last executing test programs: 2m43.556233578s ago: executing program 0 (id=5827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x106, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2m43.555004701s ago: executing program 0 (id=5828): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000072, 0x0, 0x91dc}]}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000072, 0x0, 0x91dc}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x10000000, 0x6, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) 2m43.512726384s ago: executing program 0 (id=5829): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x11, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000340)=""/234, &(0x7f0000000040)=0xea) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002380)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f835800000100f23f82e0f1c440a0966b89a008ee0", 0x88}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m42.14375516s ago: executing program 0 (id=5832): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060014001000000008000a00", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) 2m42.110955702s ago: executing program 0 (id=5833): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/74, 0x4a}], 0x1, 0x23}}], 0x48}, 0x44010) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@getqdisc={0x28, 0x26, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0xb}, {0xc, 0x1}, {0xd}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m18.513517168s ago: executing program 0 (id=5845): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x21) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x30c6cee1, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioperm(0x4, 0x20000081, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100023f639010861a2d754d2d0102030109021b0001000000000904010001e911bd0009050c03"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 2m4.033799736s ago: executing program 32 (id=5845): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x21) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x30c6cee1, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioperm(0x4, 0x20000081, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100023f639010861a2d754d2d0102030109021b0001000000000904010001e911bd0009050c03"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 15.544762656s ago: executing program 4 (id=6336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40850) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) syz_open_dev$sg(0x0, 0x8, 0x400782) sendfile(r6, r5, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x120, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x4a0232ac, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x100000001, 0x7}, {0x40000, 0xfffffffd, 0x400}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0xb1}, [@coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2c, 0x70bd25, 0x70bd26, 0xb16}}]}, 0x120}}, 0x840) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)={0x20, r1, 0x1, 0x0, 0xfffffffc, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 12.153084123s ago: executing program 4 (id=6350): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x335a5000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(0x0, 0x17) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x24108d51555a2b7f}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a00000800028004011080c8ba526dcf742319b7f815f27e1798e13100eb57facb85f9bc940f3b35a87c384d9625"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.315774666s ago: executing program 4 (id=6353): syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04481b0d22b9c900ecc90400c90099000000000005000010c90000000104"], 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x1200002, &(0x7f00000002c0)='cache=none') r3 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r6) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x80}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x1, 0x4}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x301, 0x0, 0x4, 0x7}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, '\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8.142649825s ago: executing program 5 (id=6361): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'gretap0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000100)=0x17cec0000000, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @noop, @ssrr={0x89, 0x3, 0xb5}]}}}}}) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) io_submit(0x0, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) 7.363723483s ago: executing program 4 (id=6363): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x335a5000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(0x0, 0x17) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x24108d51555a2b7f}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a00000800028004011080c8ba526dcf742319b7f815f27e1798e13100eb57facb85f9bc940f3b35a87c384d9625"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.005273084s ago: executing program 3 (id=6364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04040aaaaaaaaaaa10137ca003a12ea4399ac4e335f8de62d6f79d3c3839610f36c7eac75624f67d0cbb48647e6f11d90abb3bdd361d778d5ab9c3843eca04e97a52124358168fc9913caad6cf026cfe118555560270802a0e067e2d458d119a023868e990b9398df7ac62241f4d6dae"], 0xd) listen(0xffffffffffffffff, 0x8) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 6.071376335s ago: executing program 3 (id=6367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a3000000000090003007379e6170b43dca013de717a320000000058000000060a010400000000000000000100000208000b4000000000300004802c00018008000100636d7000200002800c0003800500010026000000080001400000000208000240000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xcc}}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) (async) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x180000, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450c0078000000000000000100000001ac1414aa03049078030000004700000000000000002f0000ac1414aae0000001440cbb230a01010200000001070b8f7f000001ac1e00010707b664010102441c3100000000137fffffff000033ef0000000000000008000001014408639000000003440409310000"], 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r4, 0x6, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) syz_fuse_handle_req(r5, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x1}) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r8, r8}, &(0x7f0000001600)=""/97, 0x61, 0x0) (async) umount2(&(0x7f0000000380)='./file0\x00', 0x1) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5.70604304s ago: executing program 4 (id=6369): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x86, &(0x7f00000011c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x79c9d19e7d51caa9, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0xf, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x3ff}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x2, 0x400, [0x4, 0x0, 0x4, 0x6, 0x4e]}, @obex={0x5, 0x24, 0x15, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x80, 0x0, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0xcd}, @mbim_extended={0x8, 0x24, 0x1c, 0xd8, 0x1, 0x8001}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xef, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1e, 0xe1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xc5, 0x9}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x201, 0x7, 0x3, 0x4, 0xff, 0x4}, 0x3a, &(0x7f00000012c0)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x8, 0x259f}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "76b3f9dae71e579d04a550b00543c8b4"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "58c7850c2339b13a6e8b40fb7ddfac18"}, @ptm_cap={0x3}]}, 0x8, [{0x8a, &(0x7f0000001300)=@string={0x8a, 0x3, "dcdf430e44d0424fdefbfcf6cab1c4795002785ea576617cebf5f6f921713d387fcd5fead51791620f57c2258aabe4bd42b9e3b084ea4062215ecff7ab70ee77e2e89c8854aaccc65a147fc9b993cf8f44a160b40374e1747449d2eae5606b18b502c9df1c80400f2fad7c4eb5ce2b70da1a36b5b8f6453812e884174b0a0a4ccedbc9432dbfa7d8"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x3c01}}, {0xe6, &(0x7f0000001440)=@string={0xe6, 0x3, "007bf555e2602ed4833f164d463b8f80fa5242221ec62e0bc4f5c97efc87fc40bae352c252f8eab410a105a4d9116d7666319309cbe8944b9d903602048a2a0fe8d64ce8b7df03bc1e677608dfcf00bb8cc48ddf2e7e180b16de9bf1f920f2ad2ef540ecb0c18a476178f1d392ab26f045ff469fc6ba8785a205f1bd58ec3bad3c49f68d9c22a567f022841d8ec3e24358ea2254e5da01a7b1d55cf277f63ed171df8b34dec2ec4ee9656afe0cfb7c4115a2f10290ae90251c5d3ce86cbe1bae5e8f17dd55f27926e8d2cf2240b13c3eec12b5ad7005d9d8999ac8dfe5bc90fcbca5a443"}}, {0x81, &(0x7f0000001540)=@string={0x81, 0x3, "c73eaf9c81bab5b2a1451bac339e6c87f48f35210a881c58403666cff5ef8d98ed16204a4804077e75c593746e299c58221bd95b69943b9d5112e8327502081b2467b66b0cb3a36cce7173b55e23f11bdb841cf765c9cdbe6c35abafc74198319bdc7428637bd28880b972a4ff4b68dfac79adc425bc8a8418fa8a4e422ab6"}}, {0x47, &(0x7f0000001700)=@string={0x47, 0x3, "448ba5b1db0bd61ba2c233f091fbd482ee826d5bba87181fc1cb906e3ac2f75e567e7f0c04f949dc7f2b1c1aeafc6c3ce660e7e9a99b2797ae8f2b1de14db20c864f9799f7"}}, {0x8e, &(0x7f0000001780)=@string={0x8e, 0x3, "5bd92a61e7deb9134e90a97cf17d818a70692aa20c2abb9d16ab555ac9a1cf437c9f46774684bc9c3134e63426eba884a738846fdf7147cce8bfe12f4f27fd78e675194b29f0fea31984aa4cb6092415870810483901e8659d9c21faca365e3990ee4cf18a02bebc4eda695b25ff8d242c66373f9b1a6b9841b7eb07e113a2501d3fd1dc5efba31f9b288319"}}, {0x77, &(0x7f0000001880)=@string={0x77, 0x3, "ba5e0944c4cf6ab22854cd37cf090d348df6edb7ad60897b4e7ed59bd2d2d3cfa7f5fac0e854a5b6ddc73a19517c4eefacd336a6bc72854588039e5dcf0656d3d5f535d5e5f064e99eeec35301b40c6921a53cc7828965665559ecb128df3b4a8390f3db3c3ca2edac7788c9a6b0baa509b8d246d3"}}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="91", 0x1, 0x4008052, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000001180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x5}, 0x8) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0011020000003f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.511933215s ago: executing program 3 (id=6370): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7, 0x2}]}, {0x0, [0x0, 0x2e, 0x0]}}, 0x0, 0x29}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.432799161s ago: executing program 3 (id=6372): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d00000003f00070100000000fedbdf25027c0000cee810edfac5b62df8a062ba1dfe6027424d0bd29f7f8b7109045ba44275d68bf067c6188d3016489b82e77a1b5ae4dfe7f30e081b98974254abf49c254f7dae3a2a0ab5afd016335b4a63426214dc8d3dee5d42", @ANYBLOB="70cb6b659633485715920260f3d13d7cf287f6c8d545727d8e1d71cdaad4f5ebfb4f4adea2afd50aebdad7c7b505a20550a9a21a72631acb5bb1404ecf79121dabbd8ea3bdc68615f3a1304dd583fd8f1d6f676e67d251146e7a821ad3250f97726fa7d58a43d4c0a9df0cad82fc3e003cc174366382b4e99505f8706d751ee29482d7e2bb60c6ecade975ad6dae4c4f23057d61e2bbbd845c8386c334d6e211b2182f8494dd2f3ab923734682fc7441e08de5b7435b49450766aae5ab09f4849b0444db49b61dd477cbe6d253671fcf8c3fa0a0bd13d3", @ANYRES8=r4], 0xd0}}, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000007060500000000000000000007000003050001fb0600000008000640000000038ebfa3711e5b706d5599aae4b10e7028e9590255149711d5cf3be3db7342de6922ae7d3c87bc0554b292d23aaef7b30c0d209ad53ced9d6d68ba353d6e7652efc145ee"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000824) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYBLOB="23788113f46e0000f8111953be010bda0d5772efaebfe6846de81bc86e1db755d9d8a99a793332820a1d6e56e2fc4c19e8b80a56e210e1a26887cfc0f59ae37ae0a40713951bfa2403a39743b2ab1f", @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESDEC], 0x118) vmsplice(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x9, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0x20b}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) chdir(0x0) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.405167443s ago: executing program 5 (id=6373): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x141, 0x76, 0x67, 0x66, 0x20, 0x424, 0xcf18, 0x7d82, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x57, 0x80, 0x0, 0x83, 0xad, 0x5d}}]}}]}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000340)={0x18, 0x2, {0x80, @loopback}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f0000000280)=[{0xc, '\x00', @st={0x4, [{0x1, @uvalue=0x10001}, {0x2, @uvalue=0x100000001}, {0x0, @svalue=0xfffffffffffffff9}, {0x3, @uvalue=0x843}]}, 0x7fc}]}) 4.16273325s ago: executing program 2 (id=6378): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000002, 0xfa11, 0x7fffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x800000080000000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x20000000000000a7, 0x1414c0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000000c3c0)=""/102400, &(0x7f0000000000)=0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x40d4}, 0x2402c0c5) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES32=r5], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000300)=[@register_looper], 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0xa3) 4.138582091s ago: executing program 1 (id=6379): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x10a000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0x119000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x51}}) 3.842891755s ago: executing program 1 (id=6380): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x465c, 0x800, 0x3, 0x2fd}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 3.422364335s ago: executing program 3 (id=6381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00', 0xe79}, 0x1c) capset(&(0x7f0000000100)={0x39900612}, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x81, 0xfffffffb}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x4}, {0x0, 0xd}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x20}, {0x0, 0x2, 0x0, '\x00', 0x8}, {0x0, 0xff}, {0x3}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x2}, {0x6}, {}, {0x0, 0x0, 0x40}]}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) fanotify_init(0x39473e61ba070643, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000120005ff00000400046a70000000004a", @ANYRES32=0x0, @ANYBLOB="452000000021040008002e0003000000"], 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r11) 1.32541571s ago: executing program 5 (id=6382): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e327274b05ae93be1f7"]) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x30102, 0x108, 0xa}, 0x18) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x100, 0x0, &(0x7f0000000200)) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 1.047206516s ago: executing program 2 (id=6385): r0 = socket$kcm(0x10, 0x2, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "fafac0348886ec6ca005b2d2926492b61467407d836942efd66f9bf786ec9cb4995e7d321d39b373e0fb2db55c66bcb7119c00043b803900", 0x19}, 0x48, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a18000000060a0b040000000000001000030000000400045d927812001100011c750c2ae4340d9b93d1a9d3a81f00"/78], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r4, 0x25, 0x2}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000100008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="030004000500000001000000000000000000000000000000000000008a9882018d6da4e608577042cd4c42cdaf4d864b2cce891fb7eca6eeb7c463b920664739252a91f594f79d8114c6c312c745c8f2340fb5a632471cc48332206b73dae7d7c9ee7a4a931373183340475088f899cf50"], 0x50) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r2}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, 0x0, 0x0, 0x20004855) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000040)=0x84) r7 = add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000500)="0575981bbe55bf91b789ef51401cbbc6cfb68c0873e1e62fc25f167b2971a762fb35dbb1c06c28b3a67a46274bda4fb36b4720457eef00fa200496b13af63954ae4134cc583c51191ee7daf7ba1a69a96aa985a0fc9c79e88281af53fd033efddeb002fc03d1de30e9b4045215ba8d9a63f9f7b17fb5a2534338d0295c50b9733130e52399516789319ede83fd90a8d443c693b729bdcfc44c8a1763a37766e9311845f3cd34ee6228c9a3fcca32b5e02bb4694c374d1dafd257261fbd663cc2c98095212ccf3436f2239f868b1c0c2348bc40791876e1d256c033b200"/232, 0xe8, 0xfffffffffffffffe) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, r7, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) 780.418847ms ago: executing program 1 (id=6386): ioperm(0x40, 0x9, 0x81) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0xffffffffffffff7b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240080d5}, 0x24044040) io_setup(0x8, &(0x7f0000000540)=0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x2e, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xa, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0x7}, {0x41000, 0x54000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x100000, 0x2d}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000000, 0x3, 0xef6, 0xff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000080)="01fd0000fe", 0x5, 0x2a25}]) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlock(&(0x7f000000e000/0x1000)=nil, 0x1000) 711.987198ms ago: executing program 5 (id=6387): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/74, 0x4a}], 0x1, 0x21}}], 0x48}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) 711.632133ms ago: executing program 2 (id=6388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x4}}}, 0x24}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {0x3}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x4}}]}, 0x2c}}, 0x24008004) 552.212575ms ago: executing program 5 (id=6389): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) prctl$PR_SET_FPEMU(0xa, 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 441.124121ms ago: executing program 1 (id=6390): r0 = io_uring_setup(0x5ffc, &(0x7f0000000780)={0x0, 0xf279, 0x800, 0x0, 