last executing test programs: 18m6.829683095s ago: executing program 32 (id=48): r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x31) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x180) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000180)="659cdfe7c414706501d76348a37bcf55c466b6b6090c40cf2d3585c736d45f3f682327a13fff2cacf0c0a6fb2cd0ce1a8e5ac7629659ee4f8428cb01041f27ee2a1be0023704bf03f9e0405030601e1f689fd73c0972ed90a3b05949d5711276824a2e6965561ace", &(0x7f0000000240)=""/87}, 0x20) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x2, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "000400", '\x00', ["26e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", '\x00', "79f56cb7422723000029edb7"]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$kcm(0x29, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000206d0426c6000000000001090224000100002000090400000503000000092105800e0122020009058103100003d900"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004780)=""/198, 0xc6}], 0x1}, 0x1}], 0x1, 0x10001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000780066000004119078ac1414bb00000000fffd4e20006490780200000000000000030000004e73aca81d58b67670b70aa315e2ae90f3b35308388957de54350bd0cb98fabba09d534d4b4a4ab61bf8a898c267159f2218a1adf577a06400cf6ecaffaf606800"/134], 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x560d, &(0x7f00000001c0)={0x0, 0x0}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getrlimit(0x3, &(0x7f0000000340)) 17m6.23549304s ago: executing program 33 (id=180): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000000)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x230, 0x230, 0xffffffff, 0x230, 0x230, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2ce, 0xfff, 0x7, 0x4, 0xf6f3, 0xd, 0xb67, 0x5, 0xffff, 0xf17, 0x0, 0x4, 0xfffd, 0x8, 0x3, 0xe], 0x3}}, @common=@ipv6header={{0x28}, {0x2, 0x80, 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xad7, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@private1, @port=0x4e20, @gre_key=0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x8}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, @gre_key=0xffff, @gre_key=0xff26}}}, {{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0x807fff00, 0xffffffff], [0xff, 0xff, 0x0, 0xffffffff], 'syzkaller1\x00', 'geneve0\x00', {}, {0xff}, 0x2e, 0x7, 0x4, 0x70}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0xffff, 0x4, 0x1, [0x5, 0x5, 0xab, 0x7, 0x5, 0x35, 0x0, 0x2, 0x7, 0xa, 0x5, 0x7ff, 0xffff, 0x8, 0xc000, 0x400], 0x1}}, @common=@mh={{0x28}, {"c2a9", 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x68, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x108000008) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000010400"/17, @ANYRES32=0x0, @ANYBLOB="20200500000000001c0012800b00010067656e65766500000c00028008000200e0000002"], 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20000800) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000000)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (async) fchdir(r2) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x230, 0x230, 0xffffffff, 0x230, 0x230, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2ce, 0xfff, 0x7, 0x4, 0xf6f3, 0xd, 0xb67, 0x5, 0xffff, 0xf17, 0x0, 0x4, 0xfffd, 0x8, 0x3, 0xe], 0x3}}, @common=@ipv6header={{0x28}, {0x2, 0x80, 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xad7, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@private1, @port=0x4e20, @gre_key=0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x8}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, @gre_key=0xffff, @gre_key=0xff26}}}, {{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0x807fff00, 0xffffffff], [0xff, 0xff, 0x0, 0xffffffff], 'syzkaller1\x00', 'geneve0\x00', {}, {0xff}, 0x2e, 0x7, 0x4, 0x70}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0xffff, 0x4, 0x1, [0x5, 0x5, 0xab, 0x7, 0x5, 0x35, 0x0, 0x2, 0x7, 0xa, 0x5, 0x7ff, 0xffff, 0x8, 0xc000, 0x400], 0x1}}, @common=@mh={{0x28}, {"c2a9", 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x68, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x108000008) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000010400"/17, @ANYRES32=0x0, @ANYBLOB="20200500000000001c0012800b00010067656e65766500000c00028008000200e0000002"], 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20000800) (async) 16m18.22136803s ago: executing program 34 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 15m36.927689207s ago: executing program 35 (id=471): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x60}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}]}, 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 13m19.754900968s ago: executing program 36 (id=904): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x3665, 0x0, 0x0, 0x0) 3m43.725943306s ago: executing program 9 (id=2773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xa10) read$char_usb(r2, &(0x7f00000000c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = io_uring_setup(0x58ba, &(0x7f0000000040)={0x0, 0x4514, 0x1, 0x3, 0x34f, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000034c0)={{0x3fd7c21f6bb30dd8, 0x0, 0x80, {0xffffffffffffffff, 0xf000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0)={0x1, 0xdddd1000, 0xee, 0x0, 0x1}) 3m43.008839421s ago: executing program 9 (id=2778): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)='U', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x9, &(0x7f0000000140)=@raw=[@tail_call, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001300010000000800e5ffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064756d6d7930000000000000000000000500210001"], 0x3c}}, 0x0) 3m40.413141227s ago: executing program 8 (id=2782): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000000050000ffffff7f24000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="bfa246097b00000000208cfd690000"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000b40)={{{0x1, 0x1}}, 0x0, 0x1008000, 0x0}) 3m40.410443845s ago: executing program 9 (id=2783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000a9a6ce4e0100a91ab142516f7e0e9e3c46bc3e68501fa3bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x29) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r6, 0x402, 0x5) close_range(r5, 0xffffffffffffffff, 0x2) connect$inet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040084) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) 3m40.297852803s ago: executing program 8 (id=2786): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3m39.729308302s ago: executing program 6 (id=2789): r0 = socket(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) statx(r2, 0x0, 0x7000, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x100) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @local, 0x1}, @can, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x8, @vbi={0x9, 0x1, 0x5515, 0x32315559, [0xd87, 0x10], [0xb42b, 0x9], 0x13a}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7b, &(0x7f0000000000)=0x0) mount$afs(&(0x7f0000000300), &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x8, 0x200, r3, &(0x7f0000000080)="0321", 0x2, 0x0, 0x0, 0x2}]) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 3m39.373173911s ago: executing program 9 (id=2793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0xa000000, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x64}}, 0x40) 3m38.307546343s ago: executing program 6 (id=2797): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x1a3c82) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) capset(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x6, 0x7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3d4cfc79e7b6c21c}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x1, 0x2, 0x3, 0x73e, 'syz0\x00', 0x462}, 0x4, 0x2, 0x5, 0x0, 0x1, 0x8000000, 'syz1\x00', &(0x7f00000000c0)=['/dev/kvm\x00'], 0x9}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xd62b3755b52078f, 0x0, 0x0) close(r4) 3m38.305401658s ago: executing program 9 (id=2798): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x94, 0x0, 0x600, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6}}}}, [@NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4c9f211c76b0f24e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf5}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b458f81c7953e56bd6e17e0dbe51bc3d"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69702fb1bb3ae6aac26fb071e7871312e764d5e234107e68"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bc4d29a59445c72471b08a88751a0418"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e4b3ebb4cd01d1c1937569f74544f4dd"}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000040) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xc}]}}]}, 0x94}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1f, 0x20000002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$KVM_GET_PIT(r5, 0xc048ae65, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r9, &(0x7f0000000140)={0x2020}, 0x2020) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000002180)='gadgetfs\x00', 0x900, 0x0) 3m38.218258853s ago: executing program 6 (id=2800): socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000006c0)={{0x2, 0x3, 0x54, 0x1, 0x4, 0x9}, 0x3eb, [0x80000000, 0x7ff, 0x5, 0x9, 0x4, 0x2b1, 0x2, 0xc, 0x101, 0x80000001, 0x3, 0x5, 0x7, 0x1, 0x4a70b2dc, 0x1000, 0x3e0, 0xe787, 0x40, 0x5, 0x1bc, 0x10000, 0xff, 0x3, 0xa, 0x3, 0x49c, 0x1, 0x10001, 0x200, 0x3, 0x6, 0x2, 0x900000, 0x0, 0x10, 0x0, 0x5, 0x6, 0x1, 0x7c, 0xcc1, 0x7, 0x1, 0x8, 0x4, 0x7, 0x5, 0xaa78, 0x3c4, 0x6dc0, 0x8, 0xef31, 0x2, 0x10001, 0x1, 0x1, 0x0, 0x81, 0x4, 0x3, 0x3, 0x9, 0x7, 0xff, 0x9, 0x40, 0x2, 0x4, 0x5, 0x7ff, 0xa24, 0xff, 0x4, 0xf, 0x2, 0x0, 0x4, 0x1, 0x6, 0x10001, 0x9, 0x57, 0xd1, 0x4, 0x6, 0x4, 0x59bb6727, 0x1, 0x200, 0xd, 0x3, 0x6, 0x2, 0x6, 0x4, 0xcae3, 0x7f2e8000, 0x6, 0x81, 0x5, 0x8, 0x9, 0x4, 0x5, 0x852, 0x8001, 0x3, 0x9, 0x4, 0x3, 0x3, 0x8, 0x80000001, 0x9, 0x8, 0xc832, 0x8, 0x2, 0xd, 0xfffffff0, 0x6, 0xfffffffe, 0x68, 0x3, 0x7f, 0x8, 0x81, 0x6, 0x5, 0x2, 0x0, 0xef92, 0x0, 0xffff0000, 0x349175d9, 0x7d0, 0x4, 0x2, 0x3, 0x8001, 0x3, 0x4, 0x8d7, 0x89c, 0xd1, 0x5, 0x0, 0xfffffffa, 0x5, 0x3, 0x5, 0x6, 0x3, 0x7, 0x9, 0x80000000, 0x0, 0x2, 0x7b8, 0xc1, 0x5, 0x8, 0x2, 0x82, 0x1, 0x7f, 0x9, 0x6, 0x3, 0xd, 0x3, 0x8000, 0x20000, 0x2, 0xca09, 0x5, 0x40, 0xe84, 0x1, 0x1, 0xb, 0x2, 0xfff, 0x400, 0xfffffff7, 0x5, 0x4, 0x5, 0x8, 0x7ff, 0x1, 0x0, 0x20, 0xfffffff8, 0x5, 0xffff7bf9, 0x10000, 0x40, 0x4, 0x9, 0x43, 0x3, 0x6, 0x7, 0x7, 0xfffffffe, 0xffffffff, 0x3, 0x0, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x0, 0x8, 0x6c, 0x8000, 0x2e, 0x2, 0x52, 0x8, 0x10000, 0x1000, 0x8, 0x25, 0x9, 0x4, 0x5, 0xffff1bb8, 0xfffffffd, 0x5, 0x1000, 0x521aef36, 0x5, 0x0, 0x45ea1f35, 0xb, 0xffffeae5, 0x801, 0x4, 0x5, 0x8, 0x9, 0x2, 0x5, 0xfffe, 0x0, 0x55ed, 0x80, 0xae800000, 0x3, 0xba1, 0x101, 0x5, 0x6, 0x66d, 0x1, 0x9, 0x5ca0, 0x0, 0xfff, 0x5, 0x2, 0x8, 0x79283876, 0x1, 0x6, 0x4, 0x5, 0xc22, 0xfffffff7, 0x80, 0xff, 0x4000, 0x8, 0x3, 0x7fffffff, 0x8, 0x1, 0xd3, 0x8, 0xc99b, 0x80000001, 0x7, 0x10001, 0x6, 0x8, 0x3b5, 0x1000, 0x0, 0x9dd, 0x1, 0x7, 0xe, 0x4, 0x7, 0xffff9b3f, 0x1, 0xffff, 0x7fffffff, 0x7, 0x7, 0x1e1, 0x5, 0x8, 0x3, 0x10001, 0x5, 0x800, 0x0, 0x28e88f9b, 0xb36, 0xd, 0x80000000, 0xa, 0x1, 0x6, 0x9, 0x4, 0x80000001, 0x3, 0xe, 0xfdb9, 0x9, 0x200, 0x8, 0x10, 0xfffffff4, 0x8, 0x5, 0x0, 0x2, 0x401, 0x9, 0x1, 0xfffffffc, 0x2b3a, 0x8383, 0x5387, 0x6, 0x6, 0x6, 0x5, 0x1, 0x2, 0x1, 0x1, 0x1, 0x8001, 0x80000000, 0x4, 0x6, 0x8000, 0x101, 0x5, 0x7, 0x6, 0x8, 0x5, 0x7fffffff, 0x5, 0xfff, 0x3, 0x9, 0x9, 0x7, 0x101, 0x4, 0x2, 0x0, 0x4, 0x8, 0x7, 0x6, 0x9, 0x1, 0xfffffffd, 0x7, 0x18000000, 0x7, 0x7, 0x7, 0x10001, 0x9, 0x9, 0x6c, 0x7, 0x10000, 0x4, 0x74, 0xea, 0x2, 0xffffff42, 0x51, 0x5, 0xf, 0x6, 0x0, 0xf15, 0x5cf, 0x10001, 0x8, 0x6ae, 0xc62, 0x10, 0x75aca70, 0x5a, 0x9, 0xd, 0x101, 0xf, 0x16b37584, 0x80000, 0xcb, 0x3, 0x1, 0x11, 0x6, 0x0, 0xd, 0x101, 0xd, 0x0, 0x40, 0x2, 0x0, 0x3a, 0x4, 0xd0, 0x2, 0x9, 0x6, 0x1c2, 0x3, 0x10001, 0x6, 0x3, 0x9, 0x1, 0x0, 0x1, 0x4, 0x6034, 0x10001, 0xb7, 0x3fa, 0x8, 0x6, 0x10, 0x7d, 0x6, 0x7fff, 0x7fffffff, 0x1, 0x1, 0x4, 0x4b3, 0xea, 0x2, 0x40, 0x5, 0xfffffff9, 0x1, 0x3, 0x7, 0x3c, 0x8000, 0x3, 0x3, 0x3, 0x3, 0x1, 0x5, 0x2e, 0x6, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0xffff, 0xf, 0x8001, 0x7, 0x5f37, 0xcd, 0x2, 0x4, 0x2, 0xfffffff8, 0x5, 0x1, 0x6, 0x4, 0x2, 0xf, 0x7, 0x5, 0x667b6536, 0x1, 0x9, 0xc1, 0x2, 0x7, 0x7f77, 0x3, 0x2, 0x9, 0x2, 0x4, 0x9f6, 0xd, 0x3, 0xfff, 0x5, 0x10000, 0x5, 0x8f, 0x3, 0x8, 0x80000000, 0x666, 0x401, 0x41, 0xfffffff9, 0x6, 0xd, 0x400, 0x8, 0xd4, 0x3f681b61, 0x1, 0x641d, 0x838, 0x1, 0x1, 0x4, 0x1, 0x5ef, 0x0, 0x8, 0xd, 0x200, 0xad1, 0x0, 0xffff, 0x8, 0x8cc0, 0x0, 0x4, 0x7, 0x1, 0xf9e, 0x40, 0x8, 0x8, 0x0, 0x5c42, 0xa86c, 0x9, 0x2, 0x0, 0x2, 0x4, 0x2, 0x6, 0xbb, 0x7, 0x2, 0x4, 0xfffffffe, 0x84e, 0x5, 0x0, 0x8, 0x40, 0x3, 0xee, 0x3, 0x200, 0x80000000, 0x3, 0x8000, 0x947, 0xb, 0x3ff, 0x2, 0xffffffff, 0x7, 0xffff, 0x1, 0x10, 0x1, 0x80, 0x0, 0x7, 0xbb34, 0xffffffff, 0x2, 0xffff, 0xb, 0x10001, 0x8, 0x5, 0x19f, 0x8, 0x7, 0x2, 0x61, 0x2, 0x1000, 0x5, 0x0, 0x39, 0x4f8435bc, 0x40, 0x1, 0x8000, 0xff, 0x6, 0x81, 0x3, 0x8000, 0x6, 0x3, 0x6, 0x10000, 0x3, 0x80000001, 0x5, 0x6, 0x6755, 0xffff, 0x1, 0x80000001, 0x41, 0xc, 0x0, 0x0, 0xb0, 0x7, 0x5, 0x8, 0x2, 0x4, 0x2, 0x7, 0xfffffffd, 0x0, 0x5783d24c, 0x1000, 0xb, 0xe92f, 0x10, 0xc0000000, 0x80000001, 0x81, 0xf, 0x3f, 0x3, 0xd02, 0x3, 0x3, 0x2, 0x8, 0x5, 0x7, 0x4, 0x8, 0x16b1, 0x1, 0x9, 0x2, 0xa17, 0x1, 0xd, 0x1ff, 0x9, 0x10, 0x1000, 0x8, 0x10001, 0x2, 0x9, 0xd12d, 0xb, 0x80000000, 0x10, 0x7, 0x7, 0x5, 0x0, 0x4, 0x10000, 0x2, 0x6, 0x2, 0x1, 0x5, 0x2, 0xfffffffd, 0x800, 0xc30, 0x6, 0x1, 0x401, 0x7, 0x4, 0x2, 0x1, 0x14bb21e8, 0x6, 0x9d, 0x9, 0x2, 0x6, 0x0, 0x7, 0x9, 0x10000, 0x7, 0x9, 0xc3, 0x9, 0x33, 0x7, 0x2, 0x8, 0xfffffdc7, 0x10001, 0x1000, 0x1, 0x8, 0x3, 0x0, 0x0, 0x200, 0x80000000, 0x8, 0x80000001, 0x6, 0x0, 0x10000, 0x4, 0xd2ae, 0x8001, 0x7f, 0x3, 0x9, 0xfffffff8, 0xecc, 0xf7b7, 0x0, 0x2, 0x8, 0x8, 0x39, 0x4745b028, 0xb1, 0xffc, 0x6, 0x7ff, 0x7088, 0x5, 0x5, 0x9, 0x9dd, 0x8, 0xffff6c24, 0x6, 0x3, 0x40, 0x1, 0x2, 0x2, 0x80000001, 0x4, 0x3ff00000, 0x5, 0xb, 0x1ff, 0x34, 0x6, 0x8710, 0x10001, 0x8, 0x9, 0x8, 0xb, 0x9, 0x5, 0x7ff, 0x1000, 0xb, 0x7, 0x9, 0x0, 0x7, 0x9, 0x5, 0x5, 0x0, 0x0, 0x7, 0x6, 0x4, 0x8, 0x89df, 0x6, 0x8, 0x32, 0x8, 0x5, 0x8, 0x4, 0x40, 0x4, 0x80, 0x8, 0x0, 0x6, 0x0, 0xdef, 0x5, 0x312, 0x3, 0x2, 0x200000, 0x8, 0x7, 0x7f, 0xb4, 0x0, 0x219, 0x4, 0x5, 0x5, 0x10000, 0x3152aec6, 0x3, 0x1, 0x1ff, 0xfffffff8, 0x5a, 0x401, 0x101, 0x72, 0x5, 0x7, 0x9, 0x8000, 0xc, 0x1, 0x7, 0x5, 0x5, 0x1ff, 0x0, 0x46e1e3bd, 0x0, 0xfff, 0xfffffffb, 0x8, 0x8, 0x2, 0x8000, 0x1, 0xfffffffb, 0x448bf557, 0x6, 0x7, 0x98f1, 0x8, 0x361, 0x7, 0x12, 0x8001, 0xf2, 0x2, 0x6, 0x7, 0x3, 0x6c4, 0xe181, 0x1, 0x1, 0x5, 0x10001, 0x400, 0xff, 0xae90, 0x8, 0x10000, 0x1, 0x40, 0x9, 0x8, 0x1000, 0x40, 0xd, 0xcf3, 0x2, 0xbf8, 0x0, 0x8, 0x9, 0x800, 0x9, 0x54, 0xb, 0xa49, 0x3f, 0xfffffff7, 0x4, 0x12c70, 0xcb4, 0x4, 0x4, 0x5, 0x0, 0xffff, 0x601, 0x7, 0x7, 0x4, 0xfffffffa, 0x0, 0x7, 0x0, 0xff00, 0x7, 0xffffff80, 0x6, 0x1ff, 0x10, 0x10000e, 0x7fffffff, 0x8a, 0xf, 0x9, 0x5, 0x2, 0x401, 0x4, 0x2, 0xc3, 0x0, 0x6, 0x4, 0x1, 0xe62, 0x1, 0x6, 0xfffffffb, 0xb, 0x6, 0x1, 0xc, 0x8000, 0xfc, 0x8, 0x0, 0x0, 0x5, 0x5, 0x400, 0xa, 0x6, 0x6, 0x80000001, 0x10, 0x18000, 0x400, 0x80000000, 0xb51, 0x3, 0x3, 0x8, 0x3, 0xfffffff7, 0x40, 0x9b59, 0x4, 