last executing test programs: 12m13.683073638s ago: executing program 4 (id=5): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbc218534c2371e99b0f5d0488bbbbbbbb08004500e5370000000000019078ac1e0001ac1414aa040000006e30"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xa2481, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x4c0c5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xd) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffffffffffff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$usbmon(0x0, 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180), 0x0}) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) process_mrelease(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 12m10.464507066s ago: executing program 4 (id=12): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) mknodat(0xffffffffffffffff, 0x0, 0x400, 0x40000b1) listen(0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0xeaff, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3004000}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 12m8.565484678s ago: executing program 4 (id=13): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbc218534c2371e99b0f5d0488bbbbbbbb08004500e5370000000000019078ac1e0001ac1414aa040000006e30"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xa2481, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x4c0c5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0xd) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffffffffffff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$usbmon(0x0, 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180), 0x0}) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read$FUSE(r6, &(0x7f00000002c0)={0x2020}, 0x2020) process_mrelease(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 12m3.545472381s ago: executing program 4 (id=20): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x4000000000000006, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d4958"], 0xaf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001340)={{0xff, 0x5}, {0xbd, 0x1}, 0x7, 0x2, 0x1}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000001480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaeb99c6b6f352fef45bf7164614bb08004b7a00950067000006069078000000007f0000094410b4e000ffffffffffffffff000005891743e0000002e0000002e00000027f000001ac1414aa01072b361414bbac1e010100000000e0000001ac1e0101ac1e01017f0000010a010100009404010000f1ff0000000000000000000000000000004e2400004e2400000002000000040000000100000080004478d7c82b59ce5879ef793552c7e350cea3acc06bc6b87fb6bb242880f9dbada949813e188e98709457a649ca263999007c0e"], 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000085) close(r0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000000340)={{r7}, "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"}) 12m2.408300799s ago: executing program 4 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) read$dsp(r4, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x20000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}}, 0x100000000000000) syz_emit_ethernet(0x48, &(0x7f0000000200)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12m0.680504822s ago: executing program 4 (id=24): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xffdffff8, 0x401, 0xfffffffd, 0xc4d3, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x1fc}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) msgget$private(0x0, 0x31) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37, 0x0, 0x1}, 0x28) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgsnd(r5, &(0x7f00000001c0)=ANY=[], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) 11m43.832991107s ago: executing program 32 (id=24): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xffdffff8, 0x401, 0xfffffffd, 0xc4d3, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x1fc}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) msgget$private(0x0, 0x31) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37, 0x0, 0x1}, 0x28) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgsnd(r5, &(0x7f00000001c0)=ANY=[], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) 10m50.098776404s ago: executing program 2 (id=194): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10m49.020201221s ago: executing program 2 (id=195): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1, 0x3f, 0x6a76) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x2010, 0xffffffffffffffff, 0xd1c7e000) r1 = syz_create_resource$binfmt(0x0) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = signalfd4(r2, &(0x7f0000000180)={[0xc41d]}, 0x8, 0x80000) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7813, 0x3, 0x0, 0x7f, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x2}}, 0x10) socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 10m47.055996262s ago: executing program 2 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m46.914029708s ago: executing program 2 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0xa, {0x6, 0x100, 0x7}}) write$cgroup_int(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = epoll_create1(0x0) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10m46.548712255s ago: executing program 2 (id=202): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000018000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100004120009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008508000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m46.295996249s ago: executing program 2 (id=203): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8000007}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) close(0x3) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000770200000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000fcffffff00000000366c8c8ca98ed3f727d3fb8543c316484cb9f1065137dae95726061ed61a52d0eef133dd5faf65a72a05fd02ed96d6bc82705062257b749fd3b100000095d3d61ea409b0a9f7256f33471db8673a7bccb2"]}, 0x156) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) 10m31.317972316s ago: executing program 33 (id=203): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8000007}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) close(0x3) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000770200000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000fcffffff00000000366c8c8ca98ed3f727d3fb8543c316484cb9f1065137dae95726061ed61a52d0eef133dd5faf65a72a05fd02ed96d6bc82705062257b749fd3b100000095d3d61ea409b0a9f7256f33471db8673a7bccb2"]}, 0x156) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) 8m0.503520834s ago: executing program 6 (id=567): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x385582, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1) r2 = fanotify_init(0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(r1, &(0x7f0000000140)='freezer.self_freezing\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x8102, @initdev={0xac, 0x1e, 0x6, 0x0}}, 'veth1_to_bridge\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c000000000500", 0x27}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r8}, 0x20) recvfrom$inet6(r8, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) fanotify_mark(r2, 0x1, 0x40001019, r0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) 7m58.072382893s ago: executing program 6 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x3, 0xd, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811000b", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000000340)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000580)={{0x214, 0x2, 0x49, 0x8001, 0x800}, 0x0}) 7m56.98584367s ago: executing program 6 (id=573): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="3b2c46071fff7d", 0x7) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa010, 0x54014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 7m53.056407797s ago: executing program 6 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xc4}}, 0x8040040) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) r5 = open(0x0, 0x80242, 0x0) ftruncate(r5, 0x2007ffc) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) 7m51.699864118s ago: executing program 6 (id=581): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7fffffe, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x84, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 7m51.248333292s ago: executing program 6 (id=583): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000240)={0x1, 0x9, 0x401, 0x12000, 0xfffffffe, 0xda, 0xfffffffffc000000, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000000), 0x4) 7m36.200598776s ago: executing program 34 (id=583): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000240)={0x1, 0x9, 0x401, 0x12000, 0xfffffffe, 0xda, 0xfffffffffc000000, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000000), 0x4) 5m11.441414659s ago: executing program 3 (id=896): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x22020600) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) 5m11.286531348s ago: executing program 3 (id=898): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) msgget$private(0x0, 0x31) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37, 0x0, 0x1}, 0x28) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgsnd(r5, &(0x7f00000001c0)=ANY=[], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000000000"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) 5m8.1098965s ago: executing program 3 (id=903): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20008844) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100bed2518bc08cd330282dce04107a9dc1ae24a34451882edca627af76ed90658a390d931d4cb6bed913621884594f96fa649db03a84f4ac8a624a074739766e56a2dd6a493ad264b2ea719612e27e64e436c8e16a795a8a36fa8cab71641fc5", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) 5m3.963214797s ago: executing program 3 (id=915): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) time(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m55.736051946s ago: executing program 3 (id=932): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) landlock_create_ruleset(&(0x7f0000000100)={0x28, 0x3, 0x5}, 0x18, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, &(0x7f0000000600)=ANY=[], 0x0) move_pages(r0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[0x0], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x210301) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x8, 0x80000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) 4m50.783688147s ago: executing program 3 (id=942): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r3 = userfaultfd(0x80001) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) socket$pptp(0x18, 0x1, 0x2) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, 0x0) socket$pppoe(0x18, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x15, 0x1, 0x69) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 4m35.588318698s ago: executing program 35 (id=942): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r3 = userfaultfd(0x80001) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) socket$pptp(0x18, 0x1, 0x2) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, 0x0) socket$pppoe(0x18, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x15, 0x1, 0x69) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 3m45.015191059s ago: executing program 7 (id=1063): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e50002000000bf00e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1e}, 0x94) 3m44.97804193s ago: executing program 7 (id=1064): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) msgget$private(0x0, 0x31) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000000003"], 0x0, 0x37, 0x0, 0x1}, 0x28) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgsnd(r5, &(0x7f00000001c0)=ANY=[], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) 3m43.866309712s ago: executing program 7 (id=1066): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x101, 0x3, 0x0, 0x2, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0xbfd, 0x80000006, 0x2], [0x805, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x25, 0x4, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x5a, @private0, @empty, 0x7800, 0x7, 0xfffffffc, 0xdc46}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r11, @ANYRESHEX=r4], 0x14800) 3m42.650842671s ago: executing program 7 (id=1072): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$UHID_INPUT(r3, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_ublk_setup_io_uring(0x313, &(0x7f00000001c0)={0x0, 0xa1c3, 0x4a, 0x1, 0x2a9, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount_setattr(r3, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={0x5, 0x3, 0xb728367d46ead0b, {r3}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x82) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r6, r7, 0x0) getdents64(r5, 0x0, 0x22) io_uring_enter(r4, 0x697d, 0x7722, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006a00)=ANY=[@ANYBLOB="1c0000004a00010400000000000000000a000003"], 0x1c}}, 0x4044080) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x52f}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3m39.01833911s ago: executing program 7 (id=1082): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x101, 0x3, 0x0, 0x2, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0xbfd, 0x80000006, 0x2], [0x805, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x25, 0x4, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x5a, @private0, @empty, 0x7800, 0x7, 0xfffffffc, 0xdc46}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r11, @ANYRESHEX=r4], 0x14800) 3m38.067071625s ago: executing program 7 (id=1083): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d045800005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000d00a2ed18f1e79bff000000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) socket$alg(0x26, 0x5, 0x0) r1 = io_uring_setup(0x142a, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000200)="aacf1de7385c59bd332fd1f1f0433c05268e3392ddef424ed706e595c8752a00fa4af62992141a6f19c95e2e98f97839fcf48f3d847bbc483d88a29b7ee9b9e47ed915da2e70cbaa33d5ba6ef4548ec226e0f5682aece2c35bf665eeff7ae12864a1bf3cb0dd3cba6ed89bbd40a790fca3e71211be3fe04a9a19010756c8b7d2c025bc7b2e19b605e1e361532658e9f088b2fca930d03015108d9ae762f140028694916ed5da9644c77ee21ac9005b6bba27f114d48f3500", 0xb8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d045800005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000d00a2ed18f1e79bff000000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) (async) socket$alg(0x26, 0x5, 0x0) (async) io_uring_setup(0x142a, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) write$binfmt_misc(r2, &(0x7f0000000200)="aacf1de7385c59bd332fd1f1f0433c05268e3392ddef424ed706e595c8752a00fa4af62992141a6f19c95e2e98f97839fcf48f3d847bbc483d88a29b7ee9b9e47ed915da2e70cbaa33d5ba6ef4548ec226e0f5682aece2c35bf665eeff7ae12864a1bf3cb0dd3cba6ed89bbd40a790fca3e71211be3fe04a9a19010756c8b7d2c025bc7b2e19b605e1e361532658e9f088b2fca930d03015108d9ae762f140028694916ed5da9644c77ee21ac9005b6bba27f114d48f3500", 0xb8) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3m21.394826212s ago: executing program 36 (id=1083): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d045800005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000d00a2ed18f1e79bff000000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) socket$alg(0x26, 0x5, 0x0) r1 = io_uring_setup(0x142a, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000200)="aacf1de7385c59bd332fd1f1f0433c05268e3392ddef424ed706e595c8752a00fa4af62992141a6f19c95e2e98f97839fcf48f3d847bbc483d88a29b7ee9b9e47ed915da2e70cbaa33d5ba6ef4548ec226e0f5682aece2c35bf665eeff7ae12864a1bf3cb0dd3cba6ed89bbd40a790fca3e71211be3fe04a9a19010756c8b7d2c025bc7b2e19b605e1e361532658e9f088b2fca930d03015108d9ae762f140028694916ed5da9644c77ee21ac9005b6bba27f114d48f3500", 0xb8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d045800005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000d00a2ed18f1e79bff000000000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) (async) socket$alg(0x26, 0x5, 