last executing test programs: 11m11.967753456s ago: executing program 3 (id=104): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = socket(0x11, 0x80805, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x80108906, 0x0) write(r0, &(0x7f0000000540)="b5", 0x1) fadvise64(r1, 0x18, 0x3, 0x4) 11m11.70148457s ago: executing program 3 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xaa, 0x1, 0x7}}}, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x9c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 11m10.095416743s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x7, 0x0, &(0x7f0000000340)=0x0) timer_getoverrun(r0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000701, &(0x7f0000000200)=ANY=[@ANYRES8=r0]) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000040002800800030072c30000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd27, 0x25dedbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xd2660831dd3b3faf, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x8050) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004080)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x94) sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)) 11m9.751003483s ago: executing program 3 (id=113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x8010aebc, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@local, @local, 0x1, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @remote, @loopback]}, 0x24) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='.\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 11m8.392646871s ago: executing program 3 (id=117): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x2, 0x3, 0x1, 0xff}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfd, 0xfe, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032dbd7000fda600000b00000008000300", @ANYRES32], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003640)={r7, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m6.903631839s ago: executing program 3 (id=122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xeffd}, 0x0) 11m6.726837914s ago: executing program 32 (id=122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xeffd}, 0x0) 4m41.259993213s ago: executing program 5 (id=1318): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = dup3(r1, r2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f19", 0xd}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f19", 0xd}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "fe69d20603b6a2dd", "dce127b81349752d5da644997e8f5a62", "8ae4873f", "339452c5636a54b9"}, 0x28) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setpriority(0x1, r0, 0x2) 4m40.158493692s ago: executing program 5 (id=1322): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) 4m40.063576105s ago: executing program 5 (id=1324): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000140), 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000700)={r1, 0x6, 0x3}) close_range(r0, r0, 0x2) 4m39.026604895s ago: executing program 5 (id=1328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_connect(0x5, 0x4e2, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x40, 0x58, 0x75, 0x40, 0x54c, 0x2a5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d0, 0x3, 0xf2, 0xfb, 0x20, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x9, 0xca, 0x83, 0xdf, 0x4e, [], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0x4, 0x9, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x0, 0xf1, 0x5}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x3, 0x1, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb2, 0xbc}]}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0xf0, 0x73, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x355}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x9, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x5, 0x0, [@generic={0x58, 0x11, "015bb894ef56c47d1569e67dc94050382684b235b11f46310f7ba4c2a9834048332bedc869d25111ab428cf1d3655d117cf9484cbf53028764065cf0adfcbcc0a7d9517e3a6cdf6490757df0ef1cbb4509e223539998"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7c}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0xf9, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x25, 0x8001}, @generic={0x17, 0x22, "5ac9879acc47a2c4710de722300451a80c4530cfe4"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0xd, 0x77}}, {{0x9, 0x5, 0x5, 0x7, 0x400, 0x2, 0x8, 0x8}}]}}, {{0x9, 0x4, 0x73, 0x7, 0x5, 0xb7, 0xf2, 0xe9, 0x4, [@generic={0xa6, 0x4, "68b83e13d49ddc166e85c30086d8aa38df6e82c86e489cc2f53012ba6098f5cf055b9fcb1ee9a7dce98d9a7443c5cb3807520da2a500151fb1f138b0d29c1be0a838e8713871916e5e6c9529f932f77453c8ee6f3521b99403a5e18b7a18763b87d702ba99a370160a9a2c1522cf21f20cbd776ac66ec5d1c1e4adccdcc2333f7ee83c244263cd1f0de4c180a087f70a659639cb907e7bb5a016d182bb9a71cc808ee9cd"}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x7, 0x6, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x8, 0x44}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x4, 0x7, 0x5, [@generic={0x5c, 0x21, "28c16e806df4e454f828e000b58fb5d5c9831895ac8ffbb712b3d7eb3e5da4e3913b9de45517ac54d0c1dd187824d00b11507544be707531ec9ecbeb6cbf2eb2f86ed5639a63cb5d3dc9301e8063cab745110fac394329cd60e8"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x5, 0x40, 0x81, [@generic={0x3e, 0x21, "a387501e3971b2132e19d34948b329cd702ffb3e8f1676c09d39ff717436fd907613c6ab9f1befe31814461e2fef341312439564160855e7ba312afb"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xc0, 0xff, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @generic={0x65, 0x31, "8f343bad6ff1e91874b19d00e3999b9b198583fcc6ebc7a8cde598788212200de6a082defd2e3311cb22f85013e9f6fc5478d5b3c6102ee25dfcfdc5ebf794c128c31ba3a5622c2e04aecb16cee884650e2345027c0c26923ef4fea33553572e3dfa93"}]}}]}}, {{0x9, 0x4, 0x89, 0x2c, 0x5, 0xfe, 0x0, 0x2d, 0x90, [@hid_hid={0x9, 0x21, 0x400, 0x91, 0x1, {0x22, 0xeb7}}, @hid_hid={0x9, 0x21, 0x40, 0x75, 0x1, {0x22, 0x16b}}], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xa, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0xe, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xf8, 0x21, 0x8}}, {{0x9, 0x5, 0xc, 0xc, 0x1c353cbf7464675f, 0x8, 0xff, 0x1a, [@generic={0xe5, 0x5, "eb58383468833449041a927631abac61fddd6c9dbcef44f2ec9543abc8dd189dbb672499dc49a7f4d5ba82aa31e1f45e06ae57ff6913f2509d38ef5f836da5b3160c8688f74276ddbbc5f4bababaab5481eb68f54cbffc5f00b18c7f0be18311c0200676820b138c115b04ed09e13dc2c03c2bdb220e74c28c3caf9163fe8a6fc4d39456bdc5a127d995e7ef62d72793aae4642cc955c9273b3f108252516e84d9e7caa4ca6a26c5c510b80965e213c5b33da76f2cb9683361cead185be62d76c7e3ef4b8760ae247f63d22666a5ea0cd57d1641adabff591b40d6304add83f362b066"}, @generic={0xb7, 0x2, "389efb67b959125bd4dfd6b3ab07437822c7deea7c31de5637ccb12201dd4cf2db80b3050fa3c8f40239c94f73e95339cfa8dc8d65bf8c11a74b2be02d0b6047e0acac77b339d5eda896a2346f9ca2a01b23b3f4146bed4ed9dd67412562695be7b097579cb06a855c3cbe52a5c019c2f17fa5b23f15a9af8498f122288e05605896d9ca0777cf434c78ff173a1e4f5002913f3494f0fd37bf607ec858b8c2e01c80875fc22bc9b241200b85af09df79b65d58b42f"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xf1, 0x5, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x410, 0x80, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0x9d, 0x6, 0xff, 0x97}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x9, [{0x1b, &(0x7f0000000280)=@string={0x1b, 0x3, "8bf2afd1aff46277f6ab300557f722ac0a2ab98ee8c670e368"}}, {0x7b, &(0x7f0000000340)=@string={0x7b, 0x3, "42303ea0809c6a7e67316fc00cbe54adcce2fd85c86be81b9b0c2546f1abd6b7a1a60443f5e89eeedf700757c0528ff49d2b07af1d81476b73dde40ebed1b02836ae77866f9c681f9520f3ecf5a1f981e4859d3b4248fda0d352cf6690a7226489253b75ceb152aa8497e84074fd99337109ac351bd35ae0fe"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44b}}, {0xd4, &(0x7f0000000ac0)=@string={0xd4, 0x3, "a38075769d0e7217ace1025890172934da24fcac61bd4c068454ba648caed6a51b5a624fcd5493e90c9476f4a5f48eea3dd9f74c35e7890214a8470a4358f76115c5b2c96b544efe9f0462b9a518babfcd65b11ab06ad5e73dd82027fb33ff44e2eb97f2d804ff392909f11acb3c626170c6135ca061d111eb0735a2d5a59f6dda20a1dae04f83faa56c4b7341a9e998b2dc704a541bdd760484e01b8cb65e2e631fa2b4ccbe0e0392e386576ba7b6a70be9ebd8b72fe3f0aaf92138d02a90c63c2e289297540bf06f05b25cd4ad61b05b5d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2401}}, {0xfa, &(0x7f0000000bc0)=@string={0xfa, 0x3, "d89a09299122da07157831d0ec8fd2fce0c1ebdf530e8e68d73da95a37ef19d92349c1deca58f3d221f8feb038c70f528517c9d0e7cdee75b4489167fce49398c5ac1a3111e35c2b2a1505c965713aebeb70026ecd9c825a52039cc9854ad44d5923f94fd118ca5edf0d6cfb8181d44a84db71600956acaf71a52b12eeb23c2118b6b3e057b7fba42bb27a113d65438edc7bc55074f34a5ee87babc0bbd8bd150b95d72bf3a530be673568d6a3f91f155cd39b7ad821cf6318dece53fa2f50684e39a7daa0d373ecda8a087dd099e6a508b65a7ace97f88f878345cd460ad8adf7996678badd4d4faeda14f502f144e5db544a5525f59875"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2401}}, {0xdc, &(0x7f0000000cc0)=@string={0xdc, 0x3, "4dc6dbac30318a9c4ee34289ff325e627411acbde72d5b6adca6a330790023b6d47e41edfe6f2efdfbea2b8c44e1d266432635ccd0b72fb6d06061fdbdca0b87663907620e69a13e33617ec8193501ee632eb2b7affa90a6acecc9fa6027603fb4c177201a4393789a62b9bbddf98f3fcda9b1179acf8ae6dc74fa3de49c867ff2d680f3ba2189510d154742544b4c91d7dc0419b8f13236cfcba2f1f26581961fb2c3c19ff1d1873f37b07eb1a3f6d2b12240db17476949111dae3d770dbee8602ca18c24b2167ed2b5b3d469230d060c8cba84ddc2c2c7e09d"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x415}}]}) (async) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x101000) (async) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x39eb, @rand_addr=' \x01\x00', 0xa000}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) (async) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000140)={0x119, "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"}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f00000004c0)=""/36, 0x24}], 0x1, 0xffffffc0, 0x800) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f00)={r7, &(0x7f0000000e80)="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", &(0x7f0000001e80)=""/126}, 0x20) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "bc"}, 0x0}) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) 4m36.019128124s ago: executing program 5 (id=1335): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000005c0)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) capset(&(0x7f0000000300)={0x20080522}, &(0x7f00000002c0)={0x0, 0x406, 0xfffffffc, 0x6, 0xffffffff}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x802) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) 4m35.155861656s ago: executing program 5 (id=1338): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00') 4m18.516068054s ago: executing program 33 (id=1338): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000300)='./file1\x00') 3m51.017444052s ago: executing program 2 (id=1476): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'macvlan0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x1e, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x10200}, 0x0, 0x6e6bbb, 0x3, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x4, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000088f75ff96bc7d1c6f9cc862a42", @ANYRES32, @ANYBLOB="b7fcffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000000)="3ea44133730d70eb7a53ab0592c862431de63a32d9cd5228aa13f0e7b3fbbfddbdb6fbcfe6bd06b2012e1ac60ffd5f33f837e456137a8257d342be098e31dc36bbe6619b208ece868e7c5d1246bf2433133ff0291e75005e7047a989e135bf13db417cefe305ae77b9df3d7b5e1e60336c8bc4515a532de9ccc2668046899f3a8c3a006227a5ff31a262a3a1ee39a3842cbc5ba058d115b3f8bc252a6624778b8a649dcc5f19cec4c3b4cf1cec97972097864adfe94e6c5ed282940c0d36633d", &(0x7f0000000140)=""/75, &(0x7f00000001c0)="94016805a9c4ec05b19c2a99ba5f50340d9b84d89e007bf25d00511da68e27ad53ee47b20d3547c1029690a1e0b85ac7971f8c3a946a1fbde6d990c48c912810dbcb8d90f40881412c38c1d9c6121c798d96642e9767ee89288c0381f4fbe62bc76c7bae616c859af4314d83f81cd832e9dcc81b5fffdf2a3881de29ad2c32909b1afe356be835168a6d23227bf809b2f4f6f98efe82c78f9674f04c063c98f4b02dc43bff3071dbc75c1c2bf35e862c97769ff97d418317774a91c19034639dac7296", &(0x7f00000000c0)="1a62604f0e9a5070ebc0b38eb49305543488d4a1c4f082ff5202f2272dd26dee41abd7a68310215a1ff31e9fb79f74", 0x8, r2, 0x4}, 0x38) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3b, 0x0, &(0x7f0000000200)) write$char_usb(r5, &(0x7f0000000380)="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", 0xff3) 3m50.890397291s ago: executing program 2 (id=1478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) semget(0x3, 0x4, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0xff}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x7d0e69533e2776f8, 0x3, 0xd, 0x0, 0x9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 3m50.82497547s ago: executing program 2 (id=1479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) r3 = getpgid(0xffffffffffffffff) (async) r4 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r3) setsockopt$sock_void(r4, 0x1, 0x32, 0x0, 0x0) 3m50.7017496s ago: executing program 2 (id=1480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000003900)=0xc9, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 3m49.994761174s ago: executing program 2 (id=1485): lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x361, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x18d, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0xad, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m48.991449329s ago: executing program 2 (id=1490): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setresuid(0xee00, 0xee01, 0xee01) socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004dec100040000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000002c0)=r2}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 3m48.792267311s ago: executing program 34 (id=1490): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setresuid(0xee00, 0xee01, 0xee01) socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004dec100040000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000002c0)=r2}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 14.013047621s ago: executing program 1 (id=2104): syz_open_dev$vim2m(0x0, 0x47b, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r0, 0x90004) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) 13.055626181s ago: executing program 6 (id=2109): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xe47, 0x80, 0x0, 0x21e}, 0x0, &(0x7f0000000040)=0x0) r3 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) close(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x40012121) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80, 0x0, 0x100}) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r7, r8, 0x3, 0x0, @val=@perf_event={0x3}}, 0x18) fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) r9 = socket$inet(0x2, 0x1, 0x100) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 13.052734187s ago: executing program 1 (id=2110): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000000)) connect$netlink(r0, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0xeeee0000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3000, 0x4, 0xfc, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xfdf8ffda, 0x0, 0x0, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) semop(0x0, &(0x7f0000000400)=[{0x4, 0x4, 0x1800}, {0x4, 0x8000, 0x1000}, {0x3, 0x0, 0x1800}, {0x0, 0x1cac, 0x1800}, {0x1, 0x9, 0x800}, {0x3, 0x2, 0x800}, {0x4, 0x9, 0x1000}, {0x1, 0x4, 0x400}], 0x8) dup3(r6, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d6665b27266646e6f3dfc3c9bfb06f922d238fed7c7f7b1a324fbeb41af7086bd4204dd1928469a42c98ff9216a586b9625743d4fd252c9176f6386290cadfe8bfdae36574ccb058a6d96aefed418ae08a8a6756b9dec3e7bca2ec6924eee4cfb3a8fb33068fc2b8639d7c46cc3a68463ef65e1cf724fe80e873250106c27a64400"/148, @ANYRES16=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 12.139702869s ago: executing program 7 (id=2111): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffe, 0xffff}) setgid(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="1400012109"], 0x2c}}, 0x800) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 12.113566817s ago: executing program 1 (id=2112): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000cb8b6ec876da9c740600000000000000cffc39c9cdb7684ceab3c168dde9ad1c8fb6f78f7ffde5dc1c22168a0307486ddbbe85b33710d67ff67e6a7478f5c0ac2b3bf2d731dfe4d69449c24893203e959704670ea2a05e76e98b9f47ab648c60bb743c03a5761bf444a5c5935e2616c8859558b0c2a0c56c2d29b8787f13307439afd3e1bf29984f6d3607da34e35f3d1a607f90c472f19a119d56ef000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "550f4537f64e82b2", "6a44c02be26043942e393ccda50bcbb1", "8306e7af", "dcf7281dfe50f211"}, 0x28) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) sendfile(r4, r3, 0x0, 0x20000023893) 11.921298521s ago: executing program 0 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x884a602}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x48001) 11.784519119s ago: executing program 6 (id=2114): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"787e1bb4ce7d414ffacb3204035476b7", 0x0, 0x0, {0xce8, 0x100}, {0x8, 0x6}, 0x7, [0x598, 0x2, 0x2, 0x7f, 0xfffffffffffffffd, 0x8, 0x6, 0x3, 0x8, 0x4, 0x6, 0x800, 0x0, 0x7, 0x7, 0x2]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000440)={0x0, 0xba9, 0x9}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e00)={{r0}, r2, 0x8, @unused=[0x4, 0x1, 0xfffffffffffffffe, 0x5], @devid=r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x14, r5, r1}) 11.663434026s ago: executing program 6 (id=2115): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r0, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x70, 0x40}, 0x4000080) chdir(&(0x7f0000000340)='./file0\x00') 11.566055731s ago: executing program 0 (id=2116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 11.523849232s ago: executing program 0 (id=2117): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x9004) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000d5) r3 = syz_open_dev$vcsn(0x0, 0x10, 0x10000) r4 = gettid() timer_create(0x3, &(0x7f00000001c0)={0x0, 0x17, 0x800000000004, @thr={&(0x7f0000000400)="2a943f6f505d092c8e87ed20933c74e877e3fdd25a2101646bed3ffafbee1e338ec39a2f9ab709af11bf080c8b30426a22ee1d798c00b1a2039dd0ee0540fca701abdae411a0d56eaf9ce3fed6695669d73dcfdb1e06fe72e776f1e8f31a20d3a1f29c57c9f2148f6f07148e9527b1dd8cb59d36e450b4b41e70061af1a2cfc2e9822629ea17839d5230859cc9b1ef501e0a52920bc4daf32a5318bcd1c891ac1c5757ea9a167a56f4050e0d7985b3bdbccc64f3333301d060c19fb6ac2d72086099b9f961e22c577976eba1af42c0ab29d90208514eefc30710432d984838ec9b594f2cf4e09514a2805f9a905030329e1ea06ede0e0cdbfb71f9723ccf5a0a59df41c4ebdf57871e494277a1ff4938ad54bae5daaa1993a30b24a204c0a1cb6fc2d08dc030c729d58749ee9451f7a1ab5f6c27204e1b31c66f55013de1bda90dc074726f8076d43e9408024b47c09bbf4ef12a7330ec87fd53feb5d4fa7a4e361b7cdd6329765e30e7ac2daf3955b0ece30ec27ee73aa280a3775ce07960af5029ce71049bf91b66e7986e53277488f17701c587682491f258340d681bc14baf41f34819b1f97fde8997cd86c8e3003f8416696238d4ae3e0684e953c1870f7fdc5aa47964e65ff79a885d1a881c9c38c686ed79a016790601065bcda6b8e3185b24ebc8bedcbfaaf60364f6ad1f0db5b7c38006146f64c334afbce3b198c66242a9cb9b9a44172fe101275675ed2529f2bc16baf8461091b4c442ee94675469c2ea0383adaece1e2b96b2cfa032c26925c8785b3e3fde43ffddb894e2bbf946673cad2e27c60b65367bc1bedff46a428fa0da74b6baa8fed95bb72e5f42ea2fffbe42877d5c7b0eea7391f149e3f13133edd7ff658ee14b6fe2a71cce6ce3738613a87988974b6188b0028d22e3839d6ea25b72b63dfdb836d59daf50ce7634cb5c12655dd6d32dd6570a76be8599887e1d114f1724e0f6cf718ae7a79c84f3dbdce05c77c844b653941910049f13c41d123ef52d1904cffdb57900ea4b051e5fef7105fc3e68aa8c9dd00dbdf6d6ee6aed2fafa3b10712c3b2d52c885a3c650ca15d97806a6369d2412842976e5593c636ddff9d6ba5d8cf97ad54c97e4ebee3eb1df9e64fc0877d567485ae40902d6cca3b527371b6de61592ffa078ccd1bb952bc59f153e25ea3996d09c4145a18e7d51abb3b02c27c5ea9b89118e94d4a83538cbacc3ed9f24150fdb77897ef3feae598eca0100087338d7752931553b402c1ae07c68f6369955e76f9136f1842e0ae34f795ba5ebbb689eee44bcbf14312e012dce98a7c91c13921e56feb8ec425f6d04252e4d4272c8c2b05f10dbcb5055b803bc57654c8a3fc20c43c578868029e5bc7961948e82db0759271b4f03c928e17d9ee4980eb676c09a175723c7d1f2477da298d30c0de99", 