last executing test programs: 12.161259597s ago: executing program 0 (id=1207): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000100), 0x0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x200, 0x5, 0x370}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, 0x0, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) mknod$loop(0x0, 0x6000, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43]}, 0x35) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x400, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x24, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x5}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_MAX_P={0x8, 0x4, 0x75}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x5, 0x3c}}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) 11.868613327s ago: executing program 0 (id=1208): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r1, &(0x7f0000003740)=[{&(0x7f0000001440)='deny;', 0x5}], 0x1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x8, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0xf, 0x81, 0x1, {0x22, 0x572}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0x27, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xa1, 0x0, 0x4, 0x20, 0x9}, 0x0, 0x0}) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYBLOB="b4698b5615996416f8fc2d64d8dcfb1ada182ec066a052d1ff4cba067c5f470a42e9aebc41edc44366c4c75c744932667e7ef280d303a2e4f84eb2c33355af26888b354340290583644ea50fda8051e5b16d76b2f67e380d07b9e93d6ffa1a1a88393e0ec0410e69e88970e610c14e30fda33e8d3012a234f2cc1e3b77270d4baf0680f6b40d634fb878722e3e1b3cc21fc453266392ac06f1a8921f61b3f20aa8336d5d79b2ef3c83d036715ca4bd943199fd74c8cab1", @ANYRESDEC=r0, @ANYRES8=r2, @ANYRES16, @ANYRES8=r2, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX=r2], 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x8, "387e93966e2f9271"}, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 11.265896076s ago: executing program 3 (id=1212): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000000, 0x2, 0x3, 0x1ff}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) bind$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x80005d0a, 0x4000, 0x2, 0x0, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001500)={'syzkaller0\x00', 0x400}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, &(0x7f0000000ac0)={"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"}) 11.161946489s ago: executing program 1 (id=1214): chdir(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x2000000, 0x8, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1, 0x3c, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) modify_ldt$write(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) timer_create(0x7, &(0x7f0000000240)={0x0, 0x4, 0x1, @thr={&(0x7f0000000000)="2276f7e8ee5139511385497ff5c795830cdab6ad7a17044ba8dc15fff5673101bbd7e95f2e885de9dfe4b3707a7514fba6b59d9ea140317a1e0b954b5dc04d693974b054bbd97f56a6d5dd71b403f065608fdc0a1726306d6e4c53dc6cbdca6eb652a0fada11b2a6b9cf0bc343687d660e153b67a6aad4a5d5a3a6c3c86e9377707648b262ca8fec05b3fe72bdeb91cb8ea7336a59439da9b1acdb458a45c9c7eb0263d7d3c367b86e16c6", &(0x7f00000001c0)="94ebafdd4f1aa3eb31ac7b56017fbeae344a61ccbce35eebc9484a8c8e059f62ef3354b7763995000d772a7cbd3b5db063892d1983c497eceb5b84108a17f678fc6b9736828641028e0e285e0b85df56a3a757640e26c108797bf3f524642245dbb0368ba50a4e3d736ff4e5a6046f8f39576410d739"}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000140)=""/98, 0x62) 9.501469947s ago: executing program 1 (id=1216): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x51f, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}], 0x3c) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'pimreg\x00', 0x1}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x2, 0x4) 8.865340065s ago: executing program 4 (id=1219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @private, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.500063212s ago: executing program 3 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() msgget$private(0x0, 0xafb0e20fef6483ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff9) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x2400801c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.260206901s ago: executing program 1 (id=1221): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0xfffffff7, 0x101040) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x80000000002, 0xfe04fc739ce7b33a) r1 = dup(r0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x88, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000c00)="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", 0x13a) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f01e, 0x19}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x18000) close(0x3) socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000380)="4c000000150000000000000005cd2ff8baff0f020187ac1414aaa69d35a2cca847453fabca1bac1414aabd7c493872f7311a4bf9caff673e000003c48f93ee0d03000000461e000000000000dcc0eb15bee83c3641a31e9ea2cb7c16afcd5df2819126d10ff1b232699bb7bb06946a3398c6e819a6419d3d114527fa836ef02fa4d1fb17b29302e05709538ffb8751af5300"/155, 0x4c}], 0x1}, 0x8801) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5f9341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xc3cbcccc00703a16) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f00000001c0), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x5c00}) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x6ec002, 0x0) 7.561649501s ago: executing program 3 (id=1222): cachestat(0xffffffffffffffff, &(0x7f0000000000)={0xfff, 0xc208}, &(0x7f0000000080), 0x0) 7.49325931s ago: executing program 0 (id=1223): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x10, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500", 0x1a}, {&(0x7f0000000580)}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x129240, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3c741dd17c18e8438ef2a565e04603323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000000000050000000000000001"], 0x74}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.492602815s ago: executing program 3 (id=1224): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x10, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500", 0x1a}, {&(0x7f0000000580)}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x129240, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3c741dd17c18e8438ef2a565e04603323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000000000050000000000000001"], 0x74}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.669708421s ago: executing program 1 (id=1226): openat$nullb(0xffffffffffffff9c, 0x0, 0x65e642, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$l2tp(0x2, 0x2, 0x73) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x8, 0x800) kexec_load(0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x41, 0x41000000}], 0x0) 6.226015121s ago: executing program 4 (id=1228): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000140)={{0x9, 0x7}, {0x5, 0x6}, 0x2, 0x7}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async, rerun: 32) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 32) 5.697260054s ago: executing program 1 (id=1229): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000000000000000000000000000000055f055a547a2b8e2b76ddc729c4154340542f8e10c5f85fd51e8f537439a84e377ffa8608e1f612be9df4d0045212de6ad08ffdfbdbf1d70a9d4100c62503bd0"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7f, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x339, &(0x7f0000000380)={0x0, 0x1ffffc, 0x8000, 0x8800001, 0x12, 0x0, r3}, &(0x7f0000000180), 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) writev(r8, &(0x7f0000000b40)=[{&(0x7f0000000a00)="2efa", 0x2}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x365b80, 0x0) 5.69624745s ago: executing program 4 (id=1231): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2, 0x0, 0x0) 5.258749521s ago: executing program 2 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "e56fe88bc10ee417ea4986e1f3ef903e19d9f3aae9ec9ef9f6cc3ec91028a5b1", "9e0226a2328866c246e0e150ab8aaa75", {"913493ad662400cb72edc1acf6d4e118", "2c6ad5345092f3c87bb2db3b7e868330"}}}}}}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x235, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 4.43059448s ago: executing program 0 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getgid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3, 0x64, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 4.407024601s ago: executing program 4 (id=1234): cachestat(0xffffffffffffffff, &(0x7f0000000000)={0xfff, 0xc208}, &(0x7f0000000080), 0x0) 4.3342379s ago: executing program 2 (id=1235): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7f00) 3.837138863s ago: executing program 4 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local}, &(0x7f0000000400)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r3, r0, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg2\x00'}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x11) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x8, 0x5ad8, 0x4291, 0xd86f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x90, 0x6, [{{0x9, 0x4, 0x72, 0x0, 0x0, 0x34, 0x3a, 0xcf}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 3.131409058s ago: executing program 0 (id=1237): socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900"], 0x110}}, 0x40040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffee8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6], 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) 3.097950394s ago: executing program 3 (id=1238): chdir(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x2000000, 0x8, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1, 0x3c, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) modify_ldt$write(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000140)=""/98, 0x62) 3.033273378s ago: executing program 2 (id=1239): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x4, 0x0, "423a29d7899989b0c22ca8b87d4378d51944af3919a35f5341b46b21640c9dc8e7f32ba8e20ef4d68e30ce518e850de9e84f207fcf2bed5e057143fba2fa94", 0x25}, 0x60) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x4, 0xb, 0x7, "72a8cfdf0b9a17c074d46ed4ceb242cb7e81e0c596c75fffe54de25e780469f7697711b2e8c85c227fc0933174e98382877667a729afcd8679dc3ea5be2227", 0x7}, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) 2.016949782s ago: executing program 0 (id=1240): r0 = socket(0x40000000015, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000d80), &(0x7f0000000200)=0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r3, 0x4, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_usb_connect$uac1(0x3, 0x94, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0xf0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}, [@processing_unit={0x8, 0x24, 0x7, 0x3, 0x2, 0x5, '\n'}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x3}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, 0x3, [0x6, 0x4, 0xb], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xbc, 0x66, 0x8, {0x7, 0x25, 0x1, 0x1, 0x3, 0x3000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x8, 0xdf, {0x7, 0x25, 0x1, 0x80, 0x41, 0x8}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xf, 0x9, 0x0, 0x40, 0x2d}, 0x125, &(0x7f0000000600)=ANY=[], 0x5, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc09}}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x2b, &(0x7f0000000800)=@string={0x2b, 0x3, "f7cab8e2c6ba919fe1617e1cfc422cd7f4d364fedd8440f8aaa88710bb98707891557bb7ce88ce501b"}}, {0xb4, &(0x7f0000000d80)=ANY=[]}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x7, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) r5 = syz_usb_connect(0x5000000, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)="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", 0x422}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}}], 0x1, 0x0, &(0x7f0000000480)={r6, r7+60000000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.015470579s ago: executing program 2 (id=1241): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x1, 0x0, 0x8000, 0x21, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x1, 'netpci0\x00', {}, 0xfff}) 2.008546704s ago: executing program 1 (id=1242): chdir(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x2000000, 0x8, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1, 0x3c, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) modify_ldt$write(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) timer_create(0x7, &(0x7f0000000240)={0x0, 0x4, 0x1, @thr={&(0x7f0000000000)="2276f7e8ee5139511385497ff5c795830cdab6ad7a17044ba8dc15fff5673101bbd7e95f2e885de9dfe4b3707a7514fba6b59d9ea140317a1e0b954b5dc04d693974b054bbd97f56a6d5dd71b403f065608fdc0a1726306d6e4c53dc6cbdca6eb652a0fada11b2a6b9cf0bc343687d660e153b67a6aad4a5d5a3a6c3c86e9377707648b262ca8fec05b3fe72bdeb91cb8ea7336a59439da9b1acdb458a45c9c7eb0263d7d3c367b86e16c6", &(0x7f00000001c0)="94ebafdd4f1aa3eb31ac7b56017fbeae344a61ccbce35eebc9484a8c8e059f62ef3354b7763995000d772a7cbd3b5db063892d1983c497eceb5b84108a17f678fc6b9736828641028e0e285e0b85df56a3a757640e26c108797bf3f524642245dbb0368ba50a4e3d736ff4e5a6046f8f39576410d739"}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000140)=""/98, 0x62) 737.457513ms ago: executing program 2 (id=1243): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, 0x0) 585.48708ms ago: executing program 4 (id=1244): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x880, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r2, 0x0, 0x6, 0x80000000}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000980)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000008000000000ee4fe5067406b838d15fcfcaae6ce3c669c849c25e7494883a79048ce005ab4ceb98d8d386f83f0764622b227f919590783aaa7c17a9e017dafc2102be619eb4f9544b29f5ecd189805f1a03d870ed42328048801201f53dcc7ba0c6ada0c598d58e909d54d99d05789236c5c41ce967ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) 150.695326ms ago: executing program 3 (id=1245): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r2, &(0x7f0000002180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xc, 0x2, 0x5, 0xf, 0x2, 0x3e, 0xe7d26f7, 0x65, 0x38, 0x212, 0x0, 0x7, 0x20, 0x1, 0x7, 0x4, 0x8001}, [{0x5, 0xfffffffe, 0x1, 0x3, 0x9, 0x9, 0x5}]}, 0x58) getpriority(0x2, r3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_pts(r2, 0xd91ac8f4132012cd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x80}, &(0x7f0000000100), &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000f30000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) read$FUSE(r6, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0}, 0xfffffef0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x11, 0x8, &(0x7f0000002b40)=ANY=[@ANYBLOB="1d4f6fffa9468fa89e3933630b796005d9a930d66671bc87f2c4c71913fed88722e3a3896218c83bed659ce98f83b86d5337c3f62f703cb6f53eec4c50074d773d61fd0957da2dddee78e8db59b7af5be96342d7a45cad4372bc376e9f8c930316b1c9c98f06e8f4657eed5bc98b8a9de0df023bb4b38e95d2ab0d3d3fec5331febac821e853a04878b94646b67807f8727ed657a0b0285b55cadcc44220695ee7cf5f0edea80a5c6c1ffdfb932b44fbe970712494cffe3d577b8378c3409cc60f7b11cf7f094a30598597b73d4fc7e8eb3b81bc4677a0e014b9a882e866834cc75d6ffcbfcdce8d8e4dec7d85", @ANYRES64=r5, @ANYBLOB="4116bbfbb9fdde73087829db8c06512688e66fa01d5ea996df7d0800000000000000ecc47f5030abe9ab0627516e9e838b53533075e33c6233875d6bbd5ddcb25bc5201a901d130001154585ccc8af24bff946920068f1a92c0aa7c8e6e89a99bb952263e1eb9c84315ce2aebabedf9be93a9f23e026c0452347ba505d3f000000004ace18f1b50a81b15ce2924ad201e9fb08f197227fb6012b5fc99937468445bc6c46ecc862a69d2a2cf6ff59748b42137c02a58847739eb04aa6adb513", @ANYRESHEX=0x0, @ANYRES16=r4, @ANYBLOB="5cd5b27b8b65b285ef65993fc09c8e0f65d6b06b1be15c889684526b56b04b31011ddcde03dc809c792f7f8a0460f8d13d23401d9be7a6a1c2c34d75", @ANYRES16=r7, @ANYRES64, @ANYRESDEC=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x45, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r9, 0x7) 0s ago: executing program 2 (id=1246): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.4.908'. [ 290.694652][ T9421] nbd: must specify