000407e04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) 855.721574ms ago: executing program 1 (id=150): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) 651.58534ms ago: executing program 2 (id=151): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x1b469eb9b49fb9d3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="a18300000004000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000025d0000005f000e0088800900080211000001080211000000ec03f3b85ad3000004008181a1ffffffffffffff6400000000060101010101010301000406010202000010060243832a0100720603030303030371078100ff0101046176060ff42200040000cfaf112ec0ca9ca1008ac26069a7217f06f29acc8b64fcfea18cd05bf02eab71b076ea32477b48738b0810eb08210300747bdf4e73b0984650813deef94e6a"], 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtaction={0x168, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x154, 0x1, [@m_ctinfo={0x150, 0xb, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x400, 0x1, 0x81, 0x93}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80}]}, {0xfc, 0x6, "e46166133b465ea1708c553bb8e2013880dce700ec8b5378308a160af664a40d3587caa2a7178ff9e2867140fa02a8dc2f2164bfdbf7b5261430370942bf32f68d5c38da36f12e1a0d4db7a045690d7d61da37b316511ae70b7cd23088ca5408a987047b567ff20e823822d753c3845ece4af219b1ba3632574d629421e5eb28103112d20c06d26d888a8aa48696d7f389646d69138d58739ad1af6d03bb1bd5d7b0da78137ec1104d48ff21818cb1256f9687741b1c6a7f5ca8c9738bd546f0815e506fd31122dfb156492d6759fc673ea01749303d595c109f2eda9b9d3e17f29055c2a8dece278a1fe6e7afb5012c14357794b9082081"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000700)="300000001c00010401000000000000002d000000010000008000000105000100300000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100310000000a00020000000000000000001b0000001c00010401000000000000002d00000001000000800000", 0x7b) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c4030000", @ANYRES16=r2, @ANYBLOB="000425bd7000ff05002523000000080003003915d85bf2f88c44b84c090ed9bbe4e4a07ccc7a92a6444be1be2dee9a8ac9b430cd30df1af9db7da82e", @ANYRES32=r3, @ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x4015}, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, 0x0) r8 = io_uring_setup(0x1, &(0x7f00000003c0)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r8, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x2, &(0x7f00000004c0)={&(0x7f0000000500), 0x1000}, &(0x7f0000000540)={&(0x7f0000000580), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r8, 0x24, &(0x7f00000005c0)={0x0, 0x3}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000580)={'dummy0\x00', &(0x7f0000000780)=@ethtool_sfeatures={0x3b, 0x2, [{0xffffffa9, 0x5}, {0x7, 0x101}]}}) r10 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002480)=ANY=[@ANYBLOB="0411000014001b0528bd7000ffdbdf2511003700010079ab3ad775641c31c185da2f9c417d14680aa0892c05aeae1f3b22928d5bd2e62c9e5952ca494e5dfe9aa826368665ef55e4b000041001004dd5c4349b6629b0a58ca1e09af914d34629050518e05cb6a4b729caee900fc3ca4894a58115276103be120a0c1733a358a49eda1cf2db8e8b8afe1f65e54aa321aabeeb507b52c1042600fbce62d87e1f359dae3a37288d9a23cc3cae95b7ff2a7b6c1497e9e41103ed15554902358a0b2705a0a14202f9ab31c7d59505cc73d977b2e41aaf3cfa76785013b0759909ea1c9a7af5170f7e5d3e92de2830d2382d497a11e9ed4f993ec7eb4d45033b2496e4b3540563a0780ab033939b809517ae0b1740795c7f2349a9ab7af6c79d4b8de04c2038c2d208f6b1042f161c405755a94e6ef436b7d76837aa45d55979d43eca1d537f3e0bab5347fcbbaf4232be64ade46d9527d67caa206803485c2ecff04dc24f871397b3c7b0820584a72e9c9de8d11c9411c2e227e4b22b72cbc031288a238c5ba82958980c01d23c03a58fdc33db8f0936ff28462ccf682ce34725dad4c110053887cf9435aeca4fd60c60829a8c1da048b961af727790c10d6402f1442c264bc9403274970ffa407113669cde340c720eca8d844fb85dad898f31e1428b403c8d490eaae37c0c2f864d4ae4632f183c0565587e7ec01f904e9f68bfa164967c684af862b153c19435859a7506b8c577e415f6c137178d9003be362ff83b5599d56d1e52244548b80db92ea050892bee604cf2eede60ba30433175ceea62568e753d15ff5a79f11b8ef40f24d0bce2e398e19dd44ecb1910d4026b207bb70b753bd18e03963e61e14c27eddc782b3e54bb8c42ee9f26e722b669b477cc85129aa97acd83b111b8da21eafb54bb177f5e42d4c8b1ebd74b219a014038026961f5f88ce3d86773f4151fec94fa9e085c762ee82d5b351648c464aa5289879fa4fdfcfe5e18d93c6520d0d02f4a86e9ae3c722b43f086a11b1273156c0b3ab950fe4e9c5517836f1e43f72db0dc9f2ddcbc8f4f4e34aadf4a6e08046c7f81116a4f6593007b4bbb6fb5484dcae32cb6fc7f617a4de578069dc3c9c091c27ba759077adec028880dad935d7698ade2dc5504d5d0e397a337f5be5217a44a3aca7e43fddfa93181bd88ea037b5ebf49fc4c44de0f7bddeaa8bff557b38bf3d824c1468410eb4d08e26699a5ebb17638bb3067f45f1a38ae1035287f98b5ce2998640026c483f4f2ce3d04620dbe5dc53b7a495181e2042df6e61153f628c6710f97be6aed270fada6878d535865ed1c70fe88cb753704416abc5044efdde2bcee906f0de2afddde3b9bf0f201473b5ba434b6c0df2642cb04af30e002f9b96e12455766cbc450f258de1eb803f19fe6cac287fd76e382e7eb9b018a1d07859daf3315435ee383e3752f217a6886060c9fb1b209c64372f3db7c7c194a3f0e105301c6c093eee5f473460fd7305d70f6871a67d1076210e0e6ba36228e57db392219e34de37ac613af667b0b9cfc077a530784a8555d28f1a14dd78a6c3b0024df78b58ed7722d31ab3df57bf22892ac9d9ca65c7bd2226595736958db1aaab28d5406d412b13e7df6c943e2ad3805575487c44d18b36154acfe8035d8dba9c01ccaef8767803d7e1e127405621af88354f3309f07c276dac6b75b90bf79e1a428e53a595978ce43a24c087831cb550dfb434cfc50d04e04c65e5159a67814c06d3edd308d62d75383ded01bdc56b4d1ee71872b2e7caf283d79781ff83bf40848bfbb14e14e4af5dc01bbed1e18a68ef92561fd70ba199a2c3993cbcdf20ea6b09caeb167df1cae59fc4d4d4894c5f8bf8f74f1048375871085b924433c982947856804271fe57fff29b163d36af60916dfa8329b1825a65e1d6f80771c7d18e4a36c17a9d1a9e360569625554f67b6215fd930dcbcea33ce6f06b50cb4a43905a417841da45a2f1228d0e0f089fc8707912ad6b8aa547672b41c5b87f873cfd59884a3f74a351edd9602fc949824a50c61a9ff02456be63e1469279156f21d459b77418a55cb5941605c464236b19cd58fda99749126de78cacba02dfff4ee72fc69117f44c21d41cbc15e18043d503ab78f5e13928fcd399532c644a2c8c368acdb75533e2956afcbcdd185e6586507d18a304ce590b5b12d45abcb00d5951f683343ad4e9955351c2c9413084eb2da665c8dd8aaaa205d8adc4f460203d73d16f63fb55476ce652f3ebc16e32362ebcf83dee7a907d01a00b4cf6b5807a63c2b2207161ffb9bd58098d8077d281cca97ad325a1bc58460dc70e0646360bab8e71f6d1ec2b15d7add4637137cab2b536d761ee62d8541e9494b5e37cbc31fa0ebdf0e517fbe04ddeebfb8578e73c6d75a40da01203bd66bb4206e3795bc041dc1ef807130761623338f5b50230290baebf7f313acba60ccaab83861ede83ef1dc64ed4bb30f1da8bcad78d932574975374982c4e0986e1bc201993ac2c45a1a2a3ef7df5011aedfad9b95e13d261cb6984be337ca18f00d0a5b8d4a668b804b412be4a91a283201baa57776210ed0d86b648314fc525fb38676d20d28c9bbf1b896eaefaffe2eff2ea5b9a6fbd3f148c54224bc657db348de4e37f80beb6b21a7e4652d329fe3d1d6eed2e712e601cc9d2993c12fb927d4694c65ca1524d9b97849151176c91e80ad2ab9752a5c1f4a2dd924f09449c2e333018a73aba6f2b1bb719e3ecbac846a9bad1ec92ed5d9fe491d7a2676251d214c6f36d5d5a7586a4371e9acaa049b2d01d975be9f4cde63f7f1cc3d5b6444862ae99c10f45c0835d16f14976edccd899c8aa9c15e74f0d01bb21c97a02981d1c41734714d022ce1fadb41ccfafe76051ebe95325e67d1bbc329413c4a374fc249d52cecd45a6bb72ed9d638032359506a519ec4fb03601025db9f76d0f9a1fdcc5bd2776b0f80cc427ce4c7d619942b74e48fd74a7903738017a97c7f7d38c331f5e95b6ebe3b9d243a9563e5bb2c7e15afd41d5070f33dacd8304abde751101781b9d3bca80669ffe1d7e25a84ee4400fe606e18c8fe3f160621bfbc9727a85dfd70bb78029a36406d8e796662aef122f0186d970d91c2359a5947459cc7841e6a1877d1d51104215033992112fa9dba2476b4fef161ef1775cc05712f64789de63ed91e5904c58364108eeeb9de21cd61fc18bb1faf75abf055411cafc517d5fbc275857d15dbaf2a039b56a40770917d6ec2e414d98722d4dc6108d16a2b268cf62aef638593ab439a71b2615b8252a5254fee641556af21ed83f363ef0409a2b38bad3af43d7412265385eda15eaa453505ceb485b816c541c4604535572c0e1e519ca4932eb178f6fa8e2d5ce65ec7d626818a75d4e90772607bd6c937daa3f93aa8d1bb346890814b73efe80bb58ef8dae18d8171ce83f6d335ba3775bbd30b8937d4b9b6d600f6d1beea97554d16a36b8e694b5f786529f4f61aaa8c4059e82359032f39a69ac78be6296d9d72f1522b5ed2a1af2db512635349e663ea1fef8cd8d7abea392c8743ce8fb011a3575768363ea4329ea755a5d7b09c122358d5a7beaed16be7492e21eea01a61c4f3c5f14a5e7c5ef92a507ac173c653dfc752436a3c7e1cf80c808766a4fe6c059b4a9676cdc77d857781f6d5f6e8856ceeb519acf799e6c6c3b85b5fc1ed8c8eb26411009d0b10ef91aac77d07be6675deb68208fb957f9358923cc3d64b5315c1407db86d605758f2b44032ddf0a6bb8bb3aa81ed42a3aebf407583d52733887968f53e09e1e10f0807514415ecb567880563ea625ac3eeb24acdedcae5ab594aab56023a473acd807d754ef6aec80a3772122aca076f990ec80faf2298c03c147739944d40db11d7e485733739851f2cc40fd3643ba09004976ce7418de7624a8d0854d717c1f15aec43daf5380d0e1312d06ad074e49f2d20bc0786a2bf023cc66db550700605419174bdb52539ccdd6a96c65b629eaf2dc4728dbc118078567c5135dc2c9592c511f2b7ca1c9c4e437569ef7b924ae196066fafb318b5e7690671395c6c45d61c05d40b24d8c3885128e98f1579bb3af32d006b84784fe3e4a19b96e192b7546fba9a0d2d0271e00cec2fe03e000b9bf26466a28d60434be0daa20f9743f1c59c4234d973d930d53b041530324656f3365b8c3ee67397fa9c8dd3176f1a70893077ab12232111b9789c47fb9569f9b2c47b0ba3abdc0d90205df49ca09ff1770b6e44e578597364364f1f0a5081a86c922258755b43ef131707a69c54d50a2387d8cd261fb648bb6dd3c4dc0e8eedc2e72caa2e724b8524b27fa139b52fed49c92116d6b213e218eb601f70e48917a0cdcd789d2b53982a1e08c868670a9053c19017bb731ffba067e25528e0c765c11908e08167dcbff3a6acaba794ae31f2373bde204cc53b0ebd10c51f0ac7538f053df37525869cb64e4272470c7473e58b6eee7331d8581736270bd714fe7bc4d5f7203e0c9a070c2aa263fca8bb85831ce9395d8a13cc3101f98799a87d0ab57df7a2f5c70068e3394d05b33c4336e89dfdd893fd4ce975b11f95cfadefadc81b6d3a825d7736d2faf655b45bedc1ec6605ade89451979843cbdfe1df444eb1b781f21a0cabe2eccc2c8d29ec3191b073e4676e6211ab78197af208f618c4bd6e54c6970ccb109366c3d5ff24485c6d3f5d7aa0dc3b95bd97c4aa6c4125c9fb12d8d1396f7350f68f24f46db0c09aee855240b0d7b073c4ef2ddc2ca4089b95eb2e7759495b82452d70372c3fa2b8bfad5ce3d6b975ead30676177b1c784e5e12f44365c20bc878d42ac6169011cc952179fba99a5f527921e408ceaaaa23a0a9fdfbaa84b250ae94875de703aa9140d5c7aeea5ba8e94a829392df8ff29d1b898c98ed753ffb35387232e305ee5426bb5203c7ce8a89ba0b23dc1a2cf77ea92ee729159e695c0b4d30cd174cb5775165441d82b67a6884cf5743bf29d793b56688b450cda73b48d79c7873e5da7625d109eaf4eb5a65f33d811ef1e15cc06f4225c80b00234de1f90c4705ed92622367a1f5341a66eab81d85892fadbe6b681efb20e84a00257ce9cbb61b8b614a0b339cd46a56be4a93e2d78645af2f45ee582d2d10dec79cf4c6c48bcc96ca3002ae2b226eb85497109217ef19f24c45ba2c649fec578b55213f9a9d53a7b0cdab09c2178029caf578a524b4d8f49aaa9fa7b29962991726fd328a7082e94c70d93bfde430c1b96fca7f52b891e9af3eae686caa48b54915c61b9c8ff62e3b268dc0e5d45768ade5b3b14db846fd923daa597e5a63afc8294d6a40d7fc7e6ae88ea0dc099804119b34636467f42224ca76cc291915a3f586028bdc82e622267f4e3be9a49d8a2a314e15089e71fa7e83f42f8787e296e121665c20bb6bf6949803a52ac2c5e493209acb6fbd669bbc3f51d130bd626e9cc462eff07f7f84621958290a61259633957714820e81fa6c408e5ae453555c70cbf575cfa3b2d3d81b768008a111784c29ad9f3edd05be9fc049c76b9a763550616220257eb3eef2718e169aa3fc66f86790b7fc3161fd14f2f27405d4f051623a69c89bb3d9cc614b6b3a9638eca249eed770f7799e5e16f17875d1e912a81b02cb4dc58028c816efe0672819072c8b038bb1efa2060eaa589fdb1ff7c89acd6ff07c2922e30c14234f77ee9fd35e5962889fe461bb054d1593b240860794af964d8512f9ee520a2774070cfee1c38d512febd65e167801b571eb56733036789f71494a4110a4dd8472495542d9e55dafabef172cde4811c19082cf40612f409f6dcb98860a1c130da495efb273ddd62193b933b0a956171780e0dd5a2ecdd17c6c138cf5f35c7191b4000100c264097794c0850f93475e9b4814a134c62e23b9e644cb9820c228eabda0b4dd1f087ee7aa552c72595a90893783eefd8c75515b6d18bcc24820258f496f2baf9bf61d414fe16208114fa39867a716b33e3db59bfbc310688f199fa4983fa1673f2b95e23cde72750ed01c450614719281ad43254e434ab6db556161f29f2193904615143001167eb7b4cb01105039eb855695120f674b0875265190977148c0037a169f3da3e29e90b990e1b255b404556864d9ac6f3c19d2cfd5665269857be559fe1f9175b2feef72df65c0991f266f20d128c12a32ffb61aa897ed885e0ef8355560f992774de087d8729458a81f0e51a281f86f6629d98e8bb1849aea5d1922920389d46aef122903d77a09e29fcb9c7a916bece401b43a2488d0ac3a791f63ddecdcf4790182af29d9e10b3e0e74f2c9a24cba61f0cc64e79ce7b6e9027b6afa12643f"], 0x1104}, 0x1, 0x0, 0x0, 0x2400a051}, 0x4044000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r10, 0xc0844123, &(0x7f0000000140)=0xf73f) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00'}, 0x48) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000000)=""/242) memfd_secret(0x0) 564.245946ms ago: executing program 1 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e796d0986ffdf"], 0x44}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r2 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000600)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x8, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x3, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0xf916, 0x0, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r7, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 304.386288ms ago: executing program 4 (id=153): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) bind(r0, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x2, 0x3, 0x1, 0x4}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000200)={0x0, 0x6, 0x61, 0x5}) socket(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x4, 0xe2, 0x0, 0x0, 0x3, 0x4}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8c755b2713612558) 46.096812ms ago: executing program 0 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') prlimit64(0x0, 0x6, &(0x7f00000001c0), 0x0) setreuid(0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) read$FUSE(r1, &(0x7f0000004340)={0x2020}, 0x2020) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000200)={0x5, 0x9}) execve(&(0x7f00000022c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 0s ago: executing program 4 (id=155): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0, 0x21) renameat2(r0, &(0x7f0000000040)='./mnt\x00', r0, &(0x7f0000000080)='./dev\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys_sec\x00', &(0x7f0000000280)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='select \n', 0x10) write(r2, &(0x7f0000000440)='file read /etc/passwd 0ask.