0xfffffffffffffffe}}, &(0x7f0000bbdffc)=0x0) prlimit64(r4, 0xa, 0x0, &(0x7f0000000140)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r5, @ANYRESOCT=r2, @ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e04000013170902120001000000000904000000ef01"], 0x0) 10.476887034s ago: executing program 1 (id=2118): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x4000040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x2a, 0x2, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x31435750}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f000080d000/0x4000)=nil, 0x4000, 0x2, 0x6c031, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000000000000000000000000000fd"], 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x1000000001b8, 0x2}) fcntl$lock(r9, 0x6, &(0x7f0000000140)={0x0, 0x0, 0xfc2, 0x1}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 10.218148416s ago: executing program 6 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x2a2) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 10.021957088s ago: executing program 6 (id=2120): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300130000000000070000007f"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300130000000000070000007f"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "f6a793df940eaaf69ae0a8f74653a36c7586aaf43e17cb7e7b264c5002ebad2feabf00edfc16bead65478ed2692531db1f52ed8ee9173853d203b16b48868c5f849afa618e1276363855a179accdaeca7caa595ca0a784a9bc61d8c61721a9801023e6b7e97eac2c66efdf2f96374fbb6ab1689103f24546d07429cdf6a88cb13dc479af98d3b8e99c7c53ce9ca03575d006c46d4c542f396b4e076c35e8c8b1608b1b5c1b"}, 0xb0) (async) write$binfmt_script(r3, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "f6a793df940eaaf69ae0a8f74653a36c7586aaf43e17cb7e7b264c5002ebad2feabf00edfc16bead65478ed2692531db1f52ed8ee9173853d203b16b48868c5f849afa618e1276363855a179accdaeca7caa595ca0a784a9bc61d8c61721a9801023e6b7e97eac2c66efdf2f96374fbb6ab1689103f24546d07429cdf6a88cb13dc479af98d3b8e99c7c53ce9ca03575d006c46d4c542f396b4e076c35e8c8b1608b1b5c1b"}, 0xb0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x4, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) (async) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x4, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r6, @ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r7) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf250c0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40008810}, 0x400c800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) r12 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r13, 0x0, r13) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="e9895202c8da352d274ce162337da8836ca431798cff4e08b77cc72519a0d842c2b5a7a7a34a4a709f70ec76e2c43953aa879d9ede5a2570a0cb6ab63051b7c6b45a0d5b6ae9759117e7ced3d92c5c8d31b970e7f0cf89c257a024969a9086b18d417e5b3ab1201e5f7353a399fa72fb1ebcfd34062f112fbf36553a16c762c49d87ca3f8fb4f3041e5f8188fdfe0bfc3dbfbc31965805c2f1e9c64505a1d53c8cabbde4cfd50d1582414de8e0d370ac86aab15d783072aec97be6df7662ed2c59afbf2edd52edf7ca9729095023026385b8eaee57eec470f132e922b2f0de5dbe01059880ef3d746d50ee7cdce9475735bfadc6c6fb9b", 0xf7}, {&(0x7f0000000540)="74a5911b7f3e17be6604f64ffd040ebca59c62945cd875937daa5a24eb1a4bb3eb54e4bd5d6061bbceec096307b8e36a72a4ef14cf32", 0x36}], 0x2, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r13}}}], 0xb8}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)="4c1259e746547945351a5767dd11a5a5cff6b85db56b13c543cc84d153e5cca202391037bd36fadc8664bf3fd39f23fcd73fbd00911dd80cd610734bf74be8ce1f20e43c8aa72d8a6d7c783e9f5db88bf5feba6384b1bdedc3aa1d2670f62454f166ae5d84aebc91c81bd47a10e86196e41979f5c80cc5f9fc1c50c735a50c7b8201bfefe8cc6f3fc7d79522966ae8c6bb9e4746fc88065407df594dff76df7d2f45db2752dc20d14faa2766b983452a987a6481df37cdddfa8072798ef5ccfa374fb29f0127936e030b8c48b761f2b672cb5db96ac4df6c547a4d4d4f8fe5f3778a9738511d362f175687d68400c72d", 0xf0}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000000d40)="c3530040d8e1e150bf882f2f7bcb1f", 0xf}, {&(0x7f0000000d80)="014cc6c18e9f30ec56439659fbf40f7cf19d665c124e75e021fe7356311f9a1bf9e318db40706546f87bedafac07e673cebd515c734c2ae84112fba1151ed9ce99ecf2f551cfabbf0dd97950f3285952e79c684f105dd393850385191ae87d60f78d9514539b7eed12ddaec9626aa11cc97e72119dfc8ff70f4262aa8b4b8507017416891bf32ac45fe1ecfd9f7a91f4c628ecdccb3e4da7ec929d79b227034d9a5be638e2c3", 0xa6}, {&(0x7f0000000e40)="8740482f125c93a4b0ae66dbfffcbec1ee637586e4c12dd96a5fe717414a7162e7b856b30b226cbbcdeebd1b93a43ebb8dcba0160cff7f5e", 0x38}, {&(0x7f0000000e80)="0541778d6daf96821dd814c1f6b64ba025a2e19a8621e1ffc6b32fec41cf2446bdb76bf1f5329a0ac740ba604c784a6c8e48e049083d2bf49a0d399f59d003c86877cc6897e3ac1fcf9f14a10fc0b33fd0a19436d72f935001d7b0fdf80de19d28015bd259d3c29c2dbc1dcbc53ac18c94ab09d6c0ef833de5a7e0fc258183af415198f3df94a680213cf4a30d57a7887a3ec0959678a1", 0x97}], 0x6, 0x0, 0x0, 0x4048045}}, {{&(0x7f0000001140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000f40)="e90c77", 0x3}, {&(0x7f00000011c0)="71b8f189664ccc975c151926bdd658d320e0bcc29564d11f18c91ed52a224ec1b405c1b51d61cb97faf5f9ff790a0c91444b95e99135a9a771ab314f02869806da6669a2146d2b3079a4168d3c56c9d9d55d74814bef6d373bff2a1ebdefb2dc7936229b231a8bc2865016f63498bfbbbab7904d93021adb52601a4e51d1bd76d88672927a8532ac4797fa65fde962a764e7d09f7f91e485dbae4d6459e75a2c0f2e", 0xa2}, {&(0x7f0000001280)="d860c52ab03dd0eec2eee78a8b01d59fe18435621f188cfc502cc498601a56487f31f424d29a8bdd95feb631baf153ead7a0bc57ee872533e7f9e084b81084274dcafcb753d8cf719dca243a4c52023564f67dc8bae60351a58521bcc849a1510336818efc9f515c8823e335f6bc76a2803549f854a2ae3a1071d6c032be6a8cf8cf723be14890e7c81fddb9c3472460a9ad509efb69108895fd3756a32d82e731af", 0xa2}, {&(0x7f0000001040)="d31d2ccdc5e6adc6f8061bc7942f7e13fffcc51f1997420de5b4ca7b01c9cae0b0d88598efaf9a3b258610aafe4df060ba75de4cd90a2d", 0x37}], 0x4}}], 0x3, 0x815) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r14, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4043804}, 0x40) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r14, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4043804}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.753750018s ago: executing program 6 (id=2122): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500"], 0x48}}, 0x0) r3 = socket(0x25, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="f48f2d4f66", 0x5}], 0x1}}], 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='\f', 0x1}, {&(0x7f0000000340)="130092efc5343874efef2767", 0xc}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0xfed2) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) getpid() r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000080)={0x9ea, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004}) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r11) 8.706248353s ago: executing program 7 (id=2123): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r7, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) r9 = dup(r0) sendmsg$netlink(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) 7.798413899s ago: executing program 35 (id=2122): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500"], 0x48}}, 0x0) r3 = socket(0x25, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="f48f2d4f66", 0x5}], 0x1}}], 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='\f', 0x1}, {&(0x7f0000000340)="130092efc5343874efef2767", 0xc}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0xfed2) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) getpid() r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000080)={0x9ea, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004}) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r11) 7.79106473s ago: executing program 0 (id=2125): socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x166) syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x4000001c, 0x10, 0x0, 0x8, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000000)) syz_open_dev$rtc(&(0x7f0000000140), 0x1000, 0x101102) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x741280, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) 7.603734499s ago: executing program 7 (id=2127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 7.502423358s ago: executing program 7 (id=2128): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x80045500, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500002c000000001011907864010101ac1414aa00020020001890780400000400"/58], 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='rootcontext', &(0x7f0000000080)='tmpfs\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000100)=0x81, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000340)=0xeeef0000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a010100000000000000000700000009"], 0xec}}, 0x40) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0xde0052ef6c1e5cbd, &(0x7f0000000240)={[{@xino_auto}, {@uuid_on}, {@verity_off}, {@nfs_export_on}, {@metacopy_off}, {@xino_on}, {@redirect_dir_off}, {@verity_off}, {@uuid_null}], [{@subj_role={'subj_role', 0x3d, '/dev/dri/card#\x00'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0xc}}]}) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) 6.37831616s ago: executing program 7 (id=2130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) 6.312249749s ago: executing program 7 (id=2131): syz_open_dev$vivid(&(0x7f0000000400), 0x2, 0x2) (async) r0 = syz_open_dev$vivid(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000440)=0x3) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000440)=0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00fc000000000000000000000000000000fc01000000000000000000000000000000000000000000000000000000000000c5da2b65865677e50be333563ed89e487878199331b7ede2c7a0db3ac3beebb724c704def206abe26e73d75cbc772fcb6e04aff285b79097bf93e884bec978f967ebdf7bd15a2667893a7b7164ef633d55a48027217b9d2cd4f7acfb7e6a392aadf464d182f2ac721b408aab8d6a28edd63de76ef076639d54703792159dc2faa73b40e6a49e7198ea687b121f1caa5dd3227575a9320e101f1730d6c7792333babe8f114b6d0d66d1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1e000100"/268], 0x154}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x2002c2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) unshare(0x40020000) 5.912124781s ago: executing program 1 (id=2133): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1017800, &(0x7f00000003c0)='\x01\x19q\x9f\xdfL\x8f\x81E\x86\x97\x87\x06\xeb\xa7\b\x99l\xe8\xe1E\xb1B\xfc0\x91D\xeb\x12\xe40xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800, 0x40000504) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="dc7a2dc78b258764cf1adb7f5de1fe3cf2453cfc270279e2bbf8a572c8e00659ddb0ad802ae26156426f", 0x2a}, {&(0x7f0000000280)="9b81c37925603ec98050b00197f67e0800000000000000da1af9e522f49290bbfc085c7fe431deae43279a33c3", 0x2d}, {&(0x7f0000000340)="b03765df8181909b9a30646242396ed8e549e413a0ecb3e39e45f373c86b97cff6434faefdfd2b16b19c91ba62d8e02bc54f1a63a7bbeda8a80982b356843af13ede9d7c3e471d", 0x47}, {&(0x7f0000000480)="184b001cade5f89bab5a1e59f60ff892e86f11b384111c2d00"/37, 0x25}], 0x4}}], 0x1, 0x24009c44) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800c174563035a3d08828d9c374a7000000000000000000000000000091122200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 5.787631549s ago: executing program 4 (id=2134): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x20, 0x1405, 0x1, 0x70bd25, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000040000000000000008000e"], 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.821312092s ago: executing program 1 (id=2135): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x9004) r2 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000d5) r3 = syz_open_dev$vcsn(0x0, 0x10, 0x10000) r4 = gettid() timer_create(0x3, &(0x7f00000001c0)={0x0, 0x17, 0x800000000004, @thr={&(0x7f0000000400)="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", 0xfffffffffffffffe}}, &(0x7f0000bbdffc)=0x0) prlimit64(r4, 0xa, 0x0, &(0x7f0000000140)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r5, @ANYRESOCT=r2, @ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e04000013170902120001000000000904000000ef01"], 0x0) 3.784071514s ago: executing program 4 (id=2136): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r7, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) r9 = dup(r0) sendmsg$netlink(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) 2.758973848s ago: executing program 4 (id=2137): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket(0x28, 0x5, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000008) statx(0xffffffffffffff9c, 0x0, 0x0, 0x200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 2.627753169s ago: executing program 0 (id=2138): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x24}], 0x1}, 0x10c0) r0 = syz_open_dev$dri(&(0x7f00000004c0), 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) msgctl$IPC_SET(0x0, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x171, 0xb1, 0x26}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r4}) (fail_nth: 4) 615.450872ms ago: executing program 0 (id=2139): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 305.030311ms ago: executing program 4 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) 109.651254ms ago: executing program 4 (id=2141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) recvmmsg(r3, &(0x7f00000003c0), 0x0, 0x40000122, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000c00)=@ringbuf={{}, {}, {}, [@cb_func, @func, @printk={@lx}, @func]}, &(0x7f0000000d40)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) 0s ago: executing program 4 (id=2142): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000070000008303040000000000"], 0x18}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_OPEN(r7, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',posixacl']) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x4000000) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x7d, &(0x7f0000000600)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) kernel console output (not intermixed with test programs): 95] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=13295 comm=syz.0.1754 [ 650.844104][ T1539] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 651.018630][T12188] m920x_read = error: -19 [ 651.114559][T12188] dvb-usb: error -19 while querying for an remote control event. [ 651.137157][ T30] audit: type=1400 audit(2000000701.811:755): avc: denied { setattr } for pid=13291 comm="syz.4.1756" name="SCTPv6" dev="sockfs" ino=43199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.183857][ T1539] usb 2-1: Using ep0 maxpacket: 32 [ 651.210119][ T1539] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 651.245216][ T1539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.300558][ T1539] usb 2-1: config 0 descriptor?? [ 651.305776][T12188] m920x_read = error: -19 [ 651.349295][T12188] dvb-usb: error -19 while querying for an remote control event. [ 651.383046][ T1539] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 651.420857][T13305] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1757'. [ 651.699326][T12188] m920x_read = error: -19 [ 651.761987][T12188] dvb-usb: error -19 while querying for an remote control event. [ 652.049873][T12188] m920x_read = error: -19 [ 652.064349][T12188] dvb-usb: error -19 while querying for an remote control event. [ 652.090206][T13318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.105442][ T30] audit: type=1400 audit(2000000702.719:756): avc: denied { ioctl } for pid=13316 comm="syz.6.1760" path="socket:[42635]" dev="sockfs" ino=42635 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 652.152451][ T1539] gspca_vc032x: reg_w err -71 [ 652.161537][T13318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.174299][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.192050][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.214504][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.253150][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.274324][ T5879] m920x_read = error: -19 [ 652.278708][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 652.296534][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.301868][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.346264][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.383034][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.504495][T12188] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 652.513023][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.521364][ T5872] m920x_read = error: -19 [ 652.525784][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 652.534815][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.540130][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.551757][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.557186][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.562519][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 652.567906][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.354062][ T5879] m920x_read = error: -19 [ 653.358421][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 653.375681][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.383309][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.390252][ T1539] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.393437][ T30] audit: type=1400 audit(2000000703.916:757): avc: denied { write } for pid=13325 comm="syz.4.1762" name="file0" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 653.395652][ T1539] gspca_vc032x: Unknown sensor... [ 653.423935][ T1539] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 653.426605][ T1539] usb 2-1: USB disconnect, device number 66 [ 653.451206][T12188] usb 7-1: Using ep0 maxpacket: 8 [ 653.452897][T12188] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 653.452931][T12188] usb 7-1: config 0 has no interface number 0 [ 653.455363][T12188] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 653.455382][T12188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.455394][T12188] usb 7-1: Product: syz [ 653.455402][T12188] usb 7-1: Manufacturer: syz [ 653.455412][T12188] usb 7-1: SerialNumber: syz [ 653.465071][T12188] usb 7-1: config 0 descriptor?? [ 653.557391][ T5879] m920x_read = error: -19 [ 653.557442][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 653.610453][ T30] audit: type=1400 audit(2000000703.916:758): avc: denied { open } for pid=13325 comm="syz.4.1762" path="/347/file0" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 653.642199][ T42] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 653.683922][T12188] ath6kl: Failed to submit usb control message: -71 [ 653.683950][T12188] ath6kl: unable to send the bmi data to the device: -71 [ 653.683958][T12188] ath6kl: Unable to send get target info: -71 [ 653.685643][T12188] ath6kl: Failed to init ath6kl core: -71 [ 653.686414][T12188] ath6kl_usb 7-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 653.695410][T12188] usb 7-1: USB disconnect, device number 16 [ 653.805074][ T42] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 653.929164][T12188] m920x_read = error: -19 [ 653.929193][T12188] dvb-usb: error -19 while querying for an remote control event. [ 653.995340][ T42] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 653.997315][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 653.997339][ T42] usb 1-1: SerialNumber: syz [ 654.008644][ T42] usb 1-1: config 0 descriptor?? [ 654.100014][ T42] m920x_read = error: -19 [ 654.100127][ T42] dvb-usb: error -19 while querying for an remote control event. [ 654.263370][ T42] m920x_read = error: -19 [ 654.263457][ T42] dvb-usb: error -19 while querying for an remote control event. [ 654.452192][ T42] m920x_read = error: -19 [ 654.452249][ T42] dvb-usb: error -19 while querying for an remote control event. [ 655.924329][ T42] m920x_read = error: -19 [ 655.924353][ T42] dvb-usb: error -19 while querying for an remote control event. [ 655.930289][ T42] usb 1-1: USB disconnect, device number 57 [ 656.090897][T12188] m920x_read = error: -19 [ 656.090915][T12188] dvb-usb: error -19 while querying for an remote control event. [ 656.231405][T13349] SELinux: syz.6.1765 (13349) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 656.272611][ T42] m920x_read = error: -19 [ 656.827370][ T42] dvb-usb: error -19 while querying for an remote control event. [ 656.950545][T13357] syzkaller1: entered promiscuous mode [ 656.962787][T13357] syzkaller1: entered allmulticast mode [ 657.036005][T13361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.055573][T13361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=13361 comm=syz.6.1768 [ 657.127875][ T42] m920x_read = error: -19 [ 657.132372][ T42] dvb-usb: error -19 while querying for an remote control event. [ 657.598336][ T42] m920x_read = error: -19 [ 657.602811][ T42] dvb-usb: error -19 while querying for an remote control event. [ 657.801348][ T5872] m920x_read = error: -19 [ 657.805739][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 657.905956][T13375] vlan2: entered allmulticast mode [ 657.927612][T13375] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 657.993770][ T42] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 658.026238][ T5872] m920x_read = error: -19 [ 658.030634][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 658.178362][ T42] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 658.187456][ T42] usb 1-1: config 0 has no interface number 0 [ 658.194719][ T42] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 658.229039][ T5872] m920x_read = error: -19 [ 658.233479][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 658.252044][ T42] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 658.310186][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.344080][ T42] usb 1-1: Product: syz [ 658.359981][ T42] usb 1-1: Manufacturer: syz [ 658.812075][T12188] m920x_read = error: -19 [ 658.816649][T12188] dvb-usb: error -19 while querying for an remote control event. [ 658.831100][ T42] usb 1-1: SerialNumber: syz [ 658.868624][ T42] usb 1-1: config 0 descriptor?? [ 658.878621][T13371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 658.919166][ T42] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 658.977574][ T1539] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 658.998349][ T42] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 659.008158][T12188] m920x_read = error: -19 [ 659.019044][T12188] dvb-usb: error -19 while querying for an remote control event. [ 659.171484][ T1539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.208421][ T42] m920x_read = error: -19 [ 659.223201][ T1539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.258413][ T42] dvb-usb: error -19 while querying for an remote control event. [ 659.264476][T13399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1777'. [ 659.275396][ T1539] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 659.275427][ T1539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.279222][ T1539] usb 7-1: config 0 descriptor?? [ 659.348338][ T42] usb 1-1: USB disconnect, device number 58 [ 659.375170][ T42] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 659.429409][ T42] cyberjack 1-1:0.69: device disconnected [ 659.438520][T12188] m920x_read = error: -19 [ 659.442931][T12188] dvb-usb: error -19 while querying for an remote control event. [ 659.585111][T13408] SELinux: syz.4.1778 (13408) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 659.662463][T12188] m920x_read = error: -19 [ 659.677089][T12188] dvb-usb: error -19 while querying for an remote control event. [ 659.869578][ T1539] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 659.918744][ T1539] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 659.939635][T12188] m920x_read = error: -19 [ 659.948023][T12188] dvb-usb: error -19 while querying for an remote control event. [ 659.960007][ T1539] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 659.990702][ T1539] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 660.022675][ T1539] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 660.066340][ T1539] playstation 0003:054C:0DF2.001F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 660.218583][T12188] m920x_read = error: -19 [ 660.223834][T12188] dvb-usb: error -19 while querying for an remote control event. [ 660.353370][T13421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.373514][T13421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=13421 comm=syz.0.1779 [ 660.711892][ T5872] m920x_read = error: -19 [ 660.716458][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 660.923296][ T5872] m920x_read = error: -19 [ 661.023554][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 661.229447][ T5872] m920x_read = error: -19 [ 661.242442][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 661.247476][ T30] audit: type=1400 audit(2000000711.249:759): avc: denied { ioctl } for pid=13414 comm="syz.4.1781" path="socket:[43357]" dev="sockfs" ino=43357 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 661.283725][ T1539] playstation 0003:054C:0DF2.001F: Failed to retrieve feature with reportID 32: -71 [ 661.332387][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'. [ 661.350576][ T1539] playstation 0003:054C:0DF2.001F: Failed to retrieve DualSense firmware info: -71 [ 661.390485][ T1539] playstation 0003:054C:0DF2.001F: Failed to get firmware info from DualSense [ 661.434010][ T1539] playstation 0003:054C:0DF2.001F: Failed to create dualsense. [ 661.464030][ T1539] playstation 0003:054C:0DF2.001F: probe with driver playstation failed with error -71 [ 661.493799][ T42] m920x_read = error: -19 [ 661.499027][ T42] dvb-usb: error -19 while querying for an remote control event. [ 661.594257][ T1539] usb 7-1: USB disconnect, device number 17 [ 661.725343][ T42] m920x_read = error: -19 [ 661.767047][ T42] dvb-usb: error -19 while querying for an remote control event. [ 661.952878][T13448] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1786'. [ 661.960098][ T1539] m920x_read = error: -19 [ 661.978363][T13001] Bluetooth: hci3: unexpected event for opcode 0x080f [ 661.988839][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 662.216632][ T42] m920x_read = error: -19 [ 662.234334][ T42] dvb-usb: error -19 while querying for an remote control event. [ 663.716411][ T42] m920x_read = error: -19 [ 663.720807][ T42] dvb-usb: error -19 while querying for an remote control event. [ 664.022875][ T42] m920x_read = error: -19 [ 664.087518][ T42] dvb-usb: error -19 while querying for an remote control event. [ 665.253935][ T42] m920x_read = error: -19 [ 665.290787][ T42] dvb-usb: error -19 while querying for an remote control event. [ 665.504738][ T42] m920x_read = error: -19 [ 665.513783][ T42] dvb-usb: error -19 while querying for an remote control event. [ 665.634977][T13484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.656273][T13484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=13484 comm=syz.1.1792 [ 666.300841][T13001] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 666.312648][T13001] Bluetooth: hci3: Injecting HCI hardware error event [ 666.322358][ T5820] Bluetooth: hci3: hardware error 0x00 [ 666.557321][ T42] m920x_read = error: -19 [ 666.561929][ T42] dvb-usb: error -19 while querying for an remote control event. [ 666.765859][ T42] m920x_read = error: -19 [ 666.770258][ T42] dvb-usb: error -19 while querying for an remote control event. [ 667.004663][ T42] m920x_read = error: -19 [ 667.027562][ T42] dvb-usb: error -19 while querying for an remote control event. [ 667.198939][ T42] m920x_read = error: -19 [ 667.209100][ T42] dvb-usb: error -19 while querying for an remote control event. [ 667.250582][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 667.390871][ T42] m920x_read = error: -19 [ 667.409127][ T42] dvb-usb: error -19 while querying for an remote control event. [ 667.479050][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 667.698626][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 667.712657][ T42] m920x_read = error: -19 [ 667.738375][ T42] dvb-usb: error -19 while querying for an remote control event. [ 667.743739][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 667.765483][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.826867][ T10] usb 2-1: Product: syz [ 667.852186][ T10] usb 2-1: Manufacturer: syz [ 667.899737][ T10] usb 2-1: SerialNumber: syz [ 667.949619][ T10] usb 2-1: config 0 descriptor?? [ 668.014367][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 668.042748][ T10] usb 2-1: setting power ON [ 668.058328][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 668.064544][ T42] m920x_read = error: -19 [ 668.068933][ T42] dvb-usb: error -19 while querying for an remote control event. [ 668.082211][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 668.185787][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 668.235482][ T10] usb 2-1: media controller created [ 668.287983][ T42] m920x_read = error: -19 [ 668.310339][ T42] dvb-usb: error -19 while querying for an remote control event. [ 668.317868][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.457680][ T5820] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 669.457950][ T10] usb 2-1: selecting invalid altsetting 6 [ 669.494237][ T10] usb 2-1: digital interface selection failed (-22) [ 669.513100][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 669.544229][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 669.668193][ T42] m920x_read = error: -19 [ 669.755325][ T42] dvb-usb: error -19 while querying for an remote control event. [ 669.938751][ T10] usb 2-1: setting power OFF [ 669.956138][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 670.007850][T13522] FAULT_INJECTION: forcing a failure. [ 670.007850][T13522] name failslab, interval 1, probability 0, space 0, times 0 [ 670.010120][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 670.053013][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.0.1799 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 670.053044][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.053054][T13522] Call Trace: [ 670.053060][T13522] [ 670.053067][T13522] dump_stack_lvl+0x16c/0x1f0 [ 670.053098][T13522] should_fail_ex+0x512/0x640 [ 670.053125][T13522] should_failslab+0xc2/0x120 [ 670.053149][T13522] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 670.053170][T13522] ? __lock_acquire+0x622/0x1c90 [ 670.053194][T13522] ? dst_alloc+0x99/0x1a0 [ 670.053221][T13522] dst_alloc+0x99/0x1a0 [ 670.053244][T13522] rt_dst_alloc+0x35/0x3a0 [ 670.053267][T13522] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 670.053299][T13522] ip_route_output_key_hash+0x137/0x2e0 [ 670.053324][T13522] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 670.053354][T13522] ? find_held_lock+0x2b/0x80 [ 670.053374][T13522] ip_route_output_flow+0x27/0x150 [ 670.053398][T13522] raw_sendmsg+0xd70/0x3820 [ 670.053431][T13522] ? __pfx_raw_sendmsg+0x10/0x10 [ 670.053459][T13522] ? avc_has_perm+0x11a/0x1c0 [ 670.053487][T13522] ? sock_has_perm+0x259/0x2f0 [ 670.053521][T13522] ? __pfx_raw_sendmsg+0x10/0x10 [ 670.053546][T13522] inet_sendmsg+0x11c/0x140 [ 670.053572][T13522] __sys_sendto+0x43c/0x520 [ 670.053597][T13522] ? __pfx___sys_sendto+0x10/0x10 [ 670.053643][T13522] ? ksys_write+0x1ac/0x250 [ 670.053664][T13522] ? __pfx_ksys_write+0x10/0x10 [ 670.053689][T13522] __x64_sys_sendto+0xe0/0x1c0 [ 670.053717][T13522] ? do_syscall_64+0x91/0x4c0 [ 670.053743][T13522] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.053768][T13522] do_syscall_64+0xcd/0x4c0 [ 670.053797][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.053815][T13522] RIP: 0033:0x7f097198e929 [ 670.053831][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.053847][T13522] RSP: 002b:00007f097288d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 670.053865][T13522] RAX: ffffffffffffffda RBX: 00007f0971bb5fa0 RCX: 00007f097198e929 [ 670.053876][T13522] RDX: 000000000000ffeb RSI: 0000200000000040 RDI: 0000000000000006 [ 670.053887][T13522] RBP: 00007f097288d090 R08: 0000200000000340 R09: 0000000000000010 [ 670.053897][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.053908][T13522] R13: 0000000000000000 R14: 00007f0971bb5fa0 R15: 00007ffd22afc418 [ 670.053935][T13522] [ 670.304467][ T10] (NULL device *): no alternate interface [ 670.308042][ T42] m920x_read = error: -19 [ 670.323903][ T42] dvb-usb: error -19 while querying for an remote control event. [ 670.524311][ T5872] m920x_read = error: -19 [ 670.528805][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 670.644856][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 671.049156][ T5872] m920x_read = error: -19 [ 671.077779][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 671.144088][ T42] usb 2-1: USB disconnect, device number 67 [ 671.336808][ T5872] m920x_read = error: -19 [ 671.341223][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 671.891641][ T5872] m920x_read = error: -19 [ 671.896046][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 672.149777][ T5872] m920x_read = error: -19 [ 672.154177][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 672.440104][ T5872] m920x_read = error: -19 [ 672.444519][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 672.567334][T13553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.587797][T13553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=13553 comm=syz.1.1805 [ 673.275765][ T1539] m920x_read = error: -19 [ 673.327138][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 673.671466][ T5872] m920x_read = error: -19 [ 674.176523][T13570] SELinux: syz.4.1810 (13570) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 674.190624][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 674.514700][ T42] m920x_read = error: -19 [ 674.578877][ T42] dvb-usb: error -19 while querying for an remote control event. [ 674.649764][ T5872] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 674.745568][T13578] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.757008][T12188] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 674.778073][ T5879] m920x_read = error: -19 [ 674.783219][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 675.017260][T13583] input: syz0 as /devices/virtual/input/input47 [ 675.073115][ T5872] usb 7-1: too many configurations: 33, using maximum allowed: 8 [ 675.083005][ T42] m920x_read = error: -19 [ 675.087475][ T42] dvb-usb: error -19 while querying for an remote control event. [ 675.095409][T12188] usb 2-1: Using ep0 maxpacket: 8 [ 675.104040][T12188] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 675.190804][ T5872] usb 7-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 675.205920][T12188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 675.216988][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.225050][ T5872] usb 7-1: Product: syz [ 675.241455][T12188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 675.253948][ T5872] usb 7-1: Manufacturer: syz [ 675.264589][ T5872] usb 7-1: SerialNumber: syz [ 675.289679][T12188] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 676.149806][ T42] m920x_read = error: -19 [ 676.542560][ T5872] usb 7-1: config 0 descriptor?? [ 676.659675][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 676.881911][T12188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.890194][ T42] dvb-usb: error -19 while querying for an remote control event. [ 676.900382][ T5872] go7007-loader 7-1:0.0: can't handle multiple config [ 676.916272][T12188] usb 2-1: Product: syz [ 676.920514][T12188] usb 2-1: Manufacturer: syz [ 676.925177][T12188] usb 2-1: SerialNumber: syz [ 676.928853][ T10] usb 1-1: device descriptor read/64, error -71 [ 676.936335][ T5872] go7007-loader 7-1:0.0: probe failed [ 676.980831][T12188] usb 2-1: config 0 descriptor?? [ 677.033913][T12188] usb 2-1: can't set config #0, error -71 [ 677.039098][ T973] usb 7-1: USB disconnect, device number 18 [ 677.076706][T12188] usb 2-1: USB disconnect, device number 68 [ 677.110043][ T5879] m920x_read = error: -19 [ 677.114539][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 677.344527][ T5879] m920x_read = error: -19 [ 677.357598][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 677.418911][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 677.474060][T13607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.491541][T13607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=13607 comm=syz.1.1817 [ 677.784724][T12188] m920x_read = error: -19 [ 677.789171][T12188] dvb-usb: error -19 while querying for an remote control event. [ 677.944105][ T10] usb 1-1: device descriptor read/64, error -71 [ 677.974678][T12188] m920x_read = error: -19 [ 677.979206][T12188] dvb-usb: error -19 while querying for an remote control event. [ 678.125931][ T10] usb usb1-port1: attempt power cycle [ 678.184793][T13617] syz_tun: entered allmulticast mode [ 678.412640][T12188] m920x_read = error: -19 [ 678.423706][T12188] dvb-usb: error -19 while querying for an remote control event. [ 678.464122][T13614] syz_tun: left allmulticast mode [ 678.581746][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 678.616429][T12188] m920x_read = error: -19 [ 678.616611][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 678.631675][T12188] dvb-usb: error -19 while querying for an remote control event. [ 678.712137][T13627] SELinux: syz.7.1822 (13627) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 678.883946][T12188] m920x_read = error: -19 [ 678.947403][T12188] dvb-usb: error -19 while querying for an remote control event. [ 679.134743][T12188] m920x_read = error: -19 [ 679.139252][T12188] dvb-usb: error -19 while querying for an remote control event. [ 679.332425][T12188] m920x_read = error: -19 [ 679.356520][T12188] dvb-usb: error -19 while querying for an remote control event. [ 679.987561][ T5879] m920x_read = error: -19 [ 680.818251][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 680.904008][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 680.992875][ T42] m920x_read = error: -19 [ 681.529272][ T30] audit: type=1400 audit(2000000729.733:760): avc: denied { read } for pid=13650 comm="syz.7.