0x0) (async) io_uring_setup(0x142a, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) write$binfmt_misc(r2, &(0x7f0000000200)="aacf1de7385c59bd332fd1f1f0433c05268e3392ddef424ed706e595c8752a00fa4af62992141a6f19c95e2e98f97839fcf48f3d847bbc483d88a29b7ee9b9e47ed915da2e70cbaa33d5ba6ef4548ec226e0f5682aece2c35bf665eeff7ae12864a1bf3cb0dd3cba6ed89bbd40a790fca3e71211be3fe04a9a19010756c8b7d2c025bc7b2e19b605e1e361532658e9f088b2fca930d03015108d9ae762f140028694916ed5da9644c77ee21ac9005b6bba27f114d48f3500", 0xb8) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 13.596964492s ago: executing program 0 (id=1554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xf0}, 0x0) 12.964397173s ago: executing program 0 (id=1557): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) time(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 11.283532016s ago: executing program 0 (id=1559): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbc218534c2371e99b0f5d0488bbbbbbbb08004500e5370000000000019078ac1e0001ac1414aa040000006e30"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xa2481, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x4c0c5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xd) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffffffffffff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$usbmon(0x0, 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180), 0x0}) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read$FUSE(r7, &(0x7f00000002c0)={0x2020}, 0x2020) process_mrelease(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 10.351743673s ago: executing program 5 (id=1562): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) r2 = socket(0x27, 0x4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001a80)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/56, 0x38}, {&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x9, &(0x7f0000001a40)=""/50, 0x32}, 0x9}], 0x1, 0x23, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x29, 0x5, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f00000007c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e22, 0x7f, @private0, 0xff}}, 0xf0d0, 0xffff}, &(0x7f0000000240)=0x90) 10.293065206s ago: executing program 0 (id=1563): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x3, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x43, 0x2, 0xc, 0x7e}) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYRES16, @ANYBLOB="010100"/13, @ANYBLOB="6e0c61e74aab27c5aa41a4c9ccd6885a883fe3f965c2375e08c22ccd59c50201ea62bcf58d56f86bcb7c5ee4b81d4dac0b5a35f90a68dd83eaa50191f31701beacb19f6419b53245d5737fa3a550ad01629ffb66a11aad9dde1b91d7754ab6176fe146c1816c438d0f18eb1be99a6e977bdf0ab2a79df2ff4aa14fdd1d253eb732dd93679a2bd2ce81020b51732c07cea849504e610266c0e30d07eebd2b864ef7b76f40b1743271fe65e63aadbf9cb5a3a9e4e2aaa71a9fa1416dbcfd4c4c3bf5cc0690188fd3580404759f54a07c6816a511062c4e368a9eea836777", @ANYRESDEC=r2, @ANYBLOB="050000000300000003000000010000000000000000000000008a58da2201000000f2e106be3411e0b756fc67067f"], 0x50) syz_io_uring_setup(0xe0c, &(0x7f0000001200)={0x0, 0x4533, 0x2, 0x2, 0x4024c}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 10.059752279s ago: executing program 8 (id=1564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000018000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b50901000041000095000000001c0000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008508000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.855029357s ago: executing program 8 (id=1565): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x3, 0x3c) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 8.806460947s ago: executing program 8 (id=1566): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x2, 0x9}]}, 0x10) close_range(r1, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x3, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) 7.365636219s ago: executing program 8 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r4, 0x0, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000000)=""/76) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x84, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 7.222279819s ago: executing program 1 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r1, 0x200002) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = fanotify_init(0x200, 0x0) write(r5, &(0x7f00000006c0)="ff000000010000a2", 0x8) r6 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x1, 0x5, 0x808001, 0x0, 0xb2, 0x80002080, 0x6}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) timerfd_create(0x3, 0x80800) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) sendfile(r3, r2, 0x0, 0x80001d00c0d0) ioctl(r3, 0x2, &(0x7f00000001c0)="0e973058658451fad4bfaba9e223e79f0c5054853630ba03e3ab41d7a99f8d56e1932fc9d64652b9e81880b9ee38cfeb7835fd0c1a6ffeb76269d8189b5ecd43536f6d23bf1c142f6633f1ca80b412ec56b852b300430ee921c5c6a2e73a3eb8ce3c48ad3bd63a8507bf2b58cddb13617b95133f00c44bb68a191a3d60c1e9bc5ef899c3e0ce644700baa7f5cc08f2b1e496758782fa8c8aa5c1fe24605c98e69ebcbb33ed8f06aeaa29a3913b61748ab037e93c97b34b2ff1b0e671cef4f8e9a0516738c3525c473d805c27c9714e17b5befa") 7.22124691s ago: executing program 9 (id=1571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 7.080297951s ago: executing program 5 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) 5.838137193s ago: executing program 8 (id=1573): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340), 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, r2, 0xf8320000) mount(&(0x7f00000009c0)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc51a1c404a09a2e5, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@uuid_on}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="c9a69c9835c47e8fc0dc65f8b51d0d50145a5bd0a1c5f57d35bd754f83b15279b6dab221935fa36c3a093bb45edd9784e0f597be4c66c757548af9ae2fe9ac57703a3d571ca0aa616bbbcfe4e545c69b7a985e6c4667aa261438f52751166fc2276f889aa221ca2b64705b257637f4a5c4bd18c7696578417956587c2b3d8307114a43b8340328bf0eb85b2ed16a2a7adf879ff7231c46254288dd5f11d5084c177b9b6a171e9debf84c0a7cf8b07559d6d945b99bc68a2de5e4bf6d7c3752ae0e46d2f3af847add021798c08305a73b586562f3902814447a203a6d70c36e08f6f07000000000000000", 0xea) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 5.070801461s ago: executing program 1 (id=1574): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x2, 0x9}]}, 0x10) close_range(r1, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 5.011541076s ago: executing program 9 (id=1575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x12122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000440), 0xdb, 0x13dd80) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x22, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x6, 0x5, 0x3, 0x16, 0x0, 0x70bd2c, 0x25dfdbf8, [@sadb_key={0x2, 0x9, 0x40, 0x0, "0000000000050000"}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bb8, 0x5, {0x6, 0xff, 0xf3, 0x6, 0x0, 0x0, 0x0, @in6=@mcast1, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0xb0}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, &(0x7f0000000800)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x2, 0x7, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 4.379360658s ago: executing program 5 (id=1576): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x3, 0x3c) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.318387353s ago: executing program 5 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000000580)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) 3.209836106s ago: executing program 9 (id=1578): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) landlock_create_ruleset(&(0x7f0000000100)={0x28, 0x3, 0x5}, 0x18, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd7b, 0x10000) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f00000001c0)=0x3) syz_emit_ethernet(0x86, &(0x7f0000000600)=ANY=[], 0x0) move_pages(r0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[0x0], 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e0067ea25bd7000fcdbdf250b0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e22, 0x2, @mcast1, 0x1}}}, &(0x7f0000000040)=0x84) 3.208916104s ago: executing program 1 (id=1579): bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f0000000540)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.398080659s ago: executing program 5 (id=1580): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000001c0), 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) (async) r6 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r6, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000100)) syz_clone3(&(0x7f00000002c0)={0x801400, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(r6, 0x0) (async) ftruncate(r6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) 2.370797461s ago: executing program 8 (id=1581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc0000000000000000000000000000000000f000000000000a0030"], 0xb8}}, 0x4000) 1.807714957s ago: executing program 0 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ef0faadc0900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) r3 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000180c10a9adc229197e64b1238be14f3912f9691e6801bf8472932981874344e1d45ae2b5c2a446f2698e06ac1d0852b4854357f36d90cea7fa316ed910cc0137ea0a1dd554255e6a2a6bc791fdd74672106cfedd1db899e071ace21ed6911354909d3151ca4c1f3bf5", @ANYRES16, @ANYBLOB="010000000000fedbdf252c00000008005800000000000c00a7000004000000000000"], 0x28}}, 0x20040040) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="320c2abd7000c8db05253d00000026f0ca4cd7182caeafad68b210a15adc628b420e5e06dad566afed3e699d3cc8609d58e7020bf2a5aa8989ce9c390a2e2ba6c5454582a71175b3a4277747368d633e9651a33f599d2b80e42e6f03668d4ba5f9638f71f27e5b9eac26242645ce8ff5429a8367584b764c308ec290ad4fa34243e20cd656143f7fa74f5cfeab79cc582dbadef7da986295e7acec103198"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) pread64(r7, &(0x7f0000000480)=""/209, 0xd1, 0x2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r3, 0x1, 0x0) openat$cgroup_ro(r9, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) 1.34206682s ago: executing program 9 (id=1583): r0 = syz_open_dev$evdev(0x0, 0x0, 0x88440) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000240)=0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0xffffffff, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d09dfcd, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x4, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x80000000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x101, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f00], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 1.341904026s ago: executing program 1 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f400000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000034000000060a010400000000000000000500000008000b40000900000c00064000000000000000030900010073797a30"], 0xa8}}, 0x0) 1.341699568s ago: executing program 5 (id=1585): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) (async) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1.131738735s ago: executing program 1 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r3, 0x20, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000200d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.089540658s ago: executing program 9 (id=1587): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "0002000000f3ff00"}, 0x28) 523.479472ms ago: executing program 0 (id=1588): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x12122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000440), 0xdb, 0x13dd80) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x22, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x6, 0x5, 0x3, 0x16, 0x0, 0x70bd2c, 0x25dfdbf8, [@sadb_key={0x2, 0x9, 0x40, 0x0, "0000000000050000"}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bb8, 0x5, {0x6, 0xff, 0xf3, 0x6, 0x0, 0x0, 0x0, @in6=@mcast1, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0xb0}, 0x1, 0x7}, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, &(0x7f0000000800)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x2, 0x7, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 136.881088ms ago: executing program 9 (id=1589): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x70, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c, 0x2, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x4, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x5b0, [0x100, 0xfffffff9]}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x10, 0x5d, 0xfff9, 0x10, 0x80, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r5, 0xa, 0x21) close_range(r5, 0xffffffffffffffff, 0x0) getrlimit(0x2, &(0x7f00000001c0)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[], 0x11c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) clock_adjtime(0x0, &(0x7f0000000000)={0xa1f, 0x0, 0xd, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") 0s ago: executing program 1 (id=1590): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x101, 0x3, 0x0, 0x2, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0xbfd, 0x80000006, 0x2], [0x805, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x25, 0x4, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x5a, @private0, @empty, 0x7800, 0x7, 0xfffffffc, 0xdc46}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x4e) syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r11, @ANYRESHEX=r4], 0x14800) kernel console output (not intermixed with test programs): mber 32 using dummy_hcd [ 592.693191][ T9964] usb 2-1: device descriptor read/64, error -71 [ 592.825055][ T9964] usb usb2-port1: attempt power cycle [ 593.094520][T10134] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 593.106275][ T5628] Bluetooth: hci0: command 0xfc11 tx timeout [ 593.253088][ T9964] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 593.253711][ T5712] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 593.307779][ T9964] usb 2-1: device descriptor read/8, error -71 [ 593.369071][ T5712] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 593.399073][ T5712] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 593.777092][ T5712] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 593.787154][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.802428][T10596] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 593.943083][ T9964] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 593.984567][ T9964] usb 2-1: device descriptor read/8, error -71 [ 594.009262][T10613] blktrace: Concurrent blktraces are not allowed on loop5 [ 594.030279][ T5712] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 594.115402][ T9964] usb usb2-port1: unable to enumerate USB device [ 594.217223][ T5712] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input23 [ 594.438807][ T5712] usb 6-1: USB disconnect, device number 32 [ 594.438883][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 594.715078][ T5625] udevd[5625]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 595.276025][ T9964] libceph: connect (1)[c::]:6789 error -101 [ 595.299439][ T9964] libceph: mon0 (1)[c::]:6789 connect error [ 595.584369][ T9964] libceph: connect (1)[c::]:6789 error -101 [ 595.808544][T10628] ceph: No mds server is up or the cluster is laggy [ 595.847819][ T9964] libceph: mon0 (1)[c::]:6789 connect error [ 596.070143][ T29] audit: type=1400 audit(1777873826.773:1612): avc: denied { mounton } for pid=10636 comm="syz.7.1072" path="/100/file0" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 596.310848][T10640] ALSA: mixer_oss: invalid OSS volume '' [ 597.252659][ T29] audit: type=1400 audit(1777873827.953:1613): avc: denied { connect } for pid=10636 comm="syz.7.