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000004c0)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000bc0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000e00)={0x1, &(0x7f0000000e40)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0xffffffff7fffffff, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x2, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x3, 0x3, 0x10, 0x4000100000001]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000b40)=@rxrpc=@in4={0x21, 0x3, 0x2d, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x10b8}, 0x8000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000cc0), 0x2, 0x141102) writev(r4, &(0x7f0000000d00)=[{&(0x7f0000000d40)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000d80)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000dc0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)=@riscv64_aia_csr={0x8030000003010003, &(0x7f0000000100)=0x3}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3415f2e117782c000000c48185199a6c1eff8d7bc4fefe59be9ba99646238af81fdac2a38dc0def80fee541c62c640698dc6f30e5ed5fb24ac8fe802c621d395a463bfa2f216428c092ff41e8f4be67a21e39b8257d207fef92b99691d", @ANYRES16=r6, @ANYBLOB="010029bd7000000000001c00000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 66.690325][ T31] audit: type=1400 audit(1791655057.596:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.691689][ T31] audit: type=1400 audit(1791655057.596:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.693562][ T5585] cgroup: Unknown subsys name 'net' [ 66.696921][ T31] audit: type=1400 audit(1791655057.606:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.866206][ T5585] cgroup: Unknown subsys name 'cpuset' [ 66.868507][ T5585] cgroup: Unknown subsys name 'rlimit' [ 66.965328][ T31] audit: type=1400 audit(1791655057.876:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.965767][ T31] audit: type=1400 audit(1791655057.876:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.965983][ T31] audit: type=1400 audit(1791655057.876:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.966277][ T31] audit: type=1400 audit(1791655057.876:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.052626][ T31] audit: type=1400 audit(1791655057.956:136): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.052672][ T31] audit: type=1400 audit(1791655057.956:137): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 67.145082][ T5589] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.147648][ T31] audit: type=1400 audit(1791655058.056:138): avc: denied { relabelto } for pid=5589 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.111618][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.381903][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.403131][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.412288][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.414290][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.420730][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.421612][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.422731][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.423370][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.425056][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.425312][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.425770][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.426239][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.426804][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.427266][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.428488][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.428721][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.430276][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.431863][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.432867][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.435982][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.436864][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.445373][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.453932][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.455568][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.463329][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.108486][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.108550][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.796556][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.797034][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.797372][ T5595] bridge_slave_0: entered allmulticast mode [ 71.798981][ T5595] bridge_slave_0: entered promiscuous mode [ 71.849246][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.849327][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.849393][ T5595] bridge_slave_1: entered allmulticast mode [ 71.850319][ T5595] bridge_slave_1: entered promiscuous mode [ 71.939110][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.986518][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.042307][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.042382][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.042709][ T5596] bridge_slave_0: entered allmulticast mode [ 72.044172][ T5596] bridge_slave_0: entered promiscuous mode [ 72.060170][ T5595] team0: Port device team_slave_0 added [ 72.062602][ T5595] team0: Port device team_slave_1 added [ 72.104934][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.104996][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.105064][ T5596] bridge_slave_1: entered allmulticast mode [ 72.105872][ T5596] bridge_slave_1: entered promiscuous mode [ 72.167409][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.167429][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.167450][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.168684][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.168763][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.168860][ T5598] bridge_slave_0: entered allmulticast mode [ 72.170205][ T5598] bridge_slave_0: entered promiscuous mode [ 72.197381][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.198818][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.198830][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.198851][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.201880][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.226688][ T5596] team0: Port device team_slave_0 added [ 72.226896][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.226957][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.227041][ T5598] bridge_slave_1: entered allmulticast mode [ 72.229081][ T5598] bridge_slave_1: entered promiscuous mode [ 72.260226][ T5596] team0: Port device team_slave_1 added [ 72.281997][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.282076][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.282406][ T5612] bridge_slave_0: entered allmulticast mode [ 72.284334][ T5612] bridge_slave_0: entered promiscuous mode [ 72.334788][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.334868][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.334962][ T5597] bridge_slave_0: entered allmulticast mode [ 72.336876][ T5597] bridge_slave_0: entered promiscuous mode [ 72.357372][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.357452][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.357753][ T5612] bridge_slave_1: entered allmulticast mode [ 72.359460][ T5612] bridge_slave_1: entered promiscuous mode [ 72.374226][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.374238][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.374259][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.378062][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.378331][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.378409][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.378501][ T5597] bridge_slave_1: entered allmulticast mode [ 72.380834][ T5597] bridge_slave_1: entered promiscuous mode [ 72.412277][ T5595] hsr_slave_0: entered promiscuous mode [ 72.413248][ T5595] hsr_slave_1: entered promiscuous mode [ 72.474317][ T5614] Bluetooth: hci3: command tx timeout [ 72.474504][ T5602] Bluetooth: hci0: command tx timeout [ 72.475142][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.475153][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.475174][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.478626][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.524222][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.538617][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.553764][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.560790][ T5602] Bluetooth: hci1: command tx timeout [ 72.564353][ T5614] Bluetooth: hci2: command tx timeout [ 72.564515][ T5602] Bluetooth: hci4: command tx timeout [ 72.621064][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.635844][ T5598] team0: Port device team_slave_0 added [ 72.672634][ T5598] team0: Port device team_slave_1 added [ 72.674018][ T5597] team0: Port device team_slave_0 added [ 72.676674][ T5597] team0: Port device team_slave_1 added [ 72.689115][ T5596] hsr_slave_0: entered promiscuous mode [ 72.690102][ T5596] hsr_slave_1: entered promiscuous mode [ 72.690629][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 72.690701][ T5596] Cannot create hsr debugfs directory [ 72.692968][ T5612] team0: Port device team_slave_0 added [ 72.731713][ T5612] team0: Port device team_slave_1 added [ 72.761766][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.761777][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.761796][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.810008][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.810021][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.810041][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.832707][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.832719][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.832741][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.834155][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.834167][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.834187][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.854970][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.854982][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.855003][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.899208][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.899220][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.899241][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.055425][ T5597] hsr_slave_0: entered promiscuous mode [ 73.056220][ T5597] hsr_slave_1: entered promiscuous mode [ 73.056781][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 73.056797][ T5597] Cannot create hsr debugfs directory [ 73.061488][ T5612] hsr_slave_0: entered promiscuous mode [ 73.061968][ T5612] hsr_slave_1: entered promiscuous mode [ 73.062315][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 73.062330][ T5612] Cannot