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 681.556072][ T42] dvb-usb: error -19 while querying for an remote control event. [ 681.759049][ T5872] m920x_read = error: -19 [ 681.773055][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 681.876856][ T42] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 682.154928][ T5879] m920x_read = error: -19 [ 682.159419][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 682.172572][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.262879][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.422416][ T5879] m920x_read = error: -19 [ 682.427017][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 682.587032][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 682.679326][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.718512][T13675] SELinux: syz.7.1834 (13675) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 682.764639][ T5879] m920x_read = error: -19 [ 682.769251][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 682.802274][ T42] usb 1-1: config 0 descriptor?? [ 682.981273][ T5879] m920x_read = error: -19 [ 683.085519][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 683.328494][ T5879] m920x_read = error: -19 [ 683.364055][ T42] isku 0003:1E7D:319C.0020: item fetching failed at offset 5/7 [ 683.376508][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 683.538654][ T42] isku 0003:1E7D:319C.0020: parse failed [ 683.662390][ T5879] m920x_read = error: -19 [ 683.698360][ T42] isku 0003:1E7D:319C.0020: probe with driver isku failed with error -22 [ 683.762458][ T5879] dvb-usb: error -19 while querying for an remote control event. [ 684.033008][ T42] usb 1-1: USB disconnect, device number 62 [ 684.807712][ T5872] m920x_read = error: -19 [ 684.898307][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 685.276651][ T5872] m920x_read = error: -19 [ 685.281050][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 685.491725][ T5872] m920x_read = error: -19 [ 685.496116][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 685.746644][T12188] m920x_read = error: -19 [ 685.751085][T12188] dvb-usb: error -19 while querying for an remote control event. [ 685.928482][T12188] m920x_read = error: -19 [ 685.932948][T12188] dvb-usb: error -19 while querying for an remote control event. [ 686.131946][T12188] m920x_read = error: -19 [ 686.136532][T12188] dvb-usb: error -19 while querying for an remote control event. [ 686.295873][T13690] syz.1.1837 (13690): drop_caches: 2 [ 686.345358][T12188] m920x_read = error: -19 [ 686.349761][T12188] dvb-usb: error -19 while querying for an remote control event. [ 686.453933][ T973] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 686.591171][T12188] m920x_read = error: -19 [ 686.595830][T12188] dvb-usb: error -19 while querying for an remote control event. [ 686.805254][T12188] m920x_read = error: -19 [ 686.809656][T12188] dvb-usb: error -19 while querying for an remote control event. [ 686.827386][ T973] usb 7-1: Using ep0 maxpacket: 8 [ 686.855674][ T973] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 686.895455][ T973] usb 7-1: config 179 has no interface number 0 [ 686.915814][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 686.941798][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 687.029895][T12188] m920x_read = error: -19 [ 687.034289][T12188] dvb-usb: error -19 while querying for an remote control event. [ 687.782674][T12188] m920x_read = error: -19 [ 687.787145][T12188] dvb-usb: error -19 while querying for an remote control event. [ 687.969919][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 687.981245][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 687.992835][ T973] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 688.006464][ T973] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 688.015638][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.052293][ T30] audit: type=1400 audit(2000000735.598:761): avc: denied { create } for pid=13713 comm="syz.0.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 688.156288][T13704] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 688.248215][ T1539] m920x_read = error: -19 [ 688.252610][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 688.611394][ T1539] m920x_read = error: -19 [ 688.664062][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 689.051693][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.060419][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.206206][ T1539] m920x_read = error: -19 [ 689.220266][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 689.247151][ T973] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input48 [ 689.466926][ T5872] m920x_read = error: -19 [ 689.471308][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 689.481084][ T30] audit: type=1400 audit(2000000737.656:762): avc: denied { listen } for pid=13746 comm="syz.0.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 689.771606][ T5872] m920x_read = error: -19 [ 689.828977][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 690.015481][ T5872] kernel write not supported for file /dsp1 (pid: 5872 comm: kworker/1:3) [ 690.044795][ T5872] m920x_read = error: -19 [ 690.065828][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 690.105666][ T30] audit: type=1400 audit(2000000738.254:763): avc: denied { write } for pid=13760 comm="syz.7.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 690.132893][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1851'. [ 690.191360][T13772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1855'. [ 690.258138][ T5872] m920x_read = error: -19 [ 690.262534][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 690.493343][T12188] m920x_read = error: -19 [ 690.498463][T12188] dvb-usb: error -19 while querying for an remote control event. [ 690.739679][T12188] m920x_read = error: -19 [ 690.744080][T12188] dvb-usb: error -19 while querying for an remote control event. [ 690.836400][ T5872] usb 7-1: USB disconnect, device number 19 [ 690.837831][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 690.852478][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 690.860555][ T5872] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 690.926819][ T42] m920x_read = error: -19 [ 690.931220][ T42] dvb-usb: error -19 while querying for an remote control event. [ 691.018127][T13788] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1858'. [ 691.157520][ T42] m920x_read = error: -19 [ 691.162676][ T42] dvb-usb: error -19 while querying for an remote control event. [ 691.338286][ T42] m920x_read = error: -19 [ 691.347199][ T42] dvb-usb: error -19 while querying for an remote control event. [ 691.562888][ T42] m920x_read = error: -19 [ 691.569851][ T42] dvb-usb: error -19 while querying for an remote control event. [ 691.754847][ T42] m920x_read = error: -19 [ 691.762047][ T42] dvb-usb: error -19 while querying for an remote control event. [ 691.957865][ T42] m920x_read = error: -19 [ 691.971072][ T42] dvb-usb: error -19 while querying for an remote control event. [ 692.085140][ T30] audit: type=1400 audit(2000000740.107:764): avc: denied { getopt } for pid=13814 comm="syz.6.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 692.150429][ T42] m920x_read = error: -19 [ 692.154831][ T42] dvb-usb: error -19 while querying for an remote control event. [ 692.332280][ T42] m920x_read = error: -19 [ 692.340460][ T42] dvb-usb: error -19 while querying for an remote control event. [ 692.445053][ T30] audit: type=1400 audit(2000000740.434:765): avc: denied { nlmsg_write } for pid=13821 comm="X" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 692.535762][ T42] m920x_read = error: -19 [ 692.540143][ T42] dvb-usb: error -19 while querying for an remote control event. [ 692.738441][ T5872] m920x_read = error: -19 [ 692.748121][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 692.930845][ T5872] m920x_read = error: -19 [ 692.940807][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 692.973715][ T42] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 693.021916][T13836] loop6: detected capacity change from 0 to 524287999 [ 693.068205][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.089694][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.105401][T13841] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 693.128435][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.136730][ T5872] m920x_read = error: -19 [ 693.153746][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 693.167905][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 693.174260][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.256329][T13842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.270847][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 693.282988][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.292883][ T42] usb 7-1: can't read configurations, error -61 [ 693.387967][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.397247][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.405945][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.413997][ T6058] ldm_validate_partition_table(): Disk read failed. [ 693.420689][ T6058] Buffer I/O error on dev loop6, logical block 0, async page read [ 693.429215][ T6058] Dev loop6: unable to read RDB block 0 [ 693.434953][ T5872] m920x_read = error: -19 [ 693.439351][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 693.447661][ T6058] loop6: unable to read partition table [ 693.455296][T13836] ldm_validate_partition_table(): Disk read failed. [ 693.470860][T13836] Dev loop6: unable to read RDB block 0 [ 693.486398][T13836] loop6: unable to read partition table [ 693.504370][T13836] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 693.529353][ T42] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 693.615567][ T5872] m920x_read = error: -19 [ 693.626396][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 693.722260][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 693.739639][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 693.764842][ T42] usb 7-1: can't read configurations, error -61 [ 693.807637][ T5872] m920x_read = error: -19 [ 693.935360][ T42] usb usb7-port1: attempt power cycle [ 694.133315][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 694.588198][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 695.540459][ T5872] m920x_read = error: -19 [ 695.610201][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 695.774460][ T5872] m920x_read = error: -19 [ 695.778942][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 696.058040][ T5872] m920x_read = error: -19 [ 696.062441][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 696.538144][ T5872] m920x_read = error: -19 [ 696.542566][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 696.655109][T13887] Bluetooth: MGMT ver 1.23 [ 696.725931][ T42] m920x_read = error: -19 [ 696.730329][ T42] dvb-usb: error -19 while querying for an remote control event. [ 696.961692][ T42] m920x_read = error: -19 [ 696.966090][ T42] dvb-usb: error -19 while querying for an remote control event. [ 697.319220][ T42] m920x_read = error: -19 [ 697.323611][ T42] dvb-usb: error -19 while querying for an remote control event. [ 697.538529][ T5872] m920x_read = error: -19 [ 697.543045][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 697.726065][ T5872] m920x_read = error: -19 [ 697.765229][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 697.776267][ T42] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 697.967973][ T5872] m920x_read = error: -19 [ 697.983867][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 697.997600][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 698.058354][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 698.248625][ T42] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 698.381286][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.400999][ T5872] m920x_read = error: -19 [ 698.451983][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 698.517469][ T42] usb 7-1: Product: syz [ 698.587375][ T42] usb 7-1: Manufacturer: syz [ 698.677536][ T42] usb 7-1: SerialNumber: syz [ 698.736446][ T5872] m920x_read = error: -19 [ 698.774982][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 698.928791][ T42] usb 7-1: config 0 descriptor?? [ 698.961751][ T42] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 698.999087][ T42] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 699.099673][ T5872] m920x_read = error: -19 [ 699.104833][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 699.206710][ T5827] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 699.323728][ T5872] m920x_read = error: -19 [ 699.328174][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 699.379502][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.388581][ T5827] usb 8-1: Using ep0 maxpacket: 16 [ 699.477740][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.494990][ T5827] usb 8-1: config 6 has an invalid interface number: 1 but max is 0 [ 699.508976][ T5827] usb 8-1: config 6 has no interface number 0 [ 699.519237][ T5827] usb 8-1: config 6 interface 1 has no altsetting 0 [ 699.528163][ T5872] m920x_read = error: -19 [ 699.543820][ T5872] dvb-usb: error -19 while querying for an remote control event. [ 699.679361][ T5827] usb 8-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=ef.14 [ 699.694822][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.703406][ T5827] usb 8-1: Product: syz [ 699.707585][ T5827] usb 8-1: Manufacturer: syz [ 699.712744][ T5827] usb 8-1: SerialNumber: syz [ 700.258588][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.308251][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.511874][T13931] tipc: Enabling of bearer rejected, failed to enable media [ 700.533431][ T30] audit: type=1400 audit(2000000748.020:766): avc: denied { write } for pid=13962 comm="syz.1.1894" lport=43157 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 700.602432][ T5827] usb 8-1: selecting invalid altsetting 1 [ 700.637272][ T5827] snd-usb-us122l 8-1:6.1: usb_set_interface error [ 700.643738][ T42] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 700.644064][ T5899] m920x_read = error: -19 [ 700.660111][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 700.697771][ T5827] snd-usb-us122l 8-1:6.1: probe with driver snd-usb-us122l failed with error -22 [ 700.739968][ T5827] usb 8-1: USB disconnect, device number 7 [ 700.820801][ T5872] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 700.839027][ T1539] m920x_read = error: -19 [ 700.849842][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 700.948907][ T5899] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 701.034516][ T1539] m920x_read = error: -19 [ 701.040079][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 701.048463][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 701.057032][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.070878][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.081390][ T5872] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 701.091472][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.098492][ T973] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 701.103601][ T5872] usb 5-1: config 0 descriptor?? [ 701.122391][ T5899] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 701.150056][ T5899] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 701.163969][ T42] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 701.194757][ T42] em28xx 7-1:0.0: board has no eeprom [ 701.201253][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 701.223255][ T5899] usb 1-1: SerialNumber: syz [ 701.228186][ T1539] m920x_read = error: -19 [ 701.232578][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 701.252561][ T5899] usb 1-1: config 0 descriptor?? [ 701.292798][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 701.301494][ T42] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 701.310006][ T42] em28xx 7-1:0.0: dvb set to bulk mode. [ 701.316714][ T5899] em28xx 7-1:0.0: Binding DVB extension [ 701.328529][ T42] usb 7-1: USB disconnect, device number 23 [ 701.504328][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.529063][ T42] em28xx 7-1:0.0: Disconnecting em28xx [ 701.553071][ T1539] m920x_read = error: -19 [ 701.557664][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 702.001797][T13998] FAULT_INJECTION: forcing a failure. [ 702.001797][T13998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.017739][T13998] CPU: 0 UID: 0 PID: 13998 Comm: syz.4.1893 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 702.017763][T13998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 702.017774][T13998] Call Trace: [ 702.017780][T13998] [ 702.017788][T13998] dump_stack_lvl+0x16c/0x1f0 [ 702.017820][T13998] should_fail_ex+0x512/0x640 [ 702.017849][T13998] _copy_to_iter+0x463/0x16f0 [ 702.017881][T13998] ? __pfx__copy_to_iter+0x10/0x10 [ 702.017904][T13998] ? timers_stop+0x15f/0x210 [ 702.017926][T13998] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 702.017957][T13998] seq_read_iter+0x719/0x12c0 [ 702.017989][T13998] seq_read+0x39e/0x4e0 [ 702.018010][T13998] ? __pfx_seq_read+0x10/0x10 [ 702.018035][T13998] ? lockdep_hardirqs_on+0x7c/0x110 [ 702.018066][T13998] ? vfs_readv+0x44b/0x8b0 [ 702.018089][T13998] ? __pfx_seq_read+0x10/0x10 [ 702.018108][T13998] vfs_readv+0x5c1/0x8b0 [ 702.018133][T13998] ? __pfx_vfs_readv+0x10/0x10 [ 702.018154][T13998] ? find_held_lock+0x2b/0x80 [ 702.018190][T13998] ? __fget_files+0x20e/0x3c0 [ 702.018219][T13998] ? do_preadv+0x1a6/0x270 [ 702.018237][T13998] do_preadv+0x1a6/0x270 [ 702.018257][T13998] ? __pfx_do_preadv+0x10/0x10 [ 702.018283][T13998] do_syscall_64+0xcd/0x4c0 [ 702.018312][T13998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.018328][T13998] RIP: 0033:0x7f1f1618e929 [ 702.018343][T13998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.018358][T13998] RSP: 002b:00007f1f13fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 702.018375][T13998] RAX: ffffffffffffffda RBX: 00007f1f163b6160 RCX: 00007f1f1618e929 [ 702.018387][T13998] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000009 [ 702.018398][T13998] RBP: 