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 597.348977][T10647] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 597.399968][T10637] xt_hashlimit: size too large, truncated to 1048576 [ 597.605825][T10654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 597.615599][T10654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 598.659636][ T9964] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 598.728927][ T29] audit: type=1400 audit(1777873829.433:1614): avc: denied { unmount } for pid=8701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 598.795963][T10663] IPVS: length: 24 != 6168 [ 598.857866][ T9964] usb 6-1: unable to get BOS descriptor or descriptor too short [ 598.889138][ T9964] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 598.918487][T10674] blktrace: Concurrent blktraces are not allowed on loop5 [ 598.948012][ T9964] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 599.019830][ T9964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.094494][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 599.190793][ T9964] usb 6-1: Product: syz [ 599.211290][ T9964] usb 6-1: Manufacturer: syz [ 599.229892][ T9964] usb 6-1: SerialNumber: syz [ 599.315672][ T24] usb 9-1: device descriptor read/64, error -71 [ 599.693416][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 599.845086][ T24] usb 9-1: device descriptor read/64, error -71 [ 599.969121][ T24] usb usb9-port1: attempt power cycle [ 600.333316][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 600.384655][ T24] usb 9-1: device descriptor read/8, error -71 [ 600.687907][ T9964] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 600.735426][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 600.748784][ T9964] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 600.786057][ T24] usb 9-1: device descriptor read/8, error -71 [ 600.895090][ T29] audit: type=1326 audit(1777873831.603:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 600.930998][ T24] usb usb9-port1: unable to enumerate USB device [ 600.967282][ T9964] usb 6-1: USB disconnect, device number 33 [ 601.103612][T10694] overlayfs: missing 'workdir' [ 601.912188][ T29] audit: type=1326 audit(1777873831.603:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 601.960343][ T29] audit: type=1326 audit(1777873831.603:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 602.467607][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.657450][ T29] audit: type=1326 audit(1777873831.603:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 603.685882][ T29] audit: type=1326 audit(1777873831.603:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 603.735376][ T29] audit: type=1326 audit(1777873831.633:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 603.764691][ T29] audit: type=1326 audit(1777873831.633:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 603.795228][ T29] audit: type=1326 audit(1777873831.633:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 603.824955][ T29] audit: type=1326 audit(1777873831.633:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10690 comm="syz.5.1086" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 604.112051][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1090'. [ 604.981057][ T29] audit: type=1400 audit(1777873835.663:1624): avc: denied { map } for pid=10716 comm="syz.8.1092" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.158458][ T29] audit: type=1400 audit(1777873835.673:1625): avc: denied { execute } for pid=10716 comm="syz.8.1092" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.217422][T10721] blktrace: Concurrent blktraces are not allowed on loop5 [ 605.309370][T10723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 607.623420][ T9964] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 607.831121][ T9964] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 607.901075][ T9964] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.949105][ T9964] usb 6-1: config 1 interface 0 has no altsetting 0 [ 607.985240][ T9964] usb 6-1: string descriptor 0 read error: -22 [ 608.014753][ T9964] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 608.054700][ T9964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.129114][T10760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.351253][ T9964] usbhid 6-1:1.0: can't add hid device: -71 [ 609.387211][ T9964] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 609.456096][ T9964] usb 6-1: USB disconnect, device number 34 [ 610.419872][ T5720] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 610.584613][ T5720] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.953092][ T5720] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.980077][ T5720] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 610.990674][ T5720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.185851][ T5720] usb 9-1: config 0 descriptor?? [ 611.329726][T10777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 611.772017][T10772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1105'. [ 611.873101][ T29] audit: type=1326 audit(1777873842.573:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 612.750516][ T5720] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 612.781900][ T29] audit: type=1326 audit(1777873842.573:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 612.822808][ T5720] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 612.903380][ T29] audit: type=1326 audit(1777873842.573:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 612.970486][ T5720] cp2112 0003:10C4:EA90.000B: error requesting version [ 612.999181][ T5720] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 613.058646][ T29] audit: type=1326 audit(1777873842.573:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 613.203070][ T29] audit: type=1326 audit(1777873842.573:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 613.229625][ T29] audit: type=1326 audit(1777873842.573:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 613.310521][ T29] audit: type=1326 audit(1777873842.573:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 613.352206][ T29] audit: type=1326 audit(1777873842.573:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 613.378760][ T29] audit: type=1326 audit(1777873842.573:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.5.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 613.405277][ T29] audit: type=1400 audit(1777873844.053:1635): avc: denied { write } for pid=10789 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 614.525818][ T934] usb 9-1: USB disconnect, device number 8 [ 615.233979][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 616.256099][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 616.466991][T10801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.502123][T10801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.548169][T10801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.582031][T10801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.681456][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1118'. [ 617.352200][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.362432][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.387369][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.428134][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.435836][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.556781][ T5720] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 618.567226][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 618.567244][ T29] audit: type=1326 audit(1777873848.693:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 618.601087][T10845] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 618.635073][ T5712] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 618.702659][ T29] audit: type=1326 audit(1777873848.693:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 618.747368][ T29] audit: type=1326 audit(1777873848.703:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 618.785944][ T5720] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 618.816347][ T5720] usb 6-1: config 1 has no interface number 0 [ 618.823814][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 618.846556][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 618.860679][ T5720] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 618.875981][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 618.896625][ T5720] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 618.915878][ T29] audit: type=1326 audit(1777873848.703:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 618.918847][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 618.963198][ T5720] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 619.064544][ T5712] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 619.073766][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 619.086363][ T5720] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 619.097112][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.114904][ T5720] usb 6-1: Product: syz [ 619.119306][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.133065][ T5720] usb 6-1: Manufacturer: syz [ 619.143222][ T5712] usb 2-1: Product: syz [ 619.147652][ T5720] usb 6-1: SerialNumber: syz [ 619.154792][ T5712] usb 2-1: Manufacturer: syz [ 619.167788][ T5712] usb 2-1: SerialNumber: syz [ 619.168001][T10838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 619.188284][ T29] audit: type=1326 audit(1777873848.703:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 619.204077][ T5712] usb 2-1: config 0 descriptor?? [ 619.236707][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 619.255270][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.273101][ T24] usb 9-1: config 0 has no interfaces? [ 619.283118][ T29] audit: type=1326 audit(1777873848.703:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 619.313187][ T24] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 619.341562][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.344823][ T5712] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 619.398952][ T24] usb 9-1: config 0 descriptor?? [ 619.422147][T10830] vxcan1 speed is unknown, defaulting to 1000 [ 619.453079][ T29] audit: type=1326 audit(1777873848.703:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 619.454229][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 619.489873][ T29] audit: type=1326 audit(1777873848.703:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 619.516602][ T29] audit: type=1326 audit(1777873848.703:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 619.550728][ T5628] Bluetooth: hci0: command tx timeout [ 619.576976][ T29] audit: type=1326 audit(1777873848.703:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.8.1126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 619.619643][T10838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 619.633395][T10835] xt_hashlimit: invalid interval [ 619.657014][ T24] usb 9-1: USB disconnect, device number 9 [ 619.700251][ T5720] usb 6-1: No status endpoint found [ 619.783989][ T5712] usb 2-1: USB disconnect, device number 40 [ 619.784053][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 620.158098][T10830] virt_wifi0 speed is unknown, defaulting to 1000 [ 621.352864][T10861] xt_bpf: check failed: parse error [ 621.374889][ T5712] usb 6-1: USB disconnect, device number 35 [ 621.633197][ T5628] Bluetooth: hci0: command tx timeout [ 622.243135][ T5712] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 622.687851][ T5712] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.766336][ T5712] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 622.810101][ T5712] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 622.891473][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 622.950525][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 623.045901][T10876] IPVS: length: 24 != 6168 [ 623.049218][ T5712] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.066399][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.092266][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.100234][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.138240][T10830] bridge_slave_0: entered allmulticast mode [ 623.139560][ T5712] usb 6-1: Product: syz [ 623.150924][ T5712] usb 6-1: Manufacturer: syz [ 623.178934][T10830] bridge_slave_0: entered promiscuous mode [ 623.201359][ T5712] cdc_wdm 6-1:1.0: skipping garbage [ 623.219657][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.242498][ T5712] cdc_wdm 6-1:1.0: skipping garbage [ 623.252131][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.370247][T10830] bridge_slave_1: entered allmulticast mode [ 623.766199][T10830] bridge_slave_1: entered promiscuous mode [ 623.776593][ T5712] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 623.782401][ T5628] Bluetooth: hci0: command tx timeout [ 623.814756][ T5712] cdc_wdm 6-1:1.0: Unknown control protocol [ 623.906785][ T5712] usb 6-1: USB disconnect, device number 36 [ 624.034671][T10830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.138616][T10830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.206369][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.212902][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.271380][T10894] blktrace: Concurrent blktraces are not allowed on loop5 [ 624.536333][T10830] team0: Port device team_slave_0 added [ 624.567971][T10830] team0: Port device team_slave_1 added [ 624.586013][ T5712] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 624.768867][T10830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.782956][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.824745][T10830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.893126][ T5712] usb 6-1: Using ep0 maxpacket: 8 [ 624.904160][ T5712] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 624.917545][T10830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.928782][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.947817][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.983353][ T5712] usb 6-1: Product: syz [ 624.989770][ T5712] usb 6-1: Manufacturer: syz [ 625.003357][ T5712] usb 6-1: SerialNumber: syz [ 625.022162][ T5712] usb 6-1: config 0 descriptor?? [ 625.055488][ T5712] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 625.066911][T10830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.133224][ T9964] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 625.251515][ T5712] gspca_sonixj: reg_r err -32 [ 625.261966][ T5712] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 625.285312][T10830] hsr_slave_0: entered promiscuous mode [ 625.293258][ T9964] usb 2-1: Using ep0 maxpacket: 8 [ 625.321097][ T9964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.365691][ T9964] usb 2-1: config 0 has no interfaces? [ 625.390922][T10830] hsr_slave_1: entered promiscuous mode [ 625.400843][ T9964] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 625.450001][ T9964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.484376][T10830] debugfs: 'hsr0' already exists in 'hsr' [ 625.499424][T10830] Cannot create hsr debugfs directory [ 625.517825][ T9964] usb 2-1: config 0 descriptor?? [ 625.790729][ T9964] usb 2-1: USB disconnect, device number 41 [ 625.802068][ T5628] Bluetooth: hci0: command tx timeout [ 626.174383][ T5713] usb 6-1: USB disconnect, device number 37 [ 627.782173][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 627.782190][ T29] audit: type=1400 audit(1777873858.483:1697): avc: denied { listen } for pid=10921 comm="syz.5.