at least one socket [ 290.780096][ T5890] usb usb1-port1: unable to enumerate USB device [ 290.799778][ T9431] FAULT_INJECTION: forcing a failure. [ 290.799778][ T9431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.831930][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.2.910 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 290.831954][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 290.831963][ T9431] Call Trace: [ 290.831969][ T9431] [ 290.831976][ T9431] dump_stack_lvl+0x16c/0x1f0 [ 290.832002][ T9431] should_fail_ex+0x512/0x640 [ 290.832026][ T9431] _copy_from_user+0x2e/0xd0 [ 290.832050][ T9431] get_timespec64+0x8b/0x240 [ 290.832072][ T9431] ? __pfx_get_timespec64+0x10/0x10 [ 290.832093][ T9431] ? arch_do_signal_or_restart+0x211/0x7d0 [ 290.832121][ T9431] __x64_sys_io_pgetevents+0x19a/0x550 [ 290.832139][ T9431] ? __pfx___x64_sys_io_pgetevents+0x10/0x10 [ 290.832166][ T9431] ? rcu_is_watching+0x12/0xc0 [ 290.832192][ T9431] do_syscall_64+0xcd/0x260 [ 290.832216][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.832233][ T9431] RIP: 0033:0x7fec5a98e969 [ 290.832246][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.832262][ T9431] RSP: 002b:00007fec5b72b038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 290.832278][ T9431] RAX: ffffffffffffffda RBX: 00007fec5abb6080 RCX: 00007fec5a98e969 [ 290.832289][ T9431] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00007fec5b6f1000 [ 290.832298][ T9431] RBP: 00007fec5b72b090 R08: 0000200000000700 R09: 0000000000000000 [ 290.832308][ T9431] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 290.832317][ T9431] R13: 0000000000000000 R14: 00007fec5abb6080 R15: 00007ffc463ed738 [ 290.832340][ T9431] [ 290.899888][ T5893] m920x_read = error: -19 [ 290.902445][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.149618][ T5858] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 291.255349][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 291.329620][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 291.343830][ T5858] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 291.357888][ T5858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.388729][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.403140][ T5858] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.413462][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.423269][ T5858] usb 2-1: Product: syz [ 291.427459][ T5858] usb 2-1: Manufacturer: syz [ 291.432821][ T5858] usb 2-1: SerialNumber: syz [ 291.544950][ T5890] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 291.564007][ T5893] m920x_read = error: -19 [ 291.568392][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 291.679631][ T9447] loop6: detected capacity change from 0 to 524287999 [ 291.729861][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 291.751383][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 291.763428][ T9447] netlink: 'syz.4.916': attribute type 5 has an invalid length. [ 291.772961][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 291.839264][ T5893] m920x_read = error: -19 [ 291.844057][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 291.854646][ T5890] usb 1-1: config 1 interface 0 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.933113][ T5890] usb 1-1: config 1 interface 0 has no altsetting 0 [ 291.949301][ T5858] usb 2-1: 0:2 : does not exist [ 291.967530][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 292.059091][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.077413][ T5890] usb 1-1: Product: Щ [ 292.082194][ T5893] m920x_read = error: -19 [ 292.086615][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 292.100353][ T5890] usb 1-1: Manufacturer: 費М瑨嚗æ€â“¬á‘»ïŽ°ï«à¥„໋뷄鎕馢쨉듚ꚪ諭ÿ싻쯞䄑ﰺꦿ疠㄀å«è€‡ï€ ÂŸì§—ʚ횹䰇î²â©‚ꟳ뜴çšâŽŒå†‹ïžŸè»§é³¢é¿žå§¨ê·¶è»å»‚겈벥郳㳊á®ï–¥ã¥¹â…žãŽ€ãº†ç¶‚á¨é±ã©„è’ꉊ䫠콱䧱䉶êŒîˆ–ퟌ蒸㙖æ€ê’ƒ [ 292.169032][ T9434] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 292.179914][ T9434] PKCS7: Only support pkcs7_signedData type [ 292.232599][ T9434] veth0_macvtap: left promiscuous mode [ 292.268492][ T5890] usb 1-1: SerialNumber: à° [ 292.290542][ T1203] m920x_read = error: -19 [ 292.294863][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 292.460608][ T1203] m920x_read = error: -19 [ 292.475794][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 292.592860][ T9450] netlink: 'syz.4.917': attribute type 4 has an invalid length. [ 292.637615][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 292.637631][ T30] audit: type=1400 audit(1746299554.623:1056): avc: denied { map } for pid=9449 comm="syz.4.917" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.676998][ T5858] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 292.699710][ T1203] m920x_read = error: -19 [ 292.704075][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 292.731304][ T5858] usb 2-1: USB disconnect, device number 40 [ 292.756837][ T9429] netlink: 'syz.0.911': attribute type 8 has an invalid length. [ 292.804012][ T5890] usbhid 1-1:1.0: can't add hid device: -71 [ 292.813366][ T30] audit: type=1400 audit(1746299554.643:1057): avc: denied { create } for pid=9451 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 292.834604][ T5890] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 292.851936][ T5890] usb 1-1: USB disconnect, device number 35 [ 292.900453][ T1203] m920x_read = error: -19 [ 292.905049][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 293.070675][ T5890] m920x_read = error: -19 [ 293.075691][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 293.109634][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 293.269721][ T1203] m920x_read = error: -19 [ 293.280137][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 293.295763][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 293.328083][ T9462] netlink: 'syz.1.921': attribute type 12 has an invalid length. [ 293.338311][ T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 293.346923][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 293.358160][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 293.368472][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 293.396141][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 293.406490][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.551823][ T9466] FAULT_INJECTION: forcing a failure. [ 293.551823][ T9466] name failslab, interval 1, probability 0, space 0, times 0 [ 293.564740][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.0.922 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 293.564762][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 293.564769][ T9466] Call Trace: [ 293.564774][ T9466] [ 293.564778][ T9466] dump_stack_lvl+0x16c/0x1f0 [ 293.564795][ T9466] should_fail_ex+0x512/0x640 [ 293.564809][ T9466] ? __kvmalloc_node_noprof+0x122/0x600 [ 293.564826][ T9466] should_failslab+0xc2/0x120 [ 293.564837][ T9466] __kvmalloc_node_noprof+0x135/0x600 [ 293.564852][ T9466] ? __pfx___mutex_lock+0x10/0x10 [ 293.564866][ T9466] ? nf_hook_entries_grow+0x285/0x860 [ 293.564885][ T9466] ? nf_hook_entries_grow+0x285/0x860 [ 293.564899][ T9466] nf_hook_entries_grow+0x285/0x860 [ 293.564914][ T9466] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 293.564929][ T9466] __nf_register_net_hook+0x1cd/0x730 [ 293.564947][ T9466] nf_register_net_hook+0x109/0x160 [ 293.564964][ T9466] nf_register_net_hooks+0x5d/0xd0 [ 293.564981][ T9466] nf_ct_netns_do_get+0x389/0x620 [ 293.564999][ T9466] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 293.565015][ T9466] ? xt_find_match+0x1f1/0x290 [ 293.565028][ T9466] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 293.565043][ T9466] nf_ct_netns_get+0x39/0x150 [ 293.565052][ T9466] helper_mt_check+0x8b/0x190 [ 293.565065][ T9466] ? __pfx_helper_mt_check+0x10/0x10 [ 293.565078][ T9466] xt_check_match+0x283/0xa50 [ 293.565092][ T9466] ? __pfx_xt_check_match+0x10/0x10 [ 293.565105][ T9466] ? xt_find_match+0x1f6/0x290 [ 293.565124][ T9466] ? xt_find_match+0x1f6/0x290 [ 293.565139][ T9466] find_check_entry.constprop.0+0x317/0x9b0 [ 293.565157][ T9466] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 293.565174][ T9466] ? kasan_quarantine_put+0x10a/0x240 [ 293.565189][ T9466] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.565204][ T9466] ? kfree+0x2b6/0x4d0 [ 293.565217][ T9466] ? translate_table+0xba1/0x1720 [ 293.565233][ T9466] translate_table+0xc98/0x1720 [ 293.565251][ T9466] ? __pfx_translate_table+0x10/0x10 [ 293.565264][ T9466] ? xt_alloc_table_info+0x3e/0xa0 [ 293.565279][ T9466] do_ipt_set_ctl+0x570/0xae0 [ 293.565292][ T9466] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 293.565306][ T9466] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 293.565319][ T9466] ? sockopt_release_sock+0x52/0x60 [ 293.565330][ T9466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.565343][ T9466] ? sockopt_release_sock+0x52/0x60 [ 293.565360][ T9466] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 293.565373][ T9466] nf_setsockopt+0x8a/0xf0 [ 293.565384][ T9466] ip_setsockopt+0xcb/0xf0 [ 293.565399][ T9466] tcp_setsockopt+0xa4/0x100 [ 293.565415][ T9466] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 293.565428][ T9466] do_sock_setsockopt+0x221/0x470 [ 293.565440][ T9466] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 293.565460][ T9466] __sys_setsockopt+0x1a0/0x230 [ 293.565479][ T9466] __x64_sys_setsockopt+0xbd/0x160 [ 293.565494][ T9466] ? do_syscall_64+0x91/0x260 [ 293.565507][ T9466] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.565519][ T9466] do_syscall_64+0xcd/0x260 [ 293.565533][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.565543][ T9466] RIP: 0033:0x7f77acf8e969 [ 293.565552][ T9466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.565562][ T9466] RSP: 002b:00007f77adddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.565572][ T9466] RAX: ffffffffffffffda RBX: 00007f77ad1b6160 RCX: 00007f77acf8e969 [ 293.565579][ T9466] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 293.565584][ T9466] RBP: 00007f77adddc090 R08: 0000000000000410 R09: 0000000000000000 [ 293.565590][ T9466] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 293.565596][ T9466] R13: 0000000000000000 R14: 00007f77ad1b6160 R15: 00007fff4dd69928 [ 293.565609][ T9466] [ 293.566833][ T9466] xt_helper: cannot load conntrack support for proto=2 [ 293.896466][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.069185][ T1203] m920x_read = error: -19 [ 294.076302][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 294.097235][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.109109][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.239695][ T1203] m920x_read = error: -19 [ 294.244187][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 294.407886][ T9] usb 5-1: GET_CAPABILITIES returned 59 [ 294.409712][ T1203] m920x_read = error: -19 [ 294.413616][ T9] usbtmc 5-1:16.0: can't read capabilities [ 294.417848][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 294.962122][ T1203] m920x_read = error: -19 [ 294.999218][ T9] usb 5-1: USB disconnect, device number 28 [ 295.170988][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 295.378631][ T5893] m920x_read = error: -19 [ 295.383083][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 295.957482][ T5893] m920x_read = error: -19 [ 295.964011][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 296.129970][ T5893] m920x_read = error: -19 [ 296.153625][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 296.688741][ T1203] m920x_read = error: -19 [ 296.785019][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 296.959743][ T971] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 297.119758][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 297.138389][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.182384][ T971] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.214427][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.328429][ T971] usb 1-1: config 0 descriptor?? [ 297.372974][ T971] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 298.676109][ T1203] m920x_read = error: -19 [ 298.717278][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 298.889630][ T1203] m920x_read = error: -19 [ 298.894039][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 298.948937][ T9511] netlink: 696 bytes leftover after parsing attributes in process `syz.1.935'. [ 299.408031][ T1203] m920x_read = error: -19 [ 299.423251][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 299.435002][ T5893] usb 1-1: USB disconnect, device number 36 [ 299.621250][ T1203] m920x_read = error: -19 [ 299.625737][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 299.626160][ T9517] netlink: 'syz.1.936': attribute type 1 has an invalid length. [ 299.641310][ T9517] netlink: 224 bytes leftover after parsing attributes in process `syz.1.936'. [ 299.809977][ T5893] m920x_read = error: -19 [ 299.879621][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 300.156563][ T1203] m920x_read = error: -19 [ 300.751974][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 300.946448][ T1203] m920x_read = error: -19 [ 300.973439][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 301.160016][ T1203] m920x_read = error: -19 [ 301.188631][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 302.300256][ T1203] m920x_read = error: -19 [ 302.308865][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 302.370859][ T9548] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 302.377404][ T9548] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.471617][ T9548] vhci_hcd vhci_hcd.0: Device attached [ 302.481720][ T1203] m920x_read = error: -19 [ 302.486076][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 302.524335][ T9549] vhci_hcd: connection closed [ 302.524759][ T36] vhci_hcd: stop threads [ 302.533751][ T36] vhci_hcd: release socket [ 302.542571][ T36] vhci_hcd: disconnect device [ 302.627174][ T9541] [U]  [ 302.641857][ T5858] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 302.649950][ T1203] m920x_read = error: -19 [ 302.660831][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 302.829613][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 302.858298][ T5858] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 302.859890][ T1203] m920x_read = error: -19 [ 302.870848][ T5858] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 302.888989][ T5858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 302.999415][ T5858] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 303.013199][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 303.049740][ T9563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.069808][ T5858] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 303.089608][ T5858] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.106524][ T5858] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.115677][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.199821][ T1203] m920x_read = error: -19 [ 303.204760][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 303.264379][ T30] audit: type=1400 audit(1746299565.253:1058): avc: denied { setopt } for pid=9568 comm="syz.3.