00007f1f13fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 702.018408][T13998] R10: 0000000000000045 R11: 0000000000000246 R12: 0000000000000001 [ 702.018418][T13998] R13: 0000000000000000 R14: 00007f1f163b6160 R15: 00007ffe171f9858 [ 702.018442][T13998] [ 702.221370][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.399198][ T1539] m920x_read = error: -19 [ 702.407938][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 702.496273][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.515380][ T973] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 702.530056][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.567399][ T973] usb 2-1: config 0 descriptor?? [ 702.595458][ T1539] m920x_read = error: -19 [ 702.618733][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 702.659308][ T5899] em28xx 7-1:0.0: Registering input extension [ 702.689404][ T42] em28xx 7-1:0.0: Closing input extension [ 702.725688][ T42] em28xx 7-1:0.0: Freeing device [ 702.791531][ T5827] usb 1-1: USB disconnect, device number 63 [ 703.021474][ T5899] m920x_read = error: -19 [ 703.806950][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 703.821601][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 703.828243][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 703.838899][ T5872] usb 5-1: USB disconnect, device number 66 [ 703.990390][ T5899] m920x_read = error: -19 [ 704.013147][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 704.230922][ T5899] m920x_read = error: -19 [ 704.255414][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 704.303817][T14027] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1902'. [ 704.466017][ T5899] m920x_read = error: -19 [ 704.486160][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 704.497524][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1903'. [ 704.553905][T14036] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 704.576770][T14036] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 704.712577][ T42] m920x_read = error: -19 [ 704.727814][ T42] dvb-usb: error -19 while querying for an remote control event. [ 704.829406][ T5899] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 704.925796][ T42] m920x_read = error: -19 [ 704.981215][ T973] usbhid 2-1:0.0: can't add hid device: -71 [ 704.987260][ T973] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 705.017600][ T973] usb 2-1: USB disconnect, device number 69 [ 705.031603][ T42] dvb-usb: error -19 while querying for an remote control event. [ 705.139178][T14046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.157689][T14047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=14047 comm=syz.0.1899 [ 705.438170][ T5899] usb 7-1: Using ep0 maxpacket: 32 [ 705.454031][ T5899] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 705.474525][ T5899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.487684][ T5899] usb 7-1: config 0 has no interface number 0 [ 705.493885][ T5899] usb 7-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 705.509544][ T5899] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 705.536785][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.557662][ T5899] usb 7-1: Product: syz [ 705.577778][ T5899] usb 7-1: Manufacturer: syz [ 705.582744][ T5899] usb 7-1: SerialNumber: syz [ 705.625755][ T5899] usb 7-1: config 0 descriptor?? [ 705.633044][ T42] m920x_read = error: -19 [ 705.637707][ T42] dvb-usb: error -19 while querying for an remote control event. [ 705.653477][ T5899] ums-jumpshot 7-1:0.16: USB Mass Storage device detected [ 705.825270][ T5899] ums-jumpshot 7-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 705.834239][ T1539] m920x_read = error: -19 [ 705.838612][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 705.927325][T14058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.952179][T14058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=214 sclass=netlink_route_socket pid=14058 comm=syz.7.1906 [ 706.166096][ T1539] m920x_read = error: -19 [ 706.271033][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 706.342475][ T5899] usb 7-1: USB disconnect, device number 24 [ 706.575571][ T1539] m920x_read = error: -19 [ 706.579959][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 706.609904][ T973] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 707.156287][ T5899] m920x_read = error: -19 [ 707.160841][ T42] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 707.176900][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 707.381476][ T42] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 707.488165][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.496612][ T5899] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 707.549141][ T1539] m920x_read = error: -19 [ 707.597128][ T42] usb 2-1: Product: syz [ 707.601724][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 707.610027][ T42] usb 2-1: Manufacturer: syz [ 707.614711][ T42] usb 2-1: SerialNumber: syz [ 707.623321][ T973] usb 1-1: device descriptor read/64, error -71 [ 707.633351][ T42] usb 2-1: config 0 descriptor?? [ 707.716527][ T5899] usb 8-1: Using ep0 maxpacket: 8 [ 707.730059][ T5899] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 707.742034][ T5899] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 707.752634][ T5899] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.763316][ T5899] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.777121][ T5899] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 707.786775][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.794991][T12188] m920x_read = error: -19 [ 707.799758][T12188] dvb-usb: error -19 while querying for an remote control event. [ 707.814072][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 707.855239][ T42] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 707.862125][ T42] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 707.875139][ T42] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 707.897945][ T973] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 707.986196][ T42] m920x_read = error: -19 [ 707.991315][ T42] dvb-usb: error -19 while querying for an remote control event. [ 707.995457][ T10] usb 5-1: too many configurations: 23, using maximum allowed: 8 [ 708.018363][ T10] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 708.030322][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 708.032636][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.043562][ T10] usb 5-1: SerialNumber: syz [ 708.048545][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.053517][ T973] usb 1-1: device descriptor read/64, error -71 [ 708.065142][ T5899] usb 8-1: usb_control_msg returned -71 [ 708.073779][ T10] usb 5-1: config 0 descriptor?? [ 708.085054][ T5899] usbtmc 8-1:16.0: can't read capabilities [ 708.109006][ T5899] usb 8-1: USB disconnect, device number 8 [ 708.175838][ T42] m920x_read = error: -19 [ 708.180400][ T42] dvb-usb: error -19 while querying for an remote control event. [ 708.199450][ T973] usb usb1-port1: attempt power cycle [ 708.357319][ T5899] m920x_read = error: -19 [ 708.362386][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 708.549778][ T5899] m920x_read = error: -19 [ 708.555002][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 708.560350][ T973] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 708.582441][ T973] usb 1-1: device descriptor read/8, error -71 [ 708.731580][ T5899] m920x_read = error: -19 [ 708.736138][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 708.838552][ T973] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 708.872715][ T973] usb 1-1: device descriptor read/8, error -71 [ 708.913196][ T5899] m920x_read = error: -19 [ 708.917582][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 709.042105][ T973] usb usb1-port1: unable to enumerate USB device [ 709.049682][ T30] audit: type=1400 audit(2000000755.980:767): avc: denied { setopt } for pid=14102 comm="syz.7.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 709.261332][ T5899] m920x_read = error: -19 [ 709.265755][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 709.448103][ T5899] m920x_read = error: -19 [ 709.473629][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 709.839552][T12188] m920x_read = error: -19 [ 709.860344][T12188] dvb-usb: error -19 while querying for an remote control event. [ 709.869624][ T5899] usb 5-1: USB disconnect, device number 67 [ 709.958509][T14114] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 709.965062][T14114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 709.976259][T14114] vhci_hcd vhci_hcd.0: Device attached [ 710.000273][T14114] afs: Unknown parameter '18446744073709551615' [ 710.008617][T14115] vhci_hcd: connection closed [ 710.017375][ T9321] vhci_hcd: stop threads [ 710.028068][ T9321] vhci_hcd: release socket [ 710.032566][ T9321] vhci_hcd: disconnect device [ 710.068123][ T42] m920x_read = error: -19 [ 710.072600][ T42] dvb-usb: error -19 while querying for an remote control event. [ 710.279397][ T42] m920x_read = error: -19 [ 710.301983][ T42] dvb-usb: error -19 while querying for an remote control event. [ 710.495760][ T42] m920x_read = error: -19 [ 710.582146][ T42] dvb-usb: error -19 while querying for an remote control event. [ 710.599726][ T10] usb 2-1: USB disconnect, device number 70 [ 710.784631][ T42] m920x_read = error: -19 [ 710.799943][ T42] dvb-usb: error -19 while querying for an remote control event. [ 711.069136][T14133] netlink: 788 bytes leftover after parsing attributes in process `syz.7.1919'. [ 711.211768][T12188] m920x_read = error: -19 [ 711.216215][T12188] dvb-usb: error -19 while querying for an remote control event. [ 711.634906][ T30] audit: type=1400 audit(2000000758.038:768): avc: denied { name_connect } for pid=14134 comm="syz.0.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 712.352764][T14153] veth1_macvtap: left promiscuous mode [ 712.358792][T14153] macsec0: entered promiscuous mode [ 712.364050][T14153] macsec0: entered allmulticast mode [ 712.369851][T12188] m920x_read = error: -19 [ 712.374225][T12188] dvb-usb: error -19 while querying for an remote control event. [ 712.417039][T14153] veth1_macvtap: entered promiscuous mode [ 712.424600][T14153] veth1_macvtap: entered allmulticast mode [ 712.433640][T14153] macsec0: left promiscuous mode [ 712.438994][T14153] macsec0: left allmulticast mode [ 712.444775][T14153] veth1_macvtap: left allmulticast mode [ 712.510419][T14153] netlink: 'syz.4.1926': attribute type 23 has an invalid length. [ 712.614673][T12188] m920x_read = error: -19 [ 712.619594][T12188] dvb-usb: error -19 while querying for an remote control event. [ 713.076616][ T42] m920x_read = error: -19 [ 713.081504][ T42] dvb-usb: error -19 while querying for an remote control event. [ 713.157443][T12188] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 713.297336][ T1539] m920x_read = error: -19 [ 713.325987][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 713.436025][T12188] usb 2-1: Using ep0 maxpacket: 32 [ 713.504257][T12188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 713.538239][T12188] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 713.557206][T14172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.573977][T12188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.639501][T12188] usb 2-1: config 0 descriptor?? [ 713.670602][ T1539] m920x_read = error: -19 [ 713.679654][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 714.172120][ T1539] m920x_read = error: -19 [ 714.193492][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 714.226879][ T42] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 714.414447][ T42] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 714.441148][ T42] usb 5-1: config 5 has no interface number 0 [ 714.474445][ T42] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 714.543389][ T1539] m920x_read = error: -19 [ 714.551920][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 714.566490][ T42] usb 5-1: config 5 interface 123 has no altsetting 0 [ 714.583380][ T42] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 714.593767][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.608221][ T42] usb 5-1: Product: syz [ 714.615068][ T42] usb 5-1: Manufacturer: syz [ 714.620582][ T42] usb 5-1: SerialNumber: syz [ 714.682643][T14179] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 714.739583][ T1539] m920x_read = error: -19 [ 714.743980][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 715.632759][T14195] kvm: user requested TSC rate below hardware speed [ 715.657971][ T9321] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 717.168706][T13001] Bluetooth: hci0: command 0x0c1a tx timeout [ 717.741271][T12188] savu 0003:1E7D:2D5A.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 717.928349][ T1539] m920x_read = error: -19 [ 717.932782][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 718.008147][ T42] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 718.719874][ T42] usb 5-1: USB disconnect, device number 68 [ 718.888244][ T1539] m920x_read = error: -19 [ 718.893059][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 718.995636][T14208] bio_check_eod: 2 callbacks suppressed [ 718.995680][T14208] syz.6.1938: attempt to access beyond end of device [ 718.995680][T14208] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 719.014912][T14208] SQUASHFS error: Failed to read block 0x0: -5 [ 719.021398][T14208] unable to read squashfs_super_block [ 719.491557][ T5827] usb 2-1: USB disconnect, device number 71 [ 719.924812][T14213] fido_id[14213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 720.120632][ T42] m920x_read = error: -19 [ 720.385314][ T42] dvb-usb: error -19 while querying for an remote control event. [ 720.523138][ T5827] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 720.555474][ T1539] m920x_read = error: -19 [ 720.559989][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 720.706416][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 720.738750][ T1539] m920x_read = error: -19 [ 720.739369][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.773993][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.776625][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 720.785160][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.043268][ T5827] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 721.064802][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.093199][ T5827] usb 1-1: config 0 descriptor?? [ 721.175511][T12188] m920x_read = error: -19 [ 721.187170][T12188] dvb-usb: error -19 while querying for an remote control event. [ 721.618308][ T1539] m920x_read = error: -19 [ 722.236951][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 722.325467][ T30] audit: type=1326 audit(2000000768.393:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168638e929 code=0x7fc00000 [ 722.415386][T14226] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 722.424372][ T1539] m920x_read = error: -19 [ 722.428850][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 722.446129][T14226] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1944'. [ 722.608403][ T1539] m920x_read = error: -19 [ 722.612855][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 722.814982][ T5827] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 722.825133][ T5827] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 722.832152][ T5827] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 722.839271][ T5827] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 722.879636][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.891028][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.929081][ T5827] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 722.949698][ T5827] input: HID 0955:7214 Haptics as /devices/virtual/input/input50 [ 723.046251][ T42] m920x_read = error: -19 [ 723.052997][ T42] dvb-usb: error -19 while querying for an remote control event. [ 723.199240][ T1539] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 723.770446][ T5827] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 723.814652][T14263] trusted_key: encrypted_key: insufficient parameters specified [ 723.859238][ T5827] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 724.003532][T12188] m920x_read = error: -19 [ 724.034416][ T5827] usb 1-1: USB disconnect, device number 68 [ 724.042758][T12188] dvb-usb: error -19 while querying for an remote control event. [ 724.119899][ T5929] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 724.163753][ T5929] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 724.196275][ T30] audit: type=1400 audit(2000000770.142:770): avc: denied { associate } for pid=14265 comm="syz.7.1952" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 724.218609][T12188] m920x_read = error: -19 [ 724.218643][ T5929] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 724.243539][ T1539] usb 5-1: Using ep0 maxpacket: 32 [ 724.249837][T12188] dvb-usb: error -19 while querying for an remote control event. [ 724.252701][ T5929] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 724.425378][T12188] m920x_read = error: -19 [ 724.431326][ T1539] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 724.443429][T12188] dvb-usb: error -19 while querying for an remote control event. [ 724.474470][ T1539] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 724.919777][T12188] m920x_read = error: -19 [ 724.944036][ T1539] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 724.953360][T12188] dvb-usb: error -19 while querying for an remote control event. [ 724.983639][ T1539] usb 5-1: Product: syz [ 725.004491][ T1539] usb 5-1: Manufacturer: syz [ 725.019114][ T1539] usb 5-1: SerialNumber: syz [ 725.042543][ T1539] usb 5-1: config 0 descriptor?? [ 725.107285][T14253] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 725.412967][ T42] m920x_read = error: -19 [ 725.417346][ T42] dvb-usb: error -19 while querying for an remote control event. [ 725.447351][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.494662][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.611932][ T1539] m920x_read = error: -19 [ 725.616331][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 725.680543][ T5827] usb 5-1: USB disconnect, device number 69 [ 725.815314][ T1539] m920x_read = error: -19 [ 725.819848][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 726.095936][ T1539] m920x_read = error: -19 [ 726.391712][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 726.652300][ T1539] m920x_read = error: -19 [ 726.656688][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 727.035421][ T1539] m920x_read = error: -19 [ 727.039888][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 727.129998][ T5929] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 727.247586][ T5827] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 727.418693][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 727.466009][T14310] ubi: mtd0 is already attached to ubi31 [ 727.482021][ T1539] m920x_read = error: -19 [ 727.486409][ T30] audit: type=1400 audit(2000000773.220:771): avc: denied { create } for pid=14307 