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 627.949976][T10923] vti0: entered promiscuous mode [ 628.073631][ T5720] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 628.091982][T10830] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 628.111182][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.120259][T10830] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 628.129994][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.137907][T10830] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 628.148264][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.156168][T10830] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 628.165801][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.363478][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 628.702655][ T5720] usb 6-1: unable to get BOS descriptor or descriptor too short [ 628.708371][T10830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.727302][ T5720] usb 6-1: config 86 has an invalid interface number: 149 but max is 0 [ 628.740053][ T5720] usb 6-1: config 86 has no interface number 0 [ 628.747157][ T5720] usb 6-1: config 86 interface 149 has no altsetting 0 [ 628.762286][ T5720] usb 6-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c [ 628.775831][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.787889][ T5720] usb 6-1: Product: syz [ 628.794481][T10830] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.797435][ T5720] usb 6-1: Manufacturer: syz [ 628.817183][ T5720] usb 6-1: SerialNumber: syz [ 628.847261][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.854734][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.891734][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.899242][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.943303][ T5712] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 629.055810][ T5720] belkin_sa 6-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 629.078151][ T5720] usb 6-1: bcdDevice: 0a5c, bfc: 0 [ 629.096272][ T5720] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 629.130910][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 629.139502][ T5720] usb 6-1: USB disconnect, device number 38 [ 629.158672][ T5712] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 629.187347][ T5720] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 629.209097][ T5712] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 629.225577][ T5720] belkin_sa 6-1:86.149: device disconnected [ 629.232953][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.255475][ T5712] usb 2-1: Product: syz [ 629.278702][ T5712] usb 2-1: Manufacturer: syz [ 629.296474][ T5712] usb 2-1: SerialNumber: syz [ 629.756867][T10945] blktrace: Concurrent blktraces are not allowed on loop5 [ 631.243462][ T5712] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 631.251620][ T5712] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 631.366486][T10830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.422458][T10973] IPVS: length: 24 != 6168 [ 631.539184][ T5712] usb 2-1: USB disconnect, device number 42 [ 632.001585][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.277719][ T5712] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 632.350959][T10987] input: syz0 as /devices/virtual/input/input25 [ 632.493415][ T5712] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 632.558581][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.631982][ T5712] usb 2-1: config 0 descriptor?? [ 632.691784][ T5712] cp210x 2-1:0.0: cp210x converter detected [ 633.019488][T10830] veth0_vlan: entered promiscuous mode [ 633.116967][T10830] veth1_vlan: entered promiscuous mode [ 633.119589][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.136941][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.159541][ T29] audit: type=1400 audit(1777873863.863:1698): avc: denied { bind } for pid=11001 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 633.173788][ T5712] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 633.230639][ T5712] cp210x 2-1:0.0: querying part number failed [ 633.321482][ T5712] usb 2-1: cp210x converter now attached to ttyUSB0 [ 633.334317][T10830] veth0_macvtap: entered promiscuous mode [ 633.408452][T10830] veth1_macvtap: entered promiscuous mode [ 633.544571][T10830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.598988][T10830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.731386][ T1097] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.753647][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.992713][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.014871][ T5720] usb 2-1: USB disconnect, device number 43 [ 634.028526][ T154] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.077763][ T5720] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 634.094673][ T5720] cp210x 2-1:0.0: device disconnected [ 634.439896][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.478347][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.819588][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.858191][T11024] ubi16: attaching mtd0 [ 635.866680][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.891744][T11024] ubi16: scanning is finished [ 636.050972][ T24] libceph: connect (1)[c::]:6789 error -101 [ 636.088150][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 636.413465][ T24] libceph: connect (1)[c::]:6789 error -101 [ 636.589222][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 637.316705][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1167'. [ 637.326514][T11025] ceph: No mds server is up or the cluster is laggy [ 637.631586][T11024] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 638.006862][ T29] audit: type=1400 audit(1777873868.713:1699): avc: denied { create } for pid=11044 comm="syz.5.1169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 638.139097][ T29] audit: type=1400 audit(1777873868.823:1700): avc: denied { unlink } for pid=6041 comm="syz-executor" name="file0" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 638.715819][T11062] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 638.762255][ T29] audit: type=1326 audit(1777873869.433:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 639.339320][T11059] IPVS: length: 24 != 6168 [ 639.360607][ T29] audit: type=1326 audit(1777873869.433:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 639.728403][ T29] audit: type=1326 audit(1777873869.433:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 640.105725][ T29] audit: type=1326 audit(1777873869.433:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 640.133299][ T29] audit: type=1326 audit(1777873869.433:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 640.337702][ T29] audit: type=1326 audit(1777873869.433:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 640.612458][ T29] audit: type=1326 audit(1777873869.433:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 640.795832][ T29] audit: type=1326 audit(1777873869.443:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 641.039881][ T29] audit: type=1326 audit(1777873869.443:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 641.067359][ T29] audit: type=1326 audit(1777873869.443:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.8.1170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 641.204332][T11085] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 644.303753][ T5727] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 644.416860][T11111] xt_hashlimit: size too large, truncated to 1048576 [ 644.486259][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 644.511677][ T5727] usb 2-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 644.544770][ T5727] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.582617][ T5727] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 231, using maximum allowed: 30 [ 644.618157][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 644.666070][ T5727] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 644.718515][ T5727] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 644.745242][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.775036][ T5727] usb 2-1: Product: syz [ 644.785815][ T5727] usb 2-1: Manufacturer: syz [ 644.803149][ T5727] usb 2-1: SerialNumber: syz [ 645.533366][ T5727] usb 2-1: USB disconnect, device number 44 [ 645.863475][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.204235][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 646.204297][ T29] audit: type=1400 audit(1777873876.873:1736): avc: denied { write } for pid=11117 comm="syz.1.1187" name="mcfilter6" dev="proc" ino=4026533435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 647.856171][T11136] input: syz0 as /devices/virtual/input/input26 [ 647.914443][ T5713] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 648.136443][ T5713] usb 10-1: Using ep0 maxpacket: 32 [ 648.165600][ T5713] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 648.174007][ T5713] usb 10-1: config 0 has no interface number 0 [ 648.182227][ T5713] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 648.199930][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.208887][ T5713] usb 10-1: Product: syz [ 648.249766][ T5713] usb 10-1: Manufacturer: syz [ 648.267280][ T5713] usb 10-1: SerialNumber: syz [ 648.299592][ T5713] usb 10-1: config 0 descriptor?? [ 648.337087][ T5713] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 648.353217][ T24] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 648.364818][ T5713] usb 10-1: selecting invalid altsetting 1 [ 648.367708][T11146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 648.372053][ T5713] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 648.410200][ T5713] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 648.425618][ T5713] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 648.435182][ T5713] usb 10-1: media controller created [ 648.461762][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.540213][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 648.586855][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.622136][ T5727] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 648.623877][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 648.644538][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.817738][ T5713] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 648.849616][ T5713] zl10353_read_register: readreg error (reg=127, ret==-32) [ 648.901813][ T24] usb 6-1: usb_control_msg returned -32 [ 648.908168][ T24] usbtmc 6-1:16.0: can't read capabilities [ 649.048432][ T5727] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 649.084463][ T5727] usb 9-1: config 0 has no interface number 0 [ 649.148269][ T5727] usb 9-1: config 0 interface 29 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.159290][ T5727] usb 9-1: config 0 interface 29 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.172220][ T5727] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 649.181319][ T5727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.234259][ T5727] usb 9-1: config 0 descriptor?? [ 649.262716][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.273248][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.925818][T11134] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 649.963333][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.021282][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.067334][ T5713] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 650.213713][ T5713] usb 10-1: USB disconnect, device number 2 [ 650.290482][T11167] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1199'. [ 650.426701][ T24] usb 6-1: USB disconnect, device number 39 [ 650.880507][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.896024][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.160818][ T5727] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 651.173934][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.186754][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.187273][ T5727] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input29 [ 651.523633][ T5727] cp2112 0003:10C4:EA90.000C: error requesting version [ 651.632019][ T5727] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32 [ 651.793561][ T5713] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 652.053240][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 652.070376][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.114620][ T5713] usb 6-1: config 0 has no interfaces? [ 652.141098][ T5713] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 652.171429][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.217987][ T5713] usb 6-1: config 0 descriptor?? [ 652.227311][ T154] bridge_slave_1: left allmulticast mode [ 652.232989][ T154] bridge_slave_1: left promiscuous mode [ 652.241097][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.254360][ T154] bridge_slave_0: left allmulticast mode [ 652.260039][ T154] bridge_slave_0: left promiscuous mode [ 652.317143][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.464788][ T5713] usb 6-1: USB disconnect, device number 40 [ 652.581374][ T9964] usb 9-1: USB disconnect, device number 10 [ 653.006206][ T29] audit: type=1400 audit(1777873883.693:1737): avc: denied { write } for pid=11196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.448605][ T29] audit: type=1400 audit(1777873884.143:1738): avc: denied { write } for pid=11216 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.828540][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.850919][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.868029][ T154] bond0 (unregistering): Released all slaves [ 654.148435][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 654.169032][T11204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.186854][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 654.357894][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 654.407152][ T24] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 654.467947][ T24] usb 2-1: config 0 has no interface number 1 [ 654.697368][ T24] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 654.707812][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.716287][ T24] usb 2-1: Product: syz [ 654.720489][ T24] usb 2-1: Manufacturer: syz [ 654.824304][T11231] netlink: 'syz.8.1209': attribute type 4 has an invalid length. [ 655.606451][ T24] usb 2-1: SerialNumber: syz [ 655.629770][ T24] usb 2-1: config 0 descriptor?? [ 655.763063][ T29] audit: type=1400 audit(1777873886.433:1739): avc: denied { append } for pid=11237 comm="syz.8.1212" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 655.816697][ T24] viperboard 2-1:0.61: version 0.00 found at bus 002 address 045 [ 656.543900][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 656.578889][ T29] audit: type=1400 audit(1777873887.283:1740): avc: denied { mount } for pid=11227 comm="syz.9.1210" name="/" dev="hugetlbfs" ino=34501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 656.606015][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 656.970781][T11258] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 657.027205][ T29] audit: type=1326 audit(1777873887.693:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.8.1216" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 657.244776][ T24] viperboard 2-1:0.0: version 0.00 found at bus 002 address 045 [ 657.276768][ T29] audit: type=1326 audit(1777873887.703:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.8.1216" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 657.312447][ T29] audit: type=1326 audit(1777873887.703:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.8.1216" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 657.339261][ T29] audit: type=1326 audit(1777873887.713:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.8.1216" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 657.345513][ T24] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 657.365788][ T29] audit: type=1326 audit(1777873887.713:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.8.1216" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 657.472325][ T29] audit: type=1326 audit(1777873887.713:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11255 comm="syz.8.1216" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 657.606807][ T24] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 657.643422][ T24] usb 2-1: USB disconnect, device number 45 [ 658.112065][T11279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 658.337245][ T5713] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 658.420754][ T9964] libceph: connect (1)[c::]:6789 error -101 [ 658.451231][ T9964] libceph: mon0 (1)[c::]:6789 connect error [ 658.524053][ T5713] usb 10-1: Using ep0 maxpacket: 8 [ 658.541948][ T5713] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.576550][T11275] ceph: No mds server is up or the cluster is laggy [ 658.587903][ T5713] usb 10-1: config 0 has no interfaces? [ 658.610309][ T5713] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 658.659904][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 658.731289][ T5713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.771430][ T5713] usb 10-1: config 0 descriptor?? [ 658.926186][T11286] xt_hashlimit: size too large, truncated to 1048576 [ 659.291734][ T5713] usb 10-1: USB disconnect, device number 3 [ 660.885039][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 660.885068][ T29] audit: type=1400 audit(1777873891.593:1751): avc: denied { setopt } for pid=11304 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 661.289873][ T29] audit: type=1400 audit(1777873891.593:1752): avc: denied { connect } for pid=11304 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 661.560561][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1228'. [ 661.583064][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 661.735718][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1228'. [ 661.735955][ T29] audit: type=1400 audit(1777873892.433:1753): avc: denied { getopt } for pid=11310 comm="syz.8.