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.334880][ T5858] usb 5-1: GET_CAPABILITIES returned 59 [ 303.345818][ T5858] usbtmc 5-1:16.0: can't read capabilities [ 303.380318][ T971] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 303.384708][ T1203] m920x_read = error: -19 [ 303.393060][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 303.561725][ T1203] m920x_read = error: -19 [ 303.565811][ T5858] usb 5-1: USB disconnect, device number 29 [ 303.572063][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 303.590079][ T5889] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 303.651460][ T971] usb 2-1: device descriptor read/64, error -71 [ 303.730092][ T1203] m920x_read = error: -19 [ 303.739031][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 303.761001][ T30] audit: type=1400 audit(1746299565.743:1059): avc: denied { load_policy } for pid=9574 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 303.785056][ T9579] SELinux: failed to load policy [ 303.797771][ T9579] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 303.805841][ T9579] netlink: 236 bytes leftover after parsing attributes in process `syz.0.953'. [ 303.879570][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 303.886362][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 303.898368][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 303.909106][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 303.909883][ T1203] m920x_read = error: -19 [ 303.923218][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 303.925761][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 303.940190][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.952155][ T5889] usb 3-1: config 0 descriptor?? [ 303.958601][ T9571] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 303.969701][ T971] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 304.099610][ T5893] m920x_read = error: -19 [ 304.103982][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 304.119745][ T971] usb 2-1: device descriptor read/64, error -71 [ 304.179772][ T5889] usb 3-1: USB disconnect, device number 45 [ 304.240679][ T971] usb usb2-port1: attempt power cycle [ 304.269906][ T5893] m920x_read = error: -19 [ 304.277075][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 304.465511][ T5893] m920x_read = error: -19 [ 304.473683][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 304.589768][ T971] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 304.630216][ T971] usb 2-1: device descriptor read/8, error -71 [ 304.639790][ T1203] m920x_read = error: -19 [ 304.644221][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 304.819610][ T1203] m920x_read = error: -19 [ 304.831671][ T30] audit: type=1326 audit(1746299566.803:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 304.856145][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 304.864550][ T30] audit: type=1326 audit(1746299566.803:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 304.899571][ T971] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 305.033230][ T1203] m920x_read = error: -19 [ 305.037594][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 305.054689][ T30] audit: type=1326 audit(1746299566.803:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 305.079034][ T30] audit: type=1326 audit(1746299566.803:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 305.110114][ T971] usb 2-1: device descriptor read/8, error -71 [ 305.153363][ T30] audit: type=1326 audit(1746299566.803:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 305.198795][ T30] audit: type=1326 audit(1746299566.803:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 305.226598][ T5893] m920x_read = error: -19 [ 305.230688][ T971] usb usb2-port1: unable to enumerate USB device [ 305.231193][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 305.248024][ T30] audit: type=1326 audit(1746299566.803:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 305.275814][ T30] audit: type=1326 audit(1746299566.803:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7ffc0000 [ 305.399619][ T5893] m920x_read = error: -19 [ 305.404021][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 305.559259][ T9603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 305.565767][ T9603] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.573522][ T5893] m920x_read = error: -19 [ 305.587533][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 305.627139][ T9603] vhci_hcd vhci_hcd.0: Device attached [ 305.701604][ T9604] vhci_hcd: connection closed [ 305.701814][ T7701] vhci_hcd: stop threads [ 305.713772][ T7701] vhci_hcd: release socket [ 305.718246][ T7701] vhci_hcd: disconnect device [ 305.759676][ T1203] m920x_read = error: -19 [ 305.764095][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 306.189662][ T5893] m920x_read = error: -19 [ 306.194061][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 306.361965][ T5893] m920x_read = error: -19 [ 306.366335][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 306.578421][ T5893] m920x_read = error: -19 [ 306.586056][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 306.838449][ T5893] m920x_read = error: -19 [ 306.843158][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 307.008713][ T9626] block device autoloading is deprecated and will be removed. [ 307.017939][ T9626] bio_check_eod: 2 callbacks suppressed [ 307.017969][ T9626] syz.0.966: attempt to access beyond end of device [ 307.017969][ T9626] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 307.237250][ T5893] m920x_read = error: -19 [ 307.241906][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 307.333191][ T9611] syz.2.963 (9611): drop_caches: 2 [ 307.359596][ T5889] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 307.410024][ T5893] m920x_read = error: -19 [ 307.416559][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 307.509580][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 307.537233][ T5889] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 307.545605][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 307.571856][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.589867][ T5893] m920x_read = error: -19 [ 307.610104][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 307.636529][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 307.668139][ T5889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 307.690170][ T971] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 307.701118][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.715713][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.740602][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.769874][ T5893] m920x_read = error: -19 [ 307.774217][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 307.858898][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.005929][ T5889] usb 5-1: GET_CAPABILITIES returned 59 [ 308.073685][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.115970][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 308.226373][ T5893] m920x_read = error: -19 [ 308.231023][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 308.250253][ T971] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 308.262171][ T5889] usb 5-1: USB disconnect, device number 30 [ 308.280345][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.305858][ T971] usb 2-1: config 0 descriptor?? [ 308.399767][ T5893] m920x_read = error: -19 [ 308.404133][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 308.579975][ T5893] m920x_read = error: -19 [ 308.595289][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 308.640352][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 308.640367][ T30] audit: type=1326 audit(1746299570.623:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 308.802842][ T971] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x5 [ 308.829242][ T5893] m920x_read = error: -19 [ 308.847583][ T971] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 308.867608][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 308.905416][ T30] audit: type=1326 audit(1746299570.623:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.106545][ T971] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 309.114395][ T971] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 309.120239][ T5893] m920x_read = error: -19 [ 309.122241][ T971] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -5 [ 309.257063][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 309.265369][ T30] audit: type=1326 audit(1746299570.623:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.304821][ T30] audit: type=1326 audit(1746299570.623:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.397096][ T30] audit: type=1326 audit(1746299570.623:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.459681][ T5893] m920x_read = error: -19 [ 309.464021][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 309.495434][ T30] audit: type=1326 audit(1746299570.623:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.549292][ T30] audit: type=1326 audit(1746299570.623:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.586859][ T30] audit: type=1326 audit(1746299570.623:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acf8e969 code=0x7ffc0000 [ 309.614386][ T30] audit: type=1326 audit(1746299570.623:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f77acf907fc code=0x7ffc0000 [ 309.637895][ T30] audit: type=1326 audit(1746299570.623:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f77acf90734 code=0x7ffc0000 [ 309.661984][ T5893] m920x_read = error: -19 [ 309.666300][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 309.850546][ T5893] m920x_read = error: -19 [ 310.480530][ T9] usb 2-1: USB disconnect, device number 45 [ 310.699552][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 310.881210][ T58] m920x_read = error: -19 [ 310.897840][ T58] dvb-usb: error -19 while querying for an remote control event. [ 310.967828][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 311.004820][ T9680] FAULT_INJECTION: forcing a failure. [ 311.004820][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 311.049251][ T9680] CPU: 0 UID: 0 PID: 9680 Comm: syz.4.981 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 311.049280][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.049290][ T9680] Call Trace: [ 311.049296][ T9680] [ 311.049303][ T9680] dump_stack_lvl+0x16c/0x1f0 [ 311.049329][ T9680] should_fail_ex+0x512/0x640 [ 311.049350][ T9680] ? __kvmalloc_node_noprof+0x122/0x600 [ 311.049378][ T9680] should_failslab+0xc2/0x120 [ 311.049396][ T9680] __kvmalloc_node_noprof+0x135/0x600 [ 311.049421][ T9680] ? __nf_hook_entries_try_shrink+0x15f/0x400 [ 311.049457][ T9680] ? __nf_hook_entries_try_shrink+0x15f/0x400 [ 311.049481][ T9680] __nf_hook_entries_try_shrink+0x15f/0x400 [ 311.049515][ T9680] __nf_unregister_net_hook+0x2e5/0x680 [ 311.049544][ T9680] nf_unregister_net_hooks+0x11b/0x160 [ 311.049572][ T9680] ? __pfx_nft_synproxy_obj_destroy+0x10/0x10 [ 311.049593][ T9680] nf_synproxy_ipv4_fini+0x6c/0x80 [ 311.049611][ T9680] nft_synproxy_do_destroy+0x201/0x2c0 [ 311.049634][ T9680] nft_obj_destroy+0x72/0x190 [ 311.049655][ T9680] __nft_release_table+0xe88/0x1430 [ 311.049673][ T9680] ? synchronize_rcu_expedited+0x3b9/0x460 [ 311.049700][ T9680] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 311.049728][ T9680] ? __pfx___nft_release_table+0x10/0x10 [ 311.049757][ T9680] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 311.049790][ T9680] nft_rcv_nl_event+0x4dc/0x6c0 [ 311.049813][ T9680] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 311.049834][ T9680] ? nfulnl_rcv_nl_event+0x64/0x270 [ 311.049864][ T9680] notifier_call_chain+0xb9/0x410 [ 311.049886][ T9680] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 311.049907][ T9680] blocking_notifier_call_chain+0x69/0xa0 [ 311.049933][ T9680] netlink_release+0x186b/0x2020 [ 311.049956][ T9680] ? netlink_release+0x1de/0x2020 [ 311.049977][ T9680] ? __pfx_netlink_release+0x10/0x10 [ 311.049997][ T9680] ? __pfx_locks_remove_file+0x10/0x10 [ 311.050024][ T9680] __sock_release+0xb0/0x270 [ 311.050043][ T9680] ? __pfx_sock_close+0x10/0x10 [ 311.050058][ T9680] sock_close+0x1c/0x30 [ 311.050073][ T9680] __fput+0x3ff/0xb70 [ 311.050097][ T9680] fput_close_sync+0x118/0x260 [ 311.050117][ T9680] ? __pfx_fput_close_sync+0x10/0x10 [ 311.050134][ T9680] ? dnotify_flush+0x79/0x4c0 [ 311.050157][ T9680] __x64_sys_close+0x8b/0x120 [ 311.050177][ T9680] do_syscall_64+0xcd/0x260 [ 311.050199][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.050215][ T9680] RIP: 0033:0x7f3269d8e969 [ 311.050229][ T9680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.050244][ T9680] RSP: 002b:00007f326ab51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 311.050260][ T9680] RAX: ffffffffffffffda RBX: 00007f3269fb5fa0 RCX: 00007f3269d8e969 [ 311.050276][ T9680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 311.050286][ T9680] RBP: 00007f326ab51090 R08: 0000000000000000 R09: 0000000000000000 [ 311.050295][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.050304][ T9680] R13: 0000000000000000 R14: 00007f3269fb5fa0 R15: 00007ffcce885c88 [ 311.050328][ T9680] [ 311.079774][ T58] m920x_read = error: -19 [ 311.083090][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.088239][ T58] dvb-usb: error -19 while querying for an remote control event. [ 311.536375][ T5859] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 311.549930][ T58] m920x_read = error: -19 [ 311.562802][ T58] dvb-usb: error -19 while querying for an remote control event. [ 311.564297][ T5859] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 311.622884][ T5859] usb 4-1: USB disconnect, device number 24 [ 311.629621][ T9694] sg_write: process 611 (syz.2.984) changed security contexts after opening file descriptor, this is not allowed. [ 311.655678][ T9695] loop6: detected capacity change from 0 to 524287999 [ 311.710338][ T9694] xt_hashlimit: overflow, try lower: 17288/0 [ 311.740959][ T58] m920x_read = error: -19 [ 311.745322][ T58] dvb-usb: error -19 while querying for an remote control event. [ 311.932751][ T58] m920x_read = error: -19 [ 311.937440][ T58] dvb-usb: error -19 while querying for an remote control event. [ 311.937504][ T5859] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 312.114917][ T58] m920x_read = error: -19 [ 312.160090][ T58] dvb-usb: error -19 while querying for an remote control event. [ 312.276156][ T5859] usb 4-1: config 0 has no interfaces? [ 312.283277][ T5859] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.302530][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.342309][ T5859] usb 4-1: config 0 descriptor?? [ 312.360018][ T58] m920x_read = error: -19 [ 312.364363][ T58] dvb-usb: error -19 while querying for an remote control event. [ 312.529772][ T58] m920x_read = error: -19 [ 312.534742][ T58] dvb-usb: error -19 while querying for an remote control event. [ 312.634044][ T58] usb 4-1: USB disconnect, device number 25 [ 312.730014][ T1203] m920x_read = error: -19 [ 312.734526][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 312.899614][ T1203] m920x_read = error: -19 [ 312.904049][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 313.070085][ T58] m920x_read = error: -19 [ 313.075136][ T58] dvb-usb: error -19 while querying for an remote control event. [ 313.109659][ T5893] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 313.894356][ T1203] m920x_read = error: -19 [ 313.898941][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 314.049992][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 314.069736][ T58] m920x_read = error: -19 [ 314.074356][ T5893] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.088615][ T58] dvb-usb: error -19 while querying for an remote control event. [ 314.108281][ T5893] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 314.129884][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.137940][ T5893] usb 2-1: Product: syz [ 314.159459][ T5893] usb 2-1: Manufacturer: syz [ 314.201022][ T5893] usb 2-1: SerialNumber: syz [ 314.209666][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 314.219597][ T5893] usb 2-1: config 0 descriptor?? [ 314.259638][ T58] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 314.269765][ T5893] m920x_read = error: -19 [ 314.274485][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 314.402835][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 314.413938][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 314.435445][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 314.460729][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 314.469969][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.478228][ T9] usb 3-1: Product: syz [ 314.482597][ T9] usb 3-1: Manufacturer: syz [ 314.494078][ T9] usb 3-1: SerialNumber: syz [ 314.500710][ T9] usb 3-1: config 0 descriptor?? [ 314.506295][ T9715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.539693][ T5893] m920x_read = error: -19 [ 314.544086][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 