0x2b1}) close_range(r0, r0, 0x0) semget$private(0x0, 0x6, 0x0) (async) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}], 0x1) 440.017773ms ago: executing program 2 (id=6391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 295.896566ms ago: executing program 2 (id=6392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) setresgid(0x0, 0xee01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='personality\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x400) 295.683328ms ago: executing program 1 (id=6393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendfile(r0, r1, &(0x7f0000000040)=0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x5}}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x4b}, 0x28) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @irqchip={0x8, 0x9}}, {0x3, 0x2, 0x0, 0x0, @sint={0x2, 0x400}}]}) 295.489244ms ago: executing program 5 (id=6394): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) 216.603902ms ago: executing program 2 (id=6395): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x8028c003, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x2) 0s ago: executing program 1 (id=6396): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) r5 = socket$packet(0x11, 0x2, 0x300) fsync(r5) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) kernel console output (not intermixed with test programs): t=010e, bcdDevice=91.f6 [ 1650.271518][T22275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.286699][T17178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.296381][T17178] usb 4-1: Product: syz [ 1650.300558][T17178] usb 4-1: Manufacturer: syz [ 1650.310913][T17178] usb 4-1: SerialNumber: syz [ 1650.332017][ T5847] m920x_read = error: -19 [ 1650.336395][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1650.512402][ T5860] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1650.512716][T27538] m920x_read = error: -19 [ 1650.561984][ T5860] usb 3-1: device descriptor read/8, error -71 [ 1650.569857][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1650.722312][ T5847] m920x_read = error: -19 [ 1650.794205][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1650.797015][T28781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1650.855525][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1650.855571][ T30] audit: type=1400 audit(3919595088.864:2805): avc: denied { read write } for pid=28782 comm="syz.5.6093" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1650.856391][ T5860] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1651.058908][ T5860] usb 3-1: device descriptor read/8, error -71 [ 1651.066582][T22275] bridge0: port 3(batadv0) entered disabled state [ 1651.094745][ T5847] m920x_read = error: -19 [ 1651.099131][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1651.118561][T22275] bridge_slave_1: left allmulticast mode [ 1651.125631][ T30] audit: type=1400 audit(3919595088.864:2806): avc: denied { open } for pid=28782 comm="syz.5.6093" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1651.151660][T22275] bridge_slave_1: left promiscuous mode [ 1651.182334][T22275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.207883][ T5860] usb usb3-port1: unable to enumerate USB device [ 1651.229364][T22275] bridge_slave_0: left allmulticast mode [ 1651.252176][T22275] bridge_slave_0: left promiscuous mode [ 1651.270622][T22275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.273513][ T792] m920x_read = error: -19 [ 1651.282049][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1651.372917][T17858] Bluetooth: hci0: command tx timeout [ 1651.436313][ T792] m920x_read = error: -19 [ 1651.440714][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1651.614793][T27538] m920x_read = error: -19 [ 1651.620287][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1651.636005][ T30] audit: type=1400 audit(3919595089.694:2807): avc: denied { read write } for pid=28806 comm="syz.1.6096" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1651.666165][ T30] audit: type=1400 audit(3919595089.694:2808): avc: denied { open } for pid=28806 comm="syz.1.6096" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1651.816822][T27538] m920x_read = error: -19 [ 1651.821364][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1651.847034][T22275] gretap0 (unregistering): left promiscuous mode [ 1651.876420][T22275] dvmrp9 (unregistering): left allmulticast mode [ 1651.891090][ T30] audit: type=1400 audit(3919595089.967:2809): avc: denied { read write } for pid=28813 comm="syz.1.6098" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1651.950198][ T30] audit: type=1400 audit(3919595089.967:2810): avc: denied { open } for pid=28813 comm="syz.1.6098" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1651.979010][T27538] m920x_read = error: -19 [ 1651.983453][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1652.001845][ T30] audit: type=1400 audit(3919595089.998:2811): avc: denied { ioctl } for pid=28813 comm="syz.1.6098" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1652.166659][T27538] m920x_read = error: -19 [ 1652.171774][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1652.201819][T22275] bond0 (unregistering): left promiscuous mode [ 1652.208583][T22275] bond_slave_0: left promiscuous mode [ 1652.214132][T22275] bond_slave_1: left promiscuous mode [ 1652.278682][T28822] gfs2: error -5 reading superblock [ 1652.292222][ T30] audit: type=1400 audit(3919595090.366:2812): avc: denied { setopt } for pid=28819 comm="syz.1.6099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1652.331267][T27538] m920x_read = error: -19 [ 1652.336397][T22275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.347486][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1652.370075][T22275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.400528][T22275] bond0 (unregistering): Released all slaves [ 1652.429594][T22275] bond1 (unregistering): Released all slaves [ 1652.504083][T27538] m920x_read = error: -19 [ 1652.508746][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1652.660270][T22275] !: left promiscuous mode [ 1652.716538][T17178] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 1652.723670][T27538] m920x_read = error: -19 [ 1652.723698][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1652.757324][T17178] gspca_mr97310a: reg write [21] error -8 [ 1652.757842][T22275] tipc: Left network mode [ 1652.781110][T17178] mr97310a 4-1:6.216: probe with driver mr97310a failed with error -8 [ 1652.822207][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 171 seconds [ 1652.830753][T17178] usb 4-1: USB disconnect, device number 103 [ 1652.835445][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 171 seconds [ 1652.891629][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 171 seconds [ 1652.903616][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 171 seconds [ 1652.921527][T27538] m920x_read = error: -19 [ 1652.925896][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1652.958953][ T30] audit: type=1400 audit(3919595091.080:2813): avc: denied { create } for pid=28825 comm="syz.3.6101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1653.031415][ T30] audit: type=1400 audit(3919595091.080:2814): avc: denied { setopt } for pid=28825 comm="syz.3.6101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1653.145777][T27538] m920x_read = error: -19 [ 1653.158595][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1653.198568][T28244] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1653.407366][T17858] Bluetooth: hci0: command tx timeout [ 1653.473509][T28244] usb 2-1: Using ep0 maxpacket: 16 [ 1653.604025][T27538] m920x_read = error: -19 [ 1653.608958][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1653.622803][T28244] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1653.637870][T28244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.651986][T28244] usb 2-1: Product: syz [ 1653.657860][T28834] gretap0: entered promiscuous mode [ 1653.665430][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1653.674956][T28835] gretap0: left promiscuous mode [ 1653.679198][T28244] usb 2-1: Manufacturer: syz [ 1653.685228][T28244] usb 2-1: SerialNumber: syz [ 1653.701559][T28244] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1653.707929][T28244] r8152-cfgselector 2-1: config 0 descriptor?? [ 1653.774436][ T792] m920x_read = error: -19 [ 1653.779831][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1653.913811][T22275] hsr_slave_0: left promiscuous mode [ 1653.938484][T22275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.940553][ T792] m920x_read = error: -19 [ 1653.948830][T28244] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1653.957110][T28244] r8152-cfgselector 2-1: bad CDC descriptors [ 1653.958477][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1653.966033][T22275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.986483][T28244] r8152-cfgselector 2-1: USB disconnect, device number 81 [ 1654.008729][T22275] veth1_macvtap: left promiscuous mode [ 1654.124311][ T792] m920x_read = error: -19 [ 1654.127192][T22275] veth0_macvtap: left promiscuous mode [ 1654.129255][T28798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1654.143701][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1654.152257][T22275] veth1_vlan: left promiscuous mode [ 1654.259797][T22275] veth0_vlan: left promiscuous mode [ 1654.314196][ T792] m920x_read = error: -19 [ 1654.322922][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1654.559399][ T792] m920x_read = error: -19 [ 1654.661947][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1654.792237][T28244] libceph: connect (1)[c::]:6789 error -101 [ 1654.799041][T28244] libceph: mon0 (1)[c::]:6789 connect error [ 1654.819032][T28856] ceph: No mds server is up or the cluster is laggy [ 1654.845083][ T792] m920x_read = error: -19 [ 1654.850961][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1655.010335][T28862] netlink: 'syz.5.6111': attribute type 6 has an invalid length. [ 1655.060699][T28865] netlink: 'syz.5.6111': attribute type 6 has an invalid length. [ 1655.153623][ T792] m920x_read = error: -19 [ 1655.161147][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1655.328188][ T792] m920x_read = error: -19 [ 1655.351940][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1655.554372][ T792] m920x_read = error: -19 [ 1655.566540][T22275] team0 (unregistering): Port device team_slave_1 removed [ 1655.574516][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1655.600739][T22275] team0 (unregistering): Port device team_slave_0 removed [ 1655.739494][ T5847] m920x_read = error: -19 [ 1655.743885][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1655.785820][T28698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1655.810317][T28698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1655.846250][T28861] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6111'. [ 1655.938100][ T5847] m920x_read = error: -19 [ 1655.943992][T28698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1655.959233][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1655.990907][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1655.990924][ T30] audit: type=1400 audit(3919595094.273:2818): avc: denied { write } for pid=28869 comm="syz.2.6113" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1656.021861][T28846] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 1656.189000][ T5847] m920x_read = error: -19 [ 1656.193837][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1656.203561][T28846] CPU: 1 UID: 0 PID: 28846 Comm: syz.3.6106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.203596][T28846] Tainted: [L]=SOFTLOCKUP [ 1656.203608][T28846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1656.203618][T28846] Call Trace: [ 1656.203626][T28846] [ 1656.203633][T28846] dump_stack_lvl+0x100/0x190 [ 1656.203677][T28846] sysfs_warn_dup.cold+0x1c/0x28 [ 1656.203704][T28846] sysfs_do_create_link_sd+0x113/0x140 [ 1656.203742][T28846] sysfs_create_link+0x61/0xc0 [ 1656.203768][T28846] device_add+0x675/0x1950 [ 1656.203796][T28846] ? __pfx_device_add+0x10/0x10 [ 1656.203821][T28846] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1656.203849][T28846] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1656.203885][T28846] wiphy_register+0x1e5b/0x2d30 [ 1656.203905][T28846] ? __rtnl_unlock+0xb9/0xf0 [ 1656.203926][T28846] ? netdev_run_todo+0x750/0x12c0 [ 1656.203952][T28846] ? __pfx_wiphy_register+0x10/0x10 [ 1656.203976][T28846] ? __asan_memset+0x23/0x50 [ 1656.203997][T28846] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 1656.204024][T28846] ieee80211_register_hw+0x2cfd/0x4140 [ 1656.204052][T28846] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1656.204072][T28846] ? __pfx___debug_object_init+0x10/0x10 [ 1656.204097][T28846] ? find_held_lock+0x2b/0x80 [ 1656.204120][T28846] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1656.204144][T28846] ? __hrtimer_setup+0x178/0x280 [ 1656.204169][T28846] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 1656.204214][T28846] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1656.204241][T28846] ? __asan_memcpy+0x3c/0x60 [ 1656.204268][T28846] hwsim_new_radio_nl+0xc1f/0x1340 [ 1656.204293][T28846] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1656.204321][T28846] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1656.204345][T28846] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1656.204376][T28846] genl_family_rcv_msg_doit+0x214/0x300 [ 1656.204405][T28846] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1656.204441][T28846] ? bpf_lsm_capable+0x9/0x10 [ 1656.204459][T28846] ? security_capable+0x80/0x260 [ 1656.204490][T28846] ? ns_capable+0xd2/0xf0 [ 1656.204513][T28846] genl_rcv_msg+0x560/0x800 [ 1656.204539][T28846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1656.204562][T28846] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1656.204592][T28846] netlink_rcv_skb+0x159/0x420 [ 1656.204613][T28846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1656.204638][T28846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1656.204689][T28846] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1656.204725][T28846] genl_rcv+0x28/0x40 [ 1656.204747][T28846] netlink_unicast+0x5aa/0x870 [ 1656.204772][T28846] ? __pfx_netlink_unicast+0x10/0x10 [ 1656.204804][T28846] netlink_sendmsg+0x8b0/0xda0 [ 1656.204830][T28846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.204850][T28846] ? PageHuge+0x170/0x180 [ 1656.204882][T28846] ____sys_sendmsg+0xa54/0xc30 [ 1656.204907][T28846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1656.204933][T28846] ? try_to_wake_up+0x644/0x1a80 [ 1656.204964][T28846] ___sys_sendmsg+0x190/0x1e0 [ 1656.204992][T28846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1656.205016][T28846] ? futex_private_hash_put+0x107/0x1c0 [ 1656.205078][T28846] __sys_sendmsg+0x170/0x220 [ 1656.205099][T28846] ? __pfx___sys_sendmsg+0x10/0x10 [ 1656.205117][T28846] ? __x64_sys_futex+0x34f/0x4d0 [ 1656.205151][T28846] do_syscall_64+0x106/0xf80 [ 1656.205171][T28846] ? clear_bhb_loop+0x40/0x90 [ 1656.205192][T28846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.205212][T28846] RIP: 0033:0x7efc28f9c629 [ 1656.205231][T28846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.205249][T28846] RSP: 002b:00007efc29e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1656.205275][T28846] RAX: ffffffffffffffda RBX: 00007efc29216090 RCX: 00007efc28f9c629 [ 1656.205294][T28846] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1656.205306][T28846] RBP: 00007efc29032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1656.205317][T28846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.205328][T28846] R13: 00007efc29216128 R14: 00007efc29216090 R15: 00007ffd61880e88 [ 1656.205355][T28846] [ 1657.003892][T28698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1657.457139][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 174 seconds [ 1657.469276][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 174 seconds [ 1657.482755][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 174 seconds [ 1657.496200][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 174 seconds [ 1657.532640][T19085] m920x_read = error: -19 [ 1657.537134][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1657.740032][T19085] m920x_read = error: -19 [ 1657.745299][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1657.847253][T28850] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 1657.919563][T28850] CPU: 0 UID: 0 PID: 28850 Comm: syz.3.6106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.919598][T28850] Tainted: [L]=SOFTLOCKUP [ 1657.919606][T28850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1657.919618][T28850] Call Trace: [ 1657.919624][T28850] [ 1657.919631][T28850] dump_stack_lvl+0x100/0x190 [ 1657.919667][T28850] sysfs_warn_dup.cold+0x1c/0x28 [ 1657.919696][T28850] sysfs_do_create_link_sd+0x113/0x140 [ 1657.919727][T28850] sysfs_create_link+0x61/0xc0 [ 1657.919755][T28850] device_add+0x675/0x1950 [ 1657.919787][T28850] ? __pfx_device_add+0x10/0x10 [ 1657.919814][T28850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1657.919843][T28850] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1657.919886][T28850] wiphy_register+0x1e5b/0x2d30 [ 1657.919908][T28850] ? __rtnl_unlock+0xb9/0xf0 [ 1657.919929][T28850] ? netdev_run_todo+0x750/0x12c0 [ 1657.919956][T28850] ? __pfx_wiphy_register+0x10/0x10 [ 1657.919979][T28850] ? __asan_memset+0x23/0x50 [ 1657.920004][T28850] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 1657.920040][T28850] ieee80211_register_hw+0x2cfd/0x4140 [ 1657.920078][T28850] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1657.920101][T28850] ? __pfx___debug_object_init+0x10/0x10 [ 1657.920130][T28850] ? find_held_lock+0x2b/0x80 [ 1657.920157][T28850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1657.920185][T28850] ? __hrtimer_setup+0x178/0x280 [ 1657.920209][T28850] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 1657.920250][T28850] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1657.920277][T28850] ? __asan_memcpy+0x3c/0x60 [ 1657.920304][T28850] hwsim_new_radio_nl+0xc1f/0x1340 [ 1657.920330][T28850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1657.920362][T28850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1657.920388][T28850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1657.920420][T28850] genl_family_rcv_msg_doit+0x214/0x300 [ 1657.920448][T28850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1657.920483][T28850] ? bpf_lsm_capable+0x9/0x10 [ 1657.920501][T28850] ? security_capable+0x80/0x260 [ 1657.920531][T28850] ? ns_capable+0xd2/0xf0 [ 1657.920556][T28850] genl_rcv_msg+0x560/0x800 [ 1657.920584][T28850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1657.920610][T28850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1657.920640][T28850] netlink_rcv_skb+0x159/0x420 [ 1657.920663][T28850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1657.920689][T28850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1657.920722][T28850] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1657.920747][T28850] genl_rcv+0x28/0x40 [ 1657.920767][T28850] netlink_unicast+0x5aa/0x870 [ 1657.920792][T28850] ? __pfx_netlink_unicast+0x10/0x10 [ 1657.920824][T28850] netlink_sendmsg+0x8b0/0xda0 [ 1657.920851][T28850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1657.920871][T28850] ? PageHuge+0x170/0x180 [ 1657.920912][T28850] ____sys_sendmsg+0xa54/0xc30 [ 1657.920943][T28850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1657.920975][T28850] ? __pfx_futex_wake_mark+0x10/0x10 [ 1657.921006][T28850] ___sys_sendmsg+0x190/0x1e0 [ 1657.921034][T28850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1657.921095][T28850] __sys_sendmsg+0x170/0x220 [ 1657.921115][T28850] ? __pfx___sys_sendmsg+0x10/0x10 [ 1657.921134][T28850] ? __x64_sys_futex+0x34f/0x4d0 [ 1657.921170][T28850] do_syscall_64+0x106/0xf80 [ 1657.921190][T28850] ? clear_bhb_loop+0x40/0x90 [ 1657.921214][T28850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.921233][T28850] RIP: 0033:0x7efc28f9c629 [ 1657.921252][T28850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.921272][T28850] RSP: 002b:00007efc29dfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1657.921291][T28850] RAX: ffffffffffffffda RBX: 00007efc29216180 RCX: 00007efc28f9c629 [ 1657.921304][T28850] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1657.921316][T28850] RBP: 00007efc29032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1657.921327][T28850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.921339][T28850] R13: 00007efc29216218 R14: 00007efc29216180 R15: 00007ffd61880e88 [ 1657.921367][T28850] [ 1658.044538][T19085] m920x_read = error: -19 [ 1658.558376][T28219] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1658.579119][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1658.622086][T28698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.661818][T28917] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1658.686047][T28698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.711438][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.718530][T27716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.745635][ T30] audit: type=1400 audit(3919595097.172:2819): avc: denied { map } for pid=28918 comm="syz.2.6121" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1658.774305][T28219] usb 6-1: device descriptor read/64, error -71 [ 1658.787396][T19085] m920x_read = error: -19 [ 1658.791884][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1658.804439][T22276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.811556][T22276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.826613][ T30] audit: type=1400 audit(3919595097.172:2820): avc: denied { create } for pid=28918 comm="syz.2.6121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1658.914483][ T30] audit: type=1400 audit(3919595097.350:2821): avc: denied { append } for pid=28909 comm="syz.3.6120" name="video9" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1659.011659][ T30] audit: type=1400 audit(3919595097.424:2822): avc: denied { getopt } for pid=28909 comm="syz.3.6120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1659.033770][T28219] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1659.138685][T19085] m920x_read = error: -19 [ 1659.143116][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1659.186122][T28219] usb 6-1: device descriptor read/64, error -71 [ 1659.234044][T28244] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1659.291667][T28219] usb usb6-port1: attempt power cycle [ 1659.329082][T19085] m920x_read = error: -19 [ 1659.333456][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1659.343611][T28698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.519871][T28244] usb 4-1: device descriptor read/64, error -71 [ 1659.634852][T28219] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1659.658896][T28698] veth0_vlan: entered promiscuous mode [ 1659.684635][T28219] usb 6-1: device descriptor read/8, error -71 [ 1659.767577][T28244] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1659.814415][T19085] m920x_read = error: -19 [ 1659.818830][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1659.886501][T28964] netlink: 'syz.2.6126': attribute type 6 has an invalid length. [ 1659.898390][T17858] Bluetooth: unknown link type 3 [ 1659.904192][T17858] Bluetooth: hci6: connection err: -111 [ 1660.246787][T28698] veth1_vlan: entered promiscuous mode [ 1660.282310][T28219] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1660.330247][T28219] usb 6-1: device descriptor read/8, error -71 [ 1660.347463][ T5847] m920x_read = error: -19 [ 1660.348611][T28244] usb 4-1: device descriptor read/64, error -71 [ 1660.375757][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1660.411134][T28698] veth0_macvtap: entered promiscuous mode [ 1660.438909][T28698] veth1_macvtap: entered promiscuous mode [ 1660.448194][T28219] usb usb6-port1: unable to enumerate USB device [ 1660.472181][T28244] usb usb4-port1: attempt power cycle [ 1660.550372][T28698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.576498][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1660.577904][ T5847] m920x_read = error: -19 [ 1660.602044][T28698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.616177][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1660.644737][T22277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.681293][T22277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.701427][T28976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1660.719544][T22277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.767392][ T9] usb 2-1: device descriptor read/64, error -71 [ 1660.778584][T22277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.802378][ T5847] m920x_read = error: -19 [ 1660.811879][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1660.845263][T28976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1660.883937][T28244] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1660.953154][T28244] usb 4-1: device descriptor read/8, error -71 [ 1661.033167][T19085] m920x_read = error: -19 [ 1661.037542][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1661.072930][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1661.082106][ T30] audit: type=1400 audit(3919595099.629:2823): avc: denied { relabelfrom } for pid=28984 comm="syz.2.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1661.129961][T22277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.140354][T22277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.179075][ T30] audit: type=1400 audit(3919595099.629:2824): avc: denied { relabelto } for pid=28984 comm="syz.2.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1661.224929][T28244] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1661.233316][ T9] usb 2-1: device descriptor read/64, error -71 [ 1661.273095][T22277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.290943][ T5847] m920x_read = error: -19 [ 1661.298269][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1661.310773][T22277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.354871][ T30] audit: type=1400 audit(3919595099.787:2825): avc: denied { create } for pid=28981 comm="syz.5.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1661.379439][ T9] usb usb2-port1: attempt power cycle [ 1661.476175][ T30] audit: type=1400 audit(3919595099.797:2826): avc: denied { create } for pid=28981 comm="syz.5.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1661.481257][T19085] m920x_read = error: -19 [ 1661.594840][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 177 seconds [ 1661.609573][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 177 seconds [ 1661.621172][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 177 seconds [ 1661.632961][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 177 seconds [ 1661.649673][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1661.778474][ T30] audit: type=1326 audit(3919595100.323:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.4.6068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72179c629 code=0x0 [ 1661.833359][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1661.880968][T27538] m920x_read = error: -19 [ 1661.885419][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1661.905675][ T9] usb 2-1: device descriptor read/8, error -71 [ 1662.051426][T27538] m920x_read = error: -19 [ 1662.057045][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1662.169119][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1662.404222][T28244] usb 4-1: device descriptor read/8, error -71 [ 1662.406072][T19085] m920x_read = error: -19 [ 1662.473020][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1662.547559][T28244] usb usb4-port1: unable to enumerate USB device [ 1662.615660][T29000] netlink: 'syz.3.6131': attribute type 10 has an invalid length. [ 1662.671214][ T5847] m920x_read = error: -19 [ 1662.680667][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1662.725639][T29005] netlink: 'syz.2.6132': attribute type 10 has an invalid length. [ 1662.736756][T29005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.745398][T29005] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1662.759426][T29005] loop5: detected capacity change from 0 to 7 [ 1662.768534][T29005] Dev loop5: unable to read RDB block 7 [ 1662.774085][T29005] loop5: AHDI p1 [ 1662.778210][T29005] loop5: partition table partially beyond EOD, truncated [ 1662.787125][T29005] netlink: 'syz.2.6132': attribute type 10 has an invalid length. [ 1662.795556][T29005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6132'. [ 1662.805138][T29005] batadv0: entered promiscuous mode [ 1662.810330][T29005] batadv0: entered allmulticast mode [ 1662.823849][T29005] bond0: (slave batadv0): Releasing backup interface [ 1662.858651][T29005] bridge0: port 3(batadv0) entered blocking state [ 1662.865745][T29005] bridge0: port 3(batadv0) entered disabled state [ 1662.874783][ T5847] m920x_read = error: -19 [ 1662.879184][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1662.909179][T22277] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1662.919200][T22277] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1662.990041][T29008] netlink: 'syz.4.6133': attribute type 1 has an invalid length. [ 1663.042629][ T5847] m920x_read = error: -19 [ 1663.065052][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1663.169472][ T5175] Dev loop5: unable to read RDB block 7 [ 1663.201042][ T5175] loop5: AHDI p1 [ 1663.208585][T29010] netlink: 'syz.3.6134': attribute type 1 has an invalid length. [ 1663.232687][ T5175] loop5: partition table partially beyond EOD, truncated [ 1663.251814][ T5847] m920x_read = error: -19 [ 1663.258398][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1663.374244][ T9] usb 2-1: device descriptor read/8, error -71 [ 1663.464585][ T5847] m920x_read = error: -19 [ 1663.508695][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1663.560277][ T9] usb usb2-port1: unable to enumerate USB device [ 1663.718211][T19085] m920x_read = error: -19 [ 1663.795109][T29020] netlink: 'syz.2.6136': attribute type 6 has an invalid length. [ 1664.224493][T17858] Bluetooth: unknown link type 3 [ 1664.229548][T17858] Bluetooth: hci6: connection err: -111 [ 1664.242355][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1664.394967][T19085] m920x_read = error: -19 [ 1664.399341][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1664.613416][T19085] m920x_read = error: -19 [ 1664.623249][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1664.674158][ T30] audit: type=1400 audit(3919595103.400:2828): avc: denied { map } for pid=29022 comm="syz.2.6138" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1664.718259][ T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1664.739721][ T30] audit: type=1400 audit(3919595103.452:2829): avc: denied { call } for pid=29022 comm="syz.2.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1664.773222][ T30] audit: type=1400 audit(3919595103.452:2830): avc: denied { transfer } for pid=29022 comm="syz.2.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1664.795153][ T30] audit: type=1400 audit(3919595103.495:2831): avc: denied { write } for pid=29024 comm="syz.2.6139" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1664.802966][ T5847] m920x_read = error: -19 [ 1664.889597][ T9] usb 2-1: device descriptor read/64, error -71 [ 1664.899918][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1664.918146][ T30] audit: type=1400 audit(3919595103.495:2832): avc: denied { setopt } for pid=29024 comm="syz.2.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1665.079111][ T5847] m920x_read = error: -19 [ 1665.083638][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1665.128492][ T9] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1665.251539][T17178] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1665.270175][ T5847] m920x_read = error: -19 [ 1665.282308][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1665.301277][ T9] usb 2-1: device descriptor read/64, error -71 [ 1665.330463][T29034] __vm_enough_memory: pid: 29034, comm: syz.3.6141, bytes: 11727152091136 not enough memory for the allocation [ 1665.403650][T17178] usb 5-1: Using ep0 maxpacket: 32 [ 1665.412129][T17178] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1665.442303][ T9] usb usb2-port1: attempt power cycle [ 1665.457247][T17178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.479616][ T5847] m920x_read = error: -19 [ 1665.484742][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1665.531062][T17178] usb 5-1: config 0 descriptor?? [ 1665.670267][ T5847] m920x_read = error: -19 [ 1665.675273][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1665.700698][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 180 seconds [ 1665.712759][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 180 seconds [ 1665.727263][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 180 seconds [ 1665.739625][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 180 seconds [ 1666.052915][T17178] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1666.060652][ T9] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1666.099818][T17178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1666.126209][ T9] usb 2-1: device descriptor read/8, error -71 [ 1666.141549][T17178] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1666.188362][T17178] usb 5-1: media controller created [ 1666.203439][T19085] m920x_read = error: -19 [ 1666.207809][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1666.221260][T17178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1666.295964][T17178] az6027: usb out operation failed. (-71) [ 1666.312794][T17178] az6027: usb out operation failed. (-71) [ 1666.327062][T17178] stb0899_attach: Driver disabled by Kconfig [ 1666.343454][T17178] az6027: no front-end attached [ 1666.343454][T17178] [ 1666.367204][T17178] az6027: usb out operation failed. (-71) [ 1666.384482][T17178] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1666.393469][ T9] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1666.418093][T17178] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87 [ 1666.471458][ T5847] m920x_read = error: -19 [ 1666.472046][T17178] dvb-usb: schedule remote query interval to 400 msecs. [ 1666.485734][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1666.499863][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1666.499880][ T30] audit: type=1400 audit(3919595105.280:2834): avc: denied { read } for pid=5160 comm="acpid" name="event5" dev="devtmpfs" ino=5523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1666.555760][T17178] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1666.631942][ T9] usb 2-1: device not accepting address 89, error -71 [ 1666.648821][ T30] audit: type=1400 audit(3919595105.291:2835): avc: denied { open } for pid=5160 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=5523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1666.678095][ T9] usb usb2-port1: unable to enumerate USB device [ 1666.737610][ T30] audit: type=1400 audit(3919595105.291:2836): avc: denied { ioctl } for pid=5160 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=5523 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1666.850908][T17178] usb 