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 661.777190][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 661.828518][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 661.841537][ T24] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 661.862630][ T154] hsr_slave_0: left promiscuous mode [ 661.870249][ T154] hsr_slave_1: left promiscuous mode [ 661.878946][ T24] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 495 [ 661.891515][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.912426][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 661.920894][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.945833][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 661.963127][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.980823][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.998471][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.007849][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.024698][ T24] usb 2-1: Product: syz [ 662.041928][ T24] usb 2-1: Manufacturer: 씇횸䆟蛤메ꔦ⸋Ꜹ됒茭˵좥髒좩鵛靥켧꾰፫뇴⨲ᾀ [ 662.071178][ T154] veth1_macvtap: left promiscuous mode [ 662.080161][ T24] usb 2-1: SerialNumber: syz [ 662.088369][ T154] veth0_macvtap: left promiscuous mode [ 662.102509][T11305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 662.119725][ T154] veth1_vlan: left promiscuous mode [ 662.138835][T11305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 662.148226][ T154] veth0_vlan: left promiscuous mode [ 662.204679][T11331] blktrace: Concurrent blktraces are not allowed on loop5 [ 662.594968][T11334] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 662.602511][T11334] ALSA: mixer_oss: invalid index 1374389 [ 663.190921][ T29] audit: type=1400 audit(1777873893.213:1754): avc: denied { name_bind } for pid=11327 comm="syz.0.1232" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 663.424473][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.557920][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.713403][ T29] audit: type=1400 audit(1777873894.413:1755): avc: denied { write } for pid=11309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.847037][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 663.941352][ T24] usb 2-1: USB disconnect, device number 46 [ 664.284613][ T29] audit: type=1400 audit(1777873894.973:1756): avc: denied { setopt } for pid=11342 comm="syz.0.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 664.306677][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 664.315731][T11344] openvswitch: netlink: Missing key (keys=40, expected=80) [ 664.417321][ T29] audit: type=1400 audit(1777873895.063:1757): avc: denied { getopt } for pid=11348 comm="syz.1.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 664.491252][ T29] audit: type=1400 audit(1777873895.193:1758): avc: denied { write } for pid=11346 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.052081][T11361] xt_hashlimit: size too large, truncated to 1048576 [ 666.027010][ T5727] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 667.055163][ T29] audit: type=1400 audit(1777873896.993:1759): avc: denied { map } for pid=11365 comm="syz.0.1238" path="socket:[34734]" dev="sockfs" ino=34734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.084912][ T29] audit: type=1400 audit(1777873897.003:1760): avc: denied { read accept } for pid=11365 comm="syz.0.1238" path="socket:[34734]" dev="sockfs" ino=34734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.123297][ T5727] usb 6-1: Using ep0 maxpacket: 8 [ 667.131748][ T5727] usb 6-1: unable to get BOS descriptor or descriptor too short [ 667.141486][ T154] team0 (unregistering): Port device team_slave_1 removed [ 667.142328][ T5727] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 667.158911][ T5727] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 667.169120][ T5727] usb 6-1: config 4 has no interface number 0 [ 667.179791][ T154] team0 (unregistering): Port device team_slave_0 removed [ 667.264350][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 667.485984][ T5727] usb 6-1: language id specifier not provided by device, defaulting to English [ 667.519925][ T5727] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 667.529474][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.491821][ T5727] usb 6-1: can't set config #4, error -71 [ 668.619028][ T5727] usb 6-1: USB disconnect, device number 41 [ 668.826625][T11383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 669.233705][T11391] netlink: 'syz.5.1244': attribute type 1 has an invalid length. [ 669.408544][T11394] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 669.524151][ T29] audit: type=1326 audit(1777873900.093:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 669.932478][ T29] audit: type=1326 audit(1777873900.093:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.375856][ T29] audit: type=1326 audit(1777873900.093:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.404411][ T29] audit: type=1326 audit(1777873900.093:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.420837][T11391] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 670.433124][ T29] audit: type=1326 audit(1777873900.093:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.470045][ T29] audit: type=1326 audit(1777873900.093:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.507321][ T29] audit: type=1326 audit(1777873900.103:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.560169][T11402] IPVS: length: 24 != 6168 [ 670.666288][ T29] audit: type=1326 audit(1777873900.103:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.9.1243" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 670.813564][T11411] team0: entered allmulticast mode [ 670.819262][T11411] team_slave_0: entered allmulticast mode [ 670.849304][T11411] team_slave_1: entered allmulticast mode [ 671.204618][T11417] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 671.487320][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 671.563109][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 671.813067][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 671.831668][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.849639][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.861566][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.903306][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.919618][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.194885][ T10] usb 2-1: config 0 descriptor?? [ 672.338294][T11433] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 672.345950][T11433] ALSA: mixer_oss: invalid index 1374389 [ 672.351665][T11433] ALSA: mixer_oss: invalid OSS volume 'PHONEO' [ 672.369341][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 672.433136][ T9964] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 672.809166][T11431] vxcan1 speed is unknown, defaulting to 1000 [ 673.103067][ T9964] usb 10-1: Using ep0 maxpacket: 16 [ 673.137297][T11425] IPVS: length: 24 != 6168 [ 673.141542][ T9964] usb 10-1: config 0 has no interfaces? [ 673.150811][T11442] xt_hashlimit: size too large, truncated to 1048576 [ 673.198904][ T9964] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 673.260087][ T9964] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 673.300981][ T9964] usb 10-1: Manufacturer: syz [ 673.349608][ T9964] usb 10-1: config 0 descriptor?? [ 673.437358][ T10] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 673.494703][ T10] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 673.633408][ T10] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 673.705470][ T10] microsoft 0003:045E:07DA.000D: no inputs found [ 673.732504][ T10] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 673.865588][ T10] usb 2-1: USB disconnect, device number 47 [ 673.917616][T11446] fido_id[11446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 674.084890][T11431] virt_wifi0 speed is unknown, defaulting to 1000 [ 674.988820][T11456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=11456 comm=syz.1.1256 [ 675.403465][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 675.573327][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 675.599513][ T10] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 675.631209][ T10] usb 2-1: config 0 has no interface number 0 [ 675.651562][ T10] usb 2-1: config 0 interface 7 has no altsetting 0 [ 675.668832][ T10] usb 2-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 675.681381][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.690548][ T10] usb 2-1: Product: syz [ 675.694467][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.696414][ T10] usb 2-1: Manufacturer: syz [ 675.702304][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.707924][ T10] usb 2-1: SerialNumber: syz [ 675.731017][ T10] usb 2-1: config 0 descriptor?? [ 676.027468][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.040786][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.503451][T11482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.584027][T11482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.162921][ T1124] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.179874][ T1124] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.189458][ T1124] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.198774][ T1124] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.597949][T11496] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 677.767524][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 677.767558][ T29] audit: type=1326 audit(1777873908.293:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 677.971982][ T29] audit: type=1326 audit(1777873908.293:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.025525][ T10] rndis_host 2-1:0.7: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 678.035395][ T10] usb 2-1: expecting 3 got 1 endpoints! Bailing out. [ 678.056609][ T29] audit: type=1326 audit(1777873908.293:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.084441][ T29] audit: type=1326 audit(1777873908.293:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.122398][ T10] usb 2-1: USB disconnect, device number 48 [ 678.139788][ T29] audit: type=1326 audit(1777873908.293:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.166337][ T29] audit: type=1326 audit(1777873908.293:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.192769][ T29] audit: type=1326 audit(1777873908.293:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.219298][ T29] audit: type=1326 audit(1777873908.293:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.293407][ T29] audit: type=1326 audit(1777873908.293:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.325244][ T29] audit: type=1326 audit(1777873908.293:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11493 comm="syz.8.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 678.966738][T11511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.280612][T11513] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 681.309284][T11525] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1266'. [ 681.363630][T11525] input: syz1 as /devices/virtual/input/input28 [ 682.912236][ T10] usb 10-1: USB disconnect, device number 4 [ 683.077175][T11535] xt_hashlimit: size too large, truncated to 1048576 [ 684.275062][T11463] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 684.421275][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 684.421292][ T29] audit: type=1400 audit(1777873915.083:1842): avc: denied { write } for pid=11532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.638667][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.645153][T11463] usb 2-1: Using ep0 maxpacket: 8 [ 685.650237][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.723364][T11463] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.840642][T11463] usb 2-1: config 0 has no interfaces? [ 685.961490][T11463] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 686.022815][T11463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.068097][T11463] usb 2-1: config 0 descriptor?? [ 686.169624][ T29] audit: type=1400 audit(1777873916.873:1843): avc: denied { write } for pid=11579 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.577493][ T10] usb 2-1: USB disconnect, device number 49 [ 687.403049][ T9964] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 687.543435][ T9964] usb 10-1: device descriptor read/64, error -71 [ 687.661288][T11615] xt_hashlimit: size too large, truncated to 1048576 [ 688.612351][ T29] audit: type=1400 audit(1777873919.313:1844): avc: denied { write } for pid=11592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.643205][ T9964] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 688.823687][ T9964] usb 10-1: device descriptor read/64, error -71 [ 688.869807][ T29] audit: type=1400 audit(1777873919.573:1845): avc: denied { write } for pid=11630 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.953164][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 688.961222][ T9964] usb usb10-port1: attempt power cycle [ 689.137690][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 689.160417][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.347914][ T24] usb 2-1: config 0 descriptor?? [ 689.355859][ T24] cp210x 2-1:0.0: cp210x converter detected [ 689.403080][ T9964] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 689.431751][ T9964] usb 10-1: device descriptor read/8, error -71 [ 689.541463][T11640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.524520][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.597513][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.934029][ T29] audit: type=1400 audit(1777873921.623:1846): avc: denied { bind } for pid=11642 comm="syz.5.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 690.967385][T11484] libceph: connect (1)[c::]:6789 error -101 [ 690.973781][T11484] libceph: mon0 (1)[c::]:6789 connect error [ 691.006228][ T24] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 691.024359][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 691.032162][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 691.041717][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 691.050748][ T24] usb 2-1: USB disconnect, device number 50 [ 691.060527][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 691.069274][ T24] cp210x 2-1:0.0: device disconnected [ 691.164993][ T29] audit: type=1400 audit(1777873921.843:1847): avc: denied { write } for pid=11633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.235176][T11484] libceph: connect (1)[c::]:6789 error -101 [ 691.246595][T11484] libceph: mon0 (1)[c::]:6789 connect error [ 691.413195][T11648] ceph: No mds server is up or the cluster is laggy [ 691.920956][ T29] audit: type=1400 audit(1777873922.613:1848): avc: denied { write } for pid=11670 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.312050][ T29] audit: type=1326 audit(1777873923.013:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.388407][ T29] audit: type=1326 audit(1777873923.013:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.388498][ T29] audit: type=1326 audit(1777873923.013:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.388728][ T29] audit: type=1326 audit(1777873923.013:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.388802][ T29] audit: type=1326 audit(1777873923.013:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.388882][ T29] audit: type=1326 audit(1777873923.013:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.388954][ T29] audit: type=1326 audit(1777873923.013:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11684 comm="syz.5.