314.553769][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.564760][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.574883][ T58] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 314.585067][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.610661][ T58] usb 4-1: config 0 descriptor?? [ 314.710616][ T5893] m920x_read = error: -19 [ 314.715122][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 314.733290][ T9] usb 3-1: USB disconnect, device number 46 [ 314.879644][ T5893] m920x_read = error: -19 [ 314.884098][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 315.036737][ T58] cm6533_jd 0003:0D8C:0022.000A: item fetching failed at offset 4/5 [ 315.046055][ T58] cm6533_jd 0003:0D8C:0022.000A: parse failed [ 315.052308][ T5893] m920x_read = error: -19 [ 315.056747][ T58] cm6533_jd 0003:0D8C:0022.000A: probe with driver cm6533_jd failed with error -22 [ 315.066353][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 315.516376][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.590444][ T58] m920x_read = error: -19 [ 315.634701][ T58] dvb-usb: error -19 while querying for an remote control event. [ 315.645016][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.847118][ T58] m920x_read = error: -19 [ 315.865868][ T58] dvb-usb: error -19 while querying for an remote control event. [ 315.867815][ T971] usb 2-1: USB disconnect, device number 46 [ 315.941998][ T9741] syz.4.994: attempt to access beyond end of device [ 315.941998][ T9741] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 316.251897][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 316.251913][ T30] audit: type=1400 audit(1746299578.243:1174): avc: denied { read } for pid=9717 comm="syz.3.990" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 316.295175][ T30] audit: type=1400 audit(1746299578.273:1175): avc: denied { open } for pid=9717 comm="syz.3.990" path="/208/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 316.310381][ T9736] syz.2.995 (9736): drop_caches: 2 [ 316.389089][ T30] audit: type=1400 audit(1746299578.273:1176): avc: denied { append } for pid=9743 comm="syz.0.996" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 316.413281][ T30] audit: type=1400 audit(1746299578.283:1177): avc: denied { ioctl } for pid=9717 comm="syz.3.990" path="/208/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 316.441987][ T9736] syz.2.995 (9736): drop_caches: 2 [ 316.453809][ T9718] nfs4: Unknown parameter 'dev/fuse' [ 316.463578][ T9] usb 4-1: USB disconnect, device number 26 [ 316.467404][ T58] m920x_read = error: -19 [ 316.475471][ T58] dvb-usb: error -19 while querying for an remote control event. [ 316.478886][ T30] audit: type=1400 audit(1746299578.443:1178): avc: denied { mounton } for pid=9717 comm="syz.3.990" path="/208/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 316.706326][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.029458][ T58] m920x_read = error: -19 [ 317.034133][ T58] dvb-usb: error -19 while querying for an remote control event. [ 317.161136][ T30] audit: type=1400 audit(1746299579.133:1179): avc: denied { execute } for pid=9751 comm="syz.2.999" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 317.199652][ T58] m920x_read = error: -19 [ 317.281895][ T9753] ALSA: mixer_oss: invalid OSS volume '' [ 317.309879][ T58] dvb-usb: error -19 while querying for an remote control event. [ 317.614293][ T9768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.700353][ T5893] m920x_read = error: -19 [ 317.729565][ T9] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 317.743947][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 317.770365][ T9760] loop6: detected capacity change from 0 to 524287999 [ 317.806323][ T971] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 317.929957][ T58] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 317.985057][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 317.998778][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 33216, setting to 64 [ 318.016844][ T5893] m920x_read = error: -19 [ 318.021387][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.032063][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 318.033141][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 318.041489][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.059568][ T971] usb 3-1: Using ep0 maxpacket: 32 [ 318.079614][ T971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.089295][ T9] usb 2-1: Product: syz [ 318.098303][ T971] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 318.114888][ T9] usb 2-1: Manufacturer: syz [ 318.124972][ T9] usb 2-1: SerialNumber: syz [ 318.139609][ T971] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 318.151571][ T9] usb 2-1: config 0 descriptor?? [ 318.159115][ T9761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.169115][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.180876][ T9] usb 2-1: selecting invalid altsetting 0 [ 318.194072][ T971] usb 3-1: Product: syz [ 318.203904][ T971] usb 3-1: Manufacturer: syz [ 318.216648][ T971] usb 3-1: SerialNumber: syz [ 318.220800][ T58] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 318.325616][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.333833][ T5893] m920x_read = error: -19 [ 318.344345][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 318.359719][ T58] usb 1-1: Product: syz [ 318.364015][ T58] usb 1-1: Manufacturer: syz [ 318.369397][ T58] usb 1-1: SerialNumber: syz [ 318.386539][ T58] usb 1-1: config 0 descriptor?? [ 318.408067][ T58] usb 1-1: interface 1 not found [ 318.408569][ T9] usb 2-1: USB disconnect, device number 47 [ 318.463859][ T971] usb 3-1: Not enough endpoints found in device, aborting! [ 318.521848][ T58] m920x_read = error: -19 [ 318.533796][ T58] dvb-usb: error -19 while querying for an remote control event. [ 318.665356][ T5889] usb 3-1: USB disconnect, device number 47 [ 318.719626][ T5893] m920x_read = error: -19 [ 318.736436][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 318.910716][ T5893] m920x_read = error: -19 [ 319.006740][ T30] audit: type=1400 audit(1746299580.983:1180): avc: denied { create } for pid=9782 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 319.039195][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 319.097865][ T30] audit: type=1400 audit(1746299581.023:1181): avc: denied { ioctl } for pid=9782 comm="syz.3.1006" path="socket:[29264]" dev="sockfs" ino=29264 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 319.200532][ T5893] m920x_read = error: -19 [ 319.389636][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 319.799930][ T5893] m920x_read = error: -19 [ 320.062565][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 320.162469][ T9790] netlink: 'syz.2.1008': attribute type 10 has an invalid length. [ 320.202153][ T30] audit: type=1400 audit(1746299582.183:1182): avc: denied { write } for pid=9789 comm="syz.3.1009" name="task" dev="proc" ino=29281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 320.218030][ T9790] team0: Port device wlan1 added [ 320.234929][ T5893] m920x_read = error: -19 [ 320.239318][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 320.285558][ T30] audit: type=1400 audit(1746299582.233:1183): avc: denied { add_name } for pid=9789 comm="syz.3.1009" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 320.481736][ T5893] m920x_read = error: -19 [ 320.486135][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 320.534149][ T9797] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 320.534149][ T9797] The task syz.2.1008 (9797) triggered the difference, watch for misbehavior. [ 320.675375][ T5893] m920x_read = error: -19 [ 320.683903][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 320.809388][ T9808] xt_HMARK: proto mask must be zero with L3 mode [ 320.850428][ T58] m920x_read = error: -19 [ 320.854769][ T58] dvb-usb: error -19 while querying for an remote control event. [ 320.990225][ T9817] veth0_vlan: entered allmulticast mode [ 321.002906][ T9817] veth0_vlan: left promiscuous mode [ 321.009662][ T9817] veth0_vlan: entered promiscuous mode [ 321.074367][ T58] m920x_read = error: -19 [ 321.156384][ T58] dvb-usb: error -19 while querying for an remote control event. [ 321.269574][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 321.308050][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 321.308064][ T30] audit: type=1400 audit(1746299583.293:1186): avc: denied { ioctl } for pid=9825 comm="syz.2.1016" path="socket:[29784]" dev="sockfs" ino=29784 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 321.343946][ T9826] input: syz0 as /devices/virtual/input/input26 [ 321.378347][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1016'. [ 321.380084][ T58] usb 1-1: USB disconnect, device number 37 [ 321.412035][ T1203] m920x_read = error: -19 [ 321.423126][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 321.458801][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 321.462614][ T9] usb 4-1: config 127 has an invalid interface number: 195 but max is 1 [ 321.462635][ T9] usb 4-1: config 127 has an invalid interface number: 242 but max is 1 [ 321.462652][ T9] usb 4-1: config 127 has no interface number 0 [ 321.462665][ T9] usb 4-1: config 127 has no interface number 1 [ 321.462695][ T9] usb 4-1: config 127 interface 195 has no altsetting 0 [ 321.462711][ T9] usb 4-1: config 127 interface 242 has no altsetting 0 [ 321.486920][ T9] usb 4-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=3e.d0 [ 321.486944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.486961][ T9] usb 4-1: Product: syz [ 321.486993][ T9] usb 4-1: Manufacturer: syz [ 321.487006][ T9] usb 4-1: SerialNumber: syz [ 321.621831][ T58] m920x_read = error: -19 [ 321.621854][ T58] dvb-usb: error -19 while querying for an remote control event. [ 321.782554][ T1203] m920x_read = error: -19 [ 321.782575][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 321.822148][ T9] usb 4-1: USB disconnect, device number 27 [ 321.949610][ T1203] m920x_read = error: -19 [ 321.949633][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 322.110533][ T1203] m920x_read = error: -19 [ 322.118712][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 322.136653][ T9826] delete_channel: no stack [ 322.331107][ T1203] m920x_read = error: -19 [ 322.335575][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 322.498381][ T9837] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1019'. [ 322.598971][ T30] audit: type=1400 audit(1746299584.583:1187): avc: denied { bind } for pid=9833 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 322.631115][ T58] m920x_read = error: -19 [ 322.635472][ T58] dvb-usb: error -19 while querying for an remote control event. [ 322.693924][ T30] audit: type=1400 audit(1746299584.643:1188): avc: denied { listen } for pid=9833 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 322.727105][ T30] audit: type=1400 audit(1746299584.643:1189): avc: denied { accept } for pid=9833 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 322.767987][ T30] audit: type=1400 audit(1746299584.663:1190): avc: denied { ioctl } for pid=9841 comm="syz.0.1020" path="socket:[29356]" dev="sockfs" ino=29356 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 323.054917][ T58] m920x_read = error: -19 [ 323.061008][ T58] dvb-usb: error -19 while querying for an remote control event. [ 323.225611][ T9850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 323.235363][ T9850] nbd: must specify at least one socket [ 323.239823][ T58] m920x_read = error: -19 [ 323.621744][ T9852] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 323.627583][ T58] dvb-usb: error -19 while querying for an remote control event. [ 323.826672][ T30] audit: type=1400 audit(1746299585.813:1191): avc: denied { setopt } for pid=9855 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.142158][ T58] m920x_read = error: -19 [ 324.146526][ T58] dvb-usb: error -19 while querying for an remote control event. [ 324.628081][ T9859] loop4: detected capacity change from 0 to 524255232 [ 324.649853][ T30] audit: type=1400 audit(1746299586.633:1192): avc: denied { write } for pid=9858 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.771897][ T5893] m920x_read = error: -19 [ 324.776305][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 325.152059][ T58] m920x_read = error: -19 [ 325.156464][ T58] dvb-usb: error -19 while querying for an remote control event. [ 325.565787][ T5893] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 326.048217][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 326.060617][ T9876] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 326.079612][ T5889] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 326.133334][ T58] m920x_read = error: -19 [ 326.143463][ T58] dvb-usb: error -19 while querying for an remote control event. [ 326.155557][ T30] audit: type=1400 audit(1746299588.143:1193): avc: denied { read } for pid=9875 comm="syz.1.1029" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 326.206878][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 326.220028][ T30] audit: type=1400 audit(1746299588.143:1194): avc: denied { open } for pid=9875 comm="syz.1.1029" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 326.248760][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.269574][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 326.269668][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.286206][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 326.298451][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 326.298852][ T5893] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 326.327370][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.327394][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.336840][ T5889] usb 3-1: Product: syz [ 326.351421][ T58] m920x_read = error: -19 [ 326.356885][ T58] dvb-usb: error -19 while querying for an remote control event. [ 326.369962][ T5889] usb 3-1: Manufacturer: syz [ 326.374615][ T5889] usb 3-1: SerialNumber: syz [ 326.374833][ T5893] usb 4-1: config 0 descriptor?? [ 326.400379][ T5889] usb 3-1: config 0 descriptor?? [ 326.423213][ T5889] gspca_main: spca500-2.14.0 probing 046d:0900 [ 326.508155][ T30] audit: type=1400 audit(1746299588.493:1195): avc: denied { ioctl } for pid=9883 comm="syz.1.1032" path="socket:[29536]" dev="sockfs" ino=29536 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 326.539921][ T58] m920x_read = error: -19 [ 326.544371][ T58] dvb-usb: error -19 while querying for an remote control event. [ 326.599597][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 326.658143][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.666811][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.712628][ T58] m920x_read = error: -19 [ 326.717056][ T58] dvb-usb: error -19 while querying for an remote control event. [ 326.819132][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 326.873253][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 326.876455][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.882347][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.882369][ T9] usb 5-1: Product: syz [ 326.882382][ T9] usb 5-1: Manufacturer: syz [ 326.882397][ T9] usb 5-1: SerialNumber: syz [ 326.884420][ T9] usb 5-1: config 0 descriptor?? [ 326.896453][ T5890] m920x_read = error: -19 [ 327.416442][ T5889] gspca_spca500: reg write: error -32 [ 327.442797][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 327.444720][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 327.461140][ T5889] gspca_spca500: reg write: error -32 [ 327.467534][ T5889] gspca_spca500: reg write: error -32 [ 327.469913][ T5893] usb 4-1: USB disconnect, device number 28 [ 327.484141][ T5889] gspca_spca500: reg write: error -32 [ 327.492479][ T5889] gspca_spca500: reg write: error -32 [ 327.500493][ T5889] gspca_spca500: reg write: error -32 [ 327.506280][ T5889] gspca_spca500: reg write: error -32 [ 327.515632][ T5889] gspca_spca500: reg write: error -32 [ 327.542713][ T5889] gspca_spca500: reg write: error -32 [ 327.548563][ T5889] gspca_spca500: reg write: error -32 [ 327.558676][ T5889] gspca_spca500: reg write: error -32 [ 327.567656][ T5889] gspca_spca500: reg write: error -32 [ 327.569597][ T58] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 327.573946][ T5889] gspca_spca500: reg write: error -32 [ 327.590446][ T5889] gspca_spca500: reg write: error -32 [ 327.619588][ T5890] m920x_read = error: -19 [ 327.623962][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 327.694454][ T9901] netlink: 'syz.1.1035': attribute type 1 has an invalid length. [ 327.751424][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 327.760228][ T58] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 327.784946][ T58] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 327.816615][ T58] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 327.827087][ T5893] m920x_read = error: -19 [ 327.839556][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 328.019613][ T5893] m920x_read = error: -19 [ 328.085990][ T58] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 328.099642][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 328.120731][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 328.129343][ T9] sq905c 5-1:0.0: Get version command failed [ 328.137693][ T9] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 328.138208][ T58] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 328.169628][ T58] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.187096][ T58] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.205785][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.289914][ T5890] m920x_read = error: -19 [ 328.294400][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 328.399715][ T5893] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 328.679782][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 328.689613][ T5890] m920x_read = error: -19 [ 328.694029][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 328.711684][ T5893] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 328.752716][ T5893] usb 2-1: config 0 has no interface number 0 [ 328.763657][ T58] usb 1-1: GET_CAPABILITIES returned 59 [ 328.788862][ T58] usbtmc 1-1:16.0: can't read capabilities [ 328.805735][ T5893] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.879771][ T5893] usb 2-1: config 0 interface 85 has no altsetting 0 [ 328.920036][ T58] m920x_read = error: -19 [ 328.925142][ T58] dvb-usb: error -19 while querying for an remote control event. [ 328.937507][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 328.949046][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.033126][ T58] usb 1-1: USB disconnect, device number 38 [ 329.065336][ T5893] usb 2-1: Product: syz [ 329.101848][ T5890] m920x_read = error: -19 [ 329.131240][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 329.143313][ T5893] usb 2-1: Manufacturer: syz [ 329.147925][ T5893] usb 2-1: SerialNumber: syz [ 329.162715][ T5893] usb 2-1: config 0 descriptor?? [ 329.318772][ T30] audit: type=1400 audit(1746299591.283:1196): avc: denied { connect } for pid=9910 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 329.338639][ T5890] m920x_read = error: -19 [ 329.351978][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 329.366496][ T9] usb 5-1: USB disconnect, device number 31 [ 329.537240][ T58] m920x_read = error: -19 [ 329.541973][ T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 329.549632][ T58] dvb-usb: error -19 while querying for an remote control event. [ 330.027635][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 330.037139][ T24] usb 4-1: config 0 has no interface number 0 [ 330.043827][ T5893] appletouch 2-1:0.85: Geyser mode initialized. [ 330.050606][ T58] m920x_read = error: -19 [ 330.054999][ T58] dvb-usb: error -19 while querying for an remote control event. [ 330.070448][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 330.080856][ T5893] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input27 [ 330.094244][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.104779][ T24] usb 4-1: Product: syz [ 330.109771][ T24] usb 4-1: Manufacturer: syz [ 330.114394][ T24] usb 4-1: SerialNumber: syz [ 330.147473][ T24] usb 4-1: config 0 descriptor?? [ 330.260170][ T5893] m920x_read = error: -19 [ 330.269985][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 330.559904][ T5893] m920x_read = error: -19 [ 330.564600][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 330.720449][ T9937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.737486][ T9937] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 330.745593][ T9937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1044'. [ 330.757119][ T5893] m920x_read = error: -19 [ 330.774936][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 331.060809][ T9938] loop6: detected capacity change from 0 to 524287999 [ 331.091423][ T5893] m920x_read = error: -19 [ 331.108173][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 331.281834][ T5893] m920x_read = error: -19 [ 331.298401][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 331.337835][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 331.346435][ T24] usb 4-1: Please update to version 0.2 or newer [ 331.401698][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.410424][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.429778][ T24] usb 4-1: USB disconnect, device number 29 [ 331.502080][ T5893] m920x_read = error: -19 [ 331.507831][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 331.569561][ T5889] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 331.723078][ T24] m920x_read = error: -19 [ 331.726204][ T9] usb 2-1: USB disconnect, device number 48 [ 331.754396][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 331.791601][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 331.812388][ T24] dvb-usb: error -19 while querying for an remote control event. [ 331.815701][ T5889] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 331.919263][ T5889] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 331.928493][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.956854][ T5889] usb 5-1: Product: syz [ 331.964605][ T5889] usb 5-1: Manufacturer: syz [ 331.969678][ T5889] usb 5-1: SerialNumber: syz [ 332.081157][ T9957] syz.1.1048: attempt to access beyond end of device [ 332.081157][ T9957] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 332.398438][ T24] m920x_read = error: -19 [ 333.201814][ T24] dvb-usb: error -19 while querying for an remote control event. [ 334.257416][ T5889] usb 5-1: Not enough endpoints found in device, aborting! [ 334.309201][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 334.848724][ T24] m920x_read = error: -19 [ 334.848744][ T5889] usb 5-1: USB disconnect, device number 32 [ 334.876332][ T24] dvb-usb: error -19 while querying for an remote control event. [ 335.060327][ T24] m920x_read = error: -19 [ 335.088322][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'. [ 335.097574][ T24] dvb-usb: error -19 while querying for an remote control event. [ 335.160347][ T30] audit: type=1400 audit(1746299597.113:1197): avc: denied { ioctl } for pid=9972 comm="syz.1.1054" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae9e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.425779][ T9976] syz.2.1055: attempt to access beyond end of device [ 335.425779][ T9976] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 335.471645][ T58] m920x_read = error: -19 [ 335.522236][ T58] dvb-usb: error -19 while querying for an remote control event. [ 335.554983][ T9981] netem: incorrect gi model size [ 335.582305][ T9981] netem: change failed [ 335.708123][ T58] m920x_read = error: -19 [ 335.742155][ T58] dvb-usb: error -19 while querying for an remote control event. [ 336.460374][ T58] m920x_read = error: -19 [ 336.464738][ T58] dvb-usb: error -19 while querying for an remote control event. [ 336.476674][ T9986] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 336.539455][ T30] audit: type=1400 audit(1746299598.523:1198): avc: denied { connect } for pid=9979 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.629133][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.671782][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.739741][ T58] m920x_read = error: -19 [ 336.747596][ T58] dvb-usb: error -19 while querying for an remote control event. [ 336.939730][ T58] m920x_read = error: -19 [ 336.944093][ T58] dvb-usb: error -19 while querying for an remote control event. [ 337.119807][ T58] m920x_read = error: -19 [ 337.133616][ T58] dvb-usb: error -19 while querying for an remote control event. [ 337.388047][T10011] veth0_to_team: entered promiscuous mode [ 337.394115][T10011] veth0_to_team: entered allmulticast mode [ 337.402829][ T58] m920x_read = error: -19 [ 337.424418][ T58] dvb-usb: error -19 while querying for an remote control event. [ 337.612856][T10014] binder: 10013:10014 ioctl c0306201 0 returned -14 [ 337.722789][ T58] m920x_read = error: -19 [ 337.725211][T10021] netlink: 'syz.2.1067': attribute type 29 has an invalid length. [ 337.727518][ T58] dvb-usb: error -19 while querying for an remote control event. [ 337.746735][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 337.907915][ T58] m920x_read = error: -19 [ 338.062520][ T58] dvb-usb: error -19 while querying for an remote control event. [ 338.239854][ T58] m920x_read = error: -19 [ 338.244199][ T58] dvb-usb: error -19 while querying for an remote control event. [ 338.420259][ T58] m920x_read = error: -19 [ 338.424738][ T58] dvb-usb: error -19 while querying for an remote control event. [ 338.569658][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 338.703764][ T24] m920x_read = error: -19 [ 338.712529][T10038] netlink: 'syz.0.1074': attribute type 11 has an invalid length. [ 338.798546][ T24] dvb-usb: error -19 while querying for an remote control event. [ 338.881607][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.893970][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.959854][ T24] m920x_read = error: -19 [ 338.964296][ T24] dvb-usb: error -19 while querying for an remote control event. [ 339.032410][T10052] FAULT_INJECTION: forcing a failure. [ 339.032410][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 339.045313][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.1.1078 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 339.045336][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 339.045349][T10052] Call Trace: [ 339.045355][T10052] [ 339.045362][T10052] dump_stack_lvl+0x16c/0x1f0 [ 339.045387][T10052] should_fail_ex+0x512/0x640 [ 339.045408][T10052] ? fs_reclaim_acquire+0xae/0x150 [ 339.045431][T10052] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 339.045454][T10052] should_failslab+0xc2/0x120 [ 339.045470][T10052] __kmalloc_noprof+0xd2/0x510 [ 339.045501][T10052] tomoyo_realpath_from_path+0xc2/0x6e0 [ 339.045526][T10052] ? tomoyo_profile+0x47/0x60 [ 339.045552][T10052] tomoyo_path_number_perm+0x245/0x580 [ 339.045570][T10052] ? tomoyo_path_number_perm+0x237/0x580 [ 339.045592][T10052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 339.045612][T10052] ? find_held_lock+0x2b/0x80 [ 339.045644][T10052] ? find_held_lock+0x2b/0x80 [ 339.045656][T10052] ? hook_file_ioctl_common+0x145/0x410 [ 339.045669][T10052] ? __fget_files+0x20e/0x3c0 [ 339.045687][T10052] security_file_ioctl+0x9b/0x240 [ 339.045703][T10052] __x64_sys_ioctl+0xb7/0x200 [ 339.045717][T10052] do_syscall_64+0xcd/0x260 [ 339.045732][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.045743][T10052] RIP: 0033:0x7f192c58e969 [ 339.045752][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.045762][T10052] RSP: 002b:00007f192a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.045772][T10052] RAX: ffffffffffffffda RBX: 00007f192c7b5fa0 RCX: 00007f192c58e969 [ 339.045779][T10052] RDX: 0000200000001040 RSI: 0000000080044944 RDI: 0000000000000003 [ 339.045785][T10052] RBP: 00007f192a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.045790][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.045796][T10052] R13: 0000000000000000 R14: 00007f192c7b5fa0 R15: 00007ffd66f17b58 [ 339.045810][T10052] [ 339.265844][T10052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.266701][ T24] m920x_read = error: -19 [ 339.277080][ T24] dvb-usb: error -19 while querying for an remote control event. [ 339.369611][ T5889] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 339.629599][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 339.640670][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.660028][ T5889] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 339.744527][ T24] m920x_read = error: -19 [ 339.762874][ T5889] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 339.782713][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.814841][ T5889] usb 1-1: Product: syz [ 339.821904][ T24] dvb-usb: error -19 while querying for an remote control event. [ 339.835035][ T5889] usb 1-1: Manufacturer: syz [ 339.851376][ T5889] usb 1-1: SerialNumber: syz [ 339.983835][ T30] audit: type=1400 audit(1746299601.943:1199): avc: denied { watch } for pid=10062 comm="syz.3.1083" path="socket:[30321]" dev="sockfs" ino=30321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 340.007143][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.012368][ T24] m920x_read = error: -19 [ 340.015238][ T30] audit: type=1400 audit(1746299601.943:1200): avc: denied { 0x1400000 } for pid=10062 comm="syz.3.1083" path="socket:[30321]" dev="sockfs" ino=30321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 340.041813][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.194750][ T24] dvb-usb: error -19 while querying for an remote control event. [ 340.229661][ T971] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 340.430072][ T5889] usb 1-1: Not enough endpoints found in device, aborting! [ 340.472882][ T24] m920x_read = error: -19 [ 340.477336][ T24] dvb-usb: error -19 while querying for an remote control event. [ 340.525679][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 340.537021][ T971] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 340.551645][ T971] usb 5-1: can't read configurations, error -61 [ 340.628547][T10083] hfs: unable to load iocharset "io#harset" [ 340.642033][ T5889] usb 1-1: USB disconnect, device number 39 [ 340.643719][ T24] m920x_read = error: -19 [ 340.822965][ T24] dvb-usb: error -19 while querying for an remote control event. [ 340.824464][ T971] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 341.039560][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 341.059608][ T24] m920x_read = error: -19 [ 341.061289][ T971] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 341.063955][ T24] dvb-usb: error -19 while querying for an remote control event. [ 341.081923][ T971] usb 5-1: can't read configurations, error -61 [ 341.126494][ T971] usb usb5-port1: attempt power cycle [ 341.279664][ T24] m920x_read = error: -19 [ 341.284024][ T24] dvb-usb: error -19 while querying for an remote control event. [ 341.455857][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.486382][ T24] m920x_read = error: -19 [ 341.486404][ T24] dvb-usb: error -19 while querying for an remote control event. [ 341.515047][ T971] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 341.531717][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 341.537477][ T971] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 341.537497][ T971] usb 5-1: can't read configurations, error -61 [ 341.546819][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.639569][ T24] m920x_read = error: -19 [ 341.669629][ T971] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 341.678694][ T24] dvb-usb: error -19 while querying for an remote control event. [ 341.691445][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 341.709790][ T971] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 341.725413][ T971] usb 5-1: can't read configurations, error -61 [ 341.748472][ T971] usb usb5-port1: unable to enumerate USB device [ 341.927030][ T24] m920x_read = error: -19 [ 341.932118][ T24] dvb-usb: error -19 while querying