5-1: USB disconnect, device number 68 [ 1666.984041][ T5847] m920x_read = error: -19 [ 1666.988427][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1667.170058][T29048] macvlan0: entered promiscuous mode [ 1667.176774][T29048] macvlan0: entered allmulticast mode [ 1667.182157][T29048] veth1_vlan: entered allmulticast mode [ 1667.878616][T29050] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6145'. [ 1668.094284][T17178] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1669.293161][ T5847] m920x_read = error: -19 [ 1669.358515][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1670.415987][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 183 seconds [ 1670.428270][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 183 seconds [ 1670.439925][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 183 seconds [ 1670.453806][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 183 seconds [ 1670.640394][ T5847] m920x_read = error: -19 [ 1670.684496][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1670.774462][T29065] netlink: 'syz.3.6148': attribute type 6 has an invalid length. [ 1671.143273][T27538] m920x_read = error: -19 [ 1671.166835][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1671.296961][ T5847] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1671.373589][T27538] m920x_read = error: -19 [ 1671.377963][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1671.470945][T17178] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1671.525621][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 1671.531622][ T30] audit: type=1400 audit(3919595110.595:2837): avc: denied { ioctl } for pid=29067 comm="syz.5.6150" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1671.658874][T27538] m920x_read = error: -19 [ 1671.732795][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1671.925981][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1671.963583][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1671.964459][T17178] usb 5-1: device descriptor read/64, error -71 [ 1672.006466][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1672.125466][T27538] m920x_read = error: -19 [ 1672.130537][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1672.420461][T17178] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1672.420475][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26232, setting to 64 [ 1672.463803][ T5847] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1672.481651][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.527323][ T5847] usb 3-1: Product: syz [ 1672.541477][ T5847] usb 3-1: Manufacturer: syz [ 1672.560308][ T5847] usb 3-1: SerialNumber: syz [ 1672.563095][T17178] usb 5-1: device descriptor read/64, error -71 [ 1672.579922][ T5847] usb 3-1: config 0 descriptor?? [ 1672.611087][ T5847] m920x_read = error: -19 [ 1672.624874][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1672.677966][T17178] usb usb5-port1: attempt power cycle [ 1672.801628][ T5847] m920x_read = error: -19 [ 1672.806176][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1672.827459][ T5847] usb 3-1: USB disconnect, device number 81 [ 1672.963155][T27538] m920x_read = error: -19 [ 1672.967527][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1673.011209][T17178] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1673.080770][T17178] usb 5-1: device descriptor read/8, error -71 [ 1673.144204][ T5847] m920x_read = error: -19 [ 1673.148606][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1673.315176][T17178] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1673.344438][T17178] usb 5-1: device descriptor read/8, error -71 [ 1673.345606][T29089] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6156'. [ 1673.448832][T17178] usb usb5-port1: unable to enumerate USB device [ 1673.531427][ T5847] m920x_read = error: -19 [ 1673.553221][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1673.648993][ T30] audit: type=1400 audit(3919595112.811:2838): avc: denied { write } for pid=29090 comm="syz.3.6157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1673.705834][ T5847] m920x_read = error: -19 [ 1674.037325][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1674.119138][ T30] audit: type=1400 audit(3919595113.315:2839): avc: denied { write } for pid=29094 comm="syz.5.6158" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1674.249255][T13513] m920x_read = error: -19 [ 1674.253780][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1674.686771][T29106] FAULT_INJECTION: forcing a failure. [ 1674.686771][T29106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.703084][T29106] CPU: 0 UID: 0 PID: 29106 Comm: syz.3.6162 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.703112][T29106] Tainted: [L]=SOFTLOCKUP [ 1674.703118][T29106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1674.703125][T29106] Call Trace: [ 1674.703129][T29106] [ 1674.703134][T29106] dump_stack_lvl+0x100/0x190 [ 1674.703156][T29106] should_fail_ex.cold+0x5/0xa [ 1674.703170][T29106] _copy_from_user+0x2e/0xd0 [ 1674.703186][T29106] do_sock_getsockopt+0x30b/0x3d0 [ 1674.703200][T29106] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1674.703220][T29106] __sys_getsockopt+0x148/0x260 [ 1674.703241][T29106] ? __x64_sys_getsockopt+0xbd/0x160 [ 1674.703257][T29106] __x64_sys_getsockopt+0xbd/0x160 [ 1674.703272][T29106] ? do_syscall_64+0x95/0xf80 [ 1674.703284][T29106] ? lockdep_hardirqs_on+0x78/0x100 [ 1674.703294][T29106] do_syscall_64+0x106/0xf80 [ 1674.703304][T29106] ? clear_bhb_loop+0x40/0x90 [ 1674.703317][T29106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.703329][T29106] RIP: 0033:0x7efc28f9c629 [ 1674.703338][T29106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.703349][T29106] RSP: 002b:00007efc29dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1674.703360][T29106] RAX: ffffffffffffffda RBX: 00007efc29216180 RCX: 00007efc28f9c629 [ 1674.703367][T29106] RDX: 0000000000000022 RSI: 0000000000000006 RDI: 0000000000000004 [ 1674.703373][T29106] RBP: 00007efc29dfc090 R08: 0000200000000ac0 R09: 0000000000000000 [ 1674.703379][T29106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.703385][T29106] R13: 00007efc29216218 R14: 00007efc29216180 R15: 00007ffd61880e88 [ 1674.703399][T29106] [ 1675.453374][T13513] m920x_read = error: -19 [ 1675.459391][T29097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6160'. [ 1675.477052][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1675.492267][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 186 seconds [ 1675.772960][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 186 seconds [ 1675.786970][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 186 seconds [ 1675.818402][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 186 seconds [ 1675.820606][T29108] comedi comedi1: comedi_config --init_data is deprecated [ 1675.858874][T13513] m920x_read = error: -19 [ 1675.867399][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1676.042071][ T30] audit: type=1400 audit(3919595115.111:2840): avc: denied { append } for pid=29100 comm="syz.5.6161" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1676.140320][T13513] m920x_read = error: -19 [ 1676.166063][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1676.335950][T13513] m920x_read = error: -19 [ 1676.346953][ T30] audit: type=1400 audit(3919595115.657:2841): avc: denied { mount } for pid=29115 comm="syz.5.6165" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1676.370866][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1676.401995][ T30] audit: type=1400 audit(3919595115.657:2842): avc: denied { mounton } for pid=29115 comm="syz.5.6165" path="/39/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1676.431738][T29124] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1676.442411][ T30] audit: type=1400 audit(3919595115.657:2843): avc: denied { mount } for pid=29115 comm="syz.5.6165" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1676.524782][T29127] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1676.552770][ T792] m920x_read = error: -19 [ 1676.553106][T29127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6167'. [ 1676.566062][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1676.613771][ T30] audit: type=1400 audit(3919595115.930:2844): avc: denied { ioctl } for pid=29125 comm="syz.1.6167" path="socket:[120414]" dev="sockfs" ino=120414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1676.645154][T29127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.657946][ T30] audit: type=1400 audit(3919595115.983:2845): avc: denied { append } for pid=29128 comm="syz.4.6168" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1676.683179][T29127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.692225][ T30] audit: type=1400 audit(3919595115.993:2846): avc: denied { getopt } for pid=29125 comm="syz.1.6167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1676.724139][ T792] m920x_read = error: -19 [ 1676.728864][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1676.887055][ T792] m920x_read = error: -19 [ 1677.020087][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1677.076747][ T30] audit: type=1400 audit(3919595116.403:2847): avc: denied { unmount } for pid=28126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1677.181908][ T792] m920x_read = error: -19 [ 1677.191802][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1677.454965][ T792] m920x_read = error: -19 [ 1677.508037][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1677.956973][ T30] audit: type=1400 audit(3919595117.348:2848): avc: denied { unmount } for pid=28698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1678.000295][ T792] m920x_read = error: -19 [ 1678.004657][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1678.173250][ T30] audit: type=1400 audit(3919595117.579:2849): avc: denied { connect } for pid=29148 comm="syz.4.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1678.199904][ T792] m920x_read = error: -19 [ 1678.204255][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1678.326035][T29149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input88 [ 1678.368789][T29152] netlink: 'syz.1.6175': attribute type 1 has an invalid length. [ 1678.392317][ T792] m920x_read = error: -19 [ 1678.396696][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1678.666642][T13513] m920x_read = error: -19 [ 1678.671021][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1678.690625][ T30] audit: type=1400 audit(3919595118.104:2850): avc: denied { getopt } for pid=29156 comm="syz.5.6177" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1678.743109][ T792] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1678.900754][T29159] syzkaller0: entered promiscuous mode [ 1678.907856][T29159] syzkaller0: entered allmulticast mode [ 1679.016484][T13513] m920x_read = error: -19 [ 1679.032234][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1679.090751][T29162] binder: 29161:29162 ioctl 4018620d 0 returned -22 [ 1679.094946][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 1679.110498][ T792] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1679.121082][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.131289][ T792] usb 2-1: Product: syz [ 1679.137134][ T792] usb 2-1: Manufacturer: syz [ 1679.143355][ T792] usb 2-1: SerialNumber: syz [ 1679.158371][ T792] usb 2-1: config 0 descriptor?? [ 1679.172510][ T792] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1679.208957][T13513] m920x_read = error: -19 [ 1679.213432][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1679.230240][T29167] SELinux: failed to load policy [ 1679.380362][T13513] m920x_read = error: -19 [ 1679.384779][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1679.551801][T13513] m920x_read = error: -19 [ 1679.563462][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1679.642580][ T792] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 1679.685036][T27538] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1679.692969][ T792] visor 2-1:0.0: probe with driver visor failed with error -5 [ 1679.733495][T13513] m920x_read = error: -19 [ 1679.812607][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1679.821292][ T792] usb 2-1: USB disconnect, device number 90 [ 1679.837882][T27538] usb 4-1: device descriptor read/64, error -71 [ 1679.891678][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 189 seconds [ 1679.903550][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 189 seconds [ 1679.915366][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 189 seconds [ 1679.926723][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 189 seconds [ 1679.999474][T13513] m920x_read = error: -19 [ 1680.005112][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1680.142360][T27538] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1680.172235][T13513] m920x_read = error: -19 [ 1680.176678][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1680.322810][T27538] usb 4-1: device descriptor read/64, error -71 [ 1680.547093][T13513] m920x_read = error: -19 [ 1680.556405][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1680.642309][T27538] usb usb4-port1: attempt power cycle [ 1680.809055][T19085] m920x_read = error: -19 [ 1680.813757][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1680.877828][T13513] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1680.955406][T29192] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6189'. [ 1681.168966][ T5847] m920x_read = error: -19 [ 1681.267219][T27538] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1681.304907][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1681.354395][T27538] usb 4-1: device descriptor read/8, error -71 [ 1681.403940][T29194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.418032][T13513] usb 5-1: device descriptor read/64, error -71 [ 1681.484856][T19085] m920x_read = error: -19 [ 1681.503711][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1681.542851][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1681.542867][ T30] audit: type=1400 audit(3919595121.119:2852): avc: denied { bind } for pid=29195 comm="syz.1.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1681.599206][ T30] audit: type=1400 audit(3919595121.119:2853): avc: denied { connect } for pid=29195 comm="syz.1.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1681.650621][T29198] 9pnet_virtio: no channels available for device syz [ 1681.660055][T27538] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1681.683572][ T30] audit: type=1400 audit(3919595121.150:2854): avc: denied { bind } for pid=29195 comm="syz.1.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1681.722802][T13513] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1681.731023][ T30] audit: type=1400 audit(3919595121.308:2855): avc: denied { write } for pid=29195 comm="syz.1.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1681.731156][T19085] m920x_read = error: -19 [ 1681.765724][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1681.788880][T27538] usb 4-1: device descriptor read/8, error -71 [ 1681.837459][T29202] netlink: 'syz.2.6193': attribute type 1 has an invalid length. [ 1681.894100][T13513] usb 5-1: device descriptor read/64, error -71 [ 1681.913848][T27538] usb usb4-port1: unable to enumerate USB device [ 1681.928888][T29202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1681.931856][T27538] m920x_read = error: -19 [ 1681.959310][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1682.000460][T13513] usb usb5-port1: attempt power cycle [ 1682.032181][T29204] bond1: (slave bridge1): making interface the new active one [ 1682.053194][T29204] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1682.150849][T19085] m920x_read = error: -19 [ 1682.155776][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1682.313104][T19085] m920x_read = error: -19 [ 1682.336508][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1682.360252][T17178] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1682.362376][T13513] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1682.473737][T29214] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 1682.507485][T29214] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6196'. [ 1682.542007][T19085] m920x_read = error: -19 [ 1682.760459][T17178] usb 3-1: Using ep0 maxpacket: 16 [ 1682.780674][T17178] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1682.799633][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1682.858762][T17178] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.942157][T17178] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1682.999700][T19085] m920x_read = error: -19 [ 1683.011556][T29218] team0: Device gtp0 is of different type [ 1683.025368][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1683.040152][T17178] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1683.063873][T17178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.104613][T17178] usb 3-1: Product: syz [ 1683.136626][T17178] usb 3-1: Manufacturer: syz [ 1683.156088][T17178] usb 3-1: SerialNumber: syz [ 1683.188823][T19085] m920x_read = error: -19 [ 1683.197051][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1683.305210][T13513] usb 5-1: device descriptor read/8, error -71 [ 1683.319781][ T30] audit: type=1400 audit(3919595122.967:2856): avc: denied { create } for pid=29221 comm="syz.5.6200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1683.374057][T19085] m920x_read = error: -19 [ 1683.378404][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1683.474178][ T30] audit: type=1400 audit(3919595123.146:2857): avc: denied { read write } for pid=29221 comm="syz.5.6200" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1683.523304][ T30] audit: type=1400 audit(3919595123.198:2858): avc: denied { open } for pid=29221 comm="syz.5.6200" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1683.550653][T19085] m920x_read = error: -19 [ 1683.555004][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1683.595544][T17178] usb 3-1: 0:2 : does not exist [ 1683.597767][T29230] 9p: Bad value for 'rfdno' [ 1683.634355][ T30] audit: type=1400 audit(3919595123.303:2859): avc: denied { read } for pid=29221 comm="syz.5.6200" dev="sockfs" ino=121372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1683.731520][T19085] m920x_read = error: -19 [ 1683.735980][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1683.831004][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6203'. [ 1683.893348][T19528] m920x_read = error: -19 [ 1683.897753][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1683.980929][T29209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.009637][T29209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.045817][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 192 seconds [ 1684.057133][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 192 seconds [ 1684.068835][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 192 seconds [ 1684.080367][T19528] m920x_read = error: -19 [ 1684.087040][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 192 seconds [ 1684.098743][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1684.164455][T29242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.264751][T19085] m920x_read = error: -19 [ 1684.269177][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1684.445854][T19085] m920x_read = error: -19 [ 1684.450964][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1684.571307][T29209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.607914][T13513] m920x_read = error: -19 [ 1684.617184][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1684.618142][T29209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.785897][T17178] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1684.865437][ T30] audit: type=1400 audit(3919595124.606:2860): avc: denied { setopt } for pid=29248 comm="syz.3.