create hsr debugfs directory [ 73.068493][ T5598] hsr_slave_0: entered promiscuous mode [ 73.069293][ T5598] hsr_slave_1: entered promiscuous mode [ 73.069860][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 73.069875][ T5598] Cannot create hsr debugfs directory [ 73.285125][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.289916][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.290687][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.293411][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.335146][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.337583][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.338428][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.343377][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.500640][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.508296][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.510694][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.527603][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.528490][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.531083][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.531667][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.537581][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.623437][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.635307][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.640397][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.646045][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.646698][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.653148][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.687716][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.691781][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.742943][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.795989][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.798803][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.799355][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.803436][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.808542][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.815893][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.824916][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.825799][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.840574][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.863559][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.863864][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.905360][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.905412][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.918056][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.994867][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.000860][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.002952][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.031551][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.038137][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.038755][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.043251][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.050628][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.050791][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.053349][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.053433][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.085785][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.099245][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.154019][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.217730][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.260944][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.261035][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.294584][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.294667][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.392889][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.440491][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.484854][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.535266][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.535368][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.542683][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.547831][ T5602] Bluetooth: hci0: command tx timeout [ 74.547857][ T5602] Bluetooth: hci3: command tx timeout [ 74.556721][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.556826][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.559005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.559089][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.624436][ T5614] Bluetooth: hci4: command tx timeout [ 74.624460][ T5614] Bluetooth: hci2: command tx timeout [ 74.624477][ T5614] Bluetooth: hci1: command tx timeout [ 74.625106][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.625196][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.019889][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.061446][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.229727][ T5596] veth0_vlan: entered promiscuous mode [ 75.235714][ T5595] veth0_vlan: entered promiscuous mode [ 75.276435][ T5596] veth1_vlan: entered promiscuous mode [ 75.279134][ T5595] veth1_vlan: entered promiscuous mode [ 75.296767][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.419265][ T5595] veth0_macvtap: entered promiscuous mode [ 75.423478][ T5596] veth0_macvtap: entered promiscuous mode [ 75.448640][ T5596] veth1_macvtap: entered promiscuous mode [ 75.472375][ T5595] veth1_macvtap: entered promiscuous mode [ 75.481464][ T5597] veth0_vlan: entered promiscuous mode [ 75.520361][ T5597] veth1_vlan: entered promiscuous mode [ 75.547100][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.557661][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.567030][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.606812][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.625717][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.625866][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674058][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674421][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.725473][ T5597] veth0_macvtap: entered promiscuous mode [ 75.728836][ T5597] veth1_macvtap: entered promiscuous mode [ 75.755356][ T1019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755394][ T1019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755427][ T1019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755459][ T1019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.762210][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.784048][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.860633][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.883542][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.918491][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.931340][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.931368][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.957536][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.957635][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.957670][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.042723][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.042739][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.069736][ T5598] veth0_vlan: entered promiscuous mode [ 76.100983][ T5598] veth1_vlan: entered promiscuous mode [ 76.108151][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.108166][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.159884][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 76.159898][ T31] audit: type=1400 audit(1791655067.066:153): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.qSAj1l/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.160630][ T31] audit: type=1400 audit(1791655067.066:154): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.194085][ T31] audit: type=1400 audit(1791655067.076:155): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.qSAj1l/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.196177][ T31] audit: type=1400 audit(1791655067.106:156): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.199738][ T31] audit: type=1400 audit(1791655067.106:157): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.qSAj1l/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.201075][ T31] audit: type=1400 audit(1791655067.106:158): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.qSAj1l/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.207951][ T31] audit: type=1400 audit(1791655067.106:159): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.232327][ T31] audit: type=1400 audit(1791655067.136:160): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.238027][ T31] audit: type=1400 audit(1791655067.136:161): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=7596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.243157][ T31] audit: type=1400 audit(1791655067.136:162): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.272009][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.272024][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.351010][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.351025][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.459470][ T5596] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.488203][ T5598] veth0_macvtap: entered promiscuous mode [ 76.502331][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.502347][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.562036][ T5598] veth1_macvtap: entered promiscuous mode [ 76.578407][ T5612] veth0_vlan: entered promiscuous mode [ 76.624656][ T5602] Bluetooth: hci3: command tx timeout [ 76.624681][ T5602] Bluetooth: hci0: command tx timeout [ 76.625335][ T5612] veth1_vlan: entered promiscuous mode [ 76.654442][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.683554][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.714707][ T5604] Bluetooth: hci4: command tx timeout [ 76.714783][ T5602] Bluetooth: hci2: command tx timeout [ 76.714843][ T5614] Bluetooth: hci1: command tx timeout [ 76.744017][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.744882][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.744917][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.744949][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.815659][ T5800] process 'syz.2.3' launched '/dev/fd/3' with NULL argv: empty string added [ 76.847021][ T5612] veth0_macvtap: entered promiscuous mode [ 76.867540][ T5612] veth1_macvtap: entered promiscuous mode [ 77.526405][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.526435][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.627845][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.816148][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.994713][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.994768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.029689][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.045125][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.047663][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.080825][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.414665][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.414684][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.627779][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.627796][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.805933][ T5614] Bluetooth: hci0: command tx timeout [ 78.806353][ T5614] Bluetooth: hci3: command tx timeout [ 78.806783][ T5614] Bluetooth: hci1: command tx timeout [ 78.807185][ T5614] Bluetooth: hci2: command tx timeout [ 78.807611][ T5614] Bluetooth: hci4: command tx timeout [ 80.716332][ T5599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.040817][ T5599] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 81.060033][ T5599] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.060080][ T5599] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.060103][ T5599] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.060141][ T5599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.162999][ T5599] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 81.179570][ T5599] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 81.238853][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 81.238866][ T31] audit: type=1400 