0xffffffff, 0x8000, 0x3, 0x8, 0x3, 0x7, 0x1, 0x6, 0x8, 0x14e6, 0x7, 0x80, 0x9, 0x3, 0xfffffffd, 0xe, 0x4, 0x9, 0x3, 0x5, 0x9937, 0x1000, 0x7, 0x0, 0xfffffffc, 0x3, 0x1, 0x2, 0x79e74c8e, 0x8, 0xb, 0x53e, 0x5, 0x80000001, 0x5, 0x0, 0x9]}) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x371, 0x0, r3}, 0x0, 0x0) 3m37.166364845s ago: executing program 8 (id=2803): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2) fsopen(&(0x7f0000000340)='ceph\x00', 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x4b6a, 0x0) 3m35.993479085s ago: executing program 8 (id=2807): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x726, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x726, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_make_fs_calli\x00', r4, 0x0, 0x40}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/186, 0xba) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) futimesat(r8, &(0x7f0000000300)='\x00', &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0x2710}}) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x1000000000000000, {0x9ce, 0x0, 0x0, '\x00', {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {0xfffffffffffffffc}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x101, [{0x0, 0x2, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004c9e581045058080010001020301090212000100000000090402"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004c9e581045058080010001020301090212000100000000090402"], 0x0) 3m34.347325459s ago: executing program 6 (id=2809): r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x1d) 3m33.084617155s ago: executing program 6 (id=2810): syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x1, 0x3d2}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec9223f0ec860c78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x0) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) 3m32.662429541s ago: executing program 8 (id=2811): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000002d00000000", 0x58}], 0x1) 3m32.554768838s ago: executing program 9 (id=2812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xa10) read$char_usb(r2, &(0x7f00000000c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = io_uring_setup(0x58ba, &(0x7f0000000040)={0x0, 0x4514, 0x1, 0x3, 0x34f, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000034c0)={{0x3fd7c21f6bb30dd8, 0x0, 0x80, {0xffffffffffffffff, 0xf000}}, "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", "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"}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0)={0x1, 0xdddd1000, 0xee, 0x0, 0x1}) 3m30.666757107s ago: executing program 6 (id=2815): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x2b, 0x4, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0xfe, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000300), 0x6) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) timer_create(0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) memfd_create(0x0, 0x0) 3m30.401922509s ago: executing program 8 (id=2816): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9", 0xe, 0x8004, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @multicast}, 0x14) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m1.524808701s ago: executing program 37 (id=2813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x3, 0x4, 0x1}}) 3m1.181380937s ago: executing program 38 (id=2818): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000b564ee7eef32a68bea548df72135100014000300776731000000000000000000000000003487ccbdf5bbbfd51014ffa4019c671ede49d95748efe3f45883dbe22103424954074003fa463c081a2f790dd219c1724f39114fdb21a5bc0c3b4e794853b8319e47810910af35f0f61c4f7b7cfd6dbeb4421e01"], 0x34}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0083, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105442, 0x1ff) 3m0.911992684s ago: executing program 39 (id=2816): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9", 0xe, 0x8004, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @multicast}, 0x14) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m0.663787787s ago: executing program 40 (id=2815): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x2b, 0x4, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0xfe, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000300), 0x6) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) timer_create(0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) memfd_create(0x0, 0x0) 3m0.348280671s ago: executing program 41 (id=2812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xa10) read$char_usb(r2, &(0x7f00000000c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = io_uring_setup(0x58ba, &(0x7f0000000040)={0x0, 0x4514, 0x1, 0x3, 0x34f, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000034c0)={{0x3fd7c21f6bb30dd8, 0x0, 0x80, {0xffffffffffffffff, 0xf000}}, "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", "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"}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)={0xc9, 0x0, 0xc}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0)={0x1, 0xdddd1000, 0xee, 0x0, 0x1}) 2m43.794266309s ago: executing program 4 (id=2845): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2) fsopen(&(0x7f0000000340)='ceph\x00', 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x4b6a, 0x0) 2m42.842730123s ago: executing program 4 (id=2847): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40000, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, r1}}, 0x48) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000180)={0x0, "c59ab7136d6538e39045fc04c802cc115b9e661626f1c542d603203eb68e28ca", 0x3, 0x1}) getpid() mmap(&(0x7f00004a4000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x9c546000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) getrlimit(0x5, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="5c0d00000000000063a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) socket$caif_stream(0x25, 0x1, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x11, 0x4, "f5a9b9cf"}, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}, {0xa, 0x4, 0x0, @mcast2}}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m38.858211857s ago: executing program 4 (id=2854): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="000002000000000000"], 0x0, 0x0) r9 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$inet6(0xa, 0x5, 0x0) flistxattr(r10, &(0x7f0000000000)=""/21, 0x15) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00003c0012800e00010069703665727370616e00000028000280080015007497040004001200060018008000000008001500fa250100050017000100000008000a00", @ANYRES32=r11, @ANYBLOB="20f2d6d7ae02aa97b1ffff6e322ce7c867045cf66243f682f3c36622fea3c8d932ae43b9a7e69d6fc821538f31d8cad71ad87cc8812bb65d5f00ddb6c9b8841ad8df8020040fe1f6bea6a36ee321ce7713d615879400f0c6b982389e92e50d7c478c997ca4e8606189"], 0x64}}, 0x4080) getpid() 2m38.434921079s ago: executing program 4 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d00004810000000000690780a21", @ANYRES32=0x41424344], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x40}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000014050582c137153e370248078000f0", 0x2a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m38.277892131s ago: executing program 4 (id=2858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x11000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 2m38.005072206s ago: executing program 4 (id=2862): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x6, 0x5, 0x7f, 0x7, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2m37.010781315s ago: executing program 42 (id=2862): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x6, 0x5, 0x7f, 0x7, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2m10.513489152s ago: executing program 0 (id=2931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2m9.35722336s ago: executing program 0 (id=2935): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x15c, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1335f0a6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x14, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000040)=r6, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x44, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0x14, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect(0x2, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf5, 0xd1, 0xf7, 0x40, 0x3034, 0x7500, 0xaa1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x7, 0x0, 0x20, 0xfb}}]}}, 0x0) 2m6.703194599s ago: executing program 0 (id=2946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x5, 0x3, [0x0, 0x0], [0xfff, 0x1, 0x7, 0xd068], [0x7, 0x7, 0x3, 0x5], [0x9, 0x1, 0x76d, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={r7, 0x80000}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2m5.450045736s ago: executing program 0 (id=2948): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x8cffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 2m5.252448347s ago: executing program 0 (id=2949): r0 = socket(0x2, 0x3, 0xff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="840e0000", @ANYBLOB="000000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb2"], 0xe84}}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23f", 0x25}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x8000, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x40, 0x9}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYRES8=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r6, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x6, 0x13, 0x5}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 2m4.338414113s ago: executing program 0 (id=2952): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$FUSE_INTERRUPT(r3, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 2m4.139550798s ago: executing program 43 (id=2952): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$FUSE_INTERRUPT(r3, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 43.64358204s ago: executing program 7 (id=3189): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioperm(0x3, 0x4, 0x1000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000005000/0x4000)=nil) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) getrusage(0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 42.357257976s ago: executing program 7 (id=3193): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x700, 0x0, 0x0, 0x0) 40.192063984s ago: executing program 7 (id=3198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x5, 0x3, [0x0, 0x0], [0xfff, 0x1, 0x7, 0xd068], [0x7, 0x7, 0x3, 0x5], [0x9, 0x1, 0x76d, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={r8, 0x80000}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 38.383343926s ago: executing program 7 (id=3201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x2}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x3) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000c0001006d6163767461700004000280d9981562e724f30ff5fcb9a938306d680372fbf155756996ccb0a18930baa9656d24f516ee2ae3601caa5f06c07a1536ebef72dafede13da23bb82814737ff63e09928325ddafd95c6c47664f7afad65cac6d8f65411fc01d6c662d2be537617bc8acbc4d3fb1fd6129c52a269a0d9a491caf76ebf6c798928eee840ce66e7f091f151b504a0af93c1bc273cc0310aef6395839046b69aae543449a0e140242a6d27ab493cc7ef375424fdcfe14ad0"], 0x34}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r3, 0x0, 0x1, 0x2}) 37.010655036s ago: executing program 7 (id=3204): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) r7 = syz_open_dev$sndpcmc(&(0x7f0000001080), 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000010c0)={0x50, [0x8, 0x3, 0x8000], [{0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x23, 0x2, 0x0, 0x1}, {0x6, 0x3, 0x1, 0x0, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x7fffffff, 0x1, 0x0, 0x1}, {0x1, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0x6}, {0x3c, 0x4b7c28aa, 0x0, 0x1}, {0x85, 0x9, 0x1, 0x0, 0x1}, {0x4, 0x9a3, 0x0, 0x1}, {0x2, 0xb, 0x0, 0x1, 0x1}], 0xd86}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="5c7a633c03f87b4c"], 0xffc9) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r8 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000280)={0xa, @pix_mp={0x1, 0x6e, 0x33565348, 0x3, 0x2, [{0xe, 0x2000000}, {0x200, 0x8}, {0x2, 0x8}, {0x7, 0x9}, {0x88b5, 0x3}, {0x2b, 0x10}, {0x9a1d, 0x172d}, {0x9, 0x209}], 0x8, 0x4, 0x6, 0x1}}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c0001000000000000000000040100800c0009"], 0x114}], 0x1}, 0x40) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x2, &(0x7f0000000000)) truncate(&(0x7f00000000c0)='./file0\x00', 0x9) 36.290389133s ago: executing program 7 (id=3206): openat$dir(0xffffffffffffff9c, 0x0, 0x5a401, 0x80) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0xdb4, 0x0, 0x1000000, 0x0, 0x0) 21.176478915s ago: executing program 44 (id=3206): openat$dir(0xffffffffffffff9c, 0x0, 0x5a401, 0x80) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0xdb4, 0x0, 0x1000000, 0x0, 0x0) 17.385881311s ago: executing program 3 (id=3248): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x5b, 0x7ffc9ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe401fca108849217, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x0) 15.614392381s ago: executing program 3 (id=3250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0xe3, 0xfff, 0xf1, 0x8, 0xe, 0x2]}, &(0x7f00000004c0)=0x78) preadv2(r2, &(0x7f0000000600)=[{&(0x7f0000000040)}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/16, 0x10}], 0x8, 0x5, 0x1000, 0x9) 13.862670084s ago: executing program 3 (id=3254): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x61c1, 0x0, 0xfffffffc, 0x107, {0x4, 0x1, 0x3, 0x69, 0x81, 0x0, 0x3, 0x5, 0x4cab, 0x3, 0xfffe, 0x0, 0x3f, 0x0, "fe1d0e223ede04a6a770f5dbbd0b0bd17b480240438ece397736ec0268208f7d"}}) 13.721637132s ago: executing program 3 (id=3255): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000000054000000000002000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 13.588718014s ago: executing program 3 (id=3256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x12) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x801, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x1, 0x8c, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x3f000000, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xca, 0x1a, 0x60, 0x40, 0x2304, 0x20f, 0x3bde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0xe1, 0x3, 0xb3}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) 8.438454592s ago: executing program 2 (id=3264): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x61c1, 0x0, 0xfffffffc, 0x107, {0x4, 0x1, 0x3, 0x69, 0x81, 0x0, 0x3, 0x5, 0x4cab, 0x3, 0xfffe, 0x0, 0x3f, 0x0, "fe1d0e223ede04a6a770f5dbbd0b0bd17b480240438ece397736ec0268208f7d"}}) 7.442060225s ago: executing program 2 (id=3266): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x4040400}, 0x844) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x20, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='\ts2.[-.