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1684.912177][T19528] m920x_read = error: -19 [ 1684.916633][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1684.943272][T17178] usb 3-1: USB disconnect, device number 82 [ 1685.022475][T24392] udevd[24392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1685.093197][T13513] m920x_read = error: -19 [ 1685.102024][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1685.249715][ T30] audit: type=1400 audit(3919595125.005:2861): avc: denied { create } for pid=29251 comm="syz.3.6208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1685.350024][T29257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=29257 comm=syz.5.6209 [ 1685.367255][T29257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6209'. [ 1685.703120][T13513] m920x_read = error: -19 [ 1686.083709][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1686.285089][T19085] m920x_read = error: -19 [ 1686.289455][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1686.493016][T19085] m920x_read = error: -19 [ 1686.497391][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1686.683058][T13513] m920x_read = error: -19 [ 1686.687429][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1686.974141][T13513] m920x_read = error: -19 [ 1686.989778][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1687.322844][T13513] m920x_read = error: -19 [ 1687.327551][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1687.397389][T19085] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1687.511363][T13513] m920x_read = error: -19 [ 1687.517019][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1687.540257][T19085] usb 4-1: device descriptor read/64, error -71 [ 1687.712436][ T5847] m920x_read = error: -19 [ 1687.716783][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1687.778129][T19085] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1687.901911][T29288] netlink: 'syz.1.6216': attribute type 1 has an invalid length. [ 1688.209332][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 195 seconds [ 1688.221061][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 195 seconds [ 1688.232841][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 195 seconds [ 1688.244745][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 195 seconds [ 1688.358776][T19528] m920x_read = error: -19 [ 1688.366512][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1688.379854][T19085] usb 4-1: device descriptor read/64, error -71 [ 1688.528769][T19085] usb usb4-port1: attempt power cycle [ 1688.560829][T19528] m920x_read = error: -19 [ 1688.576923][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1688.777735][T19528] m920x_read = error: -19 [ 1688.788341][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1688.873575][T19085] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1688.934095][T19085] usb 4-1: device descriptor read/8, error -71 [ 1689.082681][T19528] m920x_read = error: -19 [ 1689.089006][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1689.323393][T19085] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1689.372515][T29296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1689.408951][T19528] m920x_read = error: -19 [ 1689.420917][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1689.671021][ T5847] m920x_read = error: -19 [ 1689.691713][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1689.853556][T19528] m920x_read = error: -19 [ 1689.858268][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1689.876930][T29304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1690.053448][ T5847] m920x_read = error: -19 [ 1690.058992][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1690.276335][ T5847] m920x_read = error: -19 [ 1690.292125][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1690.292142][ T30] audit: type=1400 audit(3919595130.309:2867): avc: denied { getopt } for pid=29303 comm="syz.1.6221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1690.300342][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1690.611035][T13513] m920x_read = error: -19 [ 1690.617873][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1690.670900][ T30] audit: type=1400 audit(3919595130.309:2868): avc: denied { write } for pid=29303 comm="syz.1.6221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1690.838946][T29316] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1690.853266][T13513] m920x_read = error: -19 [ 1690.857683][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1690.940737][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1691.084244][T13513] m920x_read = error: -19 [ 1691.088693][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1691.167884][ T30] audit: type=1400 audit(3919595131.222:2869): avc: denied { bind } for pid=29319 comm="syz.2.6226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1691.299251][T13513] m920x_read = error: -19 [ 1691.326410][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1691.514924][ T30] audit: type=1400 audit(3919595131.243:2870): avc: denied { create } for pid=29319 comm="syz.2.6226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1691.615480][T27538] m920x_read = error: -19 [ 1691.633672][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1691.726501][T29325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1691.728908][ T30] audit: type=1400 audit(3919595131.811:2871): avc: denied { create } for pid=29324 comm="syz.2.6228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1691.774851][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1691.823479][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1691.839402][T22268] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.848596][T27538] m920x_read = error: -19 [ 1691.862798][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1691.880353][ T30] audit: type=1400 audit(3919595131.811:2872): avc: denied { write } for pid=29324 comm="syz.2.6228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1691.884096][T22268] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.920322][T22268] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.002032][T22268] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.062518][T13513] m920x_read = error: -19 [ 1692.072491][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1692.252915][T13513] m920x_read = error: -19 [ 1692.257376][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1692.362138][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 198 seconds [ 1692.374091][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 198 seconds [ 1692.386018][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 198 seconds [ 1692.398806][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 198 seconds [ 1692.452896][T27538] m920x_read = error: -19 [ 1692.457312][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1692.522857][T29335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.673195][T13513] m920x_read = error: -19 [ 1692.938619][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1692.990963][T29343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6233'. [ 1693.011456][T29343] netlink: 'syz.2.6233': attribute type 1 has an invalid length. [ 1693.019962][ T30] audit: type=1400 audit(3919595133.155:2873): avc: denied { listen } for pid=29342 comm="syz.2.6233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1693.053668][T29343] bond2: entered promiscuous mode [ 1693.059275][T29343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1693.092839][T19085] usb 4-1: device descriptor read/8, error -71 [ 1693.119731][T27538] m920x_read = error: -19 [ 1693.124107][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1693.205735][T19085] usb usb4-port1: unable to enumerate USB device [ 1693.223884][T29345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=29345 comm=syz.2.6233 [ 1693.239368][T29343] bond2: (slave bridge2): making interface the new active one [ 1693.277508][T29343] bridge2: entered promiscuous mode [ 1693.290936][T27538] m920x_read = error: -19 [ 1693.295436][ T30] audit: type=1400 audit(3919595133.449:2874): avc: denied { connect } for pid=29342 comm="syz.2.6233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1693.316827][T29343] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1693.328935][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1693.501303][T19085] m920x_read = error: -19 [ 1693.505854][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1693.939634][T29354] netlink: 'syz.4.6235': attribute type 1 has an invalid length. [ 1693.977184][T13513] m920x_read = error: -19 [ 1693.982378][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1694.295543][ T30] audit: type=1400 audit(3919595134.510:2875): avc: denied { accept } for pid=29342 comm="syz.2.6233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1694.414454][T13513] m920x_read = error: -19 [ 1694.425467][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1694.618006][ T30] audit: type=1400 audit(3919595134.835:2876): avc: denied { create } for pid=29355 comm="syz.5.6236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1694.709587][T13513] m920x_read = error: -19 [ 1694.716344][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1695.237762][ T30] audit: type=1400 audit(3919595135.476:2877): avc: denied { read } for pid=29355 comm="syz.5.6236" path="socket:[122021]" dev="sockfs" ino=122021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1696.088814][T13513] m920x_read = error: -19 [ 1696.112361][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1696.142173][ T30] audit: type=1400 audit(3919595136.432:2878): avc: denied { create } for pid=29373 comm="syz.3.6240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1696.385665][T19085] m920x_read = error: -19 [ 1696.390131][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1696.472193][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 201 seconds [ 1696.483474][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 201 seconds [ 1696.497202][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 201 seconds [ 1696.511684][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 201 seconds [ 1696.603995][T19085] m920x_read = error: -19 [ 1696.608376][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1696.823424][T19085] m920x_read = error: -19 [ 1696.861409][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1697.035380][T19085] m920x_read = error: -19 [ 1697.083651][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1697.375791][T19085] m920x_read = error: -19 [ 1697.380189][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1697.513596][T29400] binder: 29397:29400 ioctl c0306201 0 returned -14 [ 1697.642474][T19085] m920x_read = error: -19 [ 1697.693828][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1698.260760][T19085] m920x_read = error: -19 [ 1698.269669][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1698.470742][T19085] m920x_read = error: -19 [ 1698.480597][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1698.492540][T13513] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1698.698203][T29408] netlink: 'syz.3.6250': attribute type 1 has an invalid length. [ 1698.775335][T13513] usb 2-1: Using ep0 maxpacket: 16 [ 1698.833331][T13513] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1698.894549][T13513] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.907599][T19085] m920x_read = error: -19 [ 1698.926812][T19085] dvb-usb: error -19 while querying for an remote control event. [ 1699.013025][T13513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.079898][T27538] m920x_read = error: -19 [ 1699.085094][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1699.105526][T13513] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.146210][T13513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.293592][T27538] m920x_read = error: -19 [ 1699.297964][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1699.306589][T13513] usb 2-1: Product: syz [ 1699.317694][T13513] usb 2-1: Manufacturer: syz [ 1699.769832][T13513] usb 2-1: SerialNumber: syz [ 1699.965058][T27538] m920x_read = error: -19 [ 1699.969453][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1700.318835][T29433] netlink: 'syz.3.6258': attribute type 6 has an invalid length. [ 1700.574552][T13513] usb 2-1: 0:2 : does not exist [ 1700.914719][T29436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1701.104841][T19528] m920x_read = error: -19 [ 1701.130653][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1701.155263][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 204 seconds [ 1701.193450][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 204 seconds [ 1701.205115][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 204 seconds [ 1701.216894][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 204 seconds [ 1701.431591][T19528] m920x_read = error: -19 [ 1701.436710][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1701.456222][T13513] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1701.554277][T27538] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1701.611652][T19528] m920x_read = error: -19 [ 1701.645519][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1701.679311][T29444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1702.003147][T13513] usb 2-1: USB disconnect, device number 91 [ 1702.055794][T27538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1702.102672][T29453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1702.138635][T27538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.256927][T19528] m920x_read = error: -19 [ 1702.290518][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1702.300856][T27538] usb 5-1: Product: syz [ 1702.457972][T27538] usb 5-1: Manufacturer: syz [ 1702.486146][T27538] usb 5-1: SerialNumber: syz [ 1702.602438][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6262'. [ 1702.605112][T27538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1702.626453][ T792] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1702.675526][T13513] m920x_read = error: -19 [ 1702.698799][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1702.756207][T29459] bridge0: port 3(batadv0) entered disabled state [ 1702.994640][T27538] m920x_read = error: -19 [ 1703.000911][T13513] usb 5-1: USB disconnect, device number 77 [ 1703.024752][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1703.076007][T29459] bridge_slave_1: left allmulticast mode [ 1703.102206][T29459] bridge_slave_1: left promiscuous mode [ 1703.120948][T29459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.240847][T27538] m920x_read = error: -19 [ 1703.260437][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1703.712171][ T792] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1703.719927][ T792] ath9k_htc: Failed to initialize the device [ 1703.727604][T13513] usb 5-1: ath9k_htc: USB layer deinitialized [ 1703.756495][T29459] bridge_slave_0: left allmulticast mode [ 1703.771771][T29459] bridge_slave_0: left promiscuous mode [ 1703.797488][T29459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.878552][T27538] m920x_read = error: -19 [ 1703.882925][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1704.061657][T27538] m920x_read = error: -19 [ 1704.069510][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1704.304145][T27538] m920x_read = error: -19 [ 1704.336903][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1704.450906][T29481] bridge1: entered promiscuous mode [ 1704.456214][T29481] bridge1: entered allmulticast mode [ 1704.525712][T27538] m920x_read = error: -19 [ 1704.798801][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1705.147649][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1705.157174][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1705.259186][T27538] m920x_read = error: -19 [ 1705.268259][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1705.327915][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 207 seconds [ 1705.339722][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 207 seconds [ 1705.353175][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 207 seconds [ 1705.364798][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 207 seconds [ 1705.429494][ T792] m920x_read = error: -19 [ 1705.433867][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1705.558351][T29502] fuse: Unknown parameter '0x0000000000000006' [ 1705.601803][ T792] m920x_read = error: -19 [ 1705.606483][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1705.928160][ T792] m920x_read = error: -19 [ 1706.153654][T29518] netlink: 'syz.2.6279': attribute type 1 has an invalid length. [ 1706.337993][ T30] audit: type=1400 audit(3919595146.494:2879): avc: denied { bind } for pid=29493 comm="syz.1.6273" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1706.403204][ T30] audit: type=1400 audit(3919595146.494:2880): avc: denied { name_bind } for pid=29493 comm="syz.1.6273" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1706.425913][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1706.484647][ T30] audit: type=1400 audit(3919595146.494:2881): avc: denied { node_bind } for pid=29493 comm="syz.1.6273" saddr=fc00::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1706.668500][T13513] m920x_read = error: -19 [ 1706.673630][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1706.801335][ T30] audit: type=1400 audit(3919595146.798:2882): avc: denied { bind } for pid=29493 comm="syz.1.