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 727.506095][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.514564][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 727.538509][ T30] audit: type=1400 audit(2000000773.220:772): avc: denied { sys_admin } for pid=14307 comm="syz.0.1967" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 727.540268][ T5827] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 727.559488][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.616373][ T5827] usb 8-1: config 0 has no interface number 0 [ 727.627856][ T5827] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 727.654889][ T5827] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 727.676873][ T5929] usb 5-1: config index 0 descriptor too short (expected 65415, got 72) [ 727.689515][ T5827] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.702287][ T5827] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 727.702426][ T5929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 727.718013][ T1539] m920x_read = error: -19 [ 727.731275][ T5827] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 727.741132][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.749198][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.760355][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 727.760352][ T5929] usb 5-1: Product: syz [ 727.760375][ T5929] usb 5-1: Manufacturer: syz [ 727.760389][ T5929] usb 5-1: SerialNumber: syz [ 727.789578][ T5827] usb 8-1: config 0 descriptor?? [ 727.799962][ T5827] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 727.879483][ T5929] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 727.894802][ T5827] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 727.912634][ T30] audit: type=1400 audit(2000000773.613:773): avc: denied { ioctl } for pid=14313 comm="syz.0.1969" path="socket:[48275]" dev="sockfs" ino=48275 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 727.937441][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.968289][ T1539] m920x_read = error: -19 [ 727.972676][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 728.240968][ T1539] m920x_read = error: -19 [ 728.308955][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 728.610433][T14321] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.731183][ T1539] m920x_read = error: -19 [ 728.740411][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 728.990183][ T1539] m920x_read = error: -19 [ 728.995201][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 729.214839][ T1539] m920x_read = error: -19 [ 729.221746][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 729.396423][ T1539] m920x_read = error: -19 [ 729.782172][ T5827] usb 5-1: Service connection timeout for: 256 [ 729.788458][ T5827] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 729.800047][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 729.825773][ T5827] ath9k_htc: Failed to initialize the device [ 729.860328][ T5827] usb 5-1: ath9k_htc: USB layer deinitialized [ 729.934115][T14337] netlink: 'syz.1.1975': attribute type 13 has an invalid length. [ 729.947429][T14337] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1975'. [ 730.060235][ T42] m920x_read = error: -19 [ 730.077841][ T42] dvb-usb: error -19 while querying for an remote control event. [ 730.385435][ T1539] m920x_read = error: -19 [ 730.390555][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 730.443004][ T5827] usb 5-1: USB disconnect, device number 70 [ 730.612757][ T1539] m920x_read = error: -19 [ 730.861961][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 731.120501][ T1539] m920x_read = error: -19 [ 731.124908][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 731.632106][ T30] audit: type=1400 audit(2000000777.092:774): avc: denied { write } for pid=14354 comm="syz.1.1980" path="socket:[47522]" dev="sockfs" ino=47522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 731.665639][ T1539] usb 8-1: USB disconnect, device number 9 [ 731.712438][ T1539] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 731.770309][ T5934] m920x_read = error: -19 [ 731.783878][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 732.005520][ T1539] m920x_read = error: -19 [ 732.063212][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 732.325599][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1984'. [ 732.347000][ T42] m920x_read = error: -19 [ 732.351515][ T42] dvb-usb: error -19 while querying for an remote control event. [ 732.496644][ T1539] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 732.546854][ T42] m920x_read = error: -19 [ 732.587885][ T42] dvb-usb: error -19 while querying for an remote control event. [ 732.679259][ T30] audit: type=1400 audit(2000000778.084:775): avc: denied { write } for pid=14364 comm="syz.4.1984" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 732.742490][ T1539] usb 7-1: Using ep0 maxpacket: 32 [ 732.795768][ T1539] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.811882][ T42] m920x_read = error: -19 [ 732.816298][ T42] dvb-usb: error -19 while querying for an remote control event. [ 732.842213][ T1539] usb 7-1: config 0 has no interfaces? [ 732.852264][ T1539] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 732.875230][ T1539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.896636][T14377] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 732.904545][ T1539] usb 7-1: Product: syz [ 732.904569][ T1539] usb 7-1: Manufacturer: syz [ 732.904583][ T1539] usb 7-1: SerialNumber: syz [ 732.928143][ T1539] usb 7-1: config 0 descriptor?? [ 732.938300][T14377] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 733.010085][ T1539] m920x_read = error: -19 [ 733.031231][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 733.245540][ T1539] m920x_read = error: -19 [ 733.249993][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 733.332275][ T973] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 733.363158][ T30] audit: type=1400 audit(2000000778.729:776): avc: denied { mounton } for pid=14353 comm="syz.0.1981" path="/416/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 733.510275][T12188] usb 7-1: USB disconnect, device number 25 [ 733.529694][ T42] m920x_read = error: -19 [ 733.536220][ T42] dvb-usb: error -19 while querying for an remote control event. [ 733.562546][ T30] audit: type=1400 audit(2000000778.907:777): avc: denied { view } for pid=14383 comm="syz.4.1990" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 733.640491][ T973] usb 8-1: Using ep0 maxpacket: 32 [ 733.647485][ T973] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.661197][ T973] usb 8-1: config 0 interface 0 has no altsetting 0 [ 733.668137][ T973] usb 8-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 733.677962][ T973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.683289][ T1539] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 733.693558][ T973] usb 8-1: config 0 descriptor?? [ 733.753844][T12188] m920x_read = error: -19 [ 733.760679][T12188] dvb-usb: error -19 while querying for an remote control event. [ 733.831056][T14384] overlayfs: failed to resolve '/f(ƀ': -2 [ 733.886999][ T1539] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 733.906991][ T1539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.929226][T12188] m920x_read = error: -19 [ 733.934087][T12188] dvb-usb: error -19 while querying for an remote control event. [ 733.942999][ T1539] usb 1-1: config 0 descriptor?? [ 733.970735][ T1539] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 734.121688][T12188] m920x_read = error: -19 [ 734.126195][T12188] dvb-usb: error -19 while querying for an remote control event. [ 734.180322][ T973] logitech 0003:046D:C294.0023: unknown main item tag 0x0 [ 734.216768][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1993'. [ 734.258595][ T973] logitech 0003:046D:C294.0023: unknown main item tag 0x0 [ 734.290867][ T973] logitech 0003:046D:C294.0023: unknown main item tag 0x0 [ 734.314851][T12188] m920x_read = error: -19 [ 734.319370][T12188] dvb-usb: error -19 while querying for an remote control event. [ 734.342868][ T973] logitech 0003:046D:C294.0023: unknown main item tag 0x0 [ 734.474576][ T1539] gspca_cpia1: usb_control_msg 03, error -32 [ 734.495958][T12188] m920x_read = error: -19 [ 734.506605][T12188] dvb-usb: error -19 while querying for an remote control event. [ 734.527655][ T973] logitech 0003:046D:C294.0023: unknown main item tag 0x0 [ 734.549094][ T1539] gspca_cpia1: usb_control_msg 03, error -71 [ 734.561985][ T973] logitech 0003:046D:C294.0023: hidraw0: USB HID v4.06 Device [HID 046d:c294] on usb-dummy_hcd.7-1/input0 [ 734.582802][T14397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14397 comm=syz.4.1993 [ 734.593343][ T1539] gspca_cpia1: usb_control_msg 01, error -71 [ 734.664266][T14403] lo speed is unknown, defaulting to 1000 [ 734.670451][T14403] lo speed is unknown, defaulting to 1000 [ 734.679420][T14403] lo speed is unknown, defaulting to 1000 [ 734.733268][T14403] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 734.845886][T14403] lo speed is unknown, defaulting to 1000 [ 734.858236][T14403] lo speed is unknown, defaulting to 1000 [ 734.870472][T14403] lo speed is unknown, defaulting to 1000 [ 734.884463][T14403] lo speed is unknown, defaulting to 1000 [ 734.896803][T14403] lo speed is unknown, defaulting to 1000 [ 734.936220][T12188] m920x_read = error: -19 [ 735.002615][ T973] logitech 0003:046D:C294.0023: no inputs found [ 735.016067][T12188] dvb-usb: error -19 while querying for an remote control event. [ 735.029832][ T973] usb 8-1: USB disconnect, device number 10 [ 735.035915][ T1539] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 735.046934][ T1539] usb 1-1: USB disconnect, device number 69 [ 735.179611][T14402] fido_id[14402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 735.233513][T12188] m920x_read = error: -19 [ 735.247910][T12188] dvb-usb: error -19 while querying for an remote control event. [ 735.504582][T12188] m920x_read = error: -19 [ 735.509165][T12188] dvb-usb: error -19 while querying for an remote control event. [ 736.389931][T12188] m920x_read = error: -19 [ 736.394314][T12188] dvb-usb: error -19 while querying for an remote control event. [ 736.571938][T12188] m920x_read = error: -19 [ 736.613498][T12188] dvb-usb: error -19 while querying for an remote control event. [ 736.869547][ T5934] m920x_read = error: -19 [ 736.874088][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 737.312996][T12188] m920x_read = error: -19 [ 737.320436][T12188] dvb-usb: error -19 while querying for an remote control event. [ 737.352273][ T30] audit: type=1400 audit(2000000782.452:778): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 737.518878][T14431] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 737.560267][T12188] m920x_read = error: -19 [ 737.569928][T12188] dvb-usb: error -19 while querying for an remote control event. [ 737.578980][T14433] binder: BINDER_SET_CONTEXT_MGR already set [ 737.612681][T14431] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 737.641779][T14433] binder: 14429:14433 ioctl 4018620d 200000000040 returned -16 [ 737.939278][T12188] m920x_read = error: -19 [ 737.961624][T12188] dvb-usb: error -19 while querying for an remote control event. [ 738.173618][T12188] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 738.211652][T14450] IPVS: set_ctl: invalid protocol: 43 172.20.20.47:17 [ 738.218746][ T1539] m920x_read = error: -19 [ 738.227452][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 738.247161][T14450] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 738.272861][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 738.285827][T14446] could not allocate digest TFM handle cbcmac-aes-neon [ 738.391822][T12188] usb 7-1: Using ep0 maxpacket: 32 [ 738.413394][T12188] usb 7-1: no configurations [ 738.430193][T12188] usb 7-1: can't read configurations, error -22 [ 738.462239][ T5934] m920x_read = error: -19 [ 738.466704][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 738.591704][T12188] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 738.686297][ T1539] m920x_read = error: -19 [ 738.704728][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 738.783730][T12188] usb 7-1: Using ep0 maxpacket: 32 [ 738.811109][T12188] usb 7-1: no configurations [ 738.829986][T12188] usb 7-1: can't read configurations, error -22 [ 738.876513][T12188] usb usb7-port1: attempt power cycle [ 738.922227][ T5934] m920x_read = error: -19 [ 738.926721][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 738.985888][ T973] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 739.370158][T12188] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 739.379919][ T1539] m920x_read = error: -19 [ 739.388918][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 739.424793][T12188] usb 7-1: Using ep0 maxpacket: 32 [ 739.430982][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.445618][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.455980][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.456563][T12188] usb 7-1: no configurations [ 739.506347][T12188] usb 7-1: can't read configurations, error -22 [ 739.545874][ T973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.584539][ T1539] m920x_read = error: -19 [ 739.664535][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.664900][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 739.683334][ T973] usb 5-1: config 0 descriptor?? [ 739.744969][T12188] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 740.586481][T12188] usb 7-1: Using ep0 maxpacket: 32 [ 740.591806][ T5934] m920x_read = error: -19 [ 740.596154][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 740.607675][T12188] usb 7-1: no configurations [ 740.612413][T12188] usb 7-1: can't read configurations, error -22 [ 740.619369][T12188] usb usb7-port1: unable to enumerate USB device [ 740.639204][ T973] usbhid 5-1:0.0: can't add hid device: -71 [ 740.655031][ T973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 740.701968][ T973] usb 5-1: USB disconnect, device number 71 [ 740.799619][T12188] m920x_read = error: -19 [ 740.804132][T12188] dvb-usb: error -19 while querying for an remote control event. [ 740.847635][ T1539] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 741.026434][ T5934] m920x_read = error: -19 [ 741.037775][T14486] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 741.051308][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 741.157755][T14486] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 741.188569][ T1539] usb 2-1: too many configurations: 23, using maximum allowed: 8 [ 741.255451][ T1539] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 741.667588][ T1539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 741.675950][ T5934] m920x_read = error: -19 [ 742.058588][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 742.197351][ T1539] usb 2-1: SerialNumber: syz [ 742.204924][ T1539] usb 2-1: config 0 descriptor?? [ 742.320610][T14501] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2021'. [ 742.397046][ T1539] m920x_read = error: -19 [ 742.401985][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 742.645346][ T30] audit: type=1400 audit(2000000787.400:779): avc: denied { bind } for pid=14493 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 742.647352][ T1539] m920x_read = error: -19 [ 742.912027][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 742.977204][T14513] fuse: Bad value for 'fd' [ 743.091234][ T1539] m920x_read = error: -19 [ 743.095615][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 743.225684][T14520] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2024'. [ 743.709646][ T1539] m920x_read = error: -19 [ 743.776768][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 743.788548][T12188] usb 2-1: USB disconnect, device number 72 [ 743.948203][ T1539] m920x_read = error: -19 [ 744.010183][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 744.439291][ T1539] m920x_read = error: -19 [ 744.443793][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 744.652006][ T1539] m920x_read = error: -19 [ 744.658932][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 744.737659][T12188] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 744.818644][T14537] binder: 14531:14537 ioctl c0306201 0 returned -14 [ 744.844655][ T5934] m920x_read = error: -19 [ 744.852587][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 744.919250][T12188] usb 5-1: Using ep0 maxpacket: 32 [ 744.930080][T12188] usb 5-1: no configurations [ 744.942710][T12188] usb 5-1: can't read configurations, error -22 [ 745.038283][ T1539] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 745.065307][ T5934] m920x_read = error: -19 [ 745.075291][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 745.111804][T12188] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 745.230488][ T1539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.246710][ T1539] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 745.256567][ T1539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.268318][ T1539] usb 1-1: config 0 descriptor?? [ 745.276636][ T1539] pwc: Askey VC010 type 2 USB webcam detected. [ 745.304070][ T5934] m920x_read = error: -19 [ 745.308494][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 745.317126][T12188] usb 5-1: Using ep0 maxpacket: 32 [ 745.322713][T12188] usb 5-1: no configurations [ 745.328278][T12188] usb 5-1: can't read configurations, error -22 [ 745.339748][T12188] usb usb5-port1: attempt power cycle [ 745.480964][T14544] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2032'. [ 745.486026][ T42] m920x_read = error: -19 [ 745.505925][ T42] dvb-usb: error -19 while querying for an remote control event. [ 745.681068][ T5934] m920x_read = error: -19 [ 745.685485][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 745.710207][T12188] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 745.743266][ T1539] pwc: recv_control_msg error -32 req 02 val 2b00 [ 745.768323][T12188] usb 5-1: Using ep0 maxpacket: 32 [ 745.804304][ T1539] pwc: recv_control_msg error -32 req 02 val 2700 [ 745.817870][T12188] usb 5-1: no configurations [ 745.843786][T12188] usb 5-1: can't read configurations, error -22 [ 745.861696][ T1539] pwc: recv_control_msg error -32 req 02 val 2c00 [ 745.874078][ T5934] m920x_read = error: -19 [ 745.892543][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 745.924687][ T1539] pwc: recv_control_msg error -32 req 04 val 1000 [ 745.967250][ T1539] pwc: recv_control_msg error -32 req 04 val 1300 [ 746.031596][ T1539] pwc: recv_control_msg error -32 req 04 val 1400 [ 746.076638][T12188] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 746.116639][ T5934] m920x_read = error: -19 [ 746.149941][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 746.219604][T12188] usb 5-1: Using ep0 maxpacket: 32 [ 746.290757][T12188] usb 5-1: no configurations [ 746.348811][T12188] usb 5-1: can't read configurations, error -22 [ 746.422844][ T5934] m920x_read = error: -19 [ 746.488319][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 