audit(1791655072.146:223): avc: denied { mount } for pid=5836 comm="syz.4.11" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.356149][ T10] cfg80211: failed to load regulatory.db [ 81.362063][ T5813] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.388986][ T31] audit: type=1400 audit(1791655072.296:224): avc: denied { connect } for pid=5811 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.392172][ T31] audit: type=1400 audit(1791655072.296:225): avc: denied { write } for pid=5811 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.444930][ T31] audit: type=1400 audit(1791655072.356:226): avc: denied { create } for pid=5811 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.447512][ T31] audit: type=1400 audit(1791655072.356:227): avc: denied { read } for pid=5811 comm="syz.0.8" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.449411][ T31] audit: type=1400 audit(1791655072.356:228): avc: denied { open } for pid=5811 comm="syz.0.8" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.449866][ T31] audit: type=1400 audit(1791655072.356:229): avc: denied { ioctl } for pid=5811 comm="syz.0.8" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.531684][ T31] audit: type=1400 audit(1791655072.386:230): avc: denied { setopt } for pid=5840 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.537574][ T31] audit: type=1400 audit(1791655072.446:231): avc: denied { read } for pid=5840 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.557130][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 81.564119][ T5845] xt_MASQUERADE: bad MAP_IPS. [ 81.615380][ T5845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 82.121670][ T189] usb 1-1: USB disconnect, device number 2 [ 82.213907][ T5601] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.310764][ T31] audit: type=1400 audit(1791655073.216:232): avc: denied { write } for pid=5851 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.312613][ T5852] lo: entered allmulticast mode [ 82.344020][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 82.364252][ T5601] usb 5-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 82.365240][ T5601] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.365316][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.365342][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.365364][ T5601] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.365400][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.373767][ T5601] usb 5-1: config 0 descriptor?? [ 82.495015][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 82.496027][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.496067][ T10] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 82.496087][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 51109, setting to 64 [ 82.496101][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.496118][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.500339][ T10] usb 2-1: config 0 descriptor?? [ 82.502851][ T5849] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 82.685467][ T5856] Zero length message leads to an empty skb [ 82.716007][ T5601] usbhid 5-1:0.0: can't add hid device: -71 [ 82.716120][ T5601] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.721782][ T5601] usb 5-1: USB disconnect, device number 2 [ 82.738353][ T25] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.905638][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 82.905678][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 82.908872][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.908896][ T25] usb 4-1: Product: 圸ꌟ娨姪꟡윽짚ꮜá³é¥¦å¸Žê§˜á‡ç »åž€Î´â˜²âº€ä¦šéµ–ì£±á•ƒå©€æ ¿â™‘é«†å¿¥åš·ë¿•éŽ›æˆ£ç­ [ 82.908917][ T25] usb 4-1: Manufacturer: à¡¡ [ 82.908932][ T25] usb 4-1: SerialNumber: Ѓ [ 82.921531][ T5860] netlink: zone id is out of range [ 82.921543][ T5860] netlink: zone id is out of range [ 82.921550][ T5860] netlink: zone id is out of range [ 82.921556][ T5860] netlink: zone id is out of range [ 82.921562][ T5860] netlink: zone id is out of range [ 82.921569][ T5860] netlink: zone id is out of range [ 82.921691][ T5860] netlink: zone id is out of range [ 82.921699][ T5860] netlink: zone id is out of range [ 82.921706][ T5860] netlink: zone id is out of range [ 82.921713][ T5860] netlink: zone id is out of range [ 83.247484][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 83.247579][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 83.255330][ T10] usb 2-1: USB disconnect, device number 2 [ 83.374189][ T5851] lo: left allmulticast mode [ 83.413111][ T25] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 83.749927][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 83.875316][ T25] usb 4-1: USB disconnect, device number 2 [ 84.459328][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.984854][ T5887] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 84.984882][ T5887] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 84.984905][ T5887] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 84.984918][ T5887] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 84.984925][ T5887] page dumped because: unmovable page [ 84.984934][ T5887] page_owner info is not present (never set?) [ 86.500860][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 86.500957][ T31] audit: type=1400 audit(1791655077.396:262): avc: denied { bind } for pid=5902 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.501110][ T31] audit: type=1400 audit(1791655077.406:263): avc: denied { setopt } for pid=5902 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.606256][ T31] audit: type=1400 audit(1791655077.506:264): avc: denied { accept } for pid=5902 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.609514][ T31] audit: type=1400 audit(1791655077.516:265): avc: denied { write } for pid=5902 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.979031][ T31] audit: type=1400 audit(1791655078.886:266): avc: denied { bind } for pid=5916 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.085666][ T31] audit: type=1400 audit(1791655078.986:267): avc: denied { write } for pid=5916 comm="syz.4.30" path="socket:[9261]" dev="sockfs" ino=9261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.095176][ T986] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.189865][ T5923] Bluetooth: MGMT ver 1.23 [ 88.338168][ T986] usb 1-1: Using ep0 maxpacket: 32 [ 88.340698][ T986] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 88.363457][ T986] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 88.363511][ T986] usb 1-1: config 0 has no interface number 0 [ 88.363716][ T986] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.363774][ T986] usb 1-1: config 0 interface 85 has no altsetting 0 [ 88.445191][ T31] audit: type=1400 audit(1791655079.356:268): avc: denied { create } for pid=5916 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.480663][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.480686][ T986] usb 1-1: Product: syz [ 88.480700][ T986] usb 1-1: Manufacturer: syz [ 88.480715][ T986] usb 1-1: SerialNumber: syz [ 88.571055][ T986] usb 1-1: config 0 descriptor?? [ 88.572938][ T31] audit: type=1400 audit(1791655079.476:269): avc: denied { write } for pid=5916 comm="syz.4.30" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.856769][ T31] audit: type=1400 audit(1791655079.736:270): avc: denied { read } for pid=5917 comm="syz.2.29" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.923802][ T31] audit: type=1400 audit(1791655079.746:271): avc: denied { open } for pid=5917 comm="syz.2.29" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.573494][ T5939] tipc: Started in network mode [ 89.573727][ T5939] tipc: Node identity ac14140f, cluster identity 4711 [ 89.579484][ T5939] tipc: New replicast peer: 255.255.255.255 [ 89.582438][ T5939] tipc: Enabled bearer , priority 10 [ 89.582909][ T5938] net_ratelimit: 147 callbacks suppressed [ 89.582962][ T5938] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.761247][ T5938] tipc: Started in network mode [ 89.761345][ T5938] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 89.762034][ T5938] tipc: Enabled bearer , priority 0 [ 89.854727][ T986] appletouch 1-1:0.85: Geyser mode initialized. [ 89.857956][ T986] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 90.605603][ T5724] tipc: Node number set to 2886997007 [ 90.773802][ T5724] tipc: Node number set to 11578026 [ 91.240327][ T5601] usb 1-1: USB disconnect, device number 3 [ 91.614458][ T5953] FAULT_INJECTION: forcing a failure. [ 91.614458][ T5953] name failslab, interval 1, probability 0, space 0, times 1 [ 91.615047][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 91.615071][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.615089][ T5953] Call Trace: [ 91.615096][ T5953] [ 91.615103][ T5953] dump_stack_lvl+0x100/0x190 [ 91.615141][ T5953] should_fail_ex.cold+0x5/0xa [ 91.615170][ T5953] should_failslab+0xc2/0x120 [ 91.615199][ T5953] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.615225][ T5953] ? skb_clone+0x190/0x400 [ 91.615250][ T5953] skb_clone+0x190/0x400 [ 91.615272][ T5953] netlink_deliver_tap+0xaed/0xcc0 [ 91.615307][ T5953] netlink_unicast+0x62b/0x850 [ 91.615340][ T5953] ? __pfx_netlink_unicast+0x10/0x10 [ 91.615378][ T5953] netlink_sendmsg+0x8b0/0xda0 [ 91.615412][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.615444][ T5953] ? selinux_socket_sendmsg+0x198/0x2f0 [ 91.615479][ T5953] ____sys_sendmsg+0xa4d/0xbe0 [ 91.615502][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.615533][ T5953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.615565][ T5953] ? lock_acquire+0x1d1/0x380 [ 91.615587][ T5953] ? get_pid_task+0x2a/0x250 [ 91.615617][ T5953] ___sys_sendmsg+0x190/0x1e0 [ 91.615645][ T5953] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.615670][ T5953] ? get_pid_task+0x106/0x250 [ 91.615708][ T5953] ? find_held_lock+0x2b/0x80 [ 91.615756][ T5953] __sys_sendmsg+0x160/0x210 [ 91.615777][ T5953] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.615815][ T5953] do_syscall_64+0x123/0x790 [ 91.615845][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.615870][ T5953] RIP: 0033:0x7f1379f9e1d9 [ 91.615887][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.615904][ T5953] RSP: 002b:00007f137af53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.615926][ T5953] RAX: ffffffffffffffda RBX: 00007f137a225fa0 RCX: 00007f1379f9e1d9 [ 91.615939][ T5953] RDX: 0000000000000030 RSI: 0000200000019680 RDI: 0000000000000005 [ 91.615951][ T5953] RBP: 00007f137af53090 R08: 0000000000000000 R09: 0000000000000000 [ 91.615962][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.615973][ T5953] R13: 00007f137a226038 R14: 00007f137a225fa0 R15: 00007ffd9b072c98 [ 91.616002][ T5953] [ 91.638712][ T5950] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 91.638746][ T5950] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 91.638819][ T5950] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 91.648171][ T5950] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 91.648225][ T5950] page dumped because: unmovable page [ 91.648272][ T5950] page_owner info is not present (never set?) [ 92.093979][ T5601] appletouch 1-1:0.85: input: appletouch disconnected [ 92.451967][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.478631][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.480531][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.480660][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.480764][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.481201][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.510774][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.543603][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.565372][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.570225][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 92.570238][ T31] audit: type=1400 audit(1791655083.476:288): avc: denied { read } for pid=5956 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.598799][ T31] audit: type=1400 audit(1791655083.506:289): avc: denied { create } for pid=5956 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.608742][ T31] audit: type=1400 audit(1791655083.516:290): avc: denied { create } for pid=5956 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 92.632285][ T31] audit: type=1400 audit(1791655083.536:291): avc: denied { setopt } for pid=5956 