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1706.929149][ T5860] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1706.991740][ T30] audit: type=1326 audit(3919595147.187:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29493 comm="syz.1.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600759c629 code=0x7ffc0000 [ 1707.076700][ T30] audit: type=1326 audit(3919595147.187:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29493 comm="syz.1.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600759c629 code=0x7ffc0000 [ 1707.100701][T27538] m920x_read = error: -19 [ 1707.105016][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1707.115249][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 1707.143580][ T30] audit: type=1400 audit(3919595147.187:2885): avc: denied { map } for pid=29504 comm="syz.3.6276" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1707.197116][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1707.267941][T27538] m920x_read = error: -19 [ 1707.272291][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1707.387121][ T5860] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1707.439246][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.448625][T27538] m920x_read = error: -19 [ 1707.453034][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1707.463376][ T30] audit: type=1400 audit(3919595148.332:2886): avc: denied { write } for pid=29526 comm="syz.2.6281" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1707.463386][ T5860] usb 5-1: Product: syz [ 1707.533528][ T5860] usb 5-1: Manufacturer: syz [ 1707.545370][ T5860] usb 5-1: SerialNumber: syz [ 1707.563084][ T5860] usb 5-1: config 0 descriptor?? [ 1707.582801][ T5860] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 1707.609543][ T5860] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1707.637295][ T30] audit: type=1400 audit(3919595148.521:2887): avc: denied { read } for pid=29531 comm="syz.5.6282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1707.662612][T27538] m920x_read = error: -19 [ 1707.666951][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1707.684319][ T30] audit: type=1400 audit(3919595148.563:2888): avc: denied { read } for pid=29531 comm="syz.5.6282" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1707.718254][T22282] Bluetooth: (null): Invalid header checksum [ 1707.743115][T29534] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1707.782437][T29534] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1707.821145][T22268] Bluetooth: (null): Invalid header checksum [ 1707.835265][T29534] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1707.838721][ T792] m920x_read = error: -19 [ 1707.845960][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1707.847073][ T5860] usb 5-1: USB disconnect, device number 78 [ 1707.869141][T29534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1707.879754][T29534] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1707.891976][ T5860] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1707.902484][ T5860] kobil_sct 5-1:0.0: device disconnected [ 1707.920007][T29534] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1707.934865][T22268] Bluetooth: (null): Invalid header checksum [ 1708.020070][ T792] m920x_read = error: -19 [ 1708.027344][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1708.081190][T29544] FAULT_INJECTION: forcing a failure. [ 1708.081190][T29544] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.106357][T29544] CPU: 1 UID: 0 PID: 29544 Comm: syz.5.6286 Tainted: G L syzkaller #0 PREEMPT(full) [ 1708.106389][T29544] Tainted: [L]=SOFTLOCKUP [ 1708.106395][T29544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1708.106405][T29544] Call Trace: [ 1708.106412][T29544] [ 1708.106419][T29544] dump_stack_lvl+0x100/0x190 [ 1708.106451][T29544] should_fail_ex.cold+0x5/0xa [ 1708.106474][T29544] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1708.106503][T29544] should_failslab+0xc2/0x120 [ 1708.106533][T29544] __kmalloc_noprof+0xe0/0x850 [ 1708.106565][T29544] tomoyo_realpath_from_path+0xb6/0x690 [ 1708.106593][T29544] tomoyo_path_number_perm+0x23c/0x580 [ 1708.106622][T29544] ? tomoyo_path_number_perm+0x22e/0x580 [ 1708.106652][T29544] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1708.106682][T29544] ? finish_task_switch.isra.0+0x200/0xb80 [ 1708.106731][T29544] ? find_held_lock+0x2b/0x80 [ 1708.106752][T29544] ? __fget_files+0x215/0x3d0 [ 1708.106768][T29544] ? hook_file_ioctl_common+0x146/0x410 [ 1708.106798][T29544] ? __fget_files+0x21f/0x3d0 [ 1708.106819][T29544] security_file_ioctl+0xd3/0x230 [ 1708.106841][T29544] __x64_sys_ioctl+0xb7/0x210 [ 1708.106870][T29544] do_syscall_64+0x106/0xf80 [ 1708.106894][T29544] ? clear_bhb_loop+0x40/0x90 [ 1708.106917][T29544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.106935][T29544] RIP: 0033:0x7fc09ff9c629 [ 1708.106951][T29544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.106968][T29544] RSP: 002b:00007fc0a0e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.106987][T29544] RAX: ffffffffffffffda RBX: 00007fc0a0215fa0 RCX: 00007fc09ff9c629 [ 1708.106998][T29544] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000005 [ 1708.107009][T29544] RBP: 00007fc0a0e30090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.107020][T29544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.107030][T29544] R13: 00007fc0a0216038 R14: 00007fc0a0215fa0 R15: 00007ffd72c5c718 [ 1708.107056][T29544] [ 1708.364672][ T792] m920x_read = error: -19 [ 1708.369234][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1708.394658][T29544] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1708.525027][ T792] m920x_read = error: -19 [ 1708.530072][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1708.686365][ T792] m920x_read = error: -19 [ 1708.690801][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1708.759808][T29551] binder: 29550:29551 ioctl c0306201 0 returned -14 [ 1708.858570][ T792] m920x_read = error: -19 [ 1708.867537][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1709.258521][ T792] m920x_read = error: -19 [ 1709.283538][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1709.467282][ T792] m920x_read = error: -19 [ 1709.471655][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1709.488438][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 210 seconds [ 1709.499728][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 210 seconds [ 1709.511176][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 210 seconds [ 1709.522838][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 210 seconds [ 1709.539729][T22283] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.577463][T22283] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.658414][T22283] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.695682][ T792] m920x_read = error: -19 [ 1709.700030][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1709.713273][T22283] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.723834][T27601] Bluetooth: hci6: command 0x0c1a tx timeout [ 1709.790683][T27601] Bluetooth: hci0: command 0x0405 tx timeout [ 1709.857372][T27538] m920x_read = error: -19 [ 1709.861754][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1709.905081][ T792] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1710.264857][T27538] m920x_read = error: -19 [ 1710.289967][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1710.348514][T29590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6300'. [ 1710.390740][T29593] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1710.476594][T27538] m920x_read = error: -19 [ 1710.481019][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1710.555517][ T792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1710.576808][ T792] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1710.597846][ T792] usb 4-1: can't read configurations, error -71 [ 1710.720014][T13513] m920x_read = error: -19 [ 1710.730643][T13513] dvb-usb: error -19 while querying for an remote control event. [ 1711.274513][ T5847] m920x_read = error: -19 [ 1711.276025][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1711.276039][ T30] audit: type=1400 audit(3919595157.949:2897): avc: denied { sqpoll } for pid=29595 comm="syz.2.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1711.362074][ T30] audit: type=1400 audit(3919595157.949:2898): avc: denied { ioctl } for pid=29595 comm="syz.2.6303" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1711.430894][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1711.620094][ T5847] m920x_read = error: -19 [ 1711.624579][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1711.746818][T29613] SET target dimension over the limit! [ 1711.776482][ T30] audit: type=1400 audit(3919595158.863:2899): avc: denied { search } for pid=29609 comm="syz.3.6305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1711.848925][T17858] Bluetooth: hci6: command 0x0c1a tx timeout [ 1711.876594][T17858] Bluetooth: hci0: command 0x0405 tx timeout [ 1711.921502][ T5847] m920x_read = error: -19 [ 1711.926715][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1711.941382][ T9] IPVS: starting estimator thread 0... [ 1711.969236][ T30] audit: type=1400 audit(3919595158.894:2900): avc: denied { search } for pid=29609 comm="syz.3.6305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1712.078374][ T30] audit: type=1400 audit(3919595158.915:2901): avc: denied { search } for pid=29609 comm="syz.3.6305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1712.100714][ T792] m920x_read = error: -19 [ 1712.105699][T29614] IPVS: using max 72 ests per chain, 172800 per kthread [ 1712.112714][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1712.226631][ T30] audit: type=1400 audit(3919595158.968:2902): avc: denied { search } for pid=29609 comm="syz.3.6305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1712.257074][ T30] audit: type=1400 audit(3919595158.968:2903): avc: denied { audit_write } for pid=29609 comm="syz.3.6305" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1712.257175][ T9] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1712.294875][ T792] m920x_read = error: -19 [ 1712.311588][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1712.422297][ T30] audit: type=1400 audit(3919595159.125:2904): avc: denied { watch } for pid=29611 comm="syz.4.6306" path="/31/bus" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1712.465953][ T30] audit: type=1400 audit(3919595159.125:2905): avc: denied { watch_sb watch_reads } for pid=29611 comm="syz.4.6306" path="/31/bus" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1712.513843][ T792] m920x_read = error: -19 [ 1712.518214][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1712.539173][ T9] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1712.558592][ T9] usb 5-1: config 0 has no interface number 0 [ 1712.588577][ T9] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1712.652945][ T9] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1712.676937][ T9] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1712.685363][ T792] m920x_read = error: -19 [ 1712.689724][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1712.692121][T29619] FAT-fs (nullb0): bogus number of reserved sectors [ 1712.723335][T29619] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1712.727842][ T30] audit: type=1400 audit(3919595159.829:2906): avc: denied { mounton } for pid=29618 comm="syz.3.6307" path="/syzcgroup/unified/syz3" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1712.760153][ T9] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1712.777232][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.781287][T29625] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6309'. [ 1712.795354][ T9] usb 5-1: Product: syz [ 1712.809551][ T9] usb 5-1: Manufacturer: syz [ 1712.819135][ T9] usb 5-1: SerialNumber: syz [ 1712.862373][ T9] usb 5-1: config 0 descriptor?? [ 1712.923832][ T792] m920x_read = error: -19 [ 1712.928488][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1713.008475][T29635] netlink: 'syz.1.6312': attribute type 1 has an invalid length. [ 1713.123310][T28244] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1713.298421][T28244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.321905][T28244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.323019][ T792] m920x_read = error: -19 [ 1713.343085][T28244] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1713.368017][T28244] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1713.368108][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1713.404720][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input90 [ 1713.442355][T28244] usb 3-1: Manufacturer: syz [ 1713.475833][ T9] usb 5-1: USB disconnect, device number 79 [ 1713.486471][T28244] usb 3-1: config 0 descriptor?? [ 1713.580487][ T792] m920x_read = error: -19 [ 1713.584940][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1714.849552][T27601] Bluetooth: hci0: command 0x0405 tx timeout [ 1714.849578][T17858] Bluetooth: hci6: command 0x0c1a tx timeout [ 1714.875489][ T792] m920x_read = error: -19 [ 1714.879858][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1714.897248][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 213 seconds [ 1715.153383][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 213 seconds [ 1715.165051][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 213 seconds [ 1715.176705][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 213 seconds [ 1715.198508][T17178] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1715.379546][T17178] usb 2-1: Using ep0 maxpacket: 16 [ 1715.389477][ T792] m920x_read = error: -19 [ 1715.394496][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1715.550973][ T792] m920x_read = error: -19 [ 1715.555680][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1715.741571][ T792] m920x_read = error: -19 [ 1715.746272][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1715.746790][T28244] uclogic 0003:256C:006D.0042: failed retrieving Huion firmware version: -71 [ 1715.917215][ T792] m920x_read = error: -19 [ 1715.935963][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1716.117822][ T5847] m920x_read = error: -19 [ 1716.142661][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1716.179462][T17178] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1716.189579][T17178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.200711][T28244] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 1716.217437][T28244] uclogic 0003:256C:006D.0042: probe with driver uclogic failed with error -71 [ 1716.226698][T17178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1716.276867][T17178] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1716.307990][T28244] usb 3-1: USB disconnect, device number 83 [ 1716.320632][T17178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.379773][T17178] usb 2-1: Product: syz [ 1716.404829][T17178] usb 2-1: Manufacturer: syz [ 1716.420691][T17178] usb 2-1: SerialNumber: syz [ 1716.444373][T17178] usb 2-1: can't set config #1, error -71 [ 1716.491437][T17178] usb 2-1: USB disconnect, device number 92 [ 1716.751047][ T5847] m920x_read = error: -19 [ 1716.755424][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1716.798145][T17858] Bluetooth: hci0: command 0x0405 tx timeout [ 1716.881877][ T30] audit: type=1400 audit(3919595164.230:2907): avc: denied { ioctl } for pid=29662 comm="syz.4.6322" path="socket:[123085]" dev="sockfs" ino=123085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1716.932350][ T5847] m920x_read = error: -19 [ 1716.936787][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1716.957888][T29666] netlink: 'syz.5.6321': attribute type 6 has an invalid length. [ 1717.371832][ T30] audit: type=1400 audit(3919595164.744:2908): avc: denied { bind } for pid=29670 comm="syz.3.6324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1717.494129][ T5847] m920x_read = error: -19 [ 1717.633811][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1717.777557][ T30] audit: type=1400 audit(3919595165.018:2909): avc: denied { write } for pid=29669 comm="syz.2.6323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1717.857081][ T5847] m920x_read = error: -19 [ 1717.861463][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1718.010843][T28244] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1718.036002][ T5847] m920x_read = error: -19 [ 1718.043424][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1718.274342][T28244] usb 5-1: Using ep0 maxpacket: 8 [ 1718.282195][T28244] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 1718.292076][T28244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.321069][T28244] usb 5-1: config 0 descriptor?? [ 1718.388297][T27538] m920x_read = error: -19 [ 1718.392675][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1718.545108][T28244] usb 5-1: USB disconnect, device number 80 [ 1718.609649][ T5847] m920x_read = error: -19 [ 1718.614203][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1718.871380][ T5847] m920x_read = error: -19 [ 1718.876412][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1719.036047][ T5847] m920x_read = error: -19 [ 1719.036173][ T30] audit: type=1400 audit(3919595166.477:2910): avc: denied { write } for pid=29701 comm="syz.2.6333" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1719.064445][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1719.122543][ T30] audit: type=1400 audit(3919595166.582:2911): avc: denied { read write } for pid=29704 comm="syz.2.6334" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1719.234961][ T30] audit: type=1400 audit(3919595166.698:2912): avc: denied { open } for pid=29704 comm="syz.2.6334" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1719.322617][ T5847] m920x_read = error: -19 [ 1719.334769][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1719.345681][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 216 seconds [ 1719.359676][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 216 seconds [ 1719.371435][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 216 seconds [ 1719.392154][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 216 seconds [ 1719.435887][T29709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6332'. [ 1719.493064][ T5847] m920x_read = error: -19 [ 1719.497485][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1719.706530][T19528] m920x_read = error: -19 [ 1719.712002][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1719.908040][T19528] m920x_read = error: -19 [ 1719.930709][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1720.101988][T19528] m920x_read = error: -19 [ 1720.109299][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1720.198495][T29721] netlink: 'syz.3.6337': attribute type 6 has an invalid length. [ 1720.302340][T19528] m920x_read = error: -19 [ 1720.568282][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1720.683319][T29725] HÊRA: renamed from vlan0 (while UP) [ 1720.768681][ T5847] m920x_read = error: -19 [ 1720.773096][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1721.006960][ T5847] m920x_read = error: -19 [ 1721.063175][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1721.462144][ T30] audit: type=1400 audit(3919595168.652:2913): avc: denied { connect } for pid=29728 comm="syz.1.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1721.524041][T27538] m920x_read = error: -19 [ 1721.532287][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1721.598048][ T30] audit: type=1400 audit(3919595168.652:2914): avc: denied { name_connect } for pid=29728 comm="syz.1.6341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1721.650221][ T30] audit: type=1400 audit(3919595168.652:2915): avc: denied { listen } for pid=29728 comm="syz.1.6341" lport=38065 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1721.825957][T27538] m920x_read = error: -19 [ 1721.830333][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1721.881819][T29743] 9p: Bad value for 'rfdno' [ 1721.921017][ T30] audit: type=1400 audit(3919595168.652:2916): avc: denied { accept } for pid=29728 comm="syz.1.6341" lport=38065 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1722.025787][T27538] m920x_read = error: -19 [ 1722.030168][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1722.128511][ T30] audit: type=1400 audit(3919595168.652:2917): avc: denied { setopt } for pid=29728 comm="syz.1.6341" lport=38065 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1722.183987][T29750] netlink: 'syz.5.6346': attribute type 6 has an invalid length. [ 1722.560757][ T30] audit: type=1400 audit(3919595169.303:2918): avc: denied { ioctl } for pid=29737 comm="syz.3.6343" path="socket:[122863]" dev="sockfs" ino=122863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1722.740879][T27538] m920x_read = error: -19 [ 1722.747368][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1723.085108][T29758] vxfs: unable to read disk superblock at 1 [ 1723.096417][T29758] vxfs: unable to read disk superblock at 8 [ 1723.105336][T29758] vxfs: can't find superblock. [ 1723.263552][T27538] m920x_read = error: -19 [ 1723.267930][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1723.394086][T29762] netlink: 'syz.4.6350': attribute type 1 has an invalid length. [ 1723.626218][ T30] audit: type=1400 audit(3919595170.973:2919): avc: denied { write } for pid=29754 comm="syz.5.6349" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1723.658004][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 219 seconds [ 1723.677904][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 219 seconds [ 1723.691281][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 219 seconds [ 1723.710894][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 219 seconds [ 1723.811257][ T5847] m920x_read = error: -19 [ 1723.816437][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1723.924628][T29771] netlink: 'syz.1.6352': attribute type 6 has an invalid length. [ 1724.275206][T19528] m920x_read = error: -19 [ 1724.280272][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1724.569025][ T5847] m920x_read = error: -19 [ 1724.587210][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1724.748409][ T5847] m920x_read = error: -19 [ 1724.752898][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1725.129832][T29774] CIFS mount error: No usable UNC path provided in device string! [ 1725.129832][T29774] [ 1725.140219][T29774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1725.638464][T19528] m920x_read = error: -19 [ 1725.647245][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1725.677889][ T30] audit: type=1400 audit(3919595173.462:2920): avc: denied { create } for pid=29784 comm="syz.3.6355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1725.714822][ T5860] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1725.845132][T19528] m920x_read = error: -19 [ 1725.886721][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1725.985513][ T30] audit: type=1400 audit(3919595173.525:2921): avc: denied { setopt } for pid=29784 comm="syz.3.6355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1726.053121][T19528] m920x_read = error: -19 [ 1726.058088][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1726.099738][ T5860] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1726.138624][T17178] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1726.157157][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.165176][ T5860] usb 5-1: Product: syz [ 1726.187602][ T5860] usb 5-1: Manufacturer: syz [ 1726.194843][ T5860] usb 5-1: SerialNumber: syz [ 1726.214717][T19528] m920x_read = error: -19 [ 1726.217641][ T5860] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1726.222112][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1726.237170][T28244] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1726.263267][T29805] 9p: Bad value for 'rfdno' [ 1726.349092][T17178] usb 4-1: Using ep0 maxpacket: 8 [ 1726.407038][T19528] m920x_read = error: -19 [ 1726.487326][T17178] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1726.504694][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1726.504927][T29774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.522470][T29774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.716071][ T30] audit: type=1400 audit(3919595174.512:2922): avc: denied { bind } for pid=29802 comm="syz.1.6359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1726.772320][T17178] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1726.792359][T17178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.822094][T19528] usb 5-1: USB disconnect, device number 81 [ 1726.836056][T17178] usb 4-1: Product: syz [ 1726.840714][T17178] usb 4-1: Manufacturer: syz [ 1726.846849][T17178] usb 4-1: SerialNumber: syz [ 1726.875775][T17178] usb 4-1: config 0 descriptor?? [ 1726.910183][ T792] m920x_read = error: -19 [ 1726.915112][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1727.248455][ T5847] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1727.267041][T17178] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1727.288817][T17178] usb 4-1: setting power ON [ 1727.297552][T17178] dvb-usb: bulk message failed: -22 (2/0) [ 1727.307468][T17178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1727.317783][T28244] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1727.325776][T28244] ath9k_htc: Failed to initialize the device [ 1727.333277][T17178] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1727.350636][T19528] usb 5-1: ath9k_htc: USB layer deinitialized [ 1727.350884][T17178] usb 4-1: media controller created [ 1727.396131][T17178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1727.423905][ T792] m920x_read = error: -19 [ 1727.430157][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1727.431849][T17178] usb 4-1: selecting invalid altsetting 6 [ 1727.451838][T17178] usb 4-1: digital interface selection failed (-22) [ 1727.455812][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 1727.465442][T17178] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1727.478859][T17178] usb 4-1: setting power OFF [ 1727.485370][T17178] dvb-usb: bulk message failed: -22 (2/0) [ 1727.485789][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.503089][T17178] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1727.514665][ T30] audit: type=1400 audit(3919595175.405:2923): avc: denied { ioctl } for pid=29815 comm="syz.5.6361" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1727.514917][T17178] (NULL device *): no alternate interface [ 1727.605283][ T5847] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1727.641211][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.655998][ T5847] usb 2-1: Product: syz [ 1727.660267][ T5847] usb 2-1: Manufacturer: syz [ 1727.665681][T19528] m920x_read = error: -19 [ 1727.670034][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1727.680877][ T5847] usb 2-1: SerialNumber: syz [ 1727.687245][ T5847] usb 2-1: config 0 descriptor?? [ 1727.710834][ T5847] kobil_sct 2-1:0.0: required endpoints missing [ 1727.771524][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 222 seconds [ 1727.783279][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 222 seconds [ 1727.795210][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 222 seconds [ 1727.806818][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 222 seconds [ 1727.842127][ T5847] m920x_read = error: -19 [ 1727.846563][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1727.891882][T17178] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1727.939798][T17178] usb 4-1: USB disconnect, device number 118 [ 1727.984994][ T5860] usb 2-1: USB disconnect, device number 93 [ 1728.011053][ T5847] m920x_read = error: -19 [ 1728.044273][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1728.210614][ T30] audit: type=1800 audit(3919595176.130:2924): pid=29825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6362" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1728.236115][ T5847] m920x_read = error: -19 [ 1728.240482][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1728.299878][T29837] netlink: 'syz.3.6364': attribute type 6 has an invalid length. [ 1728.669518][ T30] audit: type=1400 audit(3919595176.235:2925): avc: denied { unmount } for pid=28388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1728.843395][T19528] m920x_read = error: -19 [ 1728.851991][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1729.002952][T29847] netlink: 'syz.4.6363': attribute type 1 has an invalid length. [ 1729.130795][T17178] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1729.167205][T19528] m920x_read = error: -19 [ 1729.167314][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1729.310664][T29856] usb usb8: usbfs: process 29856 (syz.3.6367) did not claim interface 0 before use [ 1729.331284][T29857] netlink: 'syz.1.6368': attribute type 1 has an invalid length. [ 1729.339709][T19528] m920x_read = error: -19 [ 1729.349087][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1729.386802][T17178] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1729.408034][T17178] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1729.425694][T29857] bond1: entered promiscuous mode [ 1729.435453][T29857] bond1: entered allmulticast mode [ 1729.452403][T17178] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1729.467906][T29857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1729.483741][T17178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.510844][T29865] 9p: Bad value for 'rfdno' [ 1729.530336][ T5847] m920x_read = error: -19 [ 1729.534702][ T5847] dvb-usb: error -19 while querying for an remote control event. [ 1729.604306][T19528] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1729.656433][ T30] audit: type=1400 audit(3919595177.642:2926): avc: denied { mount } for pid=29867 comm="syz.1.6371" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1729.690271][ T792] m920x_read = error: -19 [ 1729.694632][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1729.775894][T19528] usb 5-1: Using ep0 maxpacket: 16 [ 1729.874251][ T792] m920x_read = error: -19 [ 1729.878718][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1729.909215][ T30] audit: type=1400 audit(3919595177.800:2927): avc: denied { create } for pid=29867 comm="syz.1.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1729.929936][T19528] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1729.938096][T17178] usb 3-1: GET_CAPABILITIES returned 0 [ 1730.044874][T17178] usbtmc 3-1:16.0: can't read capabilities [ 1730.052012][ T5860] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1730.095292][ T30] audit: type=1400 audit(3919595177.852:2928): avc: denied { bind } for pid=29867 comm="syz.1.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1730.152788][T19528] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.168485][ T5847] usb 3-1: USB disconnect, device number 84 [ 1730.195238][ T30] audit: type=1400 audit(3919595178.220:2929): avc: denied { read } for pid=29867 comm="syz.1.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1730.200629][T19528] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.254723][ T5860] usb 6-1: config 0 has an invalid interface number: 87 but max is 0 [ 1730.268689][ T5860] usb 6-1: config 0 has no interface number 0 [ 1730.270694][T19528] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.284821][T19528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.293142][ T5860] usb 6-1: config 0 interface 87 has no altsetting 0 [ 1730.293168][ T792] m920x_read = error: -19 [ 1730.293188][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1730.321844][ T5860] usb 6-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 1730.331634][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.340419][ T5860] usb 6-1: Product: syz [ 1730.344704][ T5860] usb 6-1: Manufacturer: syz [ 1730.349932][ T5860] usb 6-1: SerialNumber: syz [ 1730.368152][T19528] usb 5-1: Product: syz [ 1730.368581][ T5860] usb 6-1: config 0 descriptor?? [ 1730.388164][T29880] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6372'. [ 1730.397338][T19528] usb 5-1: Manufacturer: syz [ 1730.397359][T19528] usb 5-1: SerialNumber: syz [ 1730.537112][ T792] m920x_read = error: -19 [ 1730.541565][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1730.640988][T29884] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1730.650482][ T30] audit: type=1400 audit(3919595178.682:2930): avc: denied { bind } for pid=29871 comm="syz.5.6373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1730.746686][ T792] m920x_read = error: -19 [ 1730.754190][ T792] dvb-usb: error -19 while querying for an remote control event. [ 1730.792704][T29859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.806623][T29859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.820134][ T30] audit: type=1400 audit(3919595178.871:2931): avc: denied { name_connect } for pid=29855 comm="syz.4.6369" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1730.921508][T27538] m920x_read = error: -19 [ 1730.925979][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1731.055721][T19528] usb 5-1: 0:2 : does not exist [ 1731.079885][T27538] m920x_read = error: -19 [ 1731.084352][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1731.194256][T28244] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1731.241609][T27538] m920x_read = error: -19 [ 1731.246055][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1731.336390][T28244] usb 3-1: device descriptor read/64, error -71 [ 1731.422600][T27538] m920x_read = error: -19 [ 1731.427075][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1731.565516][T28244] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1731.604468][T27538] m920x_read = error: -19 [ 1731.612571][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1731.794164][T28244] usb 3-1: device descriptor read/64, error -71 [ 1731.936818][T27538] m920x_read = error: -19 [ 1731.942060][T28244] usb usb3-port1: attempt power cycle [ 1731.957832][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1732.700614][ T792] usb 6-1: USB disconnect, device number 11 [ 1733.314535][T28175] block nbd0: Possible stuck request ffff888027d28000: control (read@0,1024B). Runtime 225 seconds [ 1733.326312][T28175] block nbd0: Possible stuck request ffff888027d28200: control (read@1024,1024B). Runtime 225 seconds [ 1733.338239][T28175] block nbd0: Possible stuck request ffff888027d28400: control (read@2048,1024B). Runtime 225 seconds [ 1733.351489][T28175] block nbd0: Possible stuck request ffff888027d28600: control (read@3072,1024B). Runtime 225 seconds [ 1733.687343][T19528] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1733.831717][T27538] m920x_read = error: -19 [ 1733.836091][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1733.944635][T19528] usb 5-1: USB disconnect, device number 82 [ 1733.973375][T29912] tmpfs: Unknown parameter 'n2rt°Zé;á÷' [ 1734.031395][T24421] udevd[24421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1734.091772][T27538] m920x_read = error: -19 [ 1734.097967][ T30] audit: type=1400 audit(3919595182.316:2932): avc: denied { shutdown } for pid=29914 comm="syz.2.