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac81b9cdd9 code=0x7ffc0000 [ 693.834358][T11484] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 696.624843][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 696.624858][ T29] audit: type=1400 audit(1777873927.313:1858): avc: denied { write } for pid=11691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.964144][ T29] audit: type=1400 audit(1777873927.663:1859): avc: denied { watch } for pid=11724 comm="syz.8.1302" path="/66" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 697.513222][ T29] audit: type=1400 audit(1777873928.213:1860): avc: denied { write } for pid=11723 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.976298][T11732] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.1303'. [ 698.423301][T11484] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 698.693627][T11484] usb 9-1: Using ep0 maxpacket: 8 [ 698.713365][T11484] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.943096][T11484] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 698.974351][T11484] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 699.165387][T11744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.381672][T11484] usb 9-1: Product: syz [ 699.386159][T11484] usb 9-1: Manufacturer: syz [ 699.390818][T11484] usb 9-1: SerialNumber: syz [ 699.398077][T11484] usb 9-1: config 0 descriptor?? [ 699.420837][T11484] imon_raw 9-1:0.0: IR endpoint missing [ 699.839302][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1309'. [ 699.849734][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1309'. [ 700.133512][T11484] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 700.193119][T11754] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 700.395560][ T5727] usb 9-1: USB disconnect, device number 12 [ 700.410049][ T29] audit: type=1400 audit(1777873931.113:1861): avc: denied { write } for pid=11753 comm="syz.5.1311" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 700.440869][ T29] audit: type=1400 audit(1777873931.113:1862): avc: denied { open } for pid=11753 comm="syz.5.1311" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 700.505310][ T29] audit: type=1400 audit(1777873931.173:1863): avc: denied { ioctl } for pid=11753 comm="syz.5.1311" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 700.534178][ T29] audit: type=1400 audit(1777873931.173:1864): avc: denied { bind } for pid=11751 comm="syz.9.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 700.544997][T11484] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 700.567497][T11484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.579827][T11484] usb 2-1: config 0 descriptor?? [ 700.753254][ T24] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 700.796141][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.808222][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.918217][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.929659][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.981322][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 701.653537][T11484] ath6kl: Failed to submit usb control message: -110 [ 701.685483][ T24] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 701.705089][T11484] ath6kl: unable to send the bmi data to the device: -110 [ 701.724263][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 701.732857][T11484] ath6kl: Unable to send get target info: -110 [ 701.759507][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.40 [ 701.784364][T11484] ath6kl: Failed to init ath6kl core: -110 [ 701.792088][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.804851][T11484] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 701.910636][ T24] usb 6-1: Product: syz [ 701.931495][ T24] usb 6-1: Manufacturer: у [ 701.949973][ T24] usb 6-1: SerialNumber: syz [ 702.011700][ T10] usb 2-1: USB disconnect, device number 51 [ 702.112319][T11771] blktrace: Concurrent blktraces are not allowed on loop5 [ 702.686496][ T24] usbhid 6-1:1.0: can't add hid device: -71 [ 702.709347][ T24] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 702.775053][ T24] usb 6-1: USB disconnect, device number 42 [ 704.999283][T11797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.210140][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 705.242177][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 705.286793][T11793] netlink: 'syz.0.1318': attribute type 13 has an invalid length. [ 706.413433][T11793] netlink: 'syz.0.1318': attribute type 12 has an invalid length. [ 707.062580][ T24] libceph: connect (1)[c::]:6789 error -101 [ 707.080980][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 707.426314][ T24] libceph: connect (1)[c::]:6789 error -101 [ 707.456633][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 707.505317][T11807] ceph: No mds server is up or the cluster is laggy [ 707.711132][T11814] x_tables: unsorted entry at hook 2 [ 708.953149][ T5727] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 710.062487][ T5727] usb 6-1: device descriptor read/64, error -71 [ 710.443127][ T5727] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 711.623754][T11845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.113936][ T29] audit: type=1400 audit(1777873942.813:1865): avc: denied { create } for pid=11846 comm="syz.8.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 712.191654][ T29] audit: type=1400 audit(1777873942.893:1866): avc: denied { map } for pid=11846 comm="syz.8.1334" path="/dev/nbd8" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 712.541743][T11865] input: syz0 as /devices/virtual/input/input29 [ 712.807075][ T10] libceph: connect (1)[c::]:6789 error -101 [ 712.813258][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 713.075295][ T10] libceph: connect (1)[c::]:6789 error -101 [ 713.083068][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 713.401568][T11871] ceph: No mds server is up or the cluster is laggy [ 714.759232][T11894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.534174][T11897] input: syz0 as /devices/virtual/input/input30 [ 717.093624][T11916] netlink: 'syz.9.1352': attribute type 4 has an invalid length. [ 718.152722][T11860] kexec: Could not allocate control_code_buffer [ 718.202790][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 718.216592][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 718.483486][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 718.495000][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 718.767985][T11926] ceph: No mds server is up or the cluster is laggy [ 719.281449][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.035889][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 720.079214][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 720.120591][T11937] netlink: 'syz.1.1357': attribute type 13 has an invalid length. [ 720.159323][T11937] netlink: 'syz.1.1357': attribute type 12 has an invalid length. [ 720.278535][T11940] IPVS: length: 24 != 6168 [ 720.990522][T11945] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 721.185729][ T29] audit: type=1326 audit(1777873951.713:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.408547][ T29] audit: type=1326 audit(1777873951.723:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.538307][ T29] audit: type=1326 audit(1777873951.723:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.573145][ T29] audit: type=1326 audit(1777873951.733:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.633207][ T29] audit: type=1326 audit(1777873951.733:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.721679][ T29] audit: type=1326 audit(1777873951.733:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.752457][ T29] audit: type=1326 audit(1777873951.733:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 721.793362][ T29] audit: type=1326 audit(1777873951.733:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 722.293242][ T29] audit: type=1326 audit(1777873951.753:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 722.325984][ T29] audit: type=1326 audit(1777873951.763:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.8.1360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b4bd9cdd9 code=0x7ffc0000 [ 723.673732][T11967] netlink: 'syz.5.1365': attribute type 4 has an invalid length. [ 724.181624][T11969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=11969 comm=syz.9.1367 [ 724.345135][T11973] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1369'. [ 724.355190][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1370'. [ 724.694487][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 725.364421][ T5727] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 725.372459][T11474] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 725.553429][T11474] usb 10-1: Using ep0 maxpacket: 8 [ 725.559370][ T5727] usb 9-1: Using ep0 maxpacket: 8 [ 725.572365][ T5727] usb 9-1: config 252 has an invalid interface number: 255 but max is 0 [ 725.585980][T11474] usb 10-1: config 0 has an invalid interface number: 7 but max is 0 [ 725.605311][ T5727] usb 9-1: config 252 has no interface number 0 [ 725.619243][T11474] usb 10-1: config 0 has no interface number 0 [ 725.629488][ T5727] usb 9-1: too many endpoints for config 252 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 725.641580][T11474] usb 10-1: config 0 interface 7 has no altsetting 0 [ 725.648898][ T5727] usb 9-1: config 252 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 725.669535][T11474] usb 10-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 725.679423][ T5727] usb 9-1: config 252 interface 255 has no altsetting 0 [ 725.686906][T11474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.695540][ T5727] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 725.705372][T11474] usb 10-1: Product: syz [ 725.709810][T11474] usb 10-1: Manufacturer: syz [ 725.715780][ T5727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.724653][T11474] usb 10-1: SerialNumber: syz [ 725.754278][T11474] usb 10-1: config 0 descriptor?? [ 725.978672][ T5727] usb 9-1: string descriptor 0 read error: -71 [ 725.995938][ T5727] pvrusb2: Hardware description: Terratec Grabster AV400 [ 726.003984][ T5727] pvrusb2: ********** [ 726.013683][ T5727] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 726.028062][ T5727] pvrusb2: Important functionality might not be entirely working. [ 726.037034][ T5727] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 726.049758][ T5727] pvrusb2: ********** [ 726.062115][ T5727] usb 9-1: selecting invalid altsetting 0 [ 726.085533][ T2361] pvrusb2: Invalid write control endpoint [ 726.097031][ T5727] usb 9-1: USB disconnect, device number 13 [ 726.253125][T11474] rndis_host 10-1:0.7: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 726.285298][T11474] usb 10-1: expecting 3 got 1 endpoints! Bailing out. [ 726.332831][T11474] usb 10-1: USB disconnect, device number 9 [ 726.366182][ T2361] pvrusb2: Invalid write control endpoint [ 726.372047][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 726.407930][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 726.419488][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 726.444660][ T2361] pvrusb2: Device being rendered inoperable [ 726.452881][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 726.460185][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 726.502254][ T2361] pvrusb2: Attached sub-driver cx25840 [ 726.507951][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 726.520569][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 726.674698][ T5628] Bluetooth: hci1: command 0xfc11 tx timeout [ 726.689049][T10134] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 727.410556][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1372'. [ 727.443524][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1372'. [ 727.462148][T12001] netlink: 'syz.8.1372': attribute type 13 has an invalid length. [ 727.489385][T12001] netlink: 'syz.8.1372': attribute type 12 has an invalid length. [ 727.590737][T12002] IPVS: length: 24 != 6168 [ 729.403096][T12023] netlink: 'syz.1.1380': attribute type 4 has an invalid length. [ 730.567320][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 730.577344][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 732.143092][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 732.419509][T11484] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 732.443114][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 732.450276][ T24] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 732.461633][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 732.468434][ T24] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 732.477739][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.524790][ T24] usb 10-1: config 0 descriptor?? [ 732.964909][T11484] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.991342][T11484] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 733.023138][T11484] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 733.036663][T11484] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.045956][T11484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.054053][T11484] usb 6-1: Product: syz [ 733.058787][T11484] usb 6-1: Manufacturer: syz [ 733.063464][T11484] usb 6-1: SerialNumber: syz [ 733.284789][T12035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 733.293581][T12035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 733.753794][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 733.753836][ T29] audit: type=1400 audit(1777873964.363:1900): avc: denied { ioctl } for pid=12030 comm="syz.9.1383" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 734.013520][T12035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 734.021878][T12035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 734.153027][T12058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 734.273900][T11484] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 734.280424][T11484] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 734.287980][T11484] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 735.017651][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 735.031670][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 735.051310][ T24] usb 10-1: USB disconnect, device number 10 [ 735.666010][T12071] netlink: 'syz.1.1392': attribute type 4 has an invalid length. [ 736.221146][T12073] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1393'. [ 736.373392][T11484] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 736.415365][T11484] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 736.438122][T11484] usb 6-1: USB disconnect, device number 45 [ 736.462683][T11484] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 736.481933][T12082] blktrace: Concurrent blktraces are not allowed on loop5 [ 736.661048][T12083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 737.183477][T12092] IPVS: length: 24 != 6168 [ 737.575455][ T29] audit: type=1400 audit(1777873968.253:1901): avc: denied { getopt } for pid=12094 comm="syz.1.