for an remote control event. [ 342.463539][ T24] m920x_read = error: -19 [ 342.467893][ T24] dvb-usb: error -19 while querying for an remote control event. [ 342.629902][ T24] m920x_read = error: -19 [ 342.629924][ T24] dvb-usb: error -19 while querying for an remote control event. [ 342.789566][ T5893] m920x_read = error: -19 [ 342.789586][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 342.825921][T10111] tipc: Started in network mode [ 342.825944][T10111] tipc: Node identity ce47402d53a9, cluster identity 4711 [ 342.826634][T10111] tipc: Enabled bearer , priority 0 [ 342.827649][T10111] syzkaller0: entered promiscuous mode [ 342.827667][T10111] syzkaller0: entered allmulticast mode [ 342.831282][T10111] tipc: Resetting bearer [ 342.850114][T10109] tipc: Resetting bearer [ 342.962776][ T5893] m920x_read = error: -19 [ 342.962792][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 342.980606][T10109] tipc: Disabling bearer [ 343.133138][ T5893] m920x_read = error: -19 [ 343.133157][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 343.170792][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.214580][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.214596][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.214611][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.214621][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.214634][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.214644][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.214657][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.304952][ T5893] m920x_read = error: -19 [ 343.304972][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 343.544602][ T5893] m920x_read = error: -19 [ 343.544623][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 343.608334][ T30] audit: type=1400 audit(1746299605.593:1201): avc: denied { map } for pid=10130 comm="syz.2.1097" path="socket:[31049]" dev="sockfs" ino=31049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 343.608378][ T30] audit: type=1400 audit(1746299605.593:1202): avc: denied { ioctl } for pid=10130 comm="syz.2.1097" path="socket:[31050]" dev="sockfs" ino=31050 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.745222][ T24] m920x_read = error: -19 [ 343.745302][ T24] dvb-usb: error -19 while querying for an remote control event. [ 343.910817][ T24] m920x_read = error: -19 [ 343.910878][ T24] dvb-usb: error -19 while querying for an remote control event. [ 344.082201][ T24] m920x_read = error: -19 [ 344.082215][ T24] dvb-usb: error -19 while querying for an remote control event. [ 344.239794][ T5893] m920x_read = error: -19 [ 344.239815][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 344.402935][ T24] m920x_read = error: -19 [ 344.402957][ T24] dvb-usb: error -19 while querying for an remote control event. [ 344.406734][ T30] audit: type=1400 audit(1746299606.393:1203): avc: denied { getopt } for pid=10130 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.511897][ T5889] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 344.566845][T10149] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.583307][ T24] m920x_read = error: -19 [ 344.589819][ T24] dvb-usb: error -19 while querying for an remote control event. [ 344.721012][ T5889] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.721030][ T5889] usb 4-1: config 179 has no interface number 0 [ 344.721052][ T5889] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 344.721066][ T5889] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 344.721080][ T5889] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 344.721094][ T5889] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 344.721108][ T5889] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 344.721129][ T5889] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 344.721141][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.722619][T10144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.722667][T10144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.821896][ T24] m920x_read = error: -19 [ 344.821917][ T24] dvb-usb: error -19 while querying for an remote control event. [ 344.989586][ T24] m920x_read = error: -19 [ 344.989607][ T24] dvb-usb: error -19 while querying for an remote control event. [ 345.151027][ T24] m920x_read = error: -19 [ 345.151050][ T24] dvb-usb: error -19 while querying for an remote control event. [ 345.321774][ T24] m920x_read = error: -19 [ 345.321797][ T24] dvb-usb: error -19 while querying for an remote control event. [ 345.481511][ T24] m920x_read = error: -19 [ 345.481586][ T24] dvb-usb: error -19 while querying for an remote control event. [ 345.639596][ T24] m920x_read = error: -19 [ 345.639680][ T24] dvb-usb: error -19 while querying for an remote control event. [ 345.800566][ T5893] m920x_read = error: -19 [ 345.800591][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 345.918400][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.918646][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.960188][ T24] m920x_read = error: -19 [ 345.960210][ T24] dvb-usb: error -19 while querying for an remote control event. [ 345.975726][T10164] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1105'. [ 346.130130][ T5893] m920x_read = error: -19 [ 346.134494][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 346.142626][ T24] usb 4-1: USB disconnect, device number 30 [ 346.142639][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 346.256248][T10165] usb usb8: usbfs: process 10165 (syz.1.1105) did not claim interface 0 before use [ 346.297933][ T5810] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 346.319612][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 346.328661][ T5893] m920x_read = error: -19 [ 346.336226][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 346.505057][ T5893] m920x_read = error: -19 [ 346.509431][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 346.568216][T10164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.633874][T10178] random: crng reseeded on system resumption [ 346.803180][T10164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.894975][ T24] m920x_read = error: -19 [ 346.899347][ T24] dvb-usb: error -19 while querying for an remote control event. [ 346.915171][T10164] bond0 (unregistering): Released all slaves [ 347.163962][ T24] m920x_read = error: -19 [ 347.168329][ T24] dvb-usb: error -19 while querying for an remote control event. [ 347.340131][ T24] m920x_read = error: -19 [ 347.399139][ T24] dvb-usb: error -19 while querying for an remote control event. [ 347.658505][ T971] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 347.673469][T10190] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 347.730236][ T24] m920x_read = error: -19 [ 347.756269][ T24] dvb-usb: error -19 while querying for an remote control event. [ 347.939860][ T24] m920x_read = error: -19 [ 347.955069][ T24] dvb-usb: error -19 while querying for an remote control event. [ 347.976301][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.012951][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.020888][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 348.031949][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.129841][T10201] syzkaller1: entered promiscuous mode [ 348.135433][ T5893] m920x_read = error: -19 [ 348.139935][T10201] syzkaller1: entered allmulticast mode [ 348.145523][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 348.178738][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.267224][ T971] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 348.295485][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.309580][ T5893] m920x_read = error: -19 [ 348.314184][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 348.356262][ T971] usb 4-1: config 0 descriptor?? [ 348.369590][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 348.481867][ T5893] m920x_read = error: -19 [ 348.486219][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 348.506552][ T24] usb 2-1: device descriptor read/64, error -71 [ 348.551576][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'. [ 348.585738][ T30] audit: type=1400 audit(1746299610.573:1204): avc: denied { create } for pid=10207 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 348.724358][ T1203] m920x_read = error: -19 [ 348.729300][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 348.739551][ T5810] Bluetooth: hci4: Malformed LE Event: 0x0b [ 348.871071][T10213] syz.0.1119: attempt to access beyond end of device [ 348.871071][T10213] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 348.915338][ T971] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000B/input/input28 [ 348.942395][ T30] audit: type=1400 audit(1746299610.603:1205): avc: denied { write } for pid=10207 comm="syz.4.1118" path="socket:[31275]" dev="sockfs" ino=31275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 349.059613][ T1203] m920x_read = error: -19 [ 349.063983][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 349.092116][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.100724][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.109929][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 349.188888][T10219] random: crng reseeded on system resumption [ 349.257549][ T1203] m920x_read = error: -19 [ 349.288343][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 349.307288][ T24] usb 2-1: device descriptor read/64, error -71 [ 349.460832][ T24] usb usb2-port1: attempt power cycle [ 349.512998][ T1203] m920x_read = error: -19 [ 349.517515][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 349.747557][ T1203] m920x_read = error: -19 [ 349.784242][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 350.164261][ T971] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 350.529426][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 350.582786][ T5810] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 350.591647][ T5810] Bluetooth: hci4: Injecting HCI hardware error event [ 350.600061][ T5810] Bluetooth: hci4: hardware error 0x00 [ 350.609956][ T1203] m920x_read = error: -19 [ 350.614327][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 350.711262][ T24] usb 2-1: device descriptor read/8, error -71 [ 350.779717][ T1203] m920x_read = error: -19 [ 350.784212][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 350.950671][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 350.958887][ T1203] m920x_read = error: -19 [ 350.964149][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 351.256550][ T971] usb 4-1: USB disconnect, device number 31 [ 351.330058][T10230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 351.339158][T10221] nvme_fabrics: missing parameter 'transport=%s' [ 351.347879][T10221] nvme_fabrics: missing parameter 'nqn=%s' [ 351.376811][ T24] usb 2-1: device descriptor read/8, error -71 [ 351.471092][ T1203] m920x_read = error: -19 [ 351.475499][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 351.495010][ T30] audit: type=1400 audit(1746299613.473:1206): avc: denied { map } for pid=10231 comm="syz.0.1124" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 351.524265][ T24] usb usb2-port1: unable to enumerate USB device [ 352.184143][T10237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1125'. [ 352.193373][T10237] nbd: must specify at least one socket [ 352.567994][ T1203] m920x_read = error: -19 [ 352.675854][T10237] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 352.680007][ T30] audit: type=1400 audit(1746299613.483:1207): avc: denied { write execute } for pid=10231 comm="syz.0.1124" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.751444][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 352.890362][T10249] binder: 10248:10249 ioctl c0306201 0 returned -14 [ 352.908499][T10254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.909590][ T5893] m920x_read = error: -19 [ 352.921831][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 353.099192][ T5893] m920x_read = error: -19 [ 353.119553][ T5859] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 353.127227][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 353.306488][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 353.369747][ T5810] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 353.377596][ T5859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 353.379797][ T5893] m920x_read = error: -19 [ 353.386037][ T5859] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 353.388525][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 353.407424][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.410638][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 353.418883][ T5859] usb 1-1: config 0 descriptor?? [ 353.549812][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 353.575949][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 353.666297][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.676128][ T5893] m920x_read = error: -19 [ 353.741133][ T5859] (null): keene_cmd_main failed (-71) [ 353.757522][ T5859] videodev: could not get a free minor [ 353.759516][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 353.789557][ T5859] radio-keene 1-1:0.0: could not register video device [ 353.801949][ T24] usb 2-1: config 0 descriptor?? [ 353.811173][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 353.828879][ T5859] radio-keene 1-1:0.0: probe with driver radio-keene failed with error -23 [ 353.838396][ T30] audit: type=1400 audit(1746299615.813:1208): avc: denied { wake_alarm } for pid=10248 comm="syz.2.1131" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.863247][ T5859] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 353.871460][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.884776][ T5859] usb 1-1: USB disconnect, device number 40 [ 353.889096][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.008491][ T1203] m920x_read = error: -19 [ 354.016656][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 354.092291][T10273] FAULT_INJECTION: forcing a failure. [ 354.092291][T10273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.126334][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.4.1135 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 354.126360][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 354.126370][T10273] Call Trace: [ 354.126376][T10273] [ 354.126383][T10273] dump_stack_lvl+0x16c/0x1f0 [ 354.126410][T10273] should_fail_ex+0x512/0x640 [ 354.126433][T10273] _copy_from_user+0x2e/0xd0 [ 354.126456][T10273] restore_sigcontext+0xcb/0x6a0 [ 354.126479][T10273] ? __pfx_restore_sigcontext+0x10/0x10 [ 354.126519][T10273] ? __pfx_restore_altstack+0x10/0x10 [ 354.126544][T10273] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.126561][T10273] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.126585][T10273] __do_sys_rt_sigreturn+0x1bb/0x230 [ 354.126608][T10273] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 354.126637][T10273] do_syscall_64+0xcd/0x260 [ 354.126660][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.126676][T10273] RIP: 0033:0x7f3269d2ab39 [ 354.126690][T10273] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 354.126706][T10273] RSP: 002b:00007f326ab50340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 354.126722][T10273] RAX: ffffffffffffffda RBX: 00007f3269fb5fa0 RCX: 00007f3269d2ab39 [ 354.126734][T10273] RDX: 00007f326ab50340 RSI: 00007f326ab50470 RDI: 0000000000000021 [ 354.126744][T10273] RBP: 00007f326ab51090 R08: 0000000000000000 R09: 0000000000000000 [ 354.126753][T10273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 354.126763][T10273] R13: 0000000000000000 R14: 00007f3269fb5fa0 R15: 00007ffcce885c88 [ 354.126791][T10273] [ 354.307929][T10274] syz.3.1133: attempt to access beyond end of device [ 354.307929][T10274] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 354.322163][ T1203] m920x_read = error: -19 [ 354.326537][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 354.342960][ T24] gspca_sunplus: reg_w_riv err -71 [ 354.348137][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 354.384137][ T24] usb 2-1: USB disconnect, device number 53 [ 354.428582][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 354.487035][T10279] Bluetooth: MGMT ver 1.23 [ 354.547736][ T1203] m920x_read = error: -19 [ 354.552951][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 354.556228][T10279] overlayfs: failed to resolve './file1': -2 [ 354.720166][ T1203] m920x_read = error: -19 [ 354.724771][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 355.519861][ T1203] m920x_read = error: -19 [ 355.524247][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 356.014701][ T1203] m920x_read = error: -19 [ 356.029752][ T30] audit: type=1400 audit(1746299617.603:1209): avc: denied { search } for pid=10292 comm="syz.3.1140" name="/" dev="configfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.052307][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 356.182395][ T30] audit: type=1400 audit(1746299617.603:1210): avc: denied { write } for pid=10292 comm="syz.3.1140" name="/" dev="configfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.391689][ T5893] m920x_read = error: -19 [ 356.457937][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 356.639582][ T5893] m920x_read = error: -19 [ 356.643950][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 356.770832][T10317] syz.2.1145: attempt to access beyond end of device [ 356.770832][T10317] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 357.171218][ T5893] m920x_read = error: -19 [ 357.179661][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.349906][ T5893] m920x_read = error: -19 [ 357.569383][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.637270][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.702566][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.730787][ T5893] m920x_read = error: -19 [ 357.735995][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.863739][T10336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.920347][ T5893] m920x_read = error: -19 [ 357.924723][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.972016][T10341] loop6: detected capacity change from 0 to 524287999 [ 357.982329][ T5889] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 358.130035][ T5893] m920x_read = error: -19 [ 358.139535][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 358.146261][ T5889] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 358.146559][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 358.156075][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.180100][ T5889] usb 5-1: config 0 descriptor?? [ 358.190008][ T5889] gspca_main: sunplus-2.14.0 probing 041e:400b [ 358.359702][ T5893] m920x_read = error: -19 [ 358.371796][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 358.550043][ T5893] m920x_read = error: -19 [ 358.554552][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 358.804648][ T5889] gspca_sunplus: reg_w_riv err -71 [ 358.804724][ T5893] m920x_read = error: -19 [ 358.813637][ T5889] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 358.823030][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 358.846354][ T5889] usb 5-1: USB disconnect, device number 38 [ 359.029656][ T5893] m920x_read = error: -19 [ 359.034028][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 359.239207][ T5893] m920x_read = error: -19 [ 359.313786][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 359.930986][ T5893] m920x_read = error: -19 [ 359.935342][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 359.978078][ T30] audit: type=1400 audit(1746299621.963:1211): avc: denied { append } for pid=10366 comm="syz.3.1161" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 360.129628][ T5893] m920x_read = error: -19 [ 360.250259][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 360.409569][ T5893] m920x_read = error: -19 [ 360.420089][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 360.444480][ T30] audit: type=1400 audit(1746299622.433:1212): avc: denied { connect } for pid=10375 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.590987][ T1203] m920x_read = error: -19 [ 360.595461][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 360.659722][ T30] audit: type=1326 audit(1746299622.623:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.2.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5a98e969 code=0x7fc00000 [ 360.902128][ T5893] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 360.916714][ T1203] m920x_read = error: -19 [ 360.930204][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 361.090411][ T1203] m920x_read = error: -19 [ 361.094960][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 361.225830][ T5893] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.237643][ T5893] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.254890][ T5893] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.264023][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.287617][ T5893] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.295712][ T5893] usb 5-1: invalid MIDI out EP 0 [ 361.349572][ T1203] m920x_read = error: -19 [ 361.353910][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 361.437968][ T5893] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 361.534950][ T5893] m920x_read = error: -19 [ 361.541981][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 361.553712][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.620421][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.723920][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.733039][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.773639][ T5893] m920x_read = error: -19 [ 361.777989][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 362.047542][ T30] audit: type=1326 audit(1746299624.023:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.4.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3269d8e969 code=0x0 [ 362.080809][ T5893] m920x_read = error: -19 [ 362.085211][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 362.273353][ T24] m920x_read = error: -19 [ 362.279624][ T24] dvb-usb: error -19 while querying for an remote control event. [ 362.452884][ T24] m920x_read = error: -19 [ 362.457325][ T24] dvb-usb: error -19 while querying for an remote control event. [ 362.629891][ T24] m920x_read = error: -19 [ 362.634468][ T24] dvb-usb: error -19 while querying for an remote control event. [ 362.810893][ T24] m920x_read = error: -19 [ 362.815257][ T24] dvb-usb: error -19 while querying for an remote control event. [ 363.036431][ T24] m920x_read = error: -19 [ 363.190534][ T24] dvb-usb: error -19 while querying for an remote control event. [ 363.399602][ T24] m920x_read = error: -19 [ 363.404000][ T24] dvb-usb: error -19 while querying for an remote control event. [ 363.428299][T10417] ======================================================= [ 363.428299][T10417] WARNING: The mand mount option has been deprecated and [ 363.428299][T10417] and is ignored by this kernel. Remove the mand [ 363.428299][T10417] option from the mount to silence this warning. [ 363.428299][T10417] ======================================================= [ 363.466249][ T30] audit: type=1400 audit(1746299625.413:1215): avc: denied { remount } for pid=10416 comm="syz.1.1176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 363.466657][T10420] sd 0:0:1:0: PR command failed: 1026 [ 363.496048][T10420] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 363.514837][T10420] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 363.651302][ T24] m920x_read = error: -19 [ 363.668789][ T24] dvb-usb: error -19 while querying for an remote control event. [ 363.727635][ T30] audit: type=1400 audit(1746299625.713:1216): avc: denied { setopt } for pid=10429 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.879773][ T5893] m920x_read = error: -19 [ 363.884413][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 363.980149][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 364.031930][ T5889] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 364.049899][ T5893] m920x_read = error: -19 [ 364.190994][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 364.196891][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 364.201950][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 364.236898][ T5859] usb 5-1: USB disconnect, device number 39 [ 364.264088][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 364.342456][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 364.359601][ T5893] m920x_read = error: -19 [ 364.363967][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 364.372749][ T24] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 131, using maximum allowed: 30 [ 364.383691][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 131 [ 364.387534][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.398970][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.419286][ T5889] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 364.431727][ T5889] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 364.650713][ T5889] usb 2-1: Product: syz [ 364.653449][ T5893] m920x_read = error: -19 [ 364.654888][ T5889] usb 2-1: Manufacturer: syz [ 364.654905][ T5889] usb 2-1: SerialNumber: syz [ 364.669028][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.677242][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 364.685374][ T24] usb 4-1: Product: syz [ 364.690187][ T24] usb 4-1: Manufacturer: syz [ 364.698713][ T24] usb 4-1: SerialNumber: syz [ 364.706285][ T5889] usb 2-1: config 0 descriptor?? [ 364.776494][ T5889] smsusb:smsusb_probe: board id=2, interface number 0 [ 364.844654][ T5889] smsusb:smsusb_probe: Device initialized with return code -19 [ 364.862918][ T5893] m920x_read = error: -19 [ 364.867264][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 364.920231][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.928787][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.029910][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1181'. [ 365.072566][ T5893] m920x_read = error: -19 [ 365.076904][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 365.098303][ T24] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 365.558732][ T5893] m920x_read = error: -19 [ 365.563147][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 365.627927][ T24] usb 4-1: USB disconnect, device number 32 [ 365.655727][ T5889] usb 2-1: USB disconnect, device number 54 [ 365.711910][ T30] audit: type=1400 audit(1746299627.703:1217): avc: denied { append } for pid=10456 comm="syz.1.1188" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 365.712352][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 365.818006][ T5893] m920x_read = error: -19 [ 365.823659][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 365.876183][T10462] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 365.993556][ T24] m920x_read = error: -19 [ 365.998478][ T24] dvb-usb: error -19 while querying for an remote control event. [ 366.313920][ T24] m920x_read = error: -19 [ 366.464922][ T24] dvb-usb: error -19 while querying for an remote control event. [ 366.838955][ T30] audit: type=1400 audit(1746299628.823:1218): avc: denied { write } for pid=10498 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 366.943159][ T24] m920x_read = error: -19 [ 366.947556][ T24] dvb-usb: error -19 while querying for an remote control event. [ 367.069793][ T5889] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 367.109611][ T24] m920x_read = error: -19 [ 367.114152][ T24] dvb-usb: error -19 while querying for an remote control event. [ 367.180745][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.189638][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.229851][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 367.289579][ T24] m920x_read = error: -19 [ 367.298373][ T24] dvb-usb: error -19 while querying for an remote control event. [ 367.366779][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.376916][ T5889] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 367.387805][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.398052][ T5889] usb 4-1: config 0 descriptor?? [ 367.479573][ T24] m920x_read = error: -19 [ 367.483934][ T24] dvb-usb: error -19 while querying for an remote control event. [ 367.662557][ T24] m920x_read = error: -19 [ 367.683211][ T24] dvb-usb: error -19 while querying for an remote control event. [ 367.812721][ T5889] hid-multitouch 0003:1FD2:6007.000C: item fetching failed at offset 3/7 [ 367.828756][ T5889] hid-multitouch 0003:1FD2:6007.000C: probe with driver hid-multitouch failed with error -22 [ 367.882728][ T24] m920x_read = error: -19 [ 367.889949][ T24] dvb-usb: error -19 while querying for an remote control event. [ 368.069591][ T24] m920x_read = error: -19 [ 368.079355][ T24] dvb-usb: error -19 while querying for an remote control event. [ 368.251678][ T24] m920x_read = error: -19 [ 368.258112][ T24] dvb-usb: error -19 while querying for an remote control event. [ 368.419605][ T24] m920x_read = error: -19 [ 368.424094][ T24] dvb-usb: error -19 while querying for an remote control event. [ 368.615344][ T24] m920x_read = error: -19 [ 368.629291][ T24] dvb-usb: error -19 while querying for an remote control event. [ 369.242197][ T5893] m920x_read = error: -19 [ 369.246555][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 369.416190][ T5893] m920x_read = error: -19 [ 369.469340][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 369.649785][ T5893] m920x_read = error: -19 [ 369.668192][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 370.463514][ T58] usb 4-1: USB disconnect, device number 33 [ 370.557606][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.584255][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.669581][ T24] m920x_read = error: -19 [ 370.673951][ T24] dvb-usb: error -19 while querying for an remote control event. [ 370.680464][T10537] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 370.703446][T10537] netlink: 'syz.0.1208': attribute type 11 has an invalid length. [ 370.738975][T10537] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1208'. [ 370.779814][ T5893] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 371.171082][ T24] m920x_read = error: -19 [ 371.175655][ T24] dvb-usb: error -19 while querying for an remote control event. [ 371.579546][ T5893] usb 1-1: device descriptor read/64, error -71 [ 372.111587][ T24] m920x_read = error: -19 [ 372.115947][ T24] dvb-usb: error -19 while querying for an remote control event. [ 372.191663][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.191982][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.294519][ T24] m920x_read = error: -19 [ 372.294540][ T24] dvb-usb: error -19 while querying for an remote control event. [ 372.369540][ T5893] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 372.389000][T10555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.449556][ T24] m920x_read = error: -19 [ 372.453909][ T24] dvb-usb: error -19 while querying for an remote control event. [ 372.495427][T10568] IPVS: Unknown mcast interface: pimreg [ 372.538791][ T30] audit: type=1400 audit(1746299634.523:1219): avc: denied { create } for pid=10562 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 372.560809][ T5893] usb 1-1: device descriptor read/64, error -71 [ 372.619882][ T24] m920x_read = error: -19 [ 372.624287][ T24] dvb-usb: error -19 while querying for an remote control event. [ 372.680210][ T5893] usb usb1-port1: attempt power cycle [ 372.789595][ T24] m920x_read = error: -19 [ 372.794576][ T24] dvb-usb: error -19 while querying for an remote control event. [ 372.851866][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1217'. [ 372.869955][ T30] audit: type=1400 audit(1746299634.863:1220): avc: denied { accept } for pid=10570 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.258396][ T24] m920x_read = error: -19 [ 373.272315][ T24] dvb-usb: error -19 while querying for an remote control event. [ 373.319776][ T5893] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 373.350238][ T5893] usb 1-1: device descriptor read/8, error -71 [ 373.402859][ T30] audit: type=1326 audit(1746299635.393:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 373.449652][ T24] m920x_read = error: -19 [ 373.454088][ T24] dvb-usb: error -19 while querying for an remote control event. [ 373.488003][ T30] audit: type=1326 audit(1746299635.393:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 373.566988][ T30] audit: type=1326 audit(1746299635.393:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 373.598900][ T30] audit: type=1326 audit(1746299635.393:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 373.600218][ T5893] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 373.635241][ T24] m920x_read = error: -19 [ 373.640835][ T24] dvb-usb: error -19 while querying for an remote control event. [ 373.655659][ T30] audit: type=1326 audit(1746299635.393:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 373.679483][ T30] audit: type=1326 audit(1746299635.423:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 374.148904][ T5889] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 374.156577][ T30] audit: type=1326 audit(1746299635.423:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 374.180026][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.186205][ T30] audit: type=1326 audit(1746299635.423:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd778e969 code=0x7ffc0000 [ 374.190359][ T24] m920x_read = error: -19 [ 374.312154][ T24] dvb-usb: error -19 while querying for an remote control event. [ 374.457448][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 374.470310][ T5889] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 374.479630][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.479840][ T24] m920x_read = error: -19 [ 374.495679][ T5889] usb 5-1: config 0 descriptor?? [ 374.497424][ T24] dvb-usb: error -19 while querying for an remote control event. [ 374.525009][ T5889] gspca_main: sunplus-2.14.0 probing 041e:400b [ 374.539795][ T5893] usb 1-1: device not accepting address 44, error -71 [ 374.546734][ T5893] usb usb1-port1: unable to enumerate USB device [ 374.654251][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.658112][T10596] loop6: detected capacity change from 0 to 524287999 [ 374.669984][ T24] m920x_read = error: -19 [ 374.676947][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.678047][ T24] dvb-usb: error -19 while querying for an remote control event. [ 374.850116][ T24] m920x_read = error: -19 [ 374.854544][ T24] dvb-usb: error -19 while querying for an remote control event. [ 374.931090][ T5889] gspca_sunplus: reg_w_riv err -71 [ 374.936313][ T5889] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 374.947406][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 374.962711][T10596] netlink: 'syz.0.1223': attribute type 5 has an invalid length. [ 374.972967][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'. [ 374.991806][ T5889] usb 5-1: USB disconnect, device number 40 [ 375.033096][ T5893] m920x_read = error: -19 [ 375.037463][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 375.114494][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 375.126918][T10597] netlink: 'syz.3.1224': attribute type 5 has an invalid length. [ 375.137931][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 375.269597][ T24] m920x_read = error: -19 [ 375.274059][ T24] dvb-usb: error -19 while querying for an remote control event. [ 375.445065][ T24] m920x_read = error: -19 [ 375.461430][ T24] dvb-usb: error -19 while querying for an remote control event. [ 375.769630][ T24] m920x_read = error: -19 [ 375.798267][ T24] dvb-usb: error -19 while querying for an remote control event. [ 376.417493][ T24] m920x_read = error: -19 [ 376.525458][ T24] dvb-usb: error -19 while querying for an remote control event. [ 377.275682][ T24] m920x_read = error: -19 [ 377.294083][ T24] dvb-usb: error -19 while querying for an remote control event. [ 377.514153][ T24] m920x_read = error: -19 [ 377.525922][ T24] dvb-usb: error -19 while querying for an remote control event. [ 377.731635][ T24] m920x_read = error: -19 [ 377.735986][ T24] dvb-usb: error -19 while querying for an remote control event. [ 377.962104][T10612] [U] .ú [ 378.146475][ T24] m920x_read = error: -19 [ 378.151327][ T24] dvb-usb: error -19 while querying for an remote control event. [ 378.328302][ T24] m920x_read = error: -19 [ 378.363685][ T24] dvb-usb: error -19 while querying for an remote control event. [ 378.640042][ T5893] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 378.928038][ T24] m920x_read = error: -19 [ 378.952165][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 378.957698][ T24] dvb-usb: error -19 while querying for an remote control event. [ 378.968120][ T5893] usb 5-1: config 8 has an invalid interface number: 114 but max is 0 [ 378.976475][ T5893] usb 5-1: config 8 has no interface number 0 [ 379.165995][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1237'. [ 379.473798][ T24] m920x_read = error: -19 [ 379.482666][ T5893] usb 5-1: New USB device found, idVendor=5ad8, idProduct=4291, bcdDevice=d8.6f [ 379.509556][ T24] dvb-usb: error -19 while querying for an remote control event. [ 379.517752][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.533727][ T5893] usb 5-1: Product: syz [ 379.539143][ T5893] usb 5-1: Manufacturer: syz [ 379.545677][ T5893] usb 5-1: SerialNumber: syz [ 379.690253][ T24] m920x_read = error: -19 [ 379.694659][ T24] dvb-usb: error -19 while querying for an remote control event. [ 379.999579][ T24] m920x_read = error: -19 [ 380.004010][ T24] dvb-usb: error -19 while querying for an remote control event. [ 381.179855][ T1203] m920x_read = error: -19 [ 381.185243][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 381.215279][ T5893] usb 5-1: USB disconnect, device number 41 [ 381.279807][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 381.309925][T10657] syz.1.1242: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.340291][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.1.1242 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 381.340309][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 381.340316][T10657] Call Trace: [ 381.340320][T10657] [ 381.340325][T10657] dump_stack_lvl+0x16c/0x1f0 [ 381.340343][T10657] warn_alloc+0x248/0x3a0 [ 381.340362][T10657] ? __pfx_warn_alloc+0x10/0x10 [ 381.340384][T10657] ? __get_vm_area_node+0x1b9/0x300 [ 381.340398][T10657] ? __get_vm_area_node+0x1e5/0x300 [ 381.340415][T10657] __vmalloc_node_range_noprof+0x1110/0x1540 [ 381.340429][T10657] ? nfnetlink_rcv_msg+0x9f9/0x1200 [ 381.340442][T10657] ? netlink_rcv_skb+0x16a/0x440 [ 381.340459][T10657] ? hash_ipmac_create+0x3ec/0x1250 [ 381.340476][T10657] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.340496][T10657] __kvmalloc_node_noprof+0x2ff/0x600 [ 381.340512][T10657] ? hash_ipmac_create+0x3ec/0x1250 [ 381.340525][T10657] ? hash_ipmac_create+0x3ec/0x1250 [ 381.340541][T10657] ? hash_ipmac_create+0x3ec/0x1250 [ 381.340554][T10657] hash_ipmac_create+0x3ec/0x1250 [ 381.340568][T10657] ? __nla_parse+0x53/0x60 [ 381.340586][T10657] ? __pfx_hash_ipmac_create+0x10/0x10 [ 381.340599][T10657] ip_set_create+0x7e1/0x14d0 [ 381.340617][T10657] ? __pfx_ip_set_create+0x10/0x10 [ 381.340641][T10657] ? find_held_lock+0x2b/0x80 [ 381.340657][T10657] nfnetlink_rcv_msg+0x9f9/0x1200 [ 381.340674][T10657] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.340701][T10657] ? netlink_rcv_skb+0x25d/0x440 [ 381.340713][T10657] ? kasan_check_range+0x82/0x1a0 [ 381.340729][T10657] netlink_rcv_skb+0x16a/0x440 [ 381.340740][T10657] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.340754][T10657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.340773][T10657] ? bpf_lsm_capable+0x9/0x10 [ 381.340781][T10657] ? security_capable+0x7e/0x260 [ 381.340794][T10657] ? ns_capable+0xd7/0x110 [ 381.340807][T10657] nfnetlink_rcv+0x1b3/0x430 [ 381.340820][T10657] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 381.340836][T10657] netlink_unicast+0x53a/0x7f0 [ 381.340850][T10657] ? __pfx_netlink_unicast+0x10/0x10 [ 381.340865][T10657] netlink_sendmsg+0x8d1/0xdd0 [ 381.340886][T10657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.340903][T10657] ____sys_sendmsg+0xa95/0xc70 [ 381.340918][T10657] ? copy_msghdr_from_user+0x10a/0x160 [ 381.340929][T10657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.340949][T10657] ___sys_sendmsg+0x134/0x1d0 [ 381.340961][T10657] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.340989][T10657] __sys_sendmsg+0x16d/0x220 [ 381.341000][T10657] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.341010][T10657] ? __x64_sys_futex+0x1e0/0x4c0 [ 381.341029][T10657] ? rcu_is_watching+0x12/0xc0 [ 381.341046][T10657] do_syscall_64+0xcd/0x260 [ 381.341061][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.341072][T10657] RIP: 0033:0x7f192c58e969 [ 381.341081][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.341091][T10657] RSP: 002b:00007f192a3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.341101][T10657] RAX: ffffffffffffffda RBX: 00007f192c7b6080 RCX: 00007f192c58e969 [ 381.341108][T10657] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 381.341114][T10657] RBP: 00007f192c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 381.341120][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.341126][T10657] R13: 0000000000000000 R14: 00007f192c7b6080 R15: 00007ffd66f17b58 [ 381.341138][T10657] [ 381.341142][T10657] Mem-Info: [ 381.695326][ T1203] m920x_read = error: -19 [ 381.707392][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 381.819586][T10657] active_anon:24118 inactive_anon:29 isolated_anon:0 [ 381.819586][T10657] active_file:20947 inactive_file:39133 isolated_file:0 [ 381.819586][T10657] unevictable:768 dirty:368 writeback:0 [ 381.819586][T10657] slab_reclaimable:7481 slab_unreclaimable:107483 [ 381.819586][T10657] mapped:33875 shmem:21098 pagetables:852 [ 381.819586][T10657] sec_pagetables:0 bounce:0 [ 381.819586][T10657] kernel_misc_reclaimable:0 [ 381.819586][T10657] free:1279358 free_pcp:2678 free_cma:0 [ 381.881418][T10657] Node 0 active_anon:96572kB inactive_anon:116kB active_file:83788kB inactive_file:156456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135600kB dirty:1468kB writeback:0kB shmem:82856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10960kB pagetables:3608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 381.912513][T10675] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.924217][T10676] syz.4.1244: attempt to access beyond end of device [ 381.924217][T10676] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 381.973937][T10657] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.007537][ T1203] m920x_read = error: -19 [ 382.011276][T10675] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 382.011957][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.023891][T10675] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 382.023908][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.2.1246 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 382.046240][ T1203] dvb-usb: error -19 while querying for an remote control event. [ 382.055229][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 382.055243][T10675] RIP: 0010:codel_change+0x4b5/0xb40 [ 382.078241][T10675] Code: e0 07 83 c0 03 88 44 24 33 e9 e2 00 00 00 e8 f2 8a 3e f8 49 c7 07 00 00 00 00 e8 e6 8a 3e f8 49 8d 7f 28 48 89 fa 48 c1 ea 03 <0f> b6 0c 2a 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 7b [ 382.097835][T10675] RSP: 0018:ffffc9000ef773e8 EFLAGS: 00010206 [ 382.103878][T10675] RAX: 0000000000000517 RBX: ffff88802864f800 RCX: ffffc9000c2d2000 [ 382.111827][T10675] RDX: 0000000000000005 RSI: ffffffff897ca80a RDI: 0000000000000028 [ 382.119797][T10675] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 382.127763][T10675] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 382.135709][T10675] R13: 00000000000007fc R14: ffff88802864f814 R15: 0000000000000000 [ 382.143657][T10675] FS: 00007fec5b74c6c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 382.152563][T10675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.159123][T10675] CR2: 0000001b2ec14ff8 CR3: 0000000036b09000 CR4: 00000000003526f0 [ 382.167069][T10675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.175013][T10675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.182959][T10675] Call Trace: [ 382.186213][T10675] [ 382.189136][T10675] ? __pfx_codel_change+0x10/0x10 [ 382.194150][T10675] ? find_held_lock+0x2b/0x80 [ 382.198805][T10675] ? nla_strcmp+0xff/0x130 [ 382.203211][T10675] ? __pfx_codel_change+0x10/0x10 [ 382.208222][T10675] tc_modify_qdisc+0x74b/0x2100 [ 382.213055][T10675] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 382.218322][T10675] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 382.223598][T10675] rtnetlink_rcv_msg+0x3c6/0xe90 [ 382.228514][T10675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.233949][T10675] netlink_rcv_skb+0x16a/0x440 [ 382.238690][T10675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.244123][T10675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.249387][T10675] ? netlink_deliver_tap+0x1ae/0xd30 [ 382.254657][T10675] netlink_unicast+0x53a/0x7f0 [ 382.259396][T10675] ? __pfx_netlink_unicast+0x10/0x10 [ 382.264657][T10675] netlink_sendmsg+0x8d1/0xdd0 [ 382.269405][T10675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.274681][T10675] ____sys_sendmsg+0xa95/0xc70 [ 382.279433][T10675] ? copy_msghdr_from_user+0x10a/0x160 [ 382.284882][T10675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.290147][T10675] ? try_to_wake_up+0xa2f/0x1680 [ 382.295064][T10675] ___sys_sendmsg+0x134/0x1d0 [ 382.299717][T10675] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.304898][T10675] __sys_sendmsg+0x16d/0x220 [ 382.309473][T10675] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.314571][T10675] ? __x64_sys_futex+0x1e0/0x4c0 [ 382.319497][T10675] ? rcu_is_watching+0x12/0xc0 [ 382.324254][T10675] do_syscall_64+0xcd/0x260 [ 382.328748][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.334633][T10675] RIP: 0033:0x7fec5a98e969 [ 382.339024][T10675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.358622][T10675] RSP: 002b:00007fec5b74c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.367015][T10675] RAX: ffffffffffffffda RBX: 00007fec5abb5fa0 RCX: 00007fec5a98e969 [ 382.374960][T10675] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 382.382904][T10675] RBP: 00007fec5aa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 382.390861][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.398809][T10675] R13: 0000000000000000 R14: 00007fec5abb5fa0 R15: 00007ffc463ed738 [ 382.406774][T10675] [ 382.409769][T10675] Modules linked in: [ 382.413688][T10675] ---[ end trace 0000000000000000 ]--- [ 382.419119][T10675] RIP: 0010:codel_change+0x4b5/0xb40 [ 382.424417][T10675] Code: e0 07 83 c0 03 88 44 24 33 e9 e2 00 00 00 e8 f2 8a 3e f8 49 c7 07 00 00 00 00 e8 e6 8a 3e f8 49 8d 7f 28 48 89 fa 48 c1 ea 03 <0f> b6 0c 2a 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 7b [ 382.444028][T10675] RSP: 0018:ffffc9000ef773e8 EFLAGS: 00010206 [ 382.450104][T10675] RAX: 0000000000000517 RBX: ffff88802864f800 RCX: ffffc9000c2d2000 [ 382.458050][T10675] RDX: 0000000000000005 RSI: ffffffff897ca80a RDI: 0000000000000028 [ 382.466024][T10675] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 382.473982][T10675] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 382.481938][T10675] R13: 00000000000007fc R14: ffff88802864f814 R15: 0000000000000000 [ 382.489910][T10675] FS: 00007fec5b74c6c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 382.498833][T10675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.505405][T10675] CR2: 0000001b2ec14ff8 CR3: 0000000036b09000 CR4: 00000000003526f0 [ 382.513365][T10675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.521325][T10675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.529278][T10675] Kernel panic - not syncing: Fatal exception in interrupt [ 382.536669][T10675] Kernel Offset: disabled [ 382.540968][T10675] Rebooting in 86400 seconds..