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.656346][ T31] audit: type=1400 audit(1791655083.566:292): avc: denied { ioctl } for pid=5956 comm="syz.0.39" path="socket:[9298]" dev="sockfs" ino=9298 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 92.678832][ T31] audit: type=1400 audit(1791655083.586:293): avc: denied { execute } for pid=5956 comm="syz.0.39" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 92.683471][ T31] audit: type=1400 audit(1791655083.586:294): avc: denied { setopt } for pid=5955 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.003667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.688449][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 95.198830][ T5993] ======================================================= [ 95.198830][ T5993] WARNING: The mand mount option has been deprecated and [ 95.198830][ T5993] and is ignored by this kernel. Remove the mand [ 95.198830][ T5993] option from the mount to silence this warning. [ 95.198830][ T5993] ======================================================= [ 95.273949][ T5991] 9pnet_virtio: no channels available for device syz [ 95.299941][ T31] audit: type=1400 audit(1791655086.206:295): avc: denied { unlink } for pid=5990 comm="syz.2.46" name="#1" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.303920][ T5708] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.325507][ T31] audit: type=1400 audit(1791655086.216:296): avc: denied { write } for pid=5990 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.555910][ T5708] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 95.560991][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.561109][ T5708] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.027372][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.027399][ T5708] usb 5-1: Product: syz [ 96.027414][ T5708] usb 5-1: Manufacturer: syz [ 96.027429][ T5708] usb 5-1: SerialNumber: syz [ 96.060083][ T5708] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 96.092591][ T5708] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 96.092591][ T5708] Please send a copy of this message to and [ 96.604605][ T31] audit: type=1400 audit(1791655087.516:297): avc: denied { bind } for pid=5988 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.030774][ T6012] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 97.030800][ T6012] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 97.030820][ T6012] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 97.030831][ T6012] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 97.030837][ T6012] page dumped because: unmovable page [ 97.030843][ T6012] page_owner info is not present (never set?) [ 97.058822][ T5708] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 97.126830][ T5708] usb 5-1: USB disconnect, device number 3 [ 97.871575][ T6014] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.52'. [ 97.907384][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 97.907398][ T31] audit: type=1400 audit(1791655088.816:302): avc: denied { write } for pid=6015 comm="syz.1.53" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.081144][ T31] audit: type=1400 audit(1791655088.986:303): avc: denied { mount } for pid=6017 comm="syz.3.54" name="/" dev="hugetlbfs" ino=10373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 98.151572][ T31] audit: type=1400 audit(1791655089.056:304): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 98.741159][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 98.831013][ T31] audit: type=1400 audit(1791655089.736:305): avc: denied { create } for pid=6025 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.865030][ T31] audit: type=1400 audit(1791655089.776:306): avc: denied { write } for pid=6025 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.092722][ T31] audit: type=1400 audit(1791655089.996:307): avc: denied { append } for pid=6031 comm="syz.2.59" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.128025][ T6033] dlm: no local IP address has been set [ 99.128039][ T6033] dlm: cannot start dlm midcomms -107 [ 100.488575][ T31] audit: type=1400 audit(1791655091.396:308): avc: denied { bind } for pid=6048 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.489608][ T31] audit: type=1400 audit(1791655091.396:309): avc: denied { node_bind } for pid=6048 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 100.623446][ T5709] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.773311][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 100.776110][ T5709] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 100.842388][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.842418][ T5709] usb 2-1: Product: syz [ 100.842459][ T5709] usb 2-1: Manufacturer: syz [ 100.842497][ T5709] usb 2-1: SerialNumber: syz [ 100.971128][ T5709] usb 2-1: config 0 descriptor?? [ 101.109100][ T5709] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 101.134286][ T5709] dvb-usb: bulk message failed: -22 (4/0) [ 101.134422][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 101.136711][ T5709] dvb-usb: bulk message failed: -22 (5/0) [ 101.137499][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 101.650296][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.695932][ T5709] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 101.695961][ T5709] usb 2-1: media controller created [ 101.732407][ T31] audit: type=1804 audit(1791655092.637:310): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.64" name="/newroot/10/file0" dev="tmpfs" ino=73 res=1 errno=0 [ 102.168054][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.456750][ T31] audit: type=1400 audit(1791655093.357:311): avc: denied { read write } for pid=6058 comm="syz.3.66" name="sg0" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.740694][ T5709] usb 2-1: selecting invalid altsetting 3 [ 102.740713][ T5709] ttusb2: set interface to alts=3 failed [ 102.840418][ T6065] FAULT_INJECTION: forcing a failure. [ 102.840418][ T6065] name failslab, interval 1, probability 0, space 0, times 0 [ 102.840445][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 102.840466][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.840477][ T6065] Call Trace: [ 102.840484][ T6065] [ 102.840491][ T6065] dump_stack_lvl+0x100/0x190 [ 102.840525][ T6065] should_fail_ex.cold+0x5/0xa [ 102.840554][ T6065] should_failslab+0xc2/0x120 [ 102.840582][ T6065] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 102.840607][ T6065] ? sidtab_sid2str_get+0x84/0x670 [ 102.840627][ T6065] ? sidtab_sid2str_get+0x17a/0x670 [ 102.840652][ T6065] kmemdup_noprof+0x29/0x60 [ 102.840674][ T6065] sidtab_sid2str_get+0x17a/0x670 [ 102.840697][ T6065] security_sid_to_context_core+0x373/0x700 [ 102.840731][ T6065] avc_audit_post_callback+0x1aa/0x910 [ 102.840752][ T6065] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 102.840774][ T6065] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 102.840792][ T6065] ? skb_put+0x138/0x180 [ 102.840817][ T6065] ? audit_log_n_string+0x2a3/0x5a0 [ 102.840847][ T6065] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 102.840867][ T6065] common_lsm_audit+0x23f/0x2b0 [ 102.840896][ T6065] ? __pfx_common_lsm_audit+0x10/0x10 [ 102.840926][ T6065] ? avc_update_node.isra.0+0x578/0xb90 [ 102.840944][ T6065] ? psi_trigger_create_rtpoll_worker+0x58/0x140 [ 102.840971][ T6065] slow_avc_audit+0x186/0x210 [ 102.840993][ T6065] ? __pfx_slow_avc_audit+0x10/0x10 [ 102.841021][ T6065] ? avc_perm_nonode+0x164/0x180 [ 102.841041][ T6065] ? avc_perm_nonode+0xf8/0x180 [ 102.841066][ T6065] audit_inode_permission+0x1ea/0x2a0 [ 102.841090][ T6065] ? __pfx_audit_inode_permission+0x10/0x10 [ 102.841125][ T6065] selinux_inode_permission+0x7ed/0x1130 [ 102.841154][ T6065] ? __pfx_selinux_inode_permission+0x10/0x10 [ 102.841174][ T6065] ? lock_acquire+0x1d1/0x380 [ 102.841197][ T6065] ? do_raw_spin_lock+0x128/0x260 [ 102.841221][ T6065] ? find_held_lock+0x2b/0x80 [ 102.841248][ T6065] ? inode_permission+0x5db/0x620 [ 102.841268][ T6065] ? inode_permission+0x5db/0x620 [ 102.841293][ T6065] security_inode_permission+0xda/0x250 [ 102.841327][ T6065] inode_permission+0x36c/0x620 [ 102.841353][ T6065] link_path_walk+0xcff/0x1cc0 [ 102.841388][ T6065] __filename_parentat+0x213/0x740 [ 102.841418][ T6065] ? __pfx___filename_parentat+0x10/0x10 [ 102.841470][ T6065] ? __lock_acquire+0x5c0/0x1f40 [ 102.841498][ T6065] filename_create+0xbe/0x400 [ 102.841523][ T6065] ? __pfx_filename_create+0x10/0x10 [ 102.841549][ T6065] ? lock_acquire+0x1d1/0x380 [ 102.841573][ T6065] ? find_held_lock+0x2b/0x80 [ 102.841604][ T6065] filename_mkdirat+0xb9/0x5e0 [ 102.841637][ T6065] ? __pfx_filename_mkdirat+0x10/0x10 [ 102.841664][ T6065] ? strncpy_from_user+0x19d/0x2d0 [ 102.841697][ T6065] ? do_getname+0x191/0x390 [ 102.841720][ T6065] __x64_sys_mkdirat+0x89/0xc0 [ 102.841749][ T6065] do_syscall_64+0x123/0x790 [ 102.841780][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.841800][ T6065] RIP: 0033:0x7f1379f9e1d9 [ 102.841817][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.841833][ T6065] RSP: 002b:00007f137af11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.841852][ T6065] RAX: ffffffffffffffda RBX: 00007f137a226180 RCX: 00007f1379f9e1d9 [ 102.841865][ T6065] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 102.841876][ T6065] RBP: 00007f137af11090 R08: 0000000000000000 R09: 0000000000000000 [ 102.841888][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.841899][ T6065] R13: 00007f137a226218 R14: 00007f137a226180 R15: 00007ffd9b072c98 [ 102.841928][ T6065] [ 103.282277][ T6069] ip_tables: iptables: counters copy to user failed while replacing table [ 103.381945][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 103.382920][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 103.382952][ T31] audit: type=1400 audit(1791655094.287:319): avc: denied { create } for pid=6068 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.383240][ T31] audit: type=1400 audit(1791655094.287:320): avc: denied { write } for pid=6068 comm="syz.2.67" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.048496][ T6070] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 104.230301][ T5709] DVB: Unable to find symbol tda10086_attach() [ 104.230326][ T5709] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 104.235339][ T5709] dvb-usb: bulk message failed: -22 (4/0) [ 104.235355][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 104.235451][ T5709] dvb-usb: bulk message failed: -22 (5/0) [ 104.235464][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 104.235517][ T5709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 104.287626][ T5709] usb 2-1: USB disconnect, device number 3 [ 104.324629][ T6064] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 104.625011][ T5709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 104.661502][ T31] audit: type=1400 audit(1791655095.567:321): avc: denied { read write } for pid=6074 comm="syz.4.69" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.661870][ T31] audit: type=1400 audit(1791655095.567:322): avc: denied { open } for pid=6074 comm="syz.4.69" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.728062][ T6081] netlink: 64 bytes leftover after parsing attributes in process `syz.2.70'. [ 105.265575][ T6076] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.302646][ T31] audit: type=1400 audit(1791655096.177:323): avc: denied { setopt } for pid=6066 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.480468][ T31] audit: type=1400 audit(1791655096.387:324): avc: denied { create } for pid=6082 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.481054][ T31] audit: type=1400 audit(1791655096.387:325): avc: denied { write } for pid=6082 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.481323][ T31] audit: type=1400 audit(1791655096.387:326): avc: denied { read } for pid=6082 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.589814][ T6086] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.589933][ T6086] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 105.752967][ T5601] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 106.316507][ T6095] netlink: 'syz.1.73': attribute type 3 has an invalid length. [ 107.308046][ T5601] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 107.313409][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 60194, setting to 64 [ 