^\x00'], &(0x7f0000000400)=""/67, 0x43) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) write$cgroup_int(r5, &(0x7f0000000200), 0xfdef) socket(0x10, 0x400000000080803, 0x0) 7.392892974s ago: executing program 3 (id=3267): sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x14, 0x0, 0x101, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x0, 0x3) 6.671680138s ago: executing program 2 (id=3270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x5b, 0x7ffc9ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe401fca108849217, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) dup3(r5, r4, 0x0) 5.292383042s ago: executing program 2 (id=3273): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x3, 0xfffffffffffffff7, 0x2, r3}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c080) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="000ce900d1bd9823b0c7caa2c2212c937dfbc0715550c72dee74e6142ecf24ef76e88eebcff994d97cb53e3057798a7fc1a70ddd8f35c38ddd435ab2e8801aa5c690d94ab0", @ANYRES16=r8, @ANYBLOB="310025bd7000fedbdf252000000008000300", @ANYRES32, @ANYBLOB="0c002d80050004000100000034002d80080003000300000005000400000000000500040000000000080002000300000005000100060000000800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r10 = getpgid(0xffffffffffffffff) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x1) syz_clone3(0x0, 0x0) r11 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r11, &(0x7f0000032680)=""/102400, 0x19000) 4.907017853s ago: executing program 1 (id=3274): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}]}}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x100000000000000) close(r1) (async) close(r1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 4.330476213s ago: executing program 1 (id=3276): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x4040400}, 0x844) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x20, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='\ts2.[-.^\x00'], &(0x7f0000000400)=""/67, 0x43) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) write$cgroup_int(r5, &(0x7f0000000200), 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x11, 0x6, 0x2, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 4.263274567s ago: executing program 5 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 3.716684859s ago: executing program 1 (id=3278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0x2000080001, 0x84) sendto$inet(r5, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) recvfrom$l2tp(r5, 0x0, 0x0, 0x20, 0x0, 0x0) 3.614352338s ago: executing program 5 (id=3279): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x8a280) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000600)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c8ddd5bd5000d0085a168d0bf46d32345653600648d0a00120002008a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x400c004, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0x2) ioctl$CEC_S_MODE(r0, 0xc05c6104, &(0x7f00000000c0)) 2.874163701s ago: executing program 5 (id=3280): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x700, 0x0, 0x0, 0x0) 2.55191668s ago: executing program 1 (id=3281): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x5b, 0x7ffc9ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe401fca108849217, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x76) 1.911492486s ago: executing program 5 (id=3282): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1bd04a42c8ddcf9c, 0x12, r1, 0xc1db6000) 1.769600667s ago: executing program 2 (id=3283): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000bbbbbbbbbbdbb86dd6000000000081100fc010000000000000000000000000000000001800000000000002200089078787fd70e3af7c84fd5c322f9f298fb16afa4e78080c7877c7bdc73bf9ae587b2d184b09b93ea888b30ba3aaa3b3177ba4d6a87ac047d5fb7386ff9b044bfc525563110bf06849d59bcd24c771d0ae868e022ae9e390608dfb784e00063e3de62cb4396d109b15b989a83754d15fa16896d0127"], 0x0) 1.09419447s ago: executing program 5 (id=3284): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x5b, 0x7ffc9ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe401fca108849217, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) dup3(0xffffffffffffffff, r4, 0x0) 1.023066705s ago: executing program 1 (id=3285): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000007010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 687.999295ms ago: executing program 2 (id=3286): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') unshare(0x20400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x4, @none}, 0x4) preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}, {0x0}], 0x2, 0xffff, 0x5dd073cf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000)="acaa77f0aa177bdfe58470430a775cf5", &(0x7f0000000040)=@udp6=r0}, 0x20) 1.315321ms ago: executing program 5 (id=3287): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x4000000000000009, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x3, 0x4, 0xe, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) 0s ago: executing program 1 (id=3288): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x4040400}, 0x844) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x20, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='\ts2.[-.^\x00'], &(0x7f0000000400)=""/67, 0x43) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) write$cgroup_int(r5, &(0x7f0000000200), 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x11, 0x6, 0x2, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) kernel console output (not intermixed with test programs): sadm_t pid=17704 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1067.801393][ T5868] m920x_read = error: -19 [ 1067.816791][ T5868] dvb-usb: error while querying for an remote control event. [ 1067.824258][T16738] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1067.948309][ T5868] m920x_read = error: -19 [ 1067.952680][ T5868] dvb-usb: error while querying for an remote control event. [ 1067.983192][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1068.094335][T15241] m920x_read = error: -19 [ 1068.099054][T15241] dvb-usb: error while querying for an remote control event. [ 1068.108483][ T5903] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1068.120795][ T5903] em28xx 8-1:0.132: board has no eeprom [ 1068.900859][T15241] m920x_read = error: -19 [ 1068.905405][T15241] dvb-usb: error while querying for an remote control event. [ 1068.920856][ T5903] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1068.929139][ T5903] em28xx 8-1:0.132: analog set to bulk mode. [ 1068.949552][ T5868] em28xx 8-1:0.132: Registering V4L2 extension [ 1068.987698][T17723] overlayfs: failed to resolve './file1': -2 [ 1068.997512][ T5868] em28xx 8-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1069.007570][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.016753][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.023550][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1069.038825][ T6156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.065966][ T6156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.077175][T15241] m920x_read = error: -19 [ 1069.085570][ T5868] em28xx 8-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1069.100131][T15241] dvb-usb: error while querying for an remote control event. [ 1069.131210][ T5868] em28xx 8-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1069.443527][ T5868] em28xx 8-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1069.457983][T15241] m920x_read = error: -19 [ 1069.462389][T15241] dvb-usb: error while querying for an remote control event. [ 1069.470154][ T5903] usb 8-1: USB disconnect, device number 28 [ 1069.477378][ T5903] em28xx 8-1:0.132: Disconnecting em28xx [ 1069.670442][T16831] m920x_read = error: -19 [ 1069.675377][T16831] dvb-usb: error while querying for an remote control event. [ 1069.705775][T17737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3066'. [ 1069.811790][T15241] m920x_read = error: -19 [ 1069.816298][T15241] dvb-usb: error while querying for an remote control event. [ 1070.062959][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1070.183496][T15241] m920x_read = error: -19 [ 1070.187878][T15241] dvb-usb: error while querying for an remote control event. [ 1070.254256][ T5868] usb 8-1: Decoder not found [ 1070.258892][ T5868] em28xx 8-1:0.132: failed to create media graph [ 1070.265827][ T5868] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 1070.295006][ T5868] em28xx 8-1:0.132: Remote control support is not available for this card. [ 1070.313037][ T5868] m920x_read = error: -19 [ 1070.317473][ T5868] dvb-usb: error while querying for an remote control event. [ 1070.336651][ T5903] em28xx 8-1:0.132: Closing input extension [ 1070.355822][ T5866] usb 4-1: USB disconnect, device number 16 [ 1070.373949][ T5903] em28xx 8-1:0.132: Freeing device [ 1070.444057][T15241] m920x_read = error: -19 [ 1070.453035][T15241] dvb-usb: error while querying for an remote control event. [ 1070.547797][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1070.547868][ T29] audit: type=1400 audit(1737009557.767:4229): avc: denied { setopt } for pid=17750 comm="syz.3.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1070.583663][ T5903] m920x_read = error: -19 [ 1070.588034][ T5903] dvb-usb: error while querying for an remote control event. [ 1070.714015][ T5903] m920x_read = error: -19 [ 1070.718460][ T5903] dvb-usb: error while querying for an remote control event. [ 1070.797182][ T29] audit: type=1326 audit(1737009558.057:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1070.822063][T17759] syz.2.3072[17759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1070.822142][T17759] syz.2.3072[17759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1070.834567][T17759] syz.2.3072[17759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1070.855150][ T5903] m920x_read = error: -19 [ 1070.885669][ T29] audit: type=1326 audit(1737009558.057:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1070.920122][T17762] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1071.007075][ T29] audit: type=1326 audit(1737009558.057:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.040344][ T5903] dvb-usb: error while querying for an remote control event. [ 1071.053647][ T29] audit: type=1326 audit(1737009558.057:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.093290][ T29] audit: type=1326 audit(1737009558.057:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.102838][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1071.155041][ T5903] m920x_read = error: -19 [ 1071.159460][ T5903] dvb-usb: error while querying for an remote control event. [ 1071.499566][ T5867] m920x_read = error: -19 [ 1071.566852][ T5867] dvb-usb: error while querying for an remote control event. [ 1071.630548][ T29] audit: type=1326 audit(1737009558.057:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.703738][ T29] audit: type=1326 audit(1737009558.057:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.733718][ T29] audit: type=1326 audit(1737009558.057:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.757176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.786691][ T29] audit: type=1326 audit(1737009558.057:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.2.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1071.818177][ T5867] m920x_read = error: -19 [ 1071.833653][ T5867] dvb-usb: error while querying for an remote control event. [ 1071.982945][ T900] m920x_read = error: -19 [ 1071.993416][ T900] dvb-usb: error while querying for an remote control event. [ 1072.036642][T17785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3080'. [ 1072.122872][ T1202] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1072.123314][ T900] m920x_read = error: -19 [ 1072.135529][ T900] dvb-usb: error while querying for an remote control event. [ 1072.142724][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1072.152947][ T5866] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1072.192726][ T5867] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1072.253329][ T900] m920x_read = error: -19 [ 1072.257702][ T900] dvb-usb: error while querying for an remote control event. [ 1072.289540][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 1072.315441][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1072.330659][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.344748][ T5867] usb 8-1: Using ep0 maxpacket: 32 [ 1072.351750][ T5866] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1072.353060][ T5867] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1072.360959][ T1202] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1072.383317][ T900] m920x_read = error: -19 [ 1072.384389][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.399416][ T900] dvb-usb: error while querying for an remote control event. [ 1072.412161][ T5866] usb 2-1: config 0 descriptor?? [ 1072.421519][ T5867] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1072.432000][ T1202] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1072.440752][ T5867] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1072.476728][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1072.478136][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.509519][ T5867] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1072.523740][ T1202] usb 3-1: config 0 descriptor?? [ 1072.523905][ T900] m920x_read = error: -19 [ 1072.537673][ T900] dvb-usb: error while querying for an remote control event. [ 1072.559582][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1072.611631][ T5867] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1072.633547][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.651101][ T5867] usb 8-1: config 0 descriptor?? [ 1072.693692][ T5903] m920x_read = error: -19 [ 1072.699433][ T5903] dvb-usb: error while querying for an remote control event. [ 1072.823135][ T5903] m920x_read = error: -19 [ 1072.836214][ T5903] dvb-usb: error while querying for an remote control event. [ 1072.861881][ T5866] pantherlord 0003:0810:0001.0017: unknown main item tag 0x0 [ 1072.870056][ T5866] pantherlord 0003:0810:0001.0017: unknown main item tag 0x0 [ 1072.995267][ T1202] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 1073.020371][ T5903] m920x_read = error: -19 [ 1073.025386][ T5903] dvb-usb: error while querying for an remote control event. [ 1073.034137][T17782] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1073.076018][ T5866] pantherlord 0003:0810:0001.0017: unknown main item tag 0x0 [ 1073.089692][ T1202] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 1073.182618][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1073.408995][ T5903] m920x_read = error: -19 [ 1073.671678][ T1202] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 1073.672171][ T5903] dvb-usb: error while querying for an remote control event. [ 1073.680188][ T5866] pantherlord 0003:0810:0001.0017: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 1073.698489][ T5866] pantherlord 0003:0810:0001.0017: no output reports found [ 1073.712404][ T1202] kovaplus 0003:1E7D:2D50.0018: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1073.724760][ T5866] usb 2-1: USB disconnect, device number 19 [ 1073.725986][ T5867] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1073.793049][ T5867] m920x_read = error: -19 [ 1073.806775][ T5867] dvb-usb: error while querying for an remote control event. [ 1073.922544][ T5867] m920x_read = error: -19 [ 1073.927479][ T5867] dvb-usb: error while querying for an remote control event. [ 1074.054314][ T5867] m920x_read = error: -19 [ 1074.064222][ T5867] dvb-usb: error while querying for an remote control event. [ 1074.195273][ T5867] m920x_read = error: -19 [ 1074.220655][ T5867] dvb-usb: error while querying for an remote control event. [ 1074.222493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1074.497049][ T5867] m920x_read = error: -19 [ 1074.501428][ T5867] dvb-usb: error while querying for an remote control event. [ 1074.625406][ T5867] m920x_read = error: -19 [ 1074.625425][ T5867] dvb-usb: error while querying for an remote control event. [ 1074.653920][ T1202] kovaplus 0003:1E7D:2D50.0018: couldn't init struct kovaplus_device [ 1074.653960][ T1202] kovaplus 0003:1E7D:2D50.0018: couldn't install mouse [ 1074.655152][ T1202] kovaplus 0003:1E7D:2D50.0018: probe with driver kovaplus failed with error -71 [ 1074.658432][ T1202] usb 3-1: USB disconnect, device number 30 [ 1074.741770][ T900] m920x_read = error: -19 [ 1074.741789][ T900] dvb-usb: error while querying for an remote control event. [ 1074.843338][ T5903] m920x_read = error: -19 [ 1074.843358][ T5903] dvb-usb: error while querying for an remote control event. [ 1074.952418][ T5903] m920x_read = error: -19 [ 1074.952438][ T5903] dvb-usb: error while querying for an remote control event. [ 1075.015686][ T1202] usb 8-1: USB disconnect, device number 29 [ 1075.018308][ T1202] usblp0: removed [ 1075.063258][ T5903] m920x_read = error: -19 [ 1075.063342][ T5903] dvb-usb: error while querying for an remote control event. [ 1075.111416][T17809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3087'. [ 1075.182933][ T5903] m920x_read = error: -19 [ 1075.183049][ T5903] dvb-usb: error while querying for an remote control event. [ 1075.262391][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1075.303034][ T5903] m920x_read = error: -19 [ 1075.303149][ T5903] dvb-usb: error while querying for an remote control event. [ 1075.423518][ T5903] m920x_read = error: -19 [ 1075.423612][ T5903] dvb-usb: error while querying for an remote control event. [ 1075.532939][ T5903] m920x_read = error: -19 [ 1075.532953][ T5903] dvb-usb: error while querying for an remote control event. [ 1075.665565][ T5903] m920x_read = error: -19 [ 1075.665585][ T5903] dvb-usb: error while querying for an remote control event. [ 1076.175108][T17817] overlay: Unknown parameter 'fowner' [ 1076.302256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1076.416771][ T5903] m920x_read = error: -19 [ 1076.416792][ T5903] dvb-usb: error while querying for an remote control event. [ 1076.559166][ T5867] m920x_read = error: -19 [ 1076.559188][ T5867] dvb-usb: error while querying for an remote control event. [ 1076.652632][T17823] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3092'. [ 1076.839583][ T5867] m920x_read = error: -19 [ 1076.840331][T17829] FAULT_INJECTION: forcing a failure. [ 1076.840331][T17829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.844393][ T5867] dvb-usb: error while querying for an remote control event. [ 1077.343320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1077.637493][ T5903] m920x_read = error: -19 [ 1077.642333][ T5903] dvb-usb: error while querying for an remote control event. [ 1077.688741][T17829] CPU: 0 UID: 0 PID: 17829 Comm: syz.7.3095 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 1077.699526][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1077.709581][T17829] Call Trace: [ 1077.712861][T17829] [ 1077.715792][T17829] dump_stack_lvl+0x16c/0x1f0 [ 1077.720483][T17829] should_fail_ex+0x497/0x5b0 [ 1077.725175][T17829] _copy_from_user+0x2e/0xd0 [ 1077.729769][T17829] copy_msghdr_from_user+0x99/0x160 [ 1077.734973][T17829] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1077.740798][T17829] ___sys_sendmsg+0xff/0x1e0 [ 1077.745397][T17829] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.750613][T17829] ? __pfx_lock_release+0x10/0x10 [ 1077.755645][T17829] ? trace_lock_acquire+0x14e/0x1f0 [ 1077.760867][T17829] ? __fget_files+0x206/0x3a0 [ 1077.765559][T17829] __sys_sendmsg+0x16e/0x220 [ 1077.770154][T17829] ? __pfx___sys_sendmsg+0x10/0x10 [ 1077.775291][T17829] do_syscall_64+0xcd/0x250 [ 1077.779812][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.785714][T17829] RIP: 0033:0x7f4354785d29 [ 1077.790132][T17829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.809745][T17829] RSP: 002b:00007f4355635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.818171][T17829] RAX: ffffffffffffffda RBX: 00007f4354975fa0 RCX: 00007f4354785d29 [ 1077.826149][T17829] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1077.834126][T17829] RBP: 00007f4355635090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.842099][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.850078][T17829] R13: 0000000000000000 R14: 00007f4354975fa0 R15: 00007ffdafdddb38 [ 1077.858091][T17829] [ 1078.382036][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1078.541625][ T5867] m920x_read = error: -19 [ 1078.546217][ T5867] dvb-usb: error while querying for an remote control event. [ 1078.665146][ T5903] m920x_read = error: -19 [ 1078.669850][ T5903] dvb-usb: error while querying for an remote control event. [ 1078.799525][ T5867] m920x_read = error: -19 [ 1078.804778][ T5867] dvb-usb: error while querying for an remote control event. [ 1078.962301][ T5867] m920x_read = error: -19 [ 1078.966727][ T5867] dvb-usb: error while querying for an remote control event. [ 1079.087717][T17848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3098'. [ 1079.091984][ T5867] m920x_read = error: -19 [ 1079.108780][ T5867] dvb-usb: error while querying for an remote control event. [ 1079.312457][ T5867] m920x_read = error: -19 [ 1079.317297][ T5867] dvb-usb: error while querying for an remote control event. [ 1079.421987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1079.432777][ T5867] m920x_read = error: -19 [ 1079.441920][ T5867] dvb-usb: error while querying for an remote control event. [ 1079.606124][ T5867] m920x_read = error: -19 [ 1079.610494][ T5867] dvb-usb: error while querying for an remote control event. [ 1080.027031][ T5867] m920x_read = error: -19 [ 1080.032246][ T5867] dvb-usb: error while querying for an remote control event. [ 1080.033927][T16738] Bluetooth: Wrong link type (-57) [ 1080.258033][ T5867] m920x_read = error: -19 [ 1080.262640][ T5867] dvb-usb: error while querying for an remote control event. [ 1080.340713][T17868] syz.5.3106[17868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.340773][T17868] syz.5.3106[17868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.352776][T17868] syz.5.3106[17868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1080.407867][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 1080.407884][ T29] audit: type=1400 audit(1737009567.568:4278): avc: denied { read write } for pid=16731 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1080.461877][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1080.504889][ T5868] m920x_read = error: -19 [ 1080.509261][ T5868] dvb-usb: error while querying for an remote control event. [ 1080.622732][ T5867] m920x_read = error: -19 [ 1080.627152][ T5867] dvb-usb: error while querying for an remote control event. [ 1080.785196][ T5867] m920x_read = error: -19 [ 1081.121880][ T29] audit: type=1400 audit(1737009567.568:4279): avc: denied { open } for pid=16731 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1081.147032][ T5867] dvb-usb: error while querying for an remote control event. [ 1081.262087][ T5868] m920x_read = error: -19 [ 1081.266456][ T5868] dvb-usb: error while querying for an remote control event. [ 1081.287376][ T29] audit: type=1400 audit(1737009567.568:4280): avc: denied { ioctl } for pid=16731 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1081.326575][T17871] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1081.333214][T17871] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 1081.340924][T17871] audit: backlog limit exceeded [ 1081.383346][ T29] audit: type=1326 audit(1737009567.578:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17867 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1081.391751][ T5868] m920x_read = error: -19 [ 1081.407890][ T29] audit: type=1326 audit(1737009567.578:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17867 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1081.490104][T17877] syz.7.3108[17877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.490160][T17877] syz.7.3108[17877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.501678][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1081.521133][T17877] syz.7.3108[17877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1081.530357][ T29] audit: type=1326 audit(1737009567.588:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17867 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1081.569498][ T5868] dvb-usb: error while querying for an remote control event. [ 1081.584253][T17880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1081.971913][ T5868] m920x_read = error: -19 [ 1081.976279][ T5868] dvb-usb: error while querying for an remote control event. [ 1082.109234][ T5867] m920x_read = error: -19 [ 1082.113815][ T5867] dvb-usb: error while querying for an remote control event. [ 1082.541580][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1082.824974][ T5868] m920x_read = error: -19 [ 1082.829401][ T5868] dvb-usb: error while querying for an remote control event. [ 1083.002149][ T5867] m920x_read = error: -19 [ 1083.006519][ T5867] dvb-usb: error while querying for an remote control event. [ 1083.242225][ T5868] m920x_read = error: -19 [ 1083.281232][ T5868] dvb-usb: error while querying for an remote control event. [ 1083.512724][ T5867] m920x_read = error: -19 [ 1083.517096][ T5867] dvb-usb: error while querying for an remote control event. [ 1083.579542][T17895] syz.5.3114[17895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.579630][T17895] syz.5.3114[17895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.581463][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1083.591776][T17895] syz.5.3114[17895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.778221][ T5868] m920x_read = error: -19 [ 1083.795998][ T5868] dvb-usb: error while querying for an remote control event. [ 1084.456285][ T5868] m920x_read = error: -19 [ 1084.460670][ T5868] dvb-usb: error while querying for an remote control event. [ 1084.572022][ T5867] m920x_read = error: -19 [ 1084.576908][ T5867] dvb-usb: error while querying for an remote control event. [ 1084.615657][T17900] syz.7.3115[17900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.621336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1084.770823][ T5903] m920x_read = error: -19 [ 1084.775748][ T5903] dvb-usb: error while querying for an remote control event. [ 1085.662019][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1085.821278][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 1085.821295][ T29] audit: type=1326 audit(1737009572.109:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1085.990774][ T5903] m920x_read = error: -19 [ 1086.056978][ T5903] dvb-usb: error while querying for an remote control event. [ 1086.091376][ T29] audit: type=1326 audit(1737009572.119:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1086.226638][ T5867] m920x_read = error: -19 [ 1086.231012][ T5867] dvb-usb: error while querying for an remote control event. [ 1086.244821][ T29] audit: type=1326 audit(1737009572.119:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1086.294930][ T29] audit: type=1326 audit(1737009572.119:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1086.319911][T17913] bpf_get_probe_write_proto: 8 callbacks suppressed [ 1086.319927][T17913] syz.1.3119[17913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1086.326908][T17913] syz.1.3119[17913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1086.339021][T17913] syz.1.3119[17913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1086.461856][ T5867] m920x_read = error: -19 [ 1086.477754][ T5867] dvb-usb: error while querying for an remote control event. [ 1086.507174][ T29] audit: type=1326 audit(1737009572.119:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1086.604177][ T5867] m920x_read = error: -19 [ 1086.608687][ T5867] dvb-usb: error while querying for an remote control event. [ 1086.701115][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1087.127583][ T29] audit: type=1326 audit(1737009572.119:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1087.190175][ T5903] m920x_read = error: -19 [ 1087.195490][ T5903] dvb-usb: error while querying for an remote control event. [ 1087.595582][T17920] overlayfs: failed to resolve './file1': -2 [ 1087.741035][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1087.903875][ T5867] m920x_read = error: -19 [ 1087.908342][ T5867] dvb-usb: error while querying for an remote control event. [ 1087.987780][ T29] audit: type=1326 audit(1737009572.119:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1088.121428][ T5903] m920x_read = error: -19 [ 1088.150406][ T5903] dvb-usb: error while querying for an remote control event. [ 1088.171090][ T29] audit: type=1326 audit(1737009572.119:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1088.261033][ T29] audit: type=1326 audit(1737009572.299:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1088.296640][ T29] audit: type=1326 audit(1737009572.299:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1088.358479][ T5867] m920x_read = error: -19 [ 1088.363649][ T5867] dvb-usb: error while querying for an remote control event. [ 1088.558851][ T5903] m920x_read = error: -19 [ 1088.563601][ T5903] dvb-usb: error while querying for an remote control event. [ 1088.780896][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1089.390524][ T5903] m920x_read = error: -19 [ 1089.394951][ T5903] dvb-usb: error while querying for an remote control event. [ 1089.449863][T17937] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1089.545661][ T5867] m920x_read = error: -19 [ 1089.569211][ T5867] dvb-usb: error while querying for an remote control event. [ 1089.595857][T17934] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1089.820757][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1089.830756][ T5903] m920x_read = error: -19 [ 1089.877784][ T5903] dvb-usb: error while querying for an remote control event. [ 1090.051711][T17947] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1090.088543][ T5903] m920x_read = error: -19 [ 1090.100725][ T5903] dvb-usb: error while querying for an remote control event. [ 1090.119660][T17947] CIFS mount error: No usable UNC path provided in device string! [ 1090.119660][T17947] [ 1090.132438][T17951] syz.3.3126[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.132489][T17951] syz.3.3126[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.144443][T17951] syz.3.3126[17951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.260757][ T5903] m920x_read = error: -19 [ 1090.276882][ T5903] dvb-usb: error while querying for an remote control event. [ 1090.285623][T17947] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1090.421731][ T5867] m920x_read = error: -19 [ 1090.426425][ T5867] dvb-usb: error while querying for an remote control event. [ 1090.860656][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1090.941206][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 1090.941218][ T29] audit: type=1326 audit(1737009578.189:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1091.080650][ T5867] m920x_read = error: -19 [ 1091.096051][ T5867] dvb-usb: error while querying for an remote control event. [ 1091.103926][ T29] audit: type=1326 audit(1737009578.189:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1091.248137][ T5867] m920x_read = error: -19 [ 1091.273734][ T5867] dvb-usb: error while querying for an remote control event. [ 1091.715991][ T5867] m920x_read = error: -19 [ 1091.721056][ T5867] dvb-usb: error while querying for an remote control event. [ 1091.750607][ T29] audit: type=1400 audit(1737009578.229:4619): avc: denied { read write } for pid=17959 comm="syz.1.3129" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1091.762818][T17958] syz.5.3127[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1091.774277][T17958] syz.5.3127[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1091.786311][T17958] syz.5.3127[17958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1091.799311][ T29] audit: type=1400 audit(1737009578.229:4620): avc: denied { open } for pid=17959 comm="syz.1.3129" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1091.900531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1092.001469][ T29] audit: type=1326 audit(1737009578.509:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1092.009286][ T5903] m920x_read = error: -19 [ 1092.025888][ T29] audit: type=1326 audit(1737009578.519:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1092.029737][ T5903] dvb-usb: error while querying for an remote control event. [ 1092.085868][ T29] audit: type=1326 audit(1737009578.519:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1092.109722][ T29] audit: type=1326 audit(1737009578.519:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1092.133340][ T29] audit: type=1326 audit(1737009578.519:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1092.157343][ T29] audit: type=1326 audit(1737009578.519:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17957 comm="syz.5.