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1734.118417][T29915] trusted_key: encrypted_key: master key parameter 'E~ï' is invalid [ 1734.128746][T29915] netlink: 'syz.2.6385': attribute type 10 has an invalid length. [ 1734.136944][T29915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6385'. [ 1734.146938][T29915] batman_adv: batadv0: Adding interface: vlan1 [ 1734.153074][T29915] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.178586][T29915] batman_adv: batadv0: Interface activated: vlan1 [ 1734.187776][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1734.373289][ T30] audit: type=1400 audit(3919595182.600:2933): avc: denied { create } for pid=29920 comm="syz.5.6387" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1734.398296][T19528] m920x_read = error: -19 [ 1734.425932][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1734.454515][ T30] audit: type=1400 audit(3919595182.684:2934): avc: denied { unlink } for pid=28126 comm="syz-executor" name="file2" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1734.602667][T27538] m920x_read = error: -19 [ 1734.608226][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1734.728160][ T30] audit: type=1400 audit(3919595182.978:2935): avc: denied { mounton } for pid=29936 comm="syz.2.6392" path="/proc/229/task" dev="proc" ino=123659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1734.784194][T27538] m920x_read = error: -19 [ 1734.789452][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1735.020054][ T31] INFO: task syz.0.5845:27896 blocked for more than 143 seconds. [ 1735.043885][ T31] Tainted: G L syzkaller #0 [ 1735.071595][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1735.101240][T27538] m920x_read = error: -19 [ 1735.192024][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1735.208602][ T31] task:syz.0.5845 state:D stack:28792 pid:27896 tgid:27895 ppid:27599 task_flags:0x400040 flags:0x00080002 [ 1735.222454][ T31] Call Trace: [ 1735.231956][ T31] [ 1735.241241][ T31] __schedule+0xfee/0x60e0 [ 1735.251374][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1735.278976][ T31] ? __pfx___schedule+0x10/0x10 [ 1735.324156][T28244] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1735.344640][ T31] ? find_held_lock+0x2b/0x80 [ 1735.349534][ T31] ? schedule+0x2bf/0x390 [ 1735.374900][T27538] m920x_read = error: -19 [ 1735.382414][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1735.515230][ T30] audit: type=1400 audit(3919595183.671:2936): avc: denied { mount } for pid=29947 comm="syz.1.6396" name="/" dev="hugetlbfs" ino=124600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1735.539513][ T31] schedule+0xdd/0x390 [ 1735.586900][ T31] schedule_preempt_disabled+0x13/0x30 [ 1735.599320][T28244] usb 3-1: Using ep0 maxpacket: 8 [ 1735.612165][ T31] __mutex_lock+0xc9a/0x1b90 [ 1735.633388][ T31] ? bdev_open+0x41a/0xe40 [ 1735.640502][T28244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1735.665782][ T31] ? find_held_lock+0x2b/0x80 [ 1735.683991][ T31] ? find_inode_fast+0x5e3/0x910 [ 1735.697808][T28244] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1735.708008][T19528] m920x_read = error: -19 [ 1735.712423][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1735.716819][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1735.725446][T28244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.737007][ T31] ? find_inode_fast+0x1fa/0x910 [ 1735.747776][ T31] ? bdev_open+0x41a/0xe40 [ 1735.752192][ T31] bdev_open+0x41a/0xe40 [ 1735.765808][T28244] usb 3-1: config 0 descriptor?? [ 1735.778767][ T31] ? iput+0x3a/0x40 [ 1735.787102][ T31] blkdev_open+0x34e/0x4f0 [ 1735.791586][ T31] do_dentry_open+0x6d8/0x1660 [ 1735.796858][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1735.802449][ T31] vfs_open+0x82/0x3f0 [ 1735.806562][ T31] path_openat+0x208c/0x31a0 [ 1735.811657][ T31] ? __pfx_path_openat+0x10/0x10 [ 1735.816600][ T31] do_file_open+0x20e/0x430 [ 1735.821663][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1735.826704][ T31] ? alloc_fd+0x476/0x790 [ 1735.831677][ T31] ? do_getname+0x191/0x390 [ 1735.836232][ T31] do_sys_openat2+0x10d/0x1e0 [ 1735.842984][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1735.848242][ T31] __x64_sys_openat+0x12d/0x210 [ 1735.853603][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1735.859829][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 1735.865196][ T31] do_syscall_64+0x106/0xf80 [ 1735.870247][ T31] ? clear_bhb_loop+0x40/0x90 [ 1735.875262][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.878281][T19528] m920x_read = error: -19 [ 1735.881729][ T31] RIP: 0033:0x7f9465f5cece [ 1735.886033][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1735.890596][ T31] RSP: 002b:00007f9466d88b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1735.890620][ T31] RAX: ffffffffffffffda RBX: 00007f9466d896c0 RCX: 00007f9465f5cece [ 1735.890633][ T31] RDX: 0000000000000000 RSI: 00007f9466d88c00 RDI: ffffffffffffff9c [ 1735.890646][ T31] RBP: 00007f9466d88c00 R08: 0000000000000000 R09: 0000000000000000 [ 1735.890658][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1735.890671][ T31] R13: 00007f9466216038 R14: 00007f9466215fa0 R15: 00007fffac8760e8 [ 1735.890695][ T31] [ 1735.952709][ T31] INFO: task syz.0.5845:27898 blocked for more than 144 seconds. [ 1735.962684][ T31] Tainted: G L syzkaller #0 [ 1735.969828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1735.981616][ T31] task:syz.0.5845 state:D stack:28792 pid:27898 tgid:27895 ppid:27599 task_flags:0x400040 flags:0x00080002 [ 1735.994277][ T31] Call Trace: [ 1735.997758][ T31] [ 1736.001219][ T31] __schedule+0xfee/0x60e0 [ 1736.006443][T28244] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1736.017107][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1736.022575][ T31] ? __pfx___schedule+0x10/0x10 [ 1736.027438][ T31] ? find_held_lock+0x2b/0x80 [ 1736.034476][ T31] ? schedule+0x2bf/0x390 [ 1736.038849][ T31] schedule+0xdd/0x390 [ 1736.042982][ T31] schedule_preempt_disabled+0x13/0x30 [ 1736.048447][ T31] __mutex_lock+0xc9a/0x1b90 [ 1736.053166][ T31] ? bdev_open+0x41a/0xe40 [ 1736.057589][ T31] ? find_held_lock+0x2b/0x80 [ 1736.060307][T19528] m920x_read = error: -19 [ 1736.062780][ T31] ? find_inode_fast+0x5e3/0x910 [ 1736.066988][T19528] dvb-usb: error -19 while querying for an remote control event. [ 1736.072733][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1736.086125][ T31] ? find_inode_fast+0x1fa/0x910 [ 1736.091641][ T31] ? bdev_open+0x41a/0xe40 [ 1736.096082][ T31] bdev_open+0x41a/0xe40 [ 1736.100839][ T31] ? iput+0x3a/0x40 [ 1736.104635][ T31] blkdev_open+0x34e/0x4f0 [ 1736.109537][ T31] do_dentry_open+0x6d8/0x1660 [ 1736.114309][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1736.119744][ T31] vfs_open+0x82/0x3f0 [ 1736.123813][ T31] path_openat+0x208c/0x31a0 [ 1736.128959][ T31] ? __pfx_path_openat+0x10/0x10 [ 1736.133899][ T31] do_file_open+0x20e/0x430 [ 1736.139028][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1736.144061][ T31] ? alloc_fd+0x476/0x790 [ 1736.148860][ T31] ? do_getname+0x191/0x390 [ 1736.153353][ T31] do_sys_openat2+0x10d/0x1e0 [ 1736.158571][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1736.164377][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1736.169755][ T31] ? kcov_ioctl+0x16a/0x720 [ 1736.174732][ T31] __x64_sys_openat+0x12d/0x210 [ 1736.179575][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1736.185460][ T31] ? kcov_ioctl+0x16a/0x720 [ 1736.189960][ T31] do_syscall_64+0x106/0xf80 [ 1736.196987][ T31] ? clear_bhb_loop+0x40/0x90 [ 1736.199363][T19528] usb 3-1: USB disconnect, device number 88 [ 1736.201680][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.201709][ T31] RIP: 0033:0x7f9465f5cece [ 1736.201725][ T31] RSP: 002b:00007f94641f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1736.201746][ T31] RAX: ffffffffffffffda RBX: 00007f94641f66c0 RCX: 00007f9465f5cece [ 1736.238661][ T31] RDX: 0000000000000000 RSI: 00007f94641f5c00 RDI: ffffffffffffff9c [ 1736.247300][ T31] RBP: 00007f94641f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1736.251834][T27538] m920x_read = error: -19 [ 1736.256147][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1736.265226][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1736.274317][ T31] R13: 00007f9466216128 R14: 00007f9466216090 R15: 00007fffac8760e8 [ 1736.284478][ T31] [ 1736.288784][ T31] [ 1736.288784][ T31] Showing all locks held in the system: [ 1736.335974][ T31] 1 lock held by rcu_preempt/16: [ 1736.340934][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1736.357315][ T31] 1 lock held by khungtaskd/31: [ 1736.362197][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1736.374587][ T31] 2 locks held by getty/5562: [ 1736.379274][ T31] #0: ffff8880327330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1736.389598][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1736.400186][ T31] 3 locks held by kworker/1:4/19528: [ 1736.405931][ T31] #0: ffff8880232a2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1736.417201][ T31] #1: ffffc90000127d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1736.428879][ T31] #2: ffff88802b515198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1736.430577][T27538] m920x_read = error: -19 [ 1736.438286][ T31] 1 lock held by udevd/24796: [ 1736.444028][T27538] dvb-usb: error -19 while querying for an remote control event. [ 1736.447348][ T31] #0: ffff8880277ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1736.465764][ T31] 1 lock held by syz.0.5845/27896: [ 1736.471336][ T31] #0: ffff8880277ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1736.481174][ T31] 1 lock held by syz.0.5845/27898: [ 1736.486270][ T31] #0: ffff8880277ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1736.496308][ T31] [ 1736.499097][ T31] ============================================= [ 1736.499097][ T31] [ 1736.508113][ T31] NMI backtrace for cpu 0 [ 1736.508132][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.508155][ T31] Tainted: [L]=SOFTLOCKUP [ 1736.508161][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.508172][ T31] Call Trace: [ 1736.508179][ T31] [ 1736.508186][ T31] dump_stack_lvl+0x100/0x190 [ 1736.508220][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1736.508240][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1736.508271][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1736.508299][ T31] sys_info+0x141/0x190 [ 1736.508319][ T31] watchdog+0xd25/0x1050 [ 1736.508350][ T31] ? __pfx_watchdog+0x10/0x10 [ 1736.508375][ T31] ? __kthread_parkme+0x18c/0x230 [ 1736.508403][ T31] ? kthread+0x13a/0x450 [ 1736.508420][ T31] ? __pfx_watchdog+0x10/0x10 [ 1736.508441][ T31] kthread+0x370/0x450 [ 1736.508456][ T31] ? __pfx_kthread+0x10/0x10 [ 1736.508475][ T31] ret_from_fork+0x754/0xd80 [ 1736.508494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1736.508514][ T31] ? __switch_to+0x7b4/0x1120 [ 1736.508535][ T31] ? __pfx_kthread+0x10/0x10 [ 1736.508550][ T31] ret_from_fork_asm+0x1a/0x30 [ 1736.508578][ T31] [ 1736.508585][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1736.612735][ T792] m920x_read = error: -19 [ 1736.615790][ C1] NMI backtrace for cpu 1 [ 1736.615805][ C1] CPU: 1 UID: 0 PID: 792 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.615825][ C1] Tainted: [L]=SOFTLOCKUP [ 1736.615831][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.615841][ C1] Workqueue: events dvb_usb_read_remote_control [ 1736.615861][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1736.615883][ C1] Code: a3 8f fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 bd 9f 19 06 e8 28 04 fc fc eb a2 e8 b1 04 [ 1736.615897][ C1] RSP: 0018:ffffc900041e76d0 EFLAGS: 00000002 [ 1736.615908][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1736.615917][ C1] RDX: 00000000000003fd RSI: ffffffff8578fbb0 RDI: ffffffff9b49d940 [ 1736.615926][ C1] RBP: ffffffff9b49d900 R08: 0000000000000001 R09: 000000000000001f [ 1736.615935][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1736.615943][ C1] R13: 0000000000000020 R14: fffffbfff3693b7a R15: dffffc0000000000 [ 1736.615953][ C1] FS: 0000000000000000(0000) GS:ffff888124448000(0000) knlGS:0000000000000000 [ 1736.615968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1736.615977][ C1] CR2: 00007f60077e82f8 CR3: 00000000983d5000 CR4: 00000000003526f0 [ 1736.615986][ C1] DR0: 0000000000000519 DR1: 00000000000001f8 DR2: 000000000000008d [ 1736.615994][ C1] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1736.616002][ C1] Call Trace: [ 1736.616007][ C1] [ 1736.616015][ C1] wait_for_lsr+0x13a/0x210 [ 1736.616030][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1736.616048][ C1] serial8250_console_write+0xdb9/0x1900 [ 1736.616067][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1736.616084][ C1] ? lock_acquire+0x1cf/0x380 [ 1736.616107][ C1] console_flush_one_record+0x790/0xe50 [ 1736.616126][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1736.616145][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1736.616164][ C1] console_unlock+0x103/0x260 [ 1736.616179][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1736.616194][ C1] ? lock_acquire+0x100/0x380 [ 1736.616217][ C1] vprintk_emit+0x407/0x6b0 [ 1736.616233][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1736.616249][ C1] ? usb_control_msg+0x39d/0x4a0 [ 1736.616266][ C1] ? kfree+0x1f6/0x6b0 [ 1736.616280][ C1] ? __asan_memset+0x23/0x50 [ 1736.616298][ C1] _printk+0xcf/0x110 [ 1736.616311][ C1] ? __pfx__printk+0x10/0x10 [ 1736.616324][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 1736.616344][ C1] ? m920x_rc_core_query+0xe0/0x500 [ 1736.616359][ C1] m920x_rc_core_query.cold+0x13/0x30 [ 1736.616378][ C1] ? rcu_is_watching+0x12/0xc0 [ 1736.616394][ C1] dvb_usb_read_remote_control+0xdd/0x1b0 [ 1736.616408][ C1] ? rcu_is_watching+0x12/0xc0 [ 1736.616422][ C1] process_one_work+0x9d7/0x1920 [ 1736.616440][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1736.616456][ C1] ? __pfx_dvb_usb_read_remote_control+0x10/0x10 [ 1736.616472][ C1] worker_thread+0x5da/0xe40 [ 1736.616489][ C1] ? kthread+0x13a/0x450 [ 1736.616500][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1736.616513][ C1] kthread+0x370/0x450 [ 1736.616530][ C1] ? __pfx_kthread+0x10/0x10 [ 1736.616543][ C1] ret_from_fork+0x754/0xd80 [ 1736.616557][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1736.616571][ C1] ? __switch_to+0x7b4/0x1120 [ 1736.616586][ C1] ? __pfx_kthread+0x10/0x10 [ 1736.616599][ C1] ret_from_fork_asm+0x1a/0x30 [ 1736.616620][ C1] [ 1736.616862][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1736.616876][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.616898][ T31] Tainted: [L]=SOFTLOCKUP [ 1736.616903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.616913][ T31] Call Trace: [ 1736.616919][ T31] [ 1736.616925][ T31] dump_stack_lvl+0x100/0x190 [ 1736.616952][ T31] vpanic+0x552/0x970 [ 1736.616968][ T31] ? __pfx_vpanic+0x10/0x10 [ 1736.616985][ T31] ? rcu_is_watching+0x12/0xc0 [ 1736.617007][ T31] panic+0xd1/0xe0 [ 1736.617021][ T31] ? __pfx_panic+0x10/0x10 [ 1736.617039][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1736.617061][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1736.617082][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1736.617101][ T31] ? watchdog.cold+0x198/0x1ca [ 1736.617118][ T31] ? watchdog+0xd35/0x1050 [ 1736.617140][ T31] watchdog.cold+0x1a9/0x1ca [ 1736.617164][ T31] ? __pfx_watchdog+0x10/0x10 [ 1736.617185][ T31] ? __kthread_parkme+0x18c/0x230 [ 1736.617208][ T31] ? kthread+0x13a/0x450 [ 1736.617221][ T31] ? __pfx_watchdog+0x10/0x10 [ 1736.617240][ T31] kthread+0x370/0x450 [ 1736.617254][ T31] ? __pfx_kthread+0x10/0x10 [ 1736.617270][ T31] ret_from_fork+0x754/0xd80 [ 1736.617286][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1736.617303][ T31] ? __switch_to+0x7b4/0x1120 [ 1736.617322][ T31] ? __pfx_kthread+0x10/0x10 [ 1736.617338][ T31] ret_from_fork_asm+0x1a/0x30 [ 1736.617366][ T31] [ 1736.620177][ T31] Kernel Offset: disabled