107.315487][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.315510][ T5601] usb 1-1: Product: syz [ 107.315524][ T5601] usb 1-1: Manufacturer: syz [ 107.315538][ T5601] usb 1-1: SerialNumber: syz [ 107.333177][ T31] audit: type=1400 audit(1791655098.227:327): avc: denied { connect } for pid=6089 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.333419][ T31] audit: type=1400 audit(1791655098.227:328): avc: denied { name_connect } for pid=6089 comm="syz.4.74" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 107.725325][ T5601] usb 1-1: config 0 descriptor?? [ 107.726385][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.755169][ T5601] hub 1-1:0.0: bad descriptor, ignoring hub [ 107.755192][ T5601] hub 1-1:0.0: probe with driver hub failed with error -5 [ 107.784960][ T5601] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 107.938228][ T5599] usb 1-1: USB disconnect, device number 4 [ 108.023199][ T6097] capability: warning: `syz.2.72' uses 32-bit capabilities (legacy support in use) [ 108.030355][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 108.426364][ T6110] fuse: Bad value for 'fd' [ 108.426455][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 108.426468][ T31] audit: type=1400 audit(1791655099.337:330): avc: denied { mounton } for pid=6107 comm="syz.1.77" path="/16/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 108.649652][ T31] audit: type=1400 audit(1791655099.557:331): avc: denied { execute } for pid=6113 comm="syz.2.79" path="/17/file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.649691][ T31] audit: type=1804 audit(1791655099.557:332): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.79" name="/newroot/17/file0" dev="tmpfs" ino=127 res=1 errno=0 [ 109.240732][ T31] audit: type=1400 audit(1791655100.147:333): avc: denied { write } for pid=6116 comm="syz.4.76" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.306623][ T31] audit: type=1400 audit(1791655100.217:334): avc: denied { ioctl } for pid=6116 comm="syz.4.76" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.312208][ T31] audit: type=1400 audit(1791655100.217:335): avc: denied { set_context_mgr } for pid=6116 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.382802][ T31] audit: type=1400 audit(1791655100.287:336): avc: denied { map } for pid=6116 comm="syz.4.76" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.391300][ T31] audit: type=1400 audit(1791655100.297:337): avc: denied { call } for pid=6116 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.416696][ T31] audit: type=1400 audit(1791655100.297:338): avc: denied { transfer } for pid=6116 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.581678][ T31] audit: type=1400 audit(1791655100.487:339): avc: denied { write } for pid=6116 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.745482][ T6117] syz.4.76 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 109.746816][ T6117] CPU: 0 UID: 0 PID: 6117 Comm: syz.4.76 Not tainted syzkaller #0 PREEMPT(full) [ 109.746844][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.746857][ T6117] Call Trace: [ 109.746864][ T6117] [ 109.746873][ T6117] dump_stack_lvl+0x100/0x190 [ 109.746910][ T6117] dump_header+0xfb/0x606 [ 109.746938][ T6117] out_of_memory.cold+0xd/0x170 [ 109.746969][ T6117] ? __pfx_out_of_memory+0x10/0x10 [ 109.747010][ T6117] mem_cgroup_out_of_memory+0xc6/0x130 [ 109.747037][ T6117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 109.747062][ T6117] ? find_held_lock+0x2b/0x80 [ 109.747099][ T6117] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.747127][ T6117] ? _raw_spin_unlock+0x28/0x50 [ 109.747156][ T6117] try_charge_memcg+0x783/0xf60 [ 109.747186][ T6117] ? __pfx_try_charge_memcg+0x10/0x10 [ 109.747207][ T6117] ? find_held_lock+0x2b/0x80 [ 109.747236][ T6117] ? rcu_read_unlock+0x17/0x60 [ 109.747257][ T6117] ? rcu_read_unlock+0x17/0x60 [ 109.747289][ T6117] obj_cgroup_charge_pages+0x2b/0x1f0 [ 109.747315][ T6117] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 109.747348][ T6117] ? kasan_unpoison+0x27/0x60 [ 109.747376][ T6117] __kmalloc_cache_noprof+0x52a/0x6d0 [ 109.747399][ T6117] ? mem_cgroup_css_alloc+0x11f/0x1d10 [ 109.747424][ T6117] ? mem_cgroup_css_alloc+0x8cd/0x1d10 [ 109.747455][ T6117] mem_cgroup_css_alloc+0x8cd/0x1d10 [ 109.747490][ T6117] cgroup_apply_control_enable+0x602/0xdd0 [ 109.747529][ T6117] cgroup_mkdir+0x57f/0x1330 [ 109.747559][ T6117] ? __pfx_cgroup_mkdir+0x10/0x10 [ 109.747588][ T6117] kernfs_iop_mkdir+0x111/0x190 [ 109.747611][ T6117] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 109.747640][ T6117] vfs_mkdir+0x364/0x850 [ 109.747670][ T6117] filename_mkdirat+0x48b/0x5e0 [ 109.747710][ T6117] ? __pfx_filename_mkdirat+0x10/0x10 [ 109.747743][ T6117] ? strncpy_from_user+0x19d/0x2d0 [ 109.747779][ T6117] ? do_getname+0x191/0x390 [ 109.747804][ T6117] __x64_sys_mkdirat+0x89/0xc0 [ 109.747836][ T6117] do_syscall_64+0x123/0x790 [ 109.747868][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.747890][ T6117] RIP: 0033:0x7f378d79e1d9 [ 109.747908][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.747926][ T6117] RSP: 002b:00007f378e6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.747946][ T6117] RAX: ffffffffffffffda RBX: 00007f378da25fa0 RCX: 00007f378d79e1d9 [ 109.747959][ T6117] RDX: 0000000000000020 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 109.747972][ T6117] RBP: 00007f378d835888 R08: 0000000000000000 R09: 0000000000000000 [ 109.747985][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.747996][ T6117] R13: 00007f378da26038 R14: 00007f378da25fa0 R15: 00007fffda9ea9a8 [ 109.748028][ T6117] [ 109.750869][ T6117] memory: usage 0kB, limit 0kB, failcnt 19 [ 109.750950][ T6117] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 109.751071][ T6117] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 109.751162][ T6117] Memory cgroup stats for /syz4/test: [ 109.804422][ T6117] cache 0 [ 109.804433][ T6117] rss 0 [ 109.804440][ T6117] rss_huge 0 [ 109.804448][ T6117] shmem 0 [ 109.804455][ T6117] mapped_file 0 [ 109.804463][ T6117] dirty 0 [ 109.804470][ T6117] writeback 0 [ 109.804478][ T6117] workingset_refault_anon 0 [ 109.804486][ T6117] workingset_refault_file 0 [ 109.804494][ T6117] swap 0 [ 109.804501][ T6117] swapcached 0 [ 109.804509][ T6117] pgpgin 0 [ 109.804516][ T6117] pgpgout 0 [ 109.804523][ T6117] pgfault 0 [ 109.804531][ T6117] pgmajfault 0 [ 109.804538][ T6117] inactive_anon 0 [ 109.804546][ T6117] active_anon 0 [ 109.804553][ T6117] inactive_file 0 [ 109.804561][ T6117] active_file 0 [ 109.804568][ T6117] unevictable 0 [ 109.804576][ T6117] hierarchical_memory_limit 0 [ 109.804584][ T6117] hierarchical_memsw_limit 9223372036854771712 [ 109.804593][ T6117] total_cache 0 [ 109.804601][ T6117] total_rss 0 [ 109.804608][ T6117] total_rss_huge 0 [ 109.804616][ T6117] total_shmem 0 [ 109.804623][ T6117] total_mapped_file 0 [ 109.804631][ T6117] total_dirty 0 [ 109.804638][ T6117] total_writeback 0 [ 109.804646][ T6117] total_workingset_refault_anon 0 [ 109.804667][ T6117] total_workingset_refault_file 0 [ 109.804676][ T6117] total_swap 0 [ 109.804683][ T6117] total_swapcached 0 [ 109.804697][ T6117] total_pgpgin 0 [ 109.804704][ T6117] total_pgpgout 0 [ 109.804711][ T6117] total_pgfault 0 [ 109.804719][ T6117] total_pgmajfault 0 [ 109.804726][ T6117] total_inactive_anon 0 [ 109.804734][ T6117] total_active_anon 0 [ 109.804742][ T6117] total_inactive_file 0 [ 109.804750][ T6117] total_active_file 0 [ 109.804758][ T6117] total_unevictable 0 [ 109.804766][ T6117] anon_cost 0 [ 109.804773][ T6117] file_cost 0 [ 109.804782][ T6117] Out of memory and no killable processes... [ 109.852849][ T6115] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 109.852871][ T6115] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 109.852898][ T6115] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 109.852918][ T6115] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 109.852929][ T6115] page dumped because: unmovable page [ 109.852939][ T6115] page_owner info is not present (never set?) [ 110.606747][ T5601] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.771739][ T5601] usb 1-1: Using ep0 maxpacket: 8 [ 110.794847][ T5601] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.810006][ T5601] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 110.810049][ T5601] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 110.810075][ T5601] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.810097][ T5601] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 110.810120][ T5601] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 110.810141][ T5601] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.810175][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.841767][ T6144] comedi comedi0: lab-pc-1200: a I/O base address must be specified [ 111.064478][ T5601] usb 1-1: usb_control_msg returned -32 [ 111.064520][ T5601] usbtmc 1-1:16.0: can't read capabilities [ 111.374117][ T6155] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 111.998707][ T6155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 111.998733][ T6155] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.102314][ T6155] vhci_hcd vhci_hcd.0: Device attached [ 112.231688][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 112.232353][ T6162] usbtmc 1-1:16.0: Unable to send data, error -71 [ 112.248624][ T6162] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 112.344695][ T6158] vhci_hcd: connection closed [ 112.377253][ T13] vhci_hcd vhci_hcd.0: stop threads [ 112.399289][ T13] vhci_hcd vhci_hcd.0: release socket [ 112.424271][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 112.489626][ T5601] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 112.489703][ T5601] usb 33-1: enqueue for inactive port 0 [ 112.592610][ T5601] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 113.415117][ T5708] usb 1-1: USB disconnect, device number 5 [ 113.504554][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 113.504569][ T31] audit: type=1804 audit(1791655104.417:353): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.92" name="/newroot/14/file0" dev="tmpfs" ino=97 res=1 errno=0 [ 113.642608][ T5599] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.802626][ T6183] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 113.802648][ T6183] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 113.802676][ T6183] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 113.802692][ T6183] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 113.802700][ T6183] page dumped because: unmovable page [ 113.802706][ T6183] page_owner info is not present (never set?) [ 113.806973][ T5599] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 113.879759][ T5599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.880011][ T5599] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.880134][ T5599] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.881606][ T5599] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.903915][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.962494][ T31] audit: type=1400 audit(1791655104.857:354): avc: denied { search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.427377][ T6185] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 (while UP) [ 114.453203][ T31] audit: type=1400 audit(1791655105.367:355): avc: denied { create } for pid=6187 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.703747][ T5599] gud 4-1:1.0: Failed to add properties (error=-71) [ 114.703778][ T5599] gud 4-1:1.0: probe with driver gud failed with error -71 [ 114.722619][ T5708] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.752658][ T5599] usb 4-1: USB disconnect, device number 3 [ 114.872967][ T5708] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 114.874098][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.874137][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.874175][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.033519][ T31] audit: type=1400 audit(1791655105.947:356): avc: denied { ioctl } for pid=6199 comm="syz.1.99" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9635 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.034832][ T31] audit: type=1400 audit(1791655105.947:357): avc: denied { setopt } for pid=6199 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.039603][ T6205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.088434][ T31] audit: type=1400 audit(1791655105.997:358): avc: denied { read write } for pid=6187 comm="syz.4.94" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 115.090146][ T31] audit: type=1400 audit(1791655105.997:359): avc: denied { open } for pid=6187 comm="syz.4.94" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 115.094366][ T5708] usb 5-1: USB disconnect, device number 4 [ 115.310634][ T31] audit: type=1400 audit(1791655106.217:360): avc: denied { write } for pid=6206 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.398309][ T6208] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 115.398383][ T6208] CIFS mount error: No usable UNC path provided in device string! [ 115.398383][ T6208] [ 115.398605][ T6208] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.561927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678c000: rx timeout, send abort [ 116.062634][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678c000: abort rx timeout. Force session deactivation [ 116.063489][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678c400: rx timeout, send abort [ 116.266080][ T31] audit: type=1400 audit(1791655107.177:361): avc: denied { name_bind } for pid=6209 comm="syz.2.104" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 116.297211][ T31] audit: type=1400 audit(1791655107.177:362): avc: denied { node_bind } for pid=6209 comm="syz.2.104" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 116.563501][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805678c400: abort rx timeout. Force session deactivation [ 117.192646][ T6217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 117.420205][ T6215] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 117.420281][ T6215] overlayfs: failed to look up (tracing) for ino (-66) [ 117.753675][ T6214] syzkaller0: entered promiscuous mode [ 117.753699][ T6214] syzkaller0: entered allmulticast mode [ 118.292410][ T6230] tmpfs: Using encoding : utf8-12.1.0 [ 119.433362][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 119.433378][ T31] audit: type=1400 audit(1791655110.348:366): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.435400][ T31] audit: type=1400 audit(1791655110.348:367): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.435593][ T31] audit: type=1400 audit(1791655110.348:368): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.436067][ T31] audit: type=1400 audit(1791655110.348:369): avc: denied { read } for pid=5263 comm="dhcpcd" name="n30" dev="tmpfs" ino=1994 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.437894][ T31] audit: type=1400 audit(1791655110.348:370): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=1994 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.438208][ T31] audit: type=1400 audit(1791655110.348:371): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=1994 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.155057][ T31] audit: type=1400 audit(1791655111.068:372): avc: denied { read } for pid=6245 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.155730][ T31] audit: type=1400 audit(1791655111.068:373): avc: denied { read open } for pid=6245 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.156336][ T31] audit: type=1400 audit(1791655111.068:374): avc: denied { getattr } for pid=6245 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.472423][ T31] audit: type=1400 audit(1791655111.348:375): avc: denied { mount } for pid=6246 comm="syz.0.111" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.105964][ T6248] CUSE: unknown device info "" [ 121.105979][ T6248] CUSE: unknown device info "" [ 121.105986][ T6248] CUSE: unknown device info "ÿw" [ 121.105994][ T6248] CUSE: zero length info key specified [ 121.892084][ T189] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.892214][ T5601] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.068932][ T189] usb 4-1: device descriptor read/64, error -71 [ 122.102211][ T5601] usb 5-1: Using ep0 maxpacket: 32 [ 122.198838][ T6279] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 122.198970][ T6279] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 122.199231][ T6279] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 122.199365][ T6279] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 122.199400][ T6279] page dumped because: unmovable page [ 122.199559][ T6279] page_owner info is not present (never set?) [ 122.257951][ T5601] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 122.315836][ T5601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.315859][ T5601] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 122.315900][ T5601] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 122.315934][ T5601] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 122.315968][ T5601] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.315987][ T5601] usb 5-1: config 1 interface 1 has no altsetting 0 [ 122.751289][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.751315][ T5601] usb 5-1: Product: syz [ 122.751329][ T5601] usb 5-1: Manufacturer: syz [ 122.751342][ T5601] usb 5-1: SerialNumber: syz [ 122.931993][ T189] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.063745][ T189] usb 4-1: device descriptor read/64, error -71 [ 123.176362][ T189] usb usb4-port1: attempt power cycle [ 123.200894][ T5601] usb 5-1: selecting invalid altsetting 0 [ 123.376131][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 123.394345][ T5601] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 123.482511][ T5599] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.514059][ T189] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.543059][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.544648][ T189] usb 4-1: device descriptor read/8, error -71 [ 123.642360][ T5724] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.643350][ T5599] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 123.644521][ T5599] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 123.644547][ T5599] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 123.644570][ T5599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.644635][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.654453][ T6282] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 123.654570][ T6282] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 123.661730][ T5599] pl2303 3-1:1.0: pl2303 converter detected [ 123.689213][ T5599] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 123.712430][ T10] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 123.714530][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.714570][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.714625][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.793040][ T189] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.815062][ T189] usb 4-1: device descriptor read/8, error -71 [ 123.815334][ T5724] usb 1-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 123.820794][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.820857][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.820883][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.820905][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.820940][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.863701][ T5724] usb 1-1: config 0 descriptor?? [ 123.922353][ T189] usb usb4-port1: unable to enumerate USB device [ 124.022895][ T189] usb 2-1: USB disconnect, device number 4 [ 124.064687][ T6282] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 124.065167][ T6282] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 124.065526][ T6282] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 124.067760][ T6282] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 124.075402][ T5724] usbhid 1-1:0.0: can't add hid device: -71 [ 124.075752][ T5724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 124.076685][ T6282] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 124.105417][ T5724] usb 1-1: USB disconnect, device number 6 [ 124.197349][ T5601] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 124.343305][ T6282] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 124.344856][ T6282] pl2303 ttyUSB0: error sending break = -32 [ 124.359135][ T5601] usb 5-1: USB disconnect, device number 5 [ 124.385526][ T5724] usb 3-1: USB disconnect, device number 3 [ 124.427743][ T5724] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 124.432492][ T5724] pl2303 3-1:1.0: device disconnected [ 124.485899][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.527351][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 125.527385][ T31] audit: type=1400 audit(1791655116.438:397): avc: denied { read } for pid=6317 comm="syz.4.124" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.563791][ T31] audit: type=1400 audit(1791655116.438:398): avc: denied { open } for pid=6317 comm="syz.4.124" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.815626][ T6322] jffs2: notice: (6322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.914292][ T5599] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 126.301769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 126.361770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 126.421766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 126.561857][ T5599] usb 4-1: device descriptor read/64, error -71 [ 126.729079][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 126.841781][ T5599] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 126.871893][ T986] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.972279][ T5599] usb 4-1: device descriptor read/64, error -71 [ 127.042186][ T6339] kAFS: No cell specified [ 127.089266][ T5599] usb usb4-port1: attempt power cycle [ 127.111055][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 127.167996][ T986] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 127.201722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 127.216344][ T986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.216413][ T986] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 127.216464][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.216503][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.606547][ T5599] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 127.638485][ T5599] usb 4-1: device descriptor read/8, error -71 [ 127.791861][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.791901][ T986] usb 2-1: Product: syz [ 127.791931][ T986] usb 2-1: Manufacturer: syz [ 127.791961][ T986] usb 2-1: SerialNumber: syz [ 128.081603][ T5599] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 128.106133][ T5599] usb 4-1: device descriptor read/8, error -71 [ 128.387500][ T5599] usb usb4-port1: unable to enumerate USB device [ 128.463122][ T986] usb 2-1: config 0 descriptor?? [ 128.469229][ T986] appledisplay 2-1:0.0: Submitting URB failed [ 128.469452][ T986] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 128.570552][ T6350] ip6t_rt: address list match requested but addrnr is 0 [ 128.587919][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 128.694146][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 128.694860][ T6355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 128.696174][ T986] usb 2-1: USB disconnect, device number 5 [ 128.881892][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.907428][ T6362] nvme_fabrics: found same hostid f2477788-d05c-46c2-9cb5-eb496fb01add but different hostnqn n [ 129.062467][ T25] usb 3-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 129.064053][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.064139][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.064179][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.064216][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.064283][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.069936][ T25] usb 3-1: config 0 descriptor?? [ 129.142169][ T5601] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.191653][ T5599] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.281550][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 129.282141][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.291634][ T5601] usb 1-1: Using ep0 maxpacket: 16 [ 129.293497][ T5601] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.293535][ T5601] usb 1-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 129.294411][ T5601] usb 1-1: config 3 interface 1 has no altsetting 0 [ 129.298278][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.298301][ T5601] usb 1-1: SerialNumber: syz [ 129.356783][ T25] usb 3-1: USB disconnect, device number 4 [ 129.373637][ T5599] usb 5-1: Using ep0 maxpacket: 16 [ 129.379220][ T5599] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.385172][ T5599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.385200][ T5599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.385221][ T5599] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.385273][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.464885][ T5599] usb 5-1: config 0 descriptor?? [ 129.604318][ T5601] usb 1-1: selecting invalid altsetting 0 [ 129.609146][ T5601] rndis_host 1-1:3.0: probe with driver rndis_host failed with error -22 [ 129.620484][ T5601] usb 1-1: USB disconnect, device number 7 [ 129.947599][ T31] audit: type=1400 audit(1791655120.858:399): avc: denied { write } for pid=6370 comm="syz.3.138" name="usb_gadget" dev="configfs" ino=3734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.342361][ T6373] Illegal XDP return value 2222030000 on prog (id 13) dev N/A, expect packet loss! [ 130.354574][ T6373] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 130.354621][ T6373] Error validating options; rc = [-22] [ 130.357611][ T6373] vlan0: entered promiscuous mode [ 130.366116][ T6373] team0: Port device vlan0 added [ 130.476605][ T31] audit: type=1400 audit(1791655121.388:400): avc: denied { map } for pid=6374 comm="syz.2.139" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.476673][ T31] audit: type=1400 audit(1791655121.388:401): avc: denied { execute } for pid=6374 comm="syz.2.139" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.139353][ T31] audit: type=1326 audit(1791655122.048:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.139450][ T31] audit: type=1326 audit(1791655122.048:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.208037][ T31] audit: type=1326 audit(1791655122.118:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.208229][ T31] audit: type=1326 audit(1791655122.118:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.209644][ T31] audit: type=1326 audit(1791655122.118:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.244157][ T31] audit: type=1326 audit(1791655122.158:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.244206][ T31] audit: type=1326 audit(1791655122.158:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.244245][ T31] audit: type=1326 audit(1791655122.158:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.274363][ T31] audit: type=1326 audit(1791655122.178:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 131.274407][ T31] audit: type=1326 audit(1791655122.178:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.1.141" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2bdf9e1d9 code=0x7ffc0000 [ 132.213949][ T5599] usbhid 5-1:0.0: can't add hid device: -71 [ 132.214034][ T5599] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.239412][ T5599] usb 5-1: USB disconnect, device number 6 [ 132.550253][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.550908][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.601408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.075772][ T6409] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 134.180931][ T6411] netlink: 220 bytes leftover after parsing attributes in process `syz.2.151'. [ 134.180953][ T6411] tc_dump_action: action bad kind [ 134.525444][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 134.540201][ T5724] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.691352][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 134.691935][ T5724] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 134.727855][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.727885][ T5724] usb 3-1: Product: syz [ 134.727900][ T5724] usb 3-1: Manufacturer: syz [ 134.727915][ T5724] usb 3-1: SerialNumber: syz [ 134.740453][ T5724] usb 3-1: config 0 descriptor?? [ 134.774262][ T5724] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 134.801401][ T5599] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.281491][ T5724] gspca_sonixj: reg_w1 err -110 [ 135.281570][ T5724] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 240.135386][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 240.142375][ C0] rcu: 1-...!: (1 GPs behind) idle=f4b4/1/0x4000000000000000 softirq=18438/18438 fqs=467 [ 240.152257][ C0] rcu: (detected by 0, t=10502 jiffies, g=16653, q=634 ncpus=2) [ 240.159995][ C0] Sending NMI from CPU 0 to CPUs 1: [ 240.165196][ C1] NMI backtrace for cpu 1 [ 240.165218][ C1] CPU: 1 UID: 0 PID: 6423 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 240.165240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.165255][ C1] RIP: 0010:advance_sched+0x215/0xd20 [ 240.165285][ C1] Code: 48 85 db 0f 84 49 08 00 00 e8 c7 25 30 f8 48 8d bb 50 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 2f 0a 00 00 48 8b 44 24 08 48 8d bd 40 01 00 00 48 89 fa 4c [ 240.165299][ C1] RSP: 0018:ffffc90000a18de0 EFLAGS: 00000046 [ 240.165313][ C1] RAX: dffffc0000000000 RBX: ffff88807e1df400 RCX: 0000000001000002 [ 240.165324][ C1] RDX: 1ffff1100fc3beaa RSI: ffffffff89dc2089 RDI: ffff88807e1df550 [ 240.165335][ C1] RBP: ffff88807e1dd800 R08: 0000000000000005 R09: 0000000000000000 [ 240.165345][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 240.165354][ C1] R13: ffffffff89dc1e90 R14: ffff8880b8328640 R15: ffff8880b8328690 [ 240.165366][ C1] FS: 00007faf46bff6c0(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 240.165382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.165393][ C1] CR2: 0000001b327fdff8 CR3: 00000000582b8000 CR4: 00000000003526f0 [ 240.165403][ C1] Call Trace: [ 240.165409][ C1] [ 240.165417][ C1] ? find_held_lock+0x2b/0x80 [ 240.165444][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 240.165466][ C1] ? __pfx_advance_sched+0x10/0x10 [ 240.165483][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 240.165513][ C1] hrtimer_interrupt+0x441/0xaa0 [ 240.165535][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 240.165558][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 240.165582][ C1] [ 240.165588][ C1] [ 240.165593][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.165616][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 240.165638][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 1a 10 f6 48 89 df e8 fe 70 10 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 54 ff f5 65 48 83 3d b4 43 b6 09 00 74 16 5b [ 240.165652][ C1] RSP: 0018:ffffc90005537d80 EFLAGS: 00000246 [ 240.165664][ C1] RAX: 0000000000000006 RBX: ffffffff9c9b5438 RCX: 0000000000000000 [ 240.165675][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e34cb RDI: ffffffff8c625580 [ 240.165685][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 240.165695][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000aa6fb7 [ 240.165705][ C1] R13: 000000000c6b172a R14: 000000000c6b172a R15: 0000000000000000 [ 240.165723][ C1] do_settimeofday64+0x326/0x4d0 [ 240.165744][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 240.165762][ C1] ? security_capable+0x80/0x260 [ 240.165780][ C1] ? sdio_add_func+0x216/0x450 [ 240.165801][ C1] ? capable+0xd3/0xf0 [ 240.165818][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 240.165840][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 240.165858][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 240.165879][ C1] do_syscall_64+0x123/0x790 [ 240.165902][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.165919][ C1] RIP: 0033:0x7faf45d9e1d9 [ 240.165936][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.165950][ C1] RSP: 002b:00007faf46bff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 240.165965][ C1] RAX: ffffffffffffffda RBX: 00007faf46026090 RCX: 00007faf45d9e1d9 [ 240.165976][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 240.165986][ C1] RBP: 00007faf45e35888 R08: 0000000000000000 R09: 0000000000000000 [ 240.165996][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.166005][ C1] R13: 00007faf46026128 R14: 00007faf46026090 R15: 00007ffcab5c4238 [ 240.166024][ C1] [ 240.535906][ C0] rcu: rcu_preempt kthread starved for 9568 jiffies! g16653 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 240.546824][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 240.556774][ C0] rcu: RCU grace-period kthread stack dump: [ 240.562639][ C0] task:rcu_preempt state:R running task stack:29152 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 240.576138][ C0] Call Trace: [ 240.579398][ C0] [ 240.582318][ C0] __schedule+0x1259/0x6920 [ 240.586817][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 240.591761][ C0] ? __pfx___schedule+0x10/0x10 [ 240.596609][ C0] ? find_held_lock+0x2b/0x80 [ 240.601283][ C0] ? schedule+0x225/0x2c0 [ 240.605610][ C0] schedule+0xdd/0x2c0 [ 240.609673][ C0] schedule_timeout+0x127/0x280 [ 240.614521][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 240.619902][ C0] ? __pfx_process_timeout+0x10/0x10 [ 240.625181][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 240.630978][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 240.636430][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 240.641185][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 240.646462][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 240.651390][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 240.656574][ C0] ? rcu_is_watching+0x13/0xc0 [ 240.661363][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.667165][ C0] rcu_gp_kthread+0x17a/0x220 [ 240.671832][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.677020][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 240.682820][ C0] ? __kthread_parkme+0x18f/0x230 [ 240.687849][ C0] ? kthread+0x13a/0x450 [ 240.692083][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 240.697271][ C0] kthread+0x373/0x450 [ 240.701338][ C0] ? __pfx_kthread+0x10/0x10 [ 240.705934][ C0] ret_from_fork+0x730/0xd60 [ 240.710516][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 240.715620][ C0] ? __switch_to+0x800/0x10f0 [ 240.720293][ C0] ? __pfx_kthread+0x10/0x10 [ 240.724889][ C0] ret_from_fork_asm+0x1a/0x30 [ 240.729657][ C0] [ 240.732669][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 240.738978][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 240.747899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.757935][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 240.763563][ C0] Code: a7 96 02 e9 53 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 48 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 240.783157][ C0] RSP: 0018:ffffffff8fa07cf0 EFLAGS: 00000242 [ 240.789210][ C0] RAX: 00000000003c4f73 RBX: ffffffff8fa91580 RCX: ffffffff8bd47235 [ 240.797168][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e34cb RDI: ffffffff8c625580 [ 240.805124][ C0] RBP: fffffbfff1f522b0 R08: 0000000000000001 R09: ffffed10170467bd [ 240.813087][ C0] R10: ffff8880b8233deb R11: 0000000000000001 R12: 0000000000000000 [ 240.821068][ C0] R13: 0000000000000000 R14: 1ffffffff1f40fa2 R15: dffffc0000000000 [ 240.829047][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 240.837977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.844545][ C0] CR2: 000000110c37e008 CR3: 000000007c42f000 CR4: 00000000003526f0 [ 240.852501][ C0] Call Trace: [ 240.855770][ C0] [ 240.858685][ C0] default_idle+0x9/0x10 [ 240.862917][ C0] default_idle_call+0x6c/0xb0 [ 240.867666][ C0] do_idle+0x3ae/0x5b0 [ 240.871731][ C0] ? __pfx_do_idle+0x10/0x10 [ 240.876322][ C0] cpu_startup_entry+0x4f/0x60 [ 240.881079][ C0] rest_init+0x2d3/0x2e0 [ 240.885310][ C0] ? __pfx_rest_init+0x10/0x10 [ 240.890061][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 240.895945][ C0] ? lock_acquire+0x1d1/0x380 [ 240.900618][ C0] ? __pfx_kernel_init+0x10/0x10 [ 240.905547][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 240.910849][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 240.916129][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 240.921578][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 240.927140][ C0] start_kernel+0x48e/0x490 [ 240.931635][ C0] x86_64_start_reservations+0x24/0x30 [ 240.937084][ C0] x86_64_start_kernel+0x12b/0x130 [ 240.942190][ C0] common_startup_64+0x13e/0x158 [ 240.947136][ C0]