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1092.215607][ T5867] m920x_read = error: -19 [ 1092.220041][ T5867] dvb-usb: error while querying for an remote control event. [ 1092.371138][T16738] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1092.380009][T16738] Bluetooth: hci7: Injecting HCI hardware error event [ 1092.393366][T16738] Bluetooth: hci7: hardware error 0x00 [ 1092.739371][ T5867] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1092.822875][ T5903] m920x_read = error: -19 [ 1092.827323][ T5903] dvb-usb: error while querying for an remote control event. [ 1092.940528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1093.055219][ T5903] m920x_read = error: -19 [ 1093.059859][ T5903] dvb-usb: error while querying for an remote control event. [ 1093.174555][ T5868] m920x_read = error: -19 [ 1093.178975][ T5868] dvb-usb: error while querying for an remote control event. [ 1093.200897][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 1093.209004][ T5867] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1093.422503][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1093.431716][ T900] m920x_read = error: -19 [ 1093.436743][ T900] dvb-usb: error while querying for an remote control event. [ 1093.449264][ T5867] usb 3-1: Product: syz [ 1093.454404][ T5867] usb 3-1: Manufacturer: syz [ 1093.459322][ T5867] usb 3-1: SerialNumber: syz [ 1093.757863][ T900] m920x_read = error: -19 [ 1093.762458][ T900] dvb-usb: error while querying for an remote control event. [ 1093.981458][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1094.041878][ T5868] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1094.056000][ T5867] usb 3-1: config 0 descriptor?? [ 1094.147155][ T5867] gspca_main: se401-2.14.0 probing 047d:5003 [ 1094.193425][T16831] m920x_read = error: -19 [ 1094.198100][T16831] dvb-usb: error while querying for an remote control event. [ 1094.292370][ T5868] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.307073][ T5868] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.317592][ T5822] m920x_read = error: -19 [ 1094.322692][ T5822] dvb-usb: error while querying for an remote control event. [ 1094.330860][ T5868] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1094.527240][ T5822] m920x_read = error: -19 [ 1095.018802][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 1095.027825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1095.103480][ T5822] dvb-usb: error while querying for an remote control event. [ 1095.113302][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1095.120409][ T5868] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1095.130807][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.181694][T16738] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1095.383848][T17994] m920x_read = error: -19 [ 1095.388204][T17994] dvb-usb: error while querying for an remote control event. [ 1095.448328][ T5868] usb 6-1: config 0 descriptor?? [ 1095.459490][T18008] syz.3.3141[18008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.459609][T18008] syz.3.3141[18008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.471436][T18008] syz.3.3141[18008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1095.622144][T17994] m920x_read = error: -19 [ 1095.638367][T17994] dvb-usb: error while querying for an remote control event. [ 1095.724032][ T5867] usb 3-1: reset high-speed USB device number 31 using dummy_hcd [ 1095.750538][T17994] m920x_read = error: -19 [ 1095.755024][T17994] dvb-usb: error while querying for an remote control event. [ 1095.964776][T18010] Invalid ELF header magic: != ELF [ 1096.030473][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 1096.030509][ T29] audit: type=1804 audit(1737009583.190:4718): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3141" name="/newroot/63/bus/bus" dev="overlay" ino=372 res=1 errno=0 [ 1096.060068][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1096.143118][T17994] m920x_read = error: -19 [ 1096.202171][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 1096.212774][T17994] dvb-usb: error while querying for an remote control event. [ 1096.220424][ T29] audit: type=1400 audit(1737009583.220:4719): avc: denied { sys_module } for pid=18007 comm="syz.3.3141" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1096.220461][ T29] audit: type=1400 audit(1737009583.220:4720): avc: denied { module_load } for pid=18007 comm="syz.3.3141" path="/63/bus/bus" dev="overlay" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1096.243475][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1096.275260][ T5822] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1096.391055][ T5867] usb 3-1: device descriptor read/64, error -32 [ 1096.468006][ T29] audit: type=1400 audit(1737009583.530:4721): avc: denied { bind } for pid=17995 comm="syz.1.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1096.529713][ T5868] usb 6-1: USB disconnect, device number 21 [ 1096.568261][T18014] atomic_op ffff888012400998 conn xmit_atomic 0000000000000000 [ 1096.650733][ T5822] usb 8-1: device descriptor read/64, error -71 [ 1096.662930][ T5867] usb 3-1: reset high-speed USB device number 31 using dummy_hcd [ 1096.724161][T17994] m920x_read = error: -19 [ 1096.778816][T17994] dvb-usb: error while querying for an remote control event. [ 1096.930841][ T5822] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1096.941702][ T29] audit: type=1326 audit(1737009583.570:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18007 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1096.988305][ T29] audit: type=1326 audit(1737009583.570:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18007 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1097.019530][ T29] audit: type=1400 audit(1737009583.820:4724): avc: denied { create } for pid=18011 comm="syz.5.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1097.039492][ T29] audit: type=1400 audit(1737009583.820:4725): avc: denied { bind } for pid=18011 comm="syz.5.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1097.059124][ T29] audit: type=1400 audit(1737009583.820:4726): avc: denied { write } for pid=18011 comm="syz.5.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1097.080910][ T5868] m920x_read = error: -19 [ 1097.085261][ T5868] dvb-usb: error while querying for an remote control event. [ 1097.093904][ T5822] usb 8-1: device descriptor read/64, error -71 [ 1097.095945][T18019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1097.100247][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1097.173768][ T29] audit: type=1400 audit(1737009584.420:4727): avc: denied { ioctl } for pid=18015 comm="syz.3.3143" path="/dev/video5" dev="devtmpfs" ino=937 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1097.237598][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1097.246836][T18023] macsec0: entered promiscuous mode [ 1097.373963][ T5868] m920x_read = error: -19 [ 1097.415848][ T5868] dvb-usb: error while querying for an remote control event. [ 1097.430135][ T5822] usb usb8-port1: attempt power cycle [ 1098.139845][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1098.428611][T17994] m920x_read = error: -19 [ 1098.433814][T17994] dvb-usb: error while querying for an remote control event. [ 1098.598456][ T5868] m920x_read = error: -19 [ 1098.603334][ T5868] dvb-usb: error while querying for an remote control event. [ 1099.030460][ T5867] gspca_se401: read req failed req 0x06 error -19 [ 1099.043494][ T5867] usb 3-1: USB disconnect, device number 31 [ 1099.118328][T17994] m920x_read = error: -19 [ 1099.124966][T17994] dvb-usb: error while querying for an remote control event. [ 1099.179755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1099.185876][T18034] syz.3.3148[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.186896][T18034] syz.3.3148[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.198992][T18034] syz.3.3148[18034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.443846][T17994] m920x_read = error: -19 [ 1099.459752][T17994] dvb-usb: error while querying for an remote control event. [ 1099.791509][T18038] Invalid ELF header magic: != ELF [ 1100.219613][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1100.321961][ T5867] m920x_read = error: -19 [ 1100.326353][ T5867] dvb-usb: error while querying for an remote control event. [ 1100.406282][T18044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1100.439915][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1100.599683][ T1202] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1100.644603][ T5867] m920x_read = error: -19 [ 1100.649686][ T5867] dvb-usb: error while querying for an remote control event. [ 1100.737888][T18053] syz.2.3154[18053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.737967][T18053] syz.2.3154[18053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.749579][T18053] syz.2.3154[18053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.751887][ T1202] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 1100.763015][ T5867] m920x_read = error: -19 [ 1100.776891][ T1202] usb 6-1: config 0 has no interface number 0 [ 1100.792416][T18054] syz.1.3153[18054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.792491][T18054] syz.1.3153[18054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.792830][ T1202] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1100.804473][T18054] syz.1.3153[18054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.815820][ T1202] usb 6-1: config 0 interface 199 altsetting 0 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1100.838108][ T5867] dvb-usb: error while querying for an remote control event. [ 1100.862559][ T1202] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0x85 has invalid maxpacket 62202, setting to 64 [ 1100.873792][ T1202] usb 6-1: config 0 interface 199 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1100.884741][ T1202] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1100.895759][ T1202] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1100.906757][ T1202] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1100.917865][ T1202] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1100.930941][ T1202] usb 6-1: config 0 interface 199 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1100.941741][ T1202] usb 6-1: config 0 interface 199 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 1100.954827][ T1202] usb 6-1: New USB device found, idVendor=0489, idProduct=e0da, bcdDevice=37.1c [ 1100.964904][ T1202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.062685][ T5867] m920x_read = error: -19 [ 1101.067082][ T5867] dvb-usb: error while querying for an remote control event. [ 1101.259540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1102.061328][ T5867] m920x_read = error: -19 [ 1102.065696][ T5867] dvb-usb: error while querying for an remote control event. [ 1102.105640][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 1102.105657][ T29] audit: type=1326 audit(1737009588.121:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18051 comm="syz.2.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1102.140324][ T29] audit: type=1326 audit(1737009588.181:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1102.299584][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1102.412100][ T29] audit: type=1326 audit(1737009588.181:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1102.435857][ T29] audit: type=1326 audit(1737009588.181:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1102.459621][ T29] audit: type=1326 audit(1737009588.281:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18051 comm="syz.2.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1102.483219][ T29] audit: type=1326 audit(1737009588.281:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18051 comm="syz.2.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1102.507350][ T29] audit: type=1326 audit(1737009588.281:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1102.531445][ T29] audit: type=1326 audit(1737009588.281:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1102.555015][ T29] audit: type=1326 audit(1737009588.281:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.1.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1102.578558][ T29] audit: type=1326 audit(1737009588.311:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18051 comm="syz.2.