746.511870][T12188] usb usb5-port1: unable to enumerate USB device [ 746.791505][ T5899] m920x_read = error: -19 [ 746.834088][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 746.965397][T14562] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2036'. [ 747.004220][ T5899] m920x_read = error: -19 [ 747.009773][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 747.013643][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2037'. [ 747.050075][T14564] bridge: RTM_NEWNEIGH with invalid ether address [ 747.201584][ T1539] pwc: recv_control_msg error -71 req 02 val 2100 [ 747.404402][ T5899] m920x_read = error: -19 [ 747.528278][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 747.555136][ T1539] pwc: recv_control_msg error -71 req 04 val 1500 [ 747.572244][ T1539] pwc: recv_control_msg error -71 req 02 val 2500 [ 747.579266][ T1539] pwc: recv_control_msg error -71 req 02 val 2400 [ 747.586641][ T1539] pwc: recv_control_msg error -71 req 02 val 2600 [ 747.597052][ T1539] pwc: recv_control_msg error -71 req 02 val 2900 [ 747.604908][ T1539] pwc: recv_control_msg error -71 req 02 val 2800 [ 747.612032][ T1539] pwc: recv_control_msg error -71 req 04 val 1100 [ 747.621181][ T1539] pwc: recv_control_msg error -71 req 04 val 1200 [ 747.641043][ T1539] pwc: Registered as video103. [ 747.650519][ T1539] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 747.736679][ T1539] usb 1-1: USB disconnect, device number 70 [ 747.776451][ T5899] m920x_read = error: -19 [ 747.875791][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 748.017817][T14583] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 749.384530][ T5899] m920x_read = error: -19 [ 749.447917][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 749.798908][ T5934] m920x_read = error: -19 [ 749.825205][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 750.231832][ T1539] m920x_read = error: -19 [ 750.432937][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 750.749328][T14596] netlink: 'syz.6.2047': attribute type 62 has an invalid length. [ 750.907086][T14600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2044'. [ 750.914643][ T5934] m920x_read = error: -19 [ 750.927297][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 751.098325][ T5934] m920x_read = error: -19 [ 751.108225][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 751.283046][T14615] binder: 14614:14615 ioctl c018620c 2000000001c0 returned -1 [ 751.292242][T14615] binder: 14614:14615 ioctl 4040ae9e 200000000300 returned -22 [ 751.301654][ T5934] m920x_read = error: -19 [ 751.309316][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 751.617705][ T5934] m920x_read = error: -19 [ 751.626345][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 751.737965][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 751.761068][ T5827] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 751.888521][ T5934] m920x_read = error: -19 [ 751.910228][T14623] lo speed is unknown, defaulting to 1000 [ 751.937768][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 751.956053][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 752.081876][ T5827] usb 2-1: no configurations [ 752.086513][ T5827] usb 2-1: can't read configurations, error -22 [ 752.147333][ T1539] m920x_read = error: -19 [ 752.152884][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 752.243680][T14632] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2057'. [ 752.291290][ T30] audit: type=1400 audit(2000000796.390:780): avc: denied { nlmsg_read } for pid=14630 comm="syz.6.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 752.367931][ T5827] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 752.680554][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 752.702088][ T5827] usb 2-1: no configurations [ 752.706728][ T5827] usb 2-1: can't read configurations, error -22 [ 752.726113][T12188] m920x_read = error: -19 [ 752.740924][T12188] dvb-usb: error -19 while querying for an remote control event. [ 752.755610][ T30] audit: type=1400 audit(2000000796.848:781): avc: denied { write } for pid=14636 comm="syz.7.2059" path="socket:[49657]" dev="sockfs" ino=49657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.780977][ T3568] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 752.812633][ T5827] usb usb2-port1: attempt power cycle [ 752.926498][ T1539] m920x_read = error: -19 [ 752.930999][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 752.955297][T14643] input: syz1 as /devices/virtual/input/input52 [ 753.108510][ T1539] m920x_read = error: -19 [ 753.112984][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 753.235625][T14650] tmpfs: Unknown parameter 'a' [ 753.254240][ T5827] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 753.281195][T14650] input: syz1 as /devices/virtual/input/input53 [ 753.290053][ T1539] m920x_read = error: -19 [ 753.294410][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 753.349011][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 753.357816][ T5827] usb 2-1: no configurations [ 753.362435][ T5827] usb 2-1: can't read configurations, error -22 [ 753.482591][ T1539] m920x_read = error: -19 [ 753.495454][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 753.589186][ T973] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 753.750730][ T1539] m920x_read = error: -19 [ 753.795319][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 753.880986][ T5827] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 754.050191][ T1539] m920x_read = error: -19 [ 754.093896][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 754.359298][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 754.365017][ T5827] usb 2-1: no configurations [ 754.374533][ T5827] usb 2-1: can't read configurations, error -22 [ 754.376470][T12188] m920x_read = error: -19 [ 754.381222][ T5827] usb usb2-port1: unable to enumerate USB device [ 754.395216][T12188] dvb-usb: error -19 while querying for an remote control event. [ 754.520734][ T973] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 754.552006][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.575206][ T973] usb 7-1: config 0 descriptor?? [ 754.606723][ T973] usb 7-1: invalid MIDI EP [ 754.611194][ T973] usb 7-1: snd-bcd2000: error during probing [ 754.626672][T12188] m920x_read = error: -19 [ 754.636831][T12188] dvb-usb: error -19 while querying for an remote control event. [ 754.660387][ T973] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 754.674170][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2072'. [ 754.754443][ T5929] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 754.764244][T14679] mkiss: ax0: crc mode is auto. [ 754.809707][ T973] usb 7-1: USB disconnect, device number 30 [ 754.819274][T12188] m920x_read = error: -19 [ 754.824878][T12188] dvb-usb: error -19 while querying for an remote control event. [ 754.913061][ T4576] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfc [ 754.936306][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 754.969655][ T5929] usb 1-1: config 0 has no interfaces? [ 754.975163][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 755.000313][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.000392][T12188] m920x_read = error: -19 [ 755.013918][ T5929] usb 1-1: config 0 descriptor?? [ 755.040162][T12188] dvb-usb: error -19 while querying for an remote control event. [ 755.241973][ T5929] usb 1-1: USB disconnect, device number 71 [ 755.246232][T12188] m920x_read = error: -19 [ 755.254352][T12188] dvb-usb: error -19 while querying for an remote control event. [ 755.335129][T14689] input: syz0 as /devices/virtual/input/input54 [ 755.428092][T12188] m920x_read = error: -19 [ 755.433198][T12188] dvb-usb: error -19 while querying for an remote control event. [ 755.611066][ T1539] m920x_read = error: -19 [ 755.619990][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 755.693643][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2077'. [ 755.802193][ T1539] m920x_read = error: -19 [ 755.808246][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 756.010649][ T1539] m920x_read = error: -19 [ 756.015097][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 756.564040][T14710] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2082'. [ 756.574360][T14710] NCSI netlink: No device for ifindex 0 [ 756.690131][ T1539] m920x_read = error: -19 [ 756.698666][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 756.819274][ T5929] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 756.979754][ T1539] m920x_read = error: -19 [ 756.984277][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 757.160009][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 757.188982][ T5929] usb 7-1: no configurations [ 757.276466][ T1539] m920x_read = error: -19 [ 757.287258][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 757.304589][ T5929] usb 7-1: can't read configurations, error -22 [ 757.599419][ T1539] m920x_read = error: -19 [ 758.358056][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 758.407936][ T30] audit: type=1800 audit(2000000802.142:782): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2087" name="bus" dev="overlay" ino=661 res=0 errno=0 [ 758.511001][T14733] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 758.530745][ T1539] m920x_read = error: -19 [ 758.535100][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 758.541090][ T5929] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 758.552623][T14733] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2086'. [ 758.774110][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 758.774148][ T1539] m920x_read = error: -19 [ 758.783954][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 758.955888][ T1539] m920x_read = error: -19 [ 758.960257][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 759.035074][ T5929] usb 7-1: no configurations [ 759.039743][ T5929] usb 7-1: can't read configurations, error -22 [ 759.049201][ T5929] usb usb7-port1: attempt power cycle [ 759.178475][T14745] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 759.215261][T14745] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 759.230171][T14742] lo speed is unknown, defaulting to 1000 [ 759.348636][ T1539] m920x_read = error: -19 [ 759.353367][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 760.176470][ T5929] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 760.230130][ T1539] m920x_read = error: -19 [ 760.234529][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 760.241149][T14757] FAULT_INJECTION: forcing a failure. [ 760.241149][T14757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.257261][ T5929] usb 7-1: device descriptor read/8, error -71 [ 760.264729][T14757] CPU: 0 UID: 0 PID: 14757 Comm: syz.7.2095 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 760.264753][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.264763][T14757] Call Trace: [ 760.264770][T14757] [ 760.264777][T14757] dump_stack_lvl+0x16c/0x1f0 [ 760.264807][T14757] should_fail_ex+0x512/0x640 [ 760.264833][T14757] strncpy_from_user+0x3b/0x2e0 [ 760.264859][T14757] getname_flags.part.0+0x8f/0x550 [ 760.264881][T14757] getname_flags+0x93/0xf0 [ 760.264902][T14757] do_sys_openat2+0xb8/0x1d0 [ 760.264918][T14757] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.264933][T14757] ? __fget_files+0x20e/0x3c0 [ 760.264962][T14757] __x64_sys_creat+0xcc/0x120 [ 760.264978][T14757] ? __pfx___x64_sys_creat+0x10/0x10 [ 760.264994][T14757] ? __pfx_ksys_write+0x10/0x10 [ 760.265018][T14757] ? rcu_is_watching+0x12/0xc0 [ 760.265038][T14757] ? do_syscall_64+0x91/0x4c0 [ 760.265065][T14757] do_syscall_64+0xcd/0x4c0 [ 760.265092][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.265109][T14757] RIP: 0033:0x7f168638e929 [ 760.265123][T14757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.265139][T14757] RSP: 002b:00007f1687283038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 760.265156][T14757] RAX: ffffffffffffffda RBX: 00007f16865b5fa0 RCX: 00007f168638e929 [ 760.265168][T14757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 760.265186][T14757] RBP: 00007f1687283090 R08: 0000000000000000 R09: 0000000000000000 [ 760.265196][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.265206][T14757] R13: 0000000000000000 R14: 00007f16865b5fa0 R15: 00007ffda9599298 [ 760.265229][T14757] [ 760.513524][T14758] Invalid source name [ 760.517543][T14758] UBIFS error (pid: 14758): cannot open "/dev/sg0", error -22 [ 760.518209][T14758] netlink: 193848 bytes leftover after parsing attributes in process `syz.1.2091'. [ 760.543659][T14758] netlink: zone id is out of range [ 760.553244][T14758] netlink: zone id is out of range [ 760.558381][T14758] netlink: zone id is out of range [ 760.563565][T14758] netlink: zone id is out of range [ 760.568656][T14758] netlink: zone id is out of range [ 760.580009][T14758] netlink: zone id is out of range [ 760.602566][T14758] netlink: get zone limit has 8 unknown bytes [ 760.661982][ T1539] m920x_read = error: -19 [ 760.666615][ T5827] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 760.829507][ T5827] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 761.620426][ T5827] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 761.634508][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 761.643007][ T5827] usb 1-1: SerialNumber: syz [ 761.667253][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 761.690216][ T5827] usb 1-1: config 0 descriptor?? [ 761.853192][ T5899] m920x_read = error: -19 [ 761.857663][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 761.915689][T14772] syz.1.2100: attempt to access beyond end of device [ 761.915689][T14772] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 761.997058][T14772] vxfs: unable to read disk superblock at 1 [ 762.019485][T14772] syz.1.2100: attempt to access beyond end of device [ 762.019485][T14772] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 762.036626][T14772] vxfs: unable to read disk superblock at 8 [ 762.045672][ T5899] m920x_read = error: -19 [ 762.050033][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 762.107553][T14772] vxfs: can't find superblock. [ 762.227622][ T5899] m920x_read = error: -19 [ 762.246849][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 762.441251][ T5899] m920x_read = error: -19 [ 762.446974][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 762.505683][ T5827] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 762.622859][ T5899] m920x_read = error: -19 [ 762.633437][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 762.688394][ T5827] usb 8-1: Using ep0 maxpacket: 32 [ 762.697291][ T5827] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 800 [ 762.713883][ T5827] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 762.730457][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.738689][ T5827] usb 8-1: Product: syz [ 762.744195][ T5827] usb 8-1: Manufacturer: syz [ 762.750045][ T5827] usb 8-1: SerialNumber: syz [ 762.763034][ T5827] usb 8-1: config 0 descriptor?? [ 762.768821][T14778] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 762.778061][ T5827] hub 8-1:0.0: bad descriptor, ignoring hub [ 762.786127][ T5827] hub 8-1:0.0: probe with driver hub failed with error -5 [ 762.798002][ T5827] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input55 [ 762.804731][ T5899] m920x_read = error: -19 [ 762.814503][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 762.996109][ T5899] m920x_read = error: -19 [ 763.004483][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 763.086288][ T5827] usb 1-1: USB disconnect, device number 72 [ 763.104603][ T5899] usb 8-1: USB disconnect, device number 11 [ 763.104678][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 763.179183][ T1539] m920x_read = error: -19 [ 763.183572][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 763.371511][ T1539] m920x_read = error: -19 [ 763.376498][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 763.578423][ T30] audit: type=1400 audit(2000000806.922:783): avc: denied { getopt } for pid=14793 comm="syz.4.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 763.634841][T14800] serio: Serial port ptm0 [ 763.678220][ T30] audit: type=1326 audit(2000000807.053:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 763.770565][T14804] 9pnet: Could not find request transport: ferfdno=<"8$ApB(FBɏ!jXk%t=ORoc) 6WLmuk>{.