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 738.302320][ T29] audit: type=1400 audit(1777873969.003:1902): avc: denied { sys_module } for pid=12101 comm="syz.9.1400" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 739.867788][T12121] syz2: rxe_newlink: already configured on vxcan1 [ 739.913556][ T29] audit: type=1326 audit(1777873970.583:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 739.940475][ T29] audit: type=1326 audit(1777873970.583:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 740.167904][ T29] audit: type=1326 audit(1777873970.583:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 740.224070][ T29] audit: type=1326 audit(1777873970.583:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 740.258961][ T29] audit: type=1326 audit(1777873970.583:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 740.285515][ T29] audit: type=1326 audit(1777873970.583:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 741.150689][T12133] netlink: 'syz.9.1405': attribute type 4 has an invalid length. [ 741.478415][ T29] audit: type=1326 audit(1777873970.583:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 741.512237][ T29] audit: type=1326 audit(1777873970.583:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 741.577870][ T29] audit: type=1326 audit(1777873970.583:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 741.611272][T12137] blktrace: Concurrent blktraces are not allowed on loop5 [ 741.625434][ T29] audit: type=1326 audit(1777873970.583:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12115 comm="syz.1.1404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 744.284700][T12153] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 744.770689][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 745.108479][T12161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 745.180204][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 745.180234][ T29] audit: type=1400 audit(1777873975.883:1960): avc: denied { map } for pid=12162 comm="syz.0.1414" path="socket:[39099]" dev="sockfs" ino=39099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 745.257988][ T29] audit: type=1400 audit(1777873975.883:1961): avc: denied { read } for pid=12162 comm="syz.0.1414" path="socket:[39099]" dev="sockfs" ino=39099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 745.632258][T12180] netlink: 'syz.9.1419': attribute type 4 has an invalid length. [ 746.838261][T12165] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 747.078265][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.085510][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.163151][ T29] audit: type=1400 audit(1777873977.843:1962): avc: denied { set_context_mgr } for pid=12192 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 747.195680][ T29] audit: type=1400 audit(1777873977.853:1963): avc: denied { map } for pid=12192 comm="syz.1.1422" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 747.275001][ T29] audit: type=1400 audit(1777873977.983:1964): avc: denied { call } for pid=12192 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 747.294006][ T29] audit: type=1400 audit(1777873977.983:1965): avc: denied { transfer } for pid=12192 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 747.387263][T12197] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 747.781838][ T29] audit: type=1326 audit(1777873978.403:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.9.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 747.902647][ T29] audit: type=1326 audit(1777873978.403:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12191 comm="syz.9.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 747.955257][T12203] blktrace: Concurrent blktraces are not allowed on loop5 [ 749.547531][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'. [ 750.320086][ T29] audit: type=1400 audit(1777873981.023:1968): avc: denied { accept } for pid=12209 comm="syz.8.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 751.630263][ T57] Bluetooth: hci1: Frame reassembly failed (-84) [ 751.758795][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 751.795243][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 751.816277][T12237] netlink: 'syz.0.1433': attribute type 13 has an invalid length. [ 751.874570][T12237] netlink: 'syz.0.1433': attribute type 12 has an invalid length. [ 751.991298][T12239] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 751.998870][T12239] ALSA: mixer_oss: invalid index 1374389 [ 752.228892][T12244] xt_hashlimit: size too large, truncated to 1048576 [ 753.041939][ T5628] Bluetooth: hci1: command 0xfc11 tx timeout [ 753.050601][T10134] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 753.484845][T12254] xt_hashlimit: size too large, truncated to 1048576 [ 755.009249][T12266] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1440'. [ 756.150287][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1441'. [ 757.375013][ T24] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 757.626975][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 757.761848][ T24] usb 6-1: config 2 has an invalid interface number: 128 but max is 0 [ 757.844273][T12282] xt_hashlimit: size too large, truncated to 1048576 [ 757.851428][T12282] xt_hashlimit: invalid rate [ 757.885450][ T24] usb 6-1: config 2 has no interface number 0 [ 757.976147][ T24] usb 6-1: config 2 interface 128 has no altsetting 0 [ 758.282675][ T24] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=44.01 [ 758.326411][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.352475][ T24] usb 6-1: Product: syz [ 758.371500][ T24] usb 6-1: Manufacturer: syz [ 758.393066][ T24] usb 6-1: SerialNumber: syz [ 759.117331][T12290] xt_hashlimit: size too large, truncated to 1048576 [ 759.680388][T12304] input: syz0 as /devices/virtual/input/input31 [ 759.753749][T11484] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 759.844334][ T24] ums_eneub6250 6-1:2.128: USB Mass Storage device detected [ 759.874094][T11463] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 759.913095][T11484] usb 9-1: Using ep0 maxpacket: 32 [ 759.920788][T11484] usb 9-1: config 0 has an invalid interface number: 61 but max is 1 [ 759.933068][ T24] usb 6-1: USB disconnect, device number 46 [ 759.942886][T11484] usb 9-1: config 0 has no interface number 1 [ 759.962189][T11484] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 759.982079][T11484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.009486][T11484] usb 9-1: Product: syz [ 760.024182][T11484] usb 9-1: Manufacturer: syz [ 760.037674][T11463] usb 2-1: Using ep0 maxpacket: 8 [ 760.050039][T11484] usb 9-1: SerialNumber: syz [ 760.060339][T11463] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.078115][T11484] usb 9-1: config 0 descriptor?? [ 760.085193][T11463] usb 2-1: config 0 has no interfaces? [ 760.090977][T11463] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 760.103343][T11463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.122522][T11463] usb 2-1: config 0 descriptor?? [ 760.348888][T11484] viperboard 9-1:0.61: version 0.00 found at bus 009 address 014 [ 760.362250][ T24] usb 2-1: USB disconnect, device number 52 [ 760.390939][T11484] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 760.403135][T11484] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 760.780342][T11484] viperboard 9-1:0.0: version 0.00 found at bus 009 address 014 [ 760.797870][T11484] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 760.819831][T11484] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 761.874902][T12330] netlink: 'syz.9.1457': attribute type 4 has an invalid length. [ 762.654577][T11484] usb 9-1: USB disconnect, device number 14 [ 762.857273][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1460'. [ 763.064896][ T29] audit: type=1400 audit(1777873993.773:1969): avc: denied { ioctl } for pid=12335 comm="syz.1.1459" path="socket:[40281]" dev="sockfs" ino=40281 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 763.154948][T12342] 8021q: VLANs not supported on tunl0 [ 764.392443][ T29] audit: type=1400 audit(1777873995.093:1970): avc: denied { read } for pid=12348 comm="syz.9.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 764.805618][ T24] libceph: connect (1)[c::]:6789 error -101 [ 764.820754][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 764.887865][T11484] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 764.966183][T12368] xt_hashlimit: size too large, truncated to 1048576 [ 765.097764][T11463] libceph: connect (1)[c::]:6789 error -101 [ 765.107218][T11463] libceph: mon0 (1)[c::]:6789 connect error [ 765.384594][T12358] ceph: No mds server is up or the cluster is laggy [ 765.904331][T12373] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 765.909260][T11484] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 765.928363][T11463] libceph: connect (1)[c::]:6789 error -101 [ 765.956822][T11463] libceph: mon0 (1)[c::]:6789 connect error [ 766.076101][T11484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.130454][T11484] usb 9-1: config 0 descriptor?? [ 766.549554][T12380] netlink: 'syz.1.1468': attribute type 3 has an invalid length. [ 766.832629][T11484] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 767.261995][T11484] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 767.290654][T11484] [drm] Initialized udl on minor 2 [ 767.331296][T11484] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 767.387879][T11484] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 767.561122][ T29] audit: type=1400 audit(1777873998.263:1971): avc: denied { setopt } for pid=12383 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 768.248674][T11484] usb 9-1: USB disconnect, device number 15 [ 768.301617][T11463] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 768.361627][ T29] audit: type=1400 audit(1777873998.313:1972): avc: denied { listen } for pid=12383 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 768.398807][T11463] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 768.451862][ T29] audit: type=1400 audit(1777873998.323:1973): avc: denied { write } for pid=12383 comm="syz.1.1470" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 768.797173][T12394] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1473'. [ 770.566442][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1471'. [ 771.409565][T12417] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1478'. [ 771.813572][T11484] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 771.989338][T12425] input: syz0 as /devices/virtual/input/input33 [ 772.025511][T11484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 772.063351][T11484] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 772.093180][T11484] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 772.122932][T11484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 772.143212][T11484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.170419][T11484] usb 2-1: Product: syz [ 772.183321][T11484] usb 2-1: Manufacturer: syz [ 772.188298][T11484] usb 2-1: SerialNumber: syz [ 772.418092][T12408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 772.437765][T12408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 773.021942][T12436] xt_hashlimit: size too large, truncated to 1048576 [ 773.057584][T12408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 773.072585][T12408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 773.281470][T11484] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 773.288259][T11484] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 773.296523][T11484] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 773.355698][T12440] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1485'. [ 773.519463][T12442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=12442 comm=syz.8.1486 [ 773.813216][T11468] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 773.973064][T11468] usb 9-1: Using ep0 maxpacket: 8 [ 773.980516][T11468] usb 9-1: config 0 has an invalid interface number: 7 but max is 0 [ 773.980668][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1488'. [ 774.009448][T11468] usb 9-1: config 0 has no interface number 0 [ 774.013407][ T5727] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 774.019610][T11468] usb 9-1: config 0 interface 7 has no altsetting 0 [ 774.068911][T11468] usb 9-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 774.082475][T11468] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.112362][T11468] usb 9-1: Product: syz [ 774.122441][T11468] usb 9-1: Manufacturer: syz [ 774.127560][T11468] usb 9-1: SerialNumber: syz [ 774.144875][T11468] usb 9-1: config 0 descriptor?? [ 774.360503][ T5727] usb 6-1: Using ep0 maxpacket: 8 [ 774.391423][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.193103][ T5727] usb 6-1: config 0 has no interfaces? [ 775.199587][ T5727] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 775.249257][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.280952][ T5727] usb 6-1: config 0 descriptor?? [ 775.580383][T11468] rndis_host 9-1:0.7: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 775.609131][T11468] usb 9-1: expecting 3 got 1 endpoints! Bailing out. [ 775.998010][ T1106] Bluetooth: hci1: Frame reassembly failed (-84) [ 776.016981][T11468] usb 9-1: USB disconnect, device number 16 [ 776.207287][T11468] usb 6-1: USB disconnect, device number 47 [ 776.749024][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 777.302053][T11484] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 777.371915][T11484] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 777.402619][T11484] usb 2-1: USB disconnect, device number 53 [ 777.568610][T11484] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 777.765320][T12469] netlink: 'syz.8.1492': attribute type 4 has an invalid length. [ 778.282122][T10134] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 778.289953][ T5622] Bluetooth: hci1: command 0xfc11 tx timeout [ 778.574023][T12467] input: syz0 as /devices/virtual/input/input34 [ 778.593429][ T5628] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 779.999665][T12491] vxcan1 speed is unknown, defaulting to 1000 [ 780.013143][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1499'. [ 780.333076][T11484] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 781.288353][ T29] audit: type=1326 audit(1777874011.993:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 781.317102][T11484] usb 6-1: Using ep0 maxpacket: 16 [ 781.322323][ T29] audit: type=1326 audit(1777874011.993:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 781.679190][ T29] audit: type=1326 audit(1777874012.023:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 781.680952][T11484] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 781.778724][T12512] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 781.794506][T12511] netlink: 'syz.8.1504': attribute type 4 has an invalid length. [ 782.353322][ T29] audit: type=1326 audit(1777874012.023:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 782.510561][T11484] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.521180][T11484] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.721817][T11484] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.798872][T11484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.829754][ T29] audit: type=1326 audit(1777874012.023:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 782.893249][T11484] usb 6-1: Product: syz [ 782.909039][ T29] audit: type=1326 audit(1777874012.053:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 782.910718][T11484] usb 6-1: Manufacturer: syz [ 782.935768][ T29] audit: type=1326 audit(1777874012.053:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 782.935822][ T29] audit: type=1326 audit(1777874012.053:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 782.935869][ T29] audit: type=1326 audit(1777874013.003:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12499 comm="syz.1.