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1102.603682][ T1202] usb 6-1: config 0 descriptor?? [ 1102.664895][ T5868] m920x_read = error: -19 [ 1102.669252][ T5868] dvb-usb: error while querying for an remote control event. [ 1102.675377][ T1202] option 6-1:0.199: GSM modem (1-port) converter detected [ 1102.684891][ T5820] Bluetooth: hci6: command 0x0406 tx timeout [ 1102.692034][T16730] Bluetooth: hci8: command 0x0406 tx timeout [ 1102.692115][T16730] Bluetooth: hci1: command 0x0406 tx timeout [ 1102.898338][ T5868] m920x_read = error: -19 [ 1102.903560][ T5868] dvb-usb: error while querying for an remote control event. [ 1102.912680][T18042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.921776][T18042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.936160][ T5866] usb 6-1: USB disconnect, device number 22 [ 1102.948204][ T5866] option 6-1:0.199: device disconnected [ 1103.034822][T18068] 9pnet_virtio: no channels available for device syz [ 1103.215955][ T5867] m920x_read = error: -19 [ 1103.339266][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1103.464163][ T5867] dvb-usb: error while querying for an remote control event. [ 1103.583478][ T5868] m920x_read = error: -19 [ 1103.629872][ T5868] dvb-usb: error while querying for an remote control event. [ 1103.740228][ T5868] m920x_read = error: -19 [ 1103.745720][ T5868] dvb-usb: error while querying for an remote control event. [ 1103.870321][ T5868] m920x_read = error: -19 [ 1103.876599][ T5868] dvb-usb: error while querying for an remote control event. [ 1103.879387][ T1202] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1104.009479][ T5868] m920x_read = error: -19 [ 1104.013964][ T5868] dvb-usb: error while querying for an remote control event. [ 1104.089508][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 1104.149330][T18079] input: syz1 as /devices/virtual/input/input43 [ 1104.150914][ T5868] m920x_read = error: -19 [ 1104.176228][ T5868] dvb-usb: error while querying for an remote control event. [ 1104.193536][ T1202] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1104.209367][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.309576][ T5868] m920x_read = error: -19 [ 1104.311034][ T1202] usb 3-1: config 0 descriptor?? [ 1104.314091][ T5868] dvb-usb: error while querying for an remote control event. [ 1104.379287][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1104.429852][ T5822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1104.805309][ T1202] usbhid 3-1:0.0: can't add hid device: -32 [ 1104.811468][ T1202] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1104.846113][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 1104.911060][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 1104.922841][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 1104.934110][ T5822] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1104.943902][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.048715][ T1202] usb 3-1: USB disconnect, device number 32 [ 1105.090002][ T5822] usb 2-1: config 0 descriptor?? [ 1105.100043][ T5868] m920x_read = error: -19 [ 1105.104430][ T5868] dvb-usb: error while querying for an remote control event. [ 1105.119608][T18080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1105.239844][ T900] m920x_read = error: -19 [ 1105.244433][ T900] dvb-usb: error while querying for an remote control event. [ 1105.410151][ T900] m920x_read = error: -19 [ 1105.419039][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1105.432961][ T900] dvb-usb: error while querying for an remote control event. [ 1105.771902][ T900] m920x_read = error: -19 [ 1105.776483][ T900] dvb-usb: error while querying for an remote control event. [ 1106.019455][ T5822] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0019/input/input44 [ 1106.458922][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1106.663460][T18104] syz.2.3167[18104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1106.663555][T18104] syz.2.3167[18104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1106.675690][T18104] syz.2.3167[18104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1106.864065][ T900] m920x_read = error: -19 [ 1106.881049][ T900] dvb-usb: error while querying for an remote control event. [ 1106.892281][ T5822] appleir 0003:05AC:8241.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 1107.055650][ T5822] m920x_read = error: -19 [ 1107.217580][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 1107.217596][ T29] audit: type=1400 audit(1737009594.471:4941): avc: denied { read write } for pid=18105 comm="syz.7.3168" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1107.315797][ T5822] dvb-usb: error while querying for an remote control event. [ 1107.369728][T18106] veth0_to_team: entered promiscuous mode [ 1107.385811][T18106] veth0_to_team: entered allmulticast mode [ 1107.498810][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1107.526156][ T5822] m920x_read = error: -19 [ 1107.532975][ T5822] dvb-usb: error while querying for an remote control event. [ 1107.673228][ T29] audit: type=1400 audit(1737009594.471:4942): avc: denied { open } for pid=18105 comm="syz.7.3168" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1107.697803][ T5868] m920x_read = error: -19 [ 1107.702757][ T29] audit: type=1400 audit(1737009594.571:4943): avc: denied { ioctl } for pid=18105 comm="syz.7.3168" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1107.729158][ T5868] dvb-usb: error while querying for an remote control event. [ 1107.790508][ T29] audit: type=1400 audit(1737009594.571:4944): avc: denied { ioctl } for pid=18105 comm="syz.7.3168" path="socket:[62316]" dev="sockfs" ino=62316 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1107.903931][T16798] usb 2-1: USB disconnect, device number 20 [ 1107.927137][ T5822] m920x_read = error: -19 [ 1107.938402][ T29] audit: type=1400 audit(1737009594.711:4945): avc: denied { write } for pid=18109 comm="syz.5.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1107.939680][T16746] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 1107.970103][ T5822] dvb-usb: error while querying for an remote control event. [ 1108.024583][ T29] audit: type=1400 audit(1737009594.731:4946): avc: denied { read } for pid=18109 comm="syz.5.3169" lport=45641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1108.101475][ T5822] m920x_read = error: -19 [ 1108.107367][ T5822] dvb-usb: error while querying for an remote control event. [ 1108.312210][ T5822] m920x_read = error: -19 [ 1108.333001][ T29] audit: type=1400 audit(1737009594.801:4947): avc: denied { append } for pid=18109 comm="syz.5.3169" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1108.366621][ T5822] dvb-usb: error while querying for an remote control event. [ 1108.538697][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1108.567246][ T5822] m920x_read = error: -19 [ 1108.628873][ T5822] dvb-usb: error while querying for an remote control event. [ 1108.639061][ T29] audit: type=1400 audit(1737009595.571:4948): avc: denied { bind } for pid=18119 comm="syz.2.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.802094][ T5822] m920x_read = error: -19 [ 1108.812011][ T5822] dvb-usb: error while querying for an remote control event. [ 1108.827098][T18128] syz.1.3175[18128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1108.827153][T18128] syz.1.3175[18128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1108.838709][T18128] syz.1.3175[18128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1108.839593][ T29] audit: type=1400 audit(1737009595.571:4949): avc: denied { listen } for pid=18119 comm="syz.2.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1109.119132][ T29] audit: type=1400 audit(1737009595.571:4950): avc: denied { write } for pid=18119 comm="syz.2.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1109.578576][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1109.971385][ T5868] m920x_read = error: -19 [ 1109.975829][ T5868] dvb-usb: error while querying for an remote control event. [ 1110.088791][ T5822] m920x_read = error: -19 [ 1110.093235][ T5822] dvb-usb: error while querying for an remote control event. [ 1110.622325][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1110.960347][ T5822] m920x_read = error: -19 [ 1110.964774][ T5822] dvb-usb: error while querying for an remote control event. [ 1111.078538][ T5868] m920x_read = error: -19 [ 1111.085577][ T5868] dvb-usb: error while querying for an remote control event. [ 1111.228501][ T900] m920x_read = error: -19 [ 1111.233331][ T900] dvb-usb: error while querying for an remote control event. [ 1111.348469][ T5868] m920x_read = error: -19 [ 1111.353001][ T5868] dvb-usb: error while querying for an remote control event. [ 1111.488425][ T900] m920x_read = error: -19 [ 1111.492950][ T900] dvb-usb: error while querying for an remote control event. [ 1111.629241][ T900] m920x_read = error: -19 [ 1111.634235][ T900] dvb-usb: error while querying for an remote control event. [ 1111.658354][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1111.699109][ T5868] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1111.763997][ T900] m920x_read = error: -19 [ 1111.768967][ T900] dvb-usb: error while querying for an remote control event. [ 1111.869244][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 1111.883361][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.907314][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 1111.919813][ T5822] m920x_read = error: -19 [ 1111.924476][ T5822] dvb-usb: error while querying for an remote control event. [ 1111.959325][ T5868] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1111.996555][ T5868] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1112.088386][ T5866] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1112.202821][ T900] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1112.211075][ T5868] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1112.223223][ T5822] m920x_read = error: -19 [ 1112.227659][ T5822] dvb-usb: error while querying for an remote control event. [ 1112.246150][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.248926][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1112.265576][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.273644][ T5868] usb 2-1: Product: syz [ 1112.274821][ T5866] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1112.277795][ T5868] usb 2-1: Manufacturer: syz [ 1112.277816][ T5868] usb 2-1: SerialNumber: syz [ 1112.312521][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.460708][ T5867] m920x_read = error: -19 [ 1112.465090][ T5867] dvb-usb: error while querying for an remote control event. [ 1112.490765][ T5866] usb 8-1: config 0 descriptor?? [ 1112.517016][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1112.517032][ T29] audit: type=1400 audit(1737009599.772:5000): avc: denied { create } for pid=18162 comm="syz.2.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1112.575155][ T900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.586433][ T5822] m920x_read = error: -19 [ 1112.591992][ T5822] dvb-usb: error while querying for an remote control event. [ 1112.595423][ T29] audit: type=1400 audit(1737009599.772:5001): avc: denied { bind } for pid=18162 comm="syz.2.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1112.618894][ T900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.618958][ T900] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1112.618983][ T900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.629918][ T900] usb 4-1: config 0 descriptor?? [ 1112.684163][ T29] audit: type=1400 audit(1737009599.772:5002): avc: denied { name_bind } for pid=18162 comm="syz.2.3184" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1112.705286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1112.712984][ T29] audit: type=1400 audit(1737009599.772:5003): avc: denied { node_bind } for pid=18162 comm="syz.2.3184" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1112.739241][ T5822] m920x_read = error: -19 [ 1112.743711][ T5822] dvb-usb: error while querying for an remote control event. [ 1112.794222][ T5868] cdc_ncm 2-1:1.0: bind() failure [ 1112.803521][ T29] audit: type=1400 audit(1737009599.772:5004): avc: denied { connect } for pid=18162 comm="syz.2.3184" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1112.805575][ T5868] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1112.859653][ T5867] m920x_read = error: -19 [ 1112.864072][ T5867] dvb-usb: error while querying for an remote control event. [ 1112.873746][ T29] audit: type=1400 audit(1737009599.772:5005): avc: denied { name_connect } for pid=18162 comm="syz.2.3184" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1112.884364][ T5868] cdc_ncm 2-1:1.1: bind() failure [ 1112.895492][T16798] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1112.939695][ T29] audit: type=1400 audit(1737009599.792:5006): avc: denied { listen } for pid=18162 comm="syz.2.3184" lport=20001 faddr=::ffff:127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1112.978336][ T5867] m920x_read = error: -19 [ 1112.982752][ T5867] dvb-usb: error while querying for an remote control event. [ 1112.991674][ T5868] usb 2-1: USB disconnect, device number 21 [ 1113.029668][ T29] audit: type=1400 audit(1737009600.282:5007): avc: denied { module_request } for pid=18158 comm="syz.3.3182" kmod="ebt_statistic" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1113.068496][T16798] usb 3-1: Using ep0 maxpacket: 8 [ 1113.080272][T16798] usb 3-1: config 0 has no interfaces? [ 1113.106176][ T5867] m920x_read = error: -19 [ 1113.106262][T16798] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 1113.126358][ T5867] dvb-usb: error while querying for an remote control event. [ 1113.194258][T16798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.194288][T16798] usb 3-1: Product: syz [ 1113.194306][T16798] usb 3-1: Manufacturer: syz [ 1113.194323][T16798] usb 3-1: SerialNumber: syz [ 1113.196414][T16798] usb 3-1: config 0 descriptor?? [ 1113.286725][ T5868] m920x_read = error: -19 [ 1113.286746][ T5868] dvb-usb: error while querying for an remote control event. [ 1113.294418][ T900] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 1113.295006][ T900] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1113.348264][ T900] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 1113.364151][ T900] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 1113.389283][ T5868] m920x_read = error: -19 [ 1113.393745][ T5868] dvb-usb: error while querying for an remote control event. [ 1113.404110][ T900] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1113.421752][T18169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.438394][T18169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.508201][ T900] m920x_read = error: -19 [ 1113.516903][ T900] dvb-usb: error while querying for an remote control event. [ 1113.580606][ T900] usb 4-1: USB disconnect, device number 17 [ 1113.600670][ T900] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 1113.650303][ T5868] m920x_read = error: -19 [ 1113.655152][ T5868] dvb-usb: error while querying for an remote control event. [ 1113.690195][ T1202] usb 3-1: USB disconnect, device number 33 [ 1113.738159][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1113.778745][ T5868] m920x_read = error: -19 [ 1113.783126][ T5868] dvb-usb: error while querying for an remote control event. [ 1113.876444][ T29] audit: type=1326 audit(1737009601.132:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1113.900614][ T29] audit: type=1326 audit(1737009601.132:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18174 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1113.926128][T18175] syz.1.3186[18175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1113.926217][T18175] syz.1.3186[18175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1113.938799][T18175] syz.1.3186[18175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1113.950554][ T900] m920x_read = error: -19 [ 1113.968916][T16798] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1113.974897][ T900] dvb-usb: error while querying for an remote control event. [ 1114.128232][T16798] usb 6-1: Using ep0 maxpacket: 32 [ 1114.160192][T16798] usb 6-1: config 1 has an invalid interface number: 12 but max is 0 [ 1114.313594][ T5868] m920x_read = error: -19 [ 1114.359862][ T5868] dvb-usb: error while querying for an remote control event. [ 1114.531594][ T5868] m920x_read = error: -19 [ 1114.570991][ T5868] dvb-usb: error while querying for an remote control event. [ 1114.787561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1114.798640][ T5868] m920x_read = error: -19 [ 1114.803642][ T5868] dvb-usb: error while querying for an remote control event. [ 1114.805766][T16798] usb 6-1: config 1 has no interface number 0 [ 1114.817460][T16798] usb 6-1: config 1 interface 12 has no altsetting 0 [ 1114.824402][ T5866] razer 0003:1532:010E.001A: failed to enable macro keys: -71 [ 1114.834927][ T5866] razer 0003:1532:010E.001A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.7-1/input0 [ 1114.848937][ T5866] usb 8-1: USB disconnect, device number 33 [ 1114.864899][T16798] usb 6-1: New USB device found, idVendor=22b8, idProduct=2d95, bcdDevice=f0.b2 [ 1114.874155][T16798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.882825][T16798] usb 6-1: Product: syz [ 1114.887006][T16798] usb 6-1: Manufacturer: syz [ 1114.887577][T18179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3187'. [ 1114.892313][T16798] usb 6-1: SerialNumber: syz [ 1115.111487][ T5868] m920x_read = error: -19 [ 1115.115862][ T5868] dvb-usb: error while querying for an remote control event. [ 1115.817895][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1115.894101][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.009079][ T5867] m920x_read = error: -19 [ 1116.013446][ T5867] dvb-usb: error while querying for an remote control event. [ 1116.082208][T18193] sp0: Synchronizing with TNC [ 1116.134460][ T5867] m920x_read = error: -19 [ 1116.139051][ T5867] dvb-usb: error while querying for an remote control event. [ 1116.236971][T16798] usb 6-1: USB disconnect, device number 23 [ 1116.344169][T18202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'. [ 1116.388500][ T5867] m920x_read = error: -19 [ 1116.393334][ T5867] dvb-usb: error while querying for an remote control event. [ 1116.634936][ T5867] m920x_read = error: -19 [ 1116.639433][ T5867] dvb-usb: error while querying for an remote control event. [ 1116.857784][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1117.641615][ T5867] m920x_read = error: -19 [ 1117.646235][ T5867] dvb-usb: error while querying for an remote control event. [ 1117.838481][ T5868] m920x_read = error: -19 [ 1117.842998][ T5868] dvb-usb: error while querying for an remote control event. [ 1117.897741][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1118.188572][ T5867] m920x_read = error: -19 [ 1118.192952][ T5867] dvb-usb: error while querying for an remote control event. [ 1118.459740][ T5868] m920x_read = error: -19 [ 1118.464536][ T5868] dvb-usb: error while querying for an remote control event. [ 1118.604533][T18220] Bluetooth: MGMT ver 1.23 [ 1118.938044][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1119.432717][ T5867] m920x_read = error: -19 [ 1119.437082][ T5867] dvb-usb: error while querying for an remote control event. [ 1119.517686][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1119.517732][ T29] audit: type=1400 audit(1737009605.862:5076): avc: denied { write } for pid=18214 comm="syz.1.3197" path="socket:[63494]" dev="sockfs" ino=63494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1119.550592][ T5822] m920x_read = error: -19 [ 1119.555497][ T5822] dvb-usb: error while querying for an remote control event. [ 1119.947661][ T5870] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1119.977458][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1120.053950][ T5867] m920x_read = error: -19 [ 1120.057530][ T29] audit: type=1326 audit(1737009607.303:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.059071][T18227] syz.1.3200[18227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1120.084727][T18227] syz.1.3200[18227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1120.097483][T18227] syz.1.3200[18227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1120.114956][ T5867] dvb-usb: error while querying for an remote control event. [ 1120.190878][T18233] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3201'. [ 1120.200635][ T29] audit: type=1326 audit(1737009607.303:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.225171][ T29] audit: type=1326 audit(1737009607.313:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.249512][ T29] audit: type=1326 audit(1737009607.313:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.274367][ T29] audit: type=1326 audit(1737009607.313:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.298528][ T29] audit: type=1326 audit(1737009607.313:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.322964][ T29] audit: type=1326 audit(1737009607.313:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.567345][ T29] audit: type=1326 audit(1737009607.313:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.591776][ T29] audit: type=1326 audit(1737009607.313:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.1.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6308985d29 code=0x7ffc0000 [ 1120.668133][ T5822] m920x_read = error: -19 [ 1120.699628][ T5822] dvb-usb: error while querying for an remote control event. [ 1120.840585][ T5870] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1120.852911][ T5870] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1120.866823][ T5822] m920x_read = error: -19 [ 1120.866840][ T5822] dvb-usb: error while querying for an remote control event. [ 1120.938188][ T5870] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1120.977858][ T5822] m920x_read = error: -19 [ 1120.981749][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.982208][ T5822] dvb-usb: error while querying for an remote control event. [ 1121.017367][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1121.040946][T18213] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1121.051815][ T5870] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.097886][ T5822] m920x_read = error: -19 [ 1121.102761][ T5822] dvb-usb: error while querying for an remote control event. [ 1121.228448][ T5822] m920x_read = error: -19 [ 1121.232819][ T5822] dvb-usb: error while querying for an remote control event. [ 1121.288049][ T5870] usb 6-1: USB disconnect, device number 24 [ 1121.357785][ T5822] m920x_read = error: -19 [ 1121.362146][ T5822] dvb-usb: error while querying for an remote control event. [ 1121.644704][ T5868] m920x_read = error: -19 [ 1122.022705][ T5868] dvb-usb: error while querying for an remote control event. [ 1122.057331][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1122.236713][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 1122.375708][ T5868] m920x_read = error: -19 [ 1122.478447][ T5868] dvb-usb: error while querying for an remote control event. [ 1122.683436][ T5822] m920x_read = error: -19 [ 1122.688181][ T5822] dvb-usb: error while querying for an remote control event. [ 1122.837778][ T5822] m920x_read = error: -19 [ 1122.850970][ T5822] dvb-usb: error while querying for an remote control event. [ 1122.977139][ T5822] m920x_read = error: -19 [ 1122.981554][ T5822] dvb-usb: error while querying for an remote control event. [ 1123.097162][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1123.937191][ T5822] m920x_read = error: -19 [ 1123.941724][ T5822] dvb-usb: error while querying for an remote control event. [ 1123.989356][T18274] syz.5.3211[18274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1123.989438][T18274] syz.5.3211[18274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1124.002966][T18274] syz.5.3211[18274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1124.136981][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1124.205906][ T5822] m920x_read = error: -19 [ 1124.210370][ T5822] dvb-usb: error while querying for an remote control event. [ 1125.176866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1125.240426][T17994] m920x_read = error: -19 [ 1125.363587][T17994] dvb-usb: error while querying for an remote control event. [ 1125.483540][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 1125.483557][ T29] audit: type=1326 audit(1737009612.543:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.5.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1125.513825][ T5822] m920x_read = error: -19 [ 1125.565280][ T5822] dvb-usb: error while querying for an remote control event. [ 1125.574720][ T29] audit: type=1326 audit(1737009612.543:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18273 comm="syz.5.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1125.643142][T18288] can0: slcan on ttynull. [ 1125.739214][ T5822] m920x_read = error: -19 [ 1125.743699][ T5822] dvb-usb: error while querying for an remote control event. [ 1125.771881][ T29] audit: type=1400 audit(1737010126.035:5164): avc: denied { read write } for pid=18289 comm="syz.2.3216" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1125.833267][ T29] audit: type=1400 audit(1737010126.065:5165): avc: denied { open } for pid=18289 comm="syz.2.3216" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1125.889769][ T29] audit: type=1400 audit(1737010126.135:5166): avc: denied { bind } for pid=18286 comm="syz.3.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1125.929971][ T5822] m920x_read = error: -19 [ 1125.949386][ T5822] dvb-usb: error while querying for an remote control event. [ 1126.183477][ T29] audit: type=1400 audit(1737010126.135:5167): avc: denied { create } for pid=18286 comm="syz.3.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1126.216868][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1126.343837][T18286] can0 (unregistered): slcan off ttynull. [ 1126.358258][ T29] audit: type=1400 audit(1737010126.145:5168): avc: denied { write } for pid=18286 comm="syz.3.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1126.459311][ T5868] m920x_read = error: -19 [ 1126.465878][ T5868] dvb-usb: error while querying for an remote control event. [ 1126.610981][ T5868] m920x_read = error: -19 [ 1126.615390][ T5868] dvb-usb: error while querying for an remote control event. [ 1126.820881][ T29] audit: type=1400 audit(1737010126.145:5169): avc: denied { read } for pid=18286 comm="syz.3.3214" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1126.871740][ T29] audit: type=1400 audit(1737010126.145:5170): avc: denied { open } for pid=18286 comm="syz.3.3214" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1126.905277][ T5868] m920x_read = error: -19 [ 1126.927957][ T5868] dvb-usb: error while querying for an remote control event. [ 1126.996536][ T29] audit: type=1400 audit(1737010126.145:5171): avc: denied { ioctl } for pid=18286 comm="syz.3.3214" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1127.047931][ T900] m920x_read = error: -19 [ 1127.047949][ T900] dvb-usb: error while querying for an remote control event. [ 1127.137123][ T5866] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1127.157380][ T900] m920x_read = error: -19 [ 1127.157399][ T900] dvb-usb: error while querying for an remote control event. [ 1127.257227][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1127.267110][ T5866] usb 6-1: device descriptor read/64, error -71 [ 1127.277440][ T5868] m920x_read = error: -19 [ 1127.281814][ T5868] dvb-usb: error while querying for an remote control event. [ 1127.385618][T18308] syz.1.3220[18308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1127.385703][T18308] syz.1.3220[18308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1127.397918][T18308] syz.1.3220[18308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1127.458072][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3221'. [ 1127.510972][ T5866] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1127.621231][ T5868] m920x_read = error: -19 [ 1127.625616][ T5868] dvb-usb: error while querying for an remote control event. [ 1127.946604][ T900] m920x_read = error: -19 [ 1128.014535][ T900] dvb-usb: error while querying for an remote control event. [ 1128.183850][ T5866] usb 6-1: device descriptor read/64, error -71 [ 1128.297195][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1128.309441][ T5866] usb usb6-port1: attempt power cycle [ 1128.487695][ T5867] m920x_read = error: -19 [ 1128.492107][ T5867] dvb-usb: error while querying for an remote control event. [ 1128.628413][ T5867] m920x_read = error: -19 [ 1128.632792][ T5867] dvb-usb: error while querying for an remote control event. [ 1128.721908][T18319] syz.3.3224[18319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.721990][T18319] syz.3.3224[18319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1128.727256][ T5866] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1128.733697][T18319] syz.3.3224[18319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.337337][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1129.667399][ T900] m920x_read = error: -19 [ 1129.671778][ T900] dvb-usb: error while querying for an remote control event. [ 1129.694748][T16798] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1129.717715][ T5866] usb 6-1: device descriptor read/8, error -71 [ 1129.937860][T16798] usb 2-1: Using ep0 maxpacket: 8 [ 1129.953887][T16798] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1129.967233][T16798] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1129.993336][T16798] usb 2-1: Product: syz [ 1130.014410][T16798] usb 2-1: Manufacturer: syz [ 1130.158460][T16798] usb 2-1: SerialNumber: syz [ 1130.189222][T16798] usb 2-1: config 0 descriptor?? [ 1130.372755][T16798] gspca_main: se401-2.14.0 probing 047d:5003 [ 1130.378796][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1130.407168][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1130.653218][ T5868] m920x_read = error: -19 [ 1130.658112][ T5868] dvb-usb: error while querying for an remote control event. [ 1131.417512][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1131.565411][ T900] m920x_read = error: -19 [ 1131.569831][ T900] dvb-usb: error while querying for an remote control event. [ 1131.706802][ T5867] m920x_read = error: -19 [ 1131.711418][ T5867] dvb-usb: error while querying for an remote control event. [ 1131.719969][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1131.719984][ T29] audit: type=1400 audit(1737010131.404:5265): avc: denied { map } for pid=18324 comm="syz.5.3225" path="socket:[63665]" dev="sockfs" ino=63665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1131.754911][T16798] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 1131.762493][T16798] se401 2-1:0.0: probe with driver se401 failed with error -110 [ 1131.787865][ T29] audit: type=1326 audit(1737010132.024:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1131.814483][ T29] audit: type=1326 audit(1737010132.024:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1131.814907][T18335] syz.3.3228[18335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.841192][T18335] syz.3.3228[18335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.854266][T18335] syz.3.3228[18335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.866651][ T29] audit: type=1326 audit(1737010132.034:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1131.903413][ T5867] m920x_read = error: -19 [ 1132.007089][ T5867] dvb-usb: error while querying for an remote control event. [ 1132.457713][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1132.648433][ T5868] m920x_read = error: -19 [ 1132.652824][ T5868] dvb-usb: error while querying for an remote control event. [ 1132.698638][ T29] audit: type=1326 audit(1737010132.034:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1132.701720][ T5870] usb 2-1: USB disconnect, device number 22 [ 1132.722811][ T29] audit: type=1326 audit(1737010132.034:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1132.752396][ T29] audit: type=1326 audit(1737010132.034:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1132.776493][ T29] audit: type=1326 audit(1737010132.034:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1132.802700][ T29] audit: type=1326 audit(1737010132.034:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1132.826759][ T29] audit: type=1326 audit(1737010132.034:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18334 comm="syz.3.