ƒNL:0h+9læcerO2Pl'D [ 763.792464][ T30] audit: type=1326 audit(2000000807.053:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 763.816539][ T1539] m920x_read = error: -19 [ 763.821824][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 764.070210][T14799] Unknown options in mask 5 [ 764.080435][ T1539] m920x_read = error: -19 [ 764.092723][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 764.102790][ T30] audit: type=1326 audit(2000000807.053:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.126543][ T30] audit: type=1326 audit(2000000807.184:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.196406][ T30] audit: type=1326 audit(2000000807.184:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.269824][ T5899] m920x_read = error: -19 [ 764.274322][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 764.295512][ T30] audit: type=1326 audit(2000000807.184:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.361274][ T30] audit: type=1326 audit(2000000807.184:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.418483][ T30] audit: type=1326 audit(2000000807.184:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.451567][ T5899] m920x_read = error: -19 [ 764.456238][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 764.497717][T14812] syzkaller1: entered promiscuous mode [ 764.512209][ T30] audit: type=1326 audit(2000000807.184:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.536871][T14812] syzkaller1: entered allmulticast mode [ 764.587933][ T30] audit: type=1326 audit(2000000807.184:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.633008][ T30] audit: type=1326 audit(2000000807.184:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488858e929 code=0x7ffc0000 [ 764.662833][ T5899] m920x_read = error: -19 [ 764.667407][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 764.750202][ T5827] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 764.846682][ T5899] m920x_read = error: -19 [ 764.860098][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 765.008370][ T5827] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 765.016926][ T5827] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 765.026590][ T5827] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 765.037621][ T5827] usb 8-1: config 220 has no interface number 2 [ 765.044160][ T5827] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 765.049727][ T5899] m920x_read = error: -19 [ 765.808086][ T5827] usb 8-1: config 220 interface 0 has no altsetting 0 [ 765.825860][ T5827] usb 8-1: config 220 interface 76 has no altsetting 0 [ 765.832793][ T5827] usb 8-1: config 220 interface 1 has no altsetting 0 [ 765.858169][ T5827] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 765.884293][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.888319][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 765.892604][ T5827] usb 8-1: Product: syz [ 765.931238][ T5827] usb 8-1: Manufacturer: syz [ 765.946341][ T5827] usb 8-1: SerialNumber: syz [ 766.076727][T12188] m920x_read = error: -19 [ 766.082647][ T1539] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 766.090452][T12188] dvb-usb: error -19 while querying for an remote control event. [ 766.180753][ T5827] usb 8-1: selecting invalid altsetting 0 [ 766.192998][ T5827] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 766.202439][ T5827] usb 8-1: No valid video chain found. [ 766.216176][ T5827] usb 8-1: selecting invalid altsetting 0 [ 766.221988][ T5827] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 766.236215][ T5899] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 766.236632][ T5827] usb 8-1: USB disconnect, device number 12 [ 766.258464][ T1539] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 766.269152][ T42] m920x_read = error: -19 [ 766.277924][ T42] dvb-usb: error -19 while querying for an remote control event. [ 766.308288][ T1539] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 766.320783][ T1539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 766.335629][ T1539] usb 1-1: SerialNumber: syz [ 766.347209][ T1539] usb 1-1: config 0 descriptor?? [ 766.424327][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 766.434306][ T5899] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 766.445761][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 766.460307][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 766.469443][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.477502][ T5899] usb 2-1: Product: syz [ 766.481676][ T5899] usb 2-1: Manufacturer: syz [ 766.486690][ T1539] m920x_read = error: -19 [ 766.491144][ T5899] usb 2-1: SerialNumber: syz [ 766.495769][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 766.507498][ T5899] hub 2-1:1.0: bad descriptor, ignoring hub [ 766.513412][ T5899] hub 2-1:1.0: probe with driver hub failed with error -5 [ 766.679008][ T1539] m920x_read = error: -19 [ 766.822836][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 767.478983][T12188] m920x_read = error: -19 [ 767.576792][ T5899] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 767.592380][T12188] dvb-usb: error -19 while querying for an remote control event. [ 767.616688][T14828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 767.737387][ T4576] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.891138][ T5899] m920x_read = error: -19 [ 767.896092][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 767.949410][ T4576] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.448454][ T5899] m920x_read = error: -19 [ 768.457705][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 768.489927][ T42] usb 1-1: USB disconnect, device number 73 [ 768.730042][ T5899] m920x_read = error: -19 [ 768.759160][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 768.806877][ T4576] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.930217][ T42] m920x_read = error: -19 [ 768.934591][ T42] dvb-usb: error -19 while querying for an remote control event. [ 768.996872][T14850] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 769.011118][ T4576] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.044081][T14850] SELinux: security_context_str_to_sid (tmpfs) failed with errno=-22 [ 769.144253][ T42] m920x_read = error: -19 [ 769.148623][ T42] dvb-usb: error -19 while querying for an remote control event. [ 769.317293][ T4576] bridge_slave_1: left allmulticast mode [ 769.336638][ T4576] bridge_slave_1: left promiscuous mode [ 769.369604][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.389483][ T4576] bridge_slave_0: left allmulticast mode [ 769.400784][ T5899] m920x_read = error: -19 [ 769.401660][ T4576] bridge_slave_0: left promiscuous mode [ 769.405129][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 769.418798][ T42] usb 2-1: USB disconnect, device number 77 [ 769.422215][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.467065][ T42] usblp0: removed [ 769.473882][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 769.487804][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 769.495940][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 769.508712][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 769.516836][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 769.627663][T12188] m920x_read = error: -19 [ 769.632067][T12188] dvb-usb: error -19 while querying for an remote control event. [ 769.721558][ T5899] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 769.818810][T12188] m920x_read = error: -19 [ 769.827000][T12188] dvb-usb: error -19 while querying for an remote control event. [ 769.856698][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 769.897787][ T5899] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 769.917185][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.945879][ T5899] usb 1-1: Product: syz [ 769.959682][ T5899] usb 1-1: Manufacturer: syz [ 769.975920][ T5899] usb 1-1: SerialNumber: syz [ 770.010201][T12188] m920x_read = error: -19 [ 770.014567][T12188] dvb-usb: error -19 while querying for an remote control event. [ 770.033486][ T5899] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 770.071116][ T1539] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 770.193224][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2131'. [ 770.234527][ T5899] m920x_read = error: -19 [ 770.239007][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 770.491866][ T5899] m920x_read = error: -19 [ 770.522374][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 770.745217][ T4576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.663746][ T5899] m920x_read = error: -19 [ 771.669315][ T1539] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 771.676406][ T5899] dvb-usb: error -19 while querying for an remote control event. [ 771.707893][ T1539] ath9k_htc: Failed to initialize the device [ 771.731336][T13001] Bluetooth: hci4: command tx timeout [ 772.171234][ T4576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.207253][ T4576] bond0 (unregistering): Released all slaves [ 772.216620][ T1539] usb 1-1: ath9k_htc: USB layer deinitialized [ 772.244700][T12188] m920x_read = error: -19 [ 772.250565][T12188] dvb-usb: error -19 while querying for an remote control event. [ 772.544777][T12188] m920x_read = error: -19 [ 772.549193][T12188] dvb-usb: error -19 while querying for an remote control event. [ 772.747262][T12188] m920x_read = error: -19 [ 772.756380][T12188] dvb-usb: error -19 while querying for an remote control event. [ 772.819791][T14875] lo speed is unknown, defaulting to 1000 [ 773.086976][T12188] m920x_read = error: -19 [ 773.136502][T12188] dvb-usb: error -19 while querying for an remote control event. [ 773.340817][T14856] lo speed is unknown, defaulting to 1000 [ 773.422059][T12188] m920x_read = error: -19 [ 773.436498][T12188] dvb-usb: error -19 while querying for an remote control event. [ 773.597833][ T10] usb 1-1: USB disconnect, device number 74 [ 773.623714][T12188] m920x_read = error: -19 [ 773.628095][T12188] dvb-usb: error -19 while querying for an remote control event. [ 773.694748][ T4576] hsr_slave_0: left promiscuous mode [ 773.744689][ T4576] hsr_slave_1: left promiscuous mode [ 773.763424][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.770856][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.827070][T12188] m920x_read = error: -19 [ 773.831445][T12188] dvb-usb: error -19 while querying for an remote control event. [ 774.029668][ T1539] m920x_read = error: -19 [ 774.034146][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 774.218631][T14907] FAULT_INJECTION: forcing a failure. [ 774.218631][T14907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.231699][T14907] CPU: 1 UID: 0 PID: 14907 Comm: syz.0.2138 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 774.231714][T14907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.231721][T14907] Call Trace: [ 774.231726][T14907] [ 774.231730][T14907] dump_stack_lvl+0x16c/0x1f0 [ 774.231748][T14907] should_fail_ex+0x512/0x640 [ 774.231764][T14907] _copy_to_user+0x32/0xd0 [ 774.231780][T14907] drm_ioctl+0x5eb/0xc30 [ 774.231799][T14907] ? __pfx_drm_mode_destroy_dumb_ioctl+0x10/0x10 [ 774.231811][T14907] ? __pfx_drm_ioctl+0x10/0x10 [ 774.231830][T14907] ? selinux_file_ioctl+0x180/0x270 [ 774.231844][T14907] ? selinux_file_ioctl+0xb4/0x270 [ 774.231858][T14907] ? __pfx_drm_ioctl+0x10/0x10 [ 774.231873][T14907] __x64_sys_ioctl+0x18b/0x210 [ 774.231886][T14907] do_syscall_64+0xcd/0x4c0 [ 774.231902][T14907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.231914][T14907] RIP: 0033:0x7f097198e929 [ 774.231923][T14907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.231933][T14907] RSP: 002b:00007f097288d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.231943][T14907] RAX: ffffffffffffffda RBX: 00007f0971bb5fa0 RCX: 00007f097198e929 [ 774.231950][T14907] RDX: 0000200000000400 RSI: 00000000c00464b4 RDI: 0000000000000004 [ 774.231956][T14907] RBP: 00007f097288d090 R08: 0000000000000000 R09: 0000000000000000 [ 774.231962][T14907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.231971][T14907] R13: 0000000000000000 R14: 00007f0971bb5fa0 R15: 00007ffd22afc418 [ 774.231992][T14907] [ 774.232164][T13001] Bluetooth: hci4: command tx timeout [ 774.405039][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.456043][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.593550][ T1539] m920x_read = error: -19 [ 774.614330][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 775.187660][ T1539] m920x_read = error: -19 [ 775.192034][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 775.443921][ T4576] veth1_macvtap: left promiscuous mode [ 775.459159][ T4576] veth0_macvtap: left promiscuous mode [ 775.493127][ T4576] veth1_vlan: left promiscuous mode [ 775.498786][ T4576] veth0_vlan: left promiscuous mode [ 775.601182][ T1539] m920x_read = error: -19 [ 775.632048][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 775.686800][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 775.826060][ T1539] m920x_read = error: -19 [ 775.830432][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 775.881444][ T10] usb 2-1: too many configurations: 23, using maximum allowed: 8 [ 775.912303][ T10] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 775.932507][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 775.951738][ T10] usb 2-1: SerialNumber: syz [ 775.969610][ T10] usb 2-1: config 0 descriptor?? [ 776.020329][ T1539] m920x_read = error: -19 [ 776.024700][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 776.253431][ T1539] m920x_read = error: -19 [ 776.257812][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 776.435105][ T1539] m920x_read = error: -19 [ 776.439500][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 776.495943][T14935] ------------[ cut here ]------------ [ 776.501637][T14935] WARNING: CPU: 0 PID: 14935 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 776.512228][T14935] Modules linked in: [ 776.516464][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.4.2142 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 776.528669][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.538898][T14935] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 776.545796][T14935] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 6d 75 7a 0e 00 75 0b c6 05 64 75 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 776.565680][T14935] RSP: 0018:ffffc9000bc778d8 EFLAGS: 00010246 [ 776.572122][T14935] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 776.580241][T14935] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 776.588315][T14935] RBP: 000000ffffffff00 R08: 0000000000000007 R09: 0000000000000000 [ 776.596301][T14935] R10: 000000ffffffff00 R11: ffffffff8222b714 R12: 000000000000001c [ 776.604248][T14935] R13: 1ffff9200178ef30 R14: 000000ffffffff00 R15: 000000000000001c [ 776.606339][T13001] Bluetooth: hci4: command tx timeout [ 776.612431][T14935] FS: 00007f1f13ff66c0(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 776.626765][T14935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.633380][T14935] CR2: 00007f1f13ff5f98 CR3: 000000005d111000 CR4: 00000000003526f0 [ 776.641461][T14935] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.649454][T14935] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.657408][T14935] Call Trace: [ 776.660753][T14935] [ 776.663702][T14935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 776.665627][ T1539] m920x_read = error: -19 [ 776.670046][T14935] ? kasan_quarantine_put+0x10a/0x240 [ 776.670070][T14935] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.670100][T14935] ? kfree+0x2b4/0x4d0 [ 776.670163][T14935] ? p9_client_clunk+0x12a/0x170 [ 776.670188][T14935] ? p9_client_clunk+0x12f/0x170 [ 776.670210][T14935] ? v9fs_fid_get_acl+0x7a/0x120 [ 776.670228][T14935] __alloc_pages_noprof+0xb/0x1b0 [ 776.670252][T14935] ___kmalloc_large_node+0x84/0x1e0 [ 776.688806][ T1539] dvb-usb: error -19 while querying for an remote control event. [ 776.689180][T14935] ? v9fs_fid_get_acl+0x7a/0x120 [ 776.726944][T14935] __kmalloc_large_node_noprof+0x1c/0x70 [ 776.732586][T14935] __kmalloc_noprof.cold+0xc/0x61 [ 776.737746][T14935] ? __pfx_iget5_locked+0x10/0x10 [ 776.742783][T14935] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 776.748794][T14935] v9fs_fid_get_acl+0x7a/0x120 [ 776.753544][T14935] v9fs_get_acl+0xee/0x530 [ 776.757969][T14935] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 776.763496][T14935] v9fs_mount+0x4fd/0xa30 [ 776.767832][T14935] ? __pfx_v9fs_mount+0x10/0x10 [ 776.772675][T14935] ? cap_capable+0xb3/0x250 [ 776.777290][T14935] ? __pfx_v9fs_mount+0x10/0x10 [ 776.782120][T14935] legacy_get_tree+0x109/0x220 [ 776.786884][T14935] vfs_get_tree+0x8e/0x340 [ 776.791305][T14935] path_mount+0x1414/0x2020 [ 776.795792][T14935] ? kmem_cache_free+0x2d1/0x4d0 [ 776.800726][T14935] ? __pfx_path_mount+0x10/0x10 [ 776.805584][T14935] ? putname+0x154/0x1a0 [ 776.809831][T14935] __x64_sys_mount+0x28d/0x310 [ 776.814581][T14935] ? __pfx___x64_sys_mount+0x10/0x10 [ 776.819895][T14935] do_syscall_64+0xcd/0x4c0 [ 776.824390][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.830265][T14935] RIP: 0033:0x7f1f1618e929 [ 776.834681][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.854364][T14935] RSP: 002b:00007f1f13ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 776.862806][T14935] RAX: ffffffffffffffda RBX: 00007f1f163b6080 RCX: 00007f1f1618e929 [ 776.870760][T14935] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 776.878747][T14935] RBP: 00007f1f16210b39 R08: 0000200000000580 R09: 0000000000000000 [ 776.886736][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.894723][T14935] R13: 0000000000000000 R14: 00007f1f163b6080 R15: 00007ffe171f9858 [ 776.902689][T14935] [ 776.905710][T14935] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 776.912969][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.4.2142 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 776.925002][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.935037][T14935] Call Trace: [ 776.938292][T14935] [ 776.941200][T14935] dump_stack_lvl+0x3d/0x1f0 [ 776.945772][T14935] panic+0x71c/0x800 [ 776.949649][T14935] ? __pfx_panic+0x10/0x10 [ 776.954051][T14935] ? show_trace_log_lvl+0x29b/0x3e0 [ 776.959237][T14935] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 776.965310][T14935] check_panic_on_warn+0xab/0xb0 [ 776.970242][T14935] __warn+0xf6/0x3c0 [ 776.974123][T14935] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 776.980188][T14935] report_bug+0x3c3/0x580 [ 776.984527][T14935] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 776.990578][T14935] handle_bug+0x184/0x210 [ 776.994891][T14935] exc_invalid_op+0x17/0x50 [ 776.999383][T14935] asm_exc_invalid_op+0x1a/0x20 [ 777.004232][T14935] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 777.010894][T14935] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 6d 75 7a 0e 00 75 0b c6 05 64 75 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 777.030484][T14935] RSP: 0018:ffffc9000bc778d8 EFLAGS: 00010246 [ 777.036526][T14935] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 777.044480][T14935] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 777.052435][T14935] RBP: 000000ffffffff00 R08: 0000000000000007 R09: 0000000000000000 [ 777.060379][T14935] R10: 000000ffffffff00 R11: ffffffff8222b714 R12: 000000000000001c [ 777.068325][T14935] R13: 1ffff9200178ef30 R14: 000000ffffffff00 R15: 000000000000001c [ 777.076273][T14935] ? kasan_save_track+0x14/0x30 [ 777.081153][T14935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 777.087464][T14935] ? kasan_quarantine_put+0x10a/0x240 [ 777.092823][T14935] ? lockdep_hardirqs_on+0x7c/0x110 [ 777.098010][T14935] ? kfree+0x2b4/0x4d0 [ 777.102054][T14935] ? p9_client_clunk+0x12a/0x170 [ 777.106969][T14935] ? p9_client_clunk+0x12f/0x170 [ 777.111890][T14935] ? v9fs_fid_get_acl+0x7a/0x120 [ 777.116799][T14935] __alloc_pages_noprof+0xb/0x1b0 [ 777.121799][T14935] ___kmalloc_large_node+0x84/0x1e0 [ 777.126970][T14935] ? v9fs_fid_get_acl+0x7a/0x120 [ 777.131880][T14935] __kmalloc_large_node_noprof+0x1c/0x70 [ 777.137486][T14935] __kmalloc_noprof.cold+0xc/0x61 [ 777.142489][T14935] ? __pfx_iget5_locked+0x10/0x10 [ 777.147490][T14935] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 777.153448][T14935] v9fs_fid_get_acl+0x7a/0x120 [ 777.158185][T14935] v9fs_get_acl+0xee/0x530 [ 777.162575][T14935] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 777.168109][T14935] v9fs_mount+0x4fd/0xa30 [ 777.172413][T14935] ? __pfx_v9fs_mount+0x10/0x10 [ 777.177238][T14935] ? cap_capable+0xb3/0x250 [ 777.181714][T14935] ? __pfx_v9fs_mount+0x10/0x10 [ 777.186542][T14935] legacy_get_tree+0x109/0x220 [ 777.191284][T14935] vfs_get_tree+0x8e/0x340 [ 777.195677][T14935] path_mount+0x1414/0x2020 [ 777.200165][T14935] ? kmem_cache_free+0x2d1/0x4d0 [ 777.205078][T14935] ? __pfx_path_mount+0x10/0x10 [ 777.209909][T14935] ? putname+0x154/0x1a0 [ 777.214131][T14935] __x64_sys_mount+0x28d/0x310 [ 777.218873][T14935] ? __pfx___x64_sys_mount+0x10/0x10 [ 777.224141][T14935] do_syscall_64+0xcd/0x4c0 [ 777.228625][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.234490][T14935] RIP: 0033:0x7f1f1618e929 [ 777.238879][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.258473][T14935] RSP: 002b:00007f1f13ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 777.266865][T14935] RAX: ffffffffffffffda RBX: 00007f1f163b6080 RCX: 00007f1f1618e929 [ 777.274814][T14935] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 777.282766][T14935] RBP: 00007f1f16210b39 R08: 0000200000000580 R09: 0000000000000000 [ 777.290712][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.298657][T14935] R13: 0000000000000000 R14: 00007f1f163b6080 R15: 00007ffe171f9858 [ 777.306612][T14935] [ 777.309795][T14935] Kernel Offset: disabled [ 777.314096][T14935] Rebooting in 86400 seconds..