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3998b9cdd9 code=0x7ffc0000 [ 783.202507][T12516] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1508'. [ 783.666196][T11484] usb 6-1: SerialNumber: syz [ 783.788972][T12528] FAULT_INJECTION: forcing a failure. [ 783.788972][T12528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.802626][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.0.1509 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.802658][T12528] Tainted: [L]=SOFTLOCKUP [ 783.802665][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.802680][T12528] Call Trace: [ 783.802688][T12528] [ 783.802695][T12528] dump_stack_lvl+0x100/0x190 [ 783.802726][T12528] should_fail_ex.cold+0x5/0xa [ 783.802756][T12528] _copy_from_user+0x2e/0xd0 [ 783.802788][T12528] memdup_user+0x6b/0xe0 [ 783.802810][T12528] __x64_sys_kexec_load+0x18e/0x230 [ 783.802839][T12528] do_syscall_64+0x10b/0xf80 [ 783.802864][T12528] ? clear_bhb_loop+0x40/0x90 [ 783.802890][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.802911][T12528] RIP: 0033:0x7fa51999cdd9 [ 783.802929][T12528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.802948][T12528] RSP: 002b:00007fa51a81e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 783.802975][T12528] RAX: ffffffffffffffda RBX: 00007fa519c16180 RCX: 00007fa51999cdd9 [ 783.802986][T12528] RDX: 00002000000002c0 RSI: 0000000000000002 RDI: 0000000000d0ffbf [ 783.802999][T12528] RBP: 00007fa51a81e090 R08: 0000000000000000 R09: 0000000000000000 [ 783.803011][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.803022][T12528] R13: 00007fa519c16218 R14: 00007fa519c16180 R15: 00007ffc905f02c8 [ 783.803050][T12528] [ 784.315587][ T57] Bluetooth: hci1: Frame reassembly failed (-84) [ 786.033139][ T5628] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 786.074654][T11484] usb 6-1: can't set config #1, error -71 [ 786.512018][T11484] usb 6-1: USB disconnect, device number 48 [ 787.770149][T12543] IPVS: length: 24 != 6168 [ 788.613337][T12555] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 788.663212][ T29] audit: type=1326 audit(1777874019.323:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 789.465007][ T29] audit: type=1326 audit(1777874019.333:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 789.574868][T12559] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 790.338637][ T29] audit: type=1326 audit(1777874019.333:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 790.969634][ T29] audit: type=1326 audit(1777874019.333:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.003181][ T29] audit: type=1326 audit(1777874019.333:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.031757][ T29] audit: type=1326 audit(1777874019.333:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.073226][ T29] audit: type=1326 audit(1777874019.333:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.106216][ T29] audit: type=1326 audit(1777874019.333:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.139111][ T29] audit: type=1326 audit(1777874019.333:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.193479][ T29] audit: type=1326 audit(1777874019.333:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12551 comm="syz.9.1517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c4519cdd9 code=0x7ffc0000 [ 791.613186][ T5727] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 791.794944][ T5727] usb 10-1: Using ep0 maxpacket: 8 [ 792.745047][ T5727] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.774705][ T5727] usb 10-1: config 0 has no interfaces? [ 792.788250][ T5727] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 792.799454][ T5727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.811644][ T5727] usb 10-1: config 0 descriptor?? [ 793.027446][ T5727] usb 10-1: USB disconnect, device number 11 [ 793.971637][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 793.971668][ T29] audit: type=1400 audit(1777874024.673:2013): avc: denied { ioctl } for pid=12582 comm="syz.0.1526" path="socket:[40711]" dev="sockfs" ino=40711 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 794.114181][ T5628] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 794.122555][T10134] Bluetooth: hci1: command 0xfc11 tx timeout [ 794.214370][T12587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.938286][T12583] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 795.026065][ T29] audit: type=1400 audit(1777874025.733:2014): avc: denied { accept } for pid=12590 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 795.036183][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.054314][T12586] comedi comedi3: pcl818: I/O base address or length out of range [ 796.403125][T12595] netlink: 'syz.8.1529': attribute type 3 has an invalid length. [ 796.717731][T12603] netlink: 'syz.5.1530': attribute type 4 has an invalid length. [ 797.456255][ T29] audit: type=1400 audit(1777874028.163:2015): avc: denied { map } for pid=12599 comm="syz.9.1531" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 797.513918][ T29] audit: type=1400 audit(1777874028.163:2016): avc: denied { execute } for pid=12599 comm="syz.9.1531" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 797.667237][T12613] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1533'. [ 797.794536][T11463] libceph: connect (1)[c::]:6789 error -101 [ 797.801016][T11463] libceph: mon0 (1)[c::]:6789 connect error [ 797.813459][T12610] ceph: No mds server is up or the cluster is laggy [ 798.116948][T11463] libceph: connect (1)[c::]:6789 error -101 [ 798.357440][T12623] trusted_key: encrypted_key: insufficient parameters specified [ 798.385182][T11474] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 799.110495][T11463] libceph: mon0 (1)[c::]:6789 connect error [ 799.341658][T11474] usb 10-1: device descriptor read/64, error -71 [ 799.351589][T12629] input: syz1 as /devices/virtual/input/input35 [ 801.906557][T12658] netlink: 'syz.9.1544': attribute type 4 has an invalid length. [ 803.102446][ T29] audit: type=1400 audit(1777874033.803:2017): avc: denied { name_bind 0x1000000 } for pid=12675 comm="syz.0.1552" path="socket:[40887]" dev="sockfs" ino=40887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 804.529705][T12683] SET target dimension over the limit! [ 806.193091][T11463] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 806.452938][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 806.733361][T11463] usb 2-1: device descriptor read/64, error -32 [ 807.273633][T11463] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 807.456341][T11463] usb 2-1: Using ep0 maxpacket: 8 [ 807.472512][T11463] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 71, changing to 10 [ 807.490663][T11463] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 807.501172][T11463] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 552 [ 807.515826][T11463] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.526243][T11463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.541839][T11463] usb 2-1: Product: syz [ 807.548866][T11463] usb 2-1: Manufacturer: syz [ 807.554097][T11463] usb 2-1: SerialNumber: syz [ 807.593260][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 807.743105][ T24] usb 6-1: device descriptor read/64, error -71 [ 807.805151][T11463] cdc_ncm 2-1:1.0: bind() failure [ 807.840209][T11463] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 807.863651][T11463] cdc_ncm 2-1:1.1: bind() failure [ 807.905852][ T29] audit: type=1400 audit(1777874038.603:2018): avc: denied { setopt } for pid=12715 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 807.929715][T11463] usb 2-1: USB disconnect, device number 55 [ 808.003746][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 808.153313][ T24] usb 6-1: device descriptor read/64, error -71 [ 808.856514][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.863078][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.034722][ T24] usb usb6-port1: attempt power cycle [ 809.078924][ T29] audit: type=1400 audit(1777874039.773:2019): avc: denied { read append } for pid=12715 comm="syz.0.1563" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 810.151722][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 810.490688][ T24] usb 6-1: device descriptor read/8, error -71 [ 810.814920][T12746] xt_hashlimit: size too large, truncated to 1048576 [ 810.990246][T12749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.186945][T12765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 815.228196][T12773] PKCS8: Unsupported PKCS#8 version [ 816.059802][T12788] input: syz0 as /devices/virtual/input/input36 [ 816.684058][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 817.156971][T11463] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 817.183175][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 817.211161][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.256679][ T24] usb 9-1: config 0 has no interfaces? [ 817.301689][ T24] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 817.323228][T11463] usb 6-1: Using ep0 maxpacket: 32 [ 817.359415][T11463] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 817.397661][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.435533][T11463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.684138][ T24] usb 9-1: config 0 descriptor?? [ 817.691315][T11463] usb 6-1: config 0 descriptor?? [ 817.761700][T11463] as10x_usb: device has been detected [ 817.789045][T11463] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 817.828638][T12809] blktrace: Concurrent blktraces are not allowed on loop5 [ 818.232088][ T24] usb 9-1: USB disconnect, device number 17 [ 818.238233][T12812] ------------[ cut here ]------------ [ 818.243773][T12812] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 818.243791][T12812] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.5.1585/12812 [ 818.253333][T11474] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 818.259955][T12812] Modules linked in: [ 818.259981][T12812] CPU: 1 UID: 0 PID: 12812 Comm: syz.5.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.260011][T12812] Tainted: [L]=SOFTLOCKUP [ 818.260019][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.260032][T12812] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 818.303270][T12812] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 818.323314][T12812] RSP: 0018:ffffc9000525fa50 EFLAGS: 00010246 [ 818.329604][T12812] RAX: 0000000000000003 RBX: ffff8880b2d92b30 RCX: 1ffffffff21af9dc [ 818.337682][T12812] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20 [ 818.345867][T12812] RBP: ffffc9000525fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 818.353992][T12812] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 818.362010][T12812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.370042][T12812] FS: 00007fac8298c6c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 818.379056][T12812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.385721][T12812] CR2: 000000110c2e9460 CR3: 000000005a7c0000 CR4: 00000000003526f0 [ 818.393768][T12812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 818.401773][T12812] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 818.410044][T12812] Call Trace: [ 818.413508][T12812] [ 818.416454][T12812] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 818.422125][T12812] ? __mutex_lock+0x26d/0x1b10 [ 818.426954][T12812] ? dmx_section_feed_start_filtering+0x56/0x660 [ 818.433341][T12812] ? find_held_lock+0x2b/0x80 [ 818.438041][T12812] ? __pfx___mutex_lock+0x10/0x10 [ 818.443121][T12812] ? __pfx___mutex_lock+0x10/0x10 [ 818.448201][T12812] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 818.453921][T12812] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 818.459594][T12812] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 818.465123][T12812] dmx_section_feed_start_filtering+0x3a8/0x660 [ 818.471402][T12812] dvb_dmxdev_filter_start+0x767/0xdd0 [ 818.476918][T12812] dvb_demux_do_ioctl+0xe64/0x1200 [ 818.482057][T12812] dvb_usercopy+0x167/0x340 [ 818.486615][T12812] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 818.492189][T12812] ? __pfx_dvb_usercopy+0x10/0x10 [ 818.497273][T12812] ? selinux_file_ioctl+0x13b/0x290 [ 818.502499][T12812] ? selinux_file_ioctl+0xb6/0x290 [ 818.507648][T12812] dvb_demux_ioctl+0x29/0x40 [ 818.512492][T12812] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 818.517997][T12812] __x64_sys_ioctl+0x18e/0x210 [ 818.522783][T12812] do_syscall_64+0x10b/0xf80 [ 818.527445][T12812] ? clear_bhb_loop+0x40/0x90 [ 818.532148][T12812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.538108][T12812] RIP: 0033:0x7fac81b9cdd9 [ 818.542542][T12812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.562363][T12812] RSP: 002b:00007fac8298c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.570846][T12812] RAX: ffffffffffffffda RBX: 00007fac81e16090 RCX: 00007fac81b9cdd9 [ 818.578935][T12812] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 818.586966][T12812] RBP: 00007fac81c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 818.595019][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.603056][T12812] R13: 00007fac81e16128 R14: 00007fac81e16090 R15: 00007fff551e2e48 [ 818.611081][T12812] [ 818.614338][T12812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.621617][T12812] CPU: 1 UID: 0 PID: 12812 Comm: syz.5.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.632547][T12812] Tainted: [L]=SOFTLOCKUP [ 818.636858][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.646903][T12812] Call Trace: [ 818.650173][T12812] [ 818.653093][T12812] dump_stack_lvl+0x100/0x190 [ 818.657769][T12812] vpanic+0x552/0x970 [ 818.661747][T12812] ? __pfx_vpanic+0x10/0x10 [ 818.666242][T12812] ? lock_release+0x245/0x310 [ 818.670920][T12812] panic+0xd1/0xe0 [ 818.674640][T12812] ? __pfx_panic+0x10/0x10 [ 818.679063][T12812] ? check_panic_on_warn+0x1f/0x90 [ 818.684177][T12812] check_panic_on_warn.cold+0x19/0x34 [ 818.689545][T12812] ? __mutex_lock+0x94f/0x1b10 [ 818.694304][T12812] __warn.cold+0x191/0x328 [ 818.698718][T12812] __report_bug+0x296/0x3d0 [ 818.703216][T12812] ? __mutex_lock+0x94f/0x1b10 [ 818.707975][T12812] ? __pfx___report_bug+0x10/0x10 [ 818.712995][T12812] ? register_lock_class+0x40/0x560 [ 818.718196][T12812] report_bug_entry+0xe1/0x290 [ 818.722955][T12812] ? __mutex_lock+0x956/0x1b10 [ 818.727713][T12812] handle_bug+0x1cd/0x2a0 [ 818.732042][T12812] exc_invalid_op+0x17/0x50 [ 818.736543][T12812] asm_exc_invalid_op+0x1a/0x20 [ 818.741384][T12812] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 818.746766][T12812] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 818.766385][T12812] RSP: 0018:ffffc9000525fa50 EFLAGS: 00010246 [ 818.772468][T12812] RAX: 0000000000000003 RBX: ffff8880b2d92b30 RCX: 1ffffffff21af9dc [ 818.780438][T12812] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20 [ 818.788403][T12812] RBP: ffffc9000525fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 818.796387][T12812] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 818.804368][T12812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.812347][T12812] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 818.817999][T12812] ? __mutex_lock+0x26d/0x1b10 [ 818.822772][T12812] ? dmx_section_feed_start_filtering+0x56/0x660 [ 818.829095][T12812] ? find_held_lock+0x2b/0x80 [ 818.833763][T12812] ? __pfx___mutex_lock+0x10/0x10 [ 818.838784][T12812] ? __pfx___mutex_lock+0x10/0x10 [ 818.843806][T12812] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 818.849442][T12812] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 818.855168][T12812] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 818.860640][T12812] dmx_section_feed_start_filtering+0x3a8/0x660 [ 818.866884][T12812] dvb_dmxdev_filter_start+0x767/0xdd0 [ 818.872364][T12812] dvb_demux_do_ioctl+0xe64/0x1200 [ 818.877471][T12812] dvb_usercopy+0x167/0x340 [ 818.881975][T12812] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 818.887515][T12812] ? __pfx_dvb_usercopy+0x10/0x10 [ 818.892547][T12812] ? selinux_file_ioctl+0x13b/0x290 [ 818.897743][T12812] ? selinux_file_ioctl+0xb6/0x290 [ 818.902852][T12812] dvb_demux_ioctl+0x29/0x40 [ 818.907441][T12812] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 818.912730][T12812] __x64_sys_ioctl+0x18e/0x210 [ 818.917488][T12812] do_syscall_64+0x10b/0xf80 [ 818.922077][T12812] ? clear_bhb_loop+0x40/0x90 [ 818.926750][T12812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.932637][T12812] RIP: 0033:0x7fac81b9cdd9 [ 818.937042][T12812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.956643][T12812] RSP: 002b:00007fac8298c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.965059][T12812] RAX: ffffffffffffffda RBX: 00007fac81e16090 RCX: 00007fac81b9cdd9 [ 818.973025][T12812] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 818.980985][T12812] RBP: 00007fac81c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 818.988949][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.996913][T12812] R13: 00007fac81e16128 R14: 00007fac81e16090 R15: 00007fff551e2e48 [ 819.004888][T12812] [ 819.008192][T12812] Kernel Offset: disabled [ 819.012531][T12812] Rebooting in 86400 seconds..