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1132.851897][ T5867] m920x_read = error: -19 [ 1132.856252][ T5867] dvb-usb: error while querying for an remote control event. [ 1133.117946][T18350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3231'. [ 1133.497773][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1133.539030][T18349] syz.2.3232[18349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1133.539151][T18349] syz.2.3232[18349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1133.551685][T18349] syz.2.3232[18349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1134.537904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1134.628029][ T5866] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1134.788027][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 1134.796539][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.827739][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.859599][ T5866] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1134.900318][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.931348][ T5866] usb 4-1: config 0 descriptor?? [ 1135.144316][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 1135.165996][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1135.216222][ T5866] usb 4-1: USB disconnect, device number 18 [ 1135.578410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1135.771767][T18365] syz.3.3235[18365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.771825][T18365] syz.3.3235[18365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.803688][T18365] syz.3.3235[18365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1136.618158][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1137.013819][T18253] sched: DL replenish lagged too much [ 1137.014108][ T5868] m920x_read = error: -19 [ 1137.024718][ T5868] dvb-usb: error while querying for an remote control event. [ 1137.206344][ T5867] m920x_read = error: -19 [ 1137.269135][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 1137.269153][ T29] audit: type=1326 audit(1737010137.523:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1137.330790][T18373] syz.2.3239[18373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1137.330872][T18373] syz.2.3239[18373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1137.342400][T18373] syz.2.3239[18373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1137.450644][ T29] audit: type=1326 audit(1737010137.563:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1137.658287][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1138.235265][ T5867] dvb-usb: error while querying for an remote control event. [ 1138.266084][ T29] audit: type=1326 audit(1737010137.573:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.313571][T18380] syz.1.3236[18380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1138.405845][ T29] audit: type=1326 audit(1737010137.573:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.441758][ T29] audit: type=1326 audit(1737010137.573:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.466394][ T29] audit: type=1326 audit(1737010137.573:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.490793][ T29] audit: type=1326 audit(1737010137.573:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.515174][ T29] audit: type=1326 audit(1737010137.573:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.539538][ T29] audit: type=1326 audit(1737010137.573:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.563967][ T29] audit: type=1326 audit(1737010137.573:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18371 comm="syz.2.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1138.589439][ T900] m920x_read = error: -19 [ 1138.594128][ T900] dvb-usb: error while querying for an remote control event. [ 1138.698422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1139.260538][ T5870] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1139.309493][ T5867] m920x_read = error: -19 [ 1139.313861][ T5867] dvb-usb: error while querying for an remote control event. [ 1139.526620][ T900] m920x_read = error: -19 [ 1139.545551][ T900] dvb-usb: error while querying for an remote control event. [ 1139.738588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1140.340831][ T5870] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1140.349072][ T5870] usb 4-1: config 0 has no interface number 0 [ 1140.355179][ T5870] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1140.368073][ T5870] usb 4-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1140.377408][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.386876][ T5870] usb 4-1: Product: syz [ 1140.391136][ T5866] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1140.538849][ T5870] usb 4-1: Manufacturer: syz [ 1140.543484][ T5870] usb 4-1: SerialNumber: syz [ 1140.547589][ T5867] m920x_read = error: -19 [ 1140.550934][ T5870] usb 4-1: config 0 descriptor?? [ 1140.552474][ T5867] dvb-usb: error while querying for an remote control event. [ 1140.740055][ T5870] usb 4-1: can't set config #0, error -71 [ 1140.746298][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1140.766808][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1140.775536][T16738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1140.782532][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1140.791892][T16738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1140.800992][T16738] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1140.809439][T16738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1140.833930][ T900] m920x_read = error: -19 [ 1140.838401][ T900] dvb-usb: error while querying for an remote control event. [ 1140.875966][ T5870] usb 4-1: USB disconnect, device number 19 [ 1140.950162][ T5867] m920x_read = error: -19 [ 1140.954519][ T5867] dvb-usb: error while querying for an remote control event. [ 1141.061917][T18393] bpf_get_probe_write_proto: 2 callbacks suppressed [ 1141.061933][T18393] syz.1.3245[18393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.068606][T18393] syz.1.3245[18393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.080933][T18393] syz.1.3245[18393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.271530][ T5867] m920x_read = error: -19 [ 1141.281526][T18398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3247'. [ 1141.322350][ T5867] dvb-usb: error while querying for an remote control event. [ 1141.351586][T18401] syz.3.3248[18401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.351663][T18401] syz.3.3248[18401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.363921][T18401] syz.3.3248[18401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.818790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1142.302496][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 1142.302516][ T29] audit: type=1804 audit(1737010142.433:5487): pid=18404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3245" name="/newroot/85/bus/bus" dev="overlay" ino=560 res=1 errno=0 [ 1142.399783][ T5867] m920x_read = error: -19 [ 1142.404153][ T5867] dvb-usb: error while querying for an remote control event. [ 1142.428867][ T29] audit: type=1326 audit(1737010142.623:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1142.580785][ T29] audit: type=1326 audit(1737010142.623:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1142.605195][ T29] audit: type=1326 audit(1737010142.652:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1142.629841][ T29] audit: type=1326 audit(1737010142.652:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1142.654290][ T29] audit: type=1326 audit(1737010142.652:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1142.724340][ T29] audit: type=1326 audit(1737010142.652:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdc02985d29 code=0x7ffc0000 [ 1142.807315][ T900] m920x_read = error: -19 [ 1142.811696][ T900] dvb-usb: error while querying for an remote control event. [ 1142.858924][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1142.866162][T16738] Bluetooth: hci2: command tx timeout [ 1142.869906][T18407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18407 comm=syz.5.3249 [ 1142.916347][T18381] chnl_net:caif_netlink_parms(): no params data found [ 1142.941780][ T5867] m920x_read = error: -19 [ 1142.946127][ T5867] dvb-usb: error while querying for an remote control event. [ 1142.988681][ T29] audit: type=1400 audit(1737010143.242:5494): avc: denied { bind } for pid=18394 comm="syz.2.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1143.059267][ T5867] m920x_read = error: -19 [ 1143.063692][ T5867] dvb-usb: error while querying for an remote control event. [ 1143.081956][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1143.099148][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1143.188454][ T29] audit: type=1400 audit(1737010143.332:5495): avc: denied { accept } for pid=18411 comm="syz.1.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1143.597144][ T29] audit: type=1400 audit(1737010143.332:5496): avc: denied { bind } for pid=18411 comm="syz.1.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1143.648578][ T5868] m920x_read = error: -19 [ 1143.653643][ T5868] dvb-usb: error while querying for an remote control event. [ 1143.838150][ T5867] m920x_read = error: -19 [ 1143.842546][ T5867] dvb-usb: error while querying for an remote control event. [ 1143.899131][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1144.484775][ T5868] m920x_read = error: -19 [ 1144.545453][ T5868] dvb-usb: error while querying for an remote control event. [ 1144.600072][T18381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.607170][T18381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.629971][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1144.654901][T18381] bridge_slave_0: entered allmulticast mode [ 1144.667956][T18428] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1144.681482][T18381] bridge_slave_0: entered promiscuous mode [ 1144.688506][T18381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.736347][T18381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.756720][T18381] bridge_slave_1: entered allmulticast mode [ 1144.765355][T18381] bridge_slave_1: entered promiscuous mode [ 1144.832422][T18381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.880538][T18381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.897382][ T5868] m920x_read = error: -19 [ 1144.902429][ T5868] dvb-usb: error while querying for an remote control event. [ 1144.939315][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1145.603410][T16738] Bluetooth: hci2: command tx timeout [ 1145.609025][ T900] m920x_read = error: -19 [ 1145.613899][ T900] dvb-usb: error while querying for an remote control event. [ 1145.654149][T18381] team0: Port device team_slave_0 added [ 1145.661807][T18381] team0: Port device team_slave_1 added [ 1145.775594][T18442] infiniband syz2: set active [ 1145.781149][T18442] infiniband syz2: added team_slave_1 [ 1145.815477][T18381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.824785][T18442] RDS/IB: syz2: added [ 1145.830300][T18442] smc: adding ib device syz2 with port count 1 [ 1145.836973][T18442] smc: ib device syz2 port 1 has pnetid [ 1145.847340][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.873836][T18381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.911638][T18381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.918587][T18381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.945177][T18381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.979336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1145.980632][ T900] m920x_read = error: -19 [ 1146.198183][ T900] dvb-usb: error while querying for an remote control event. [ 1146.322818][T18450] syz.1.3260[18450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1146.323222][T18450] syz.1.3260[18450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1146.335235][T18450] syz.1.3260[18450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.019443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1147.554640][T18452] syz.5.3259[18452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.554742][T18452] syz.5.3259[18452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.566310][T18452] syz.5.3259[18452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.765783][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1147.765826][ T29] audit: type=1326 audit(1737010147.272:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1147.808245][ T900] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1148.059895][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1148.091313][T16738] Bluetooth: hci2: command tx timeout [ 1148.996060][T18381] hsr_slave_0: entered promiscuous mode [ 1149.022157][ T29] audit: type=1326 audit(1737010147.272:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1149.069548][T18381] hsr_slave_1: entered promiscuous mode [ 1149.087846][T18463] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1149.094396][T18463] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 1149.099776][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1149.102613][T18463] audit: backlog limit exceeded [ 1149.114201][T18463] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1149.120970][T18463] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 1149.128662][T18463] audit: backlog limit exceeded [ 1149.134492][T18464] syz.5.3262[18464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.134594][T18464] syz.5.3262[18464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.146598][T18464] syz.5.3262[18464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.194171][T18381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.848807][ T5822] m920x_read = error: -19 [ 1149.853500][ T5822] dvb-usb: error while querying for an remote control event. [ 1149.970555][ T5867] m920x_read = error: -19 [ 1149.975177][ T5867] dvb-usb: error while querying for an remote control event. [ 1150.090532][ T5868] m920x_read = error: -19 [ 1150.139815][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1150.187445][T18381] Cannot create hsr debugfs directory [ 1150.193230][T16738] Bluetooth: hci2: command tx timeout [ 1150.364613][ T29] audit: type=1326 audit(1737010147.272:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1150.391510][ T29] audit: type=1326 audit(1737010147.302:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18446 comm="syz.5.3259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1150.439271][ T5868] dvb-usb: error while querying for an remote control event. [ 1151.180039][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1151.530539][ T5867] m920x_read = error: -19 [ 1151.530562][ T5867] dvb-usb: error while querying for an remote control event. [ 1151.643023][ T5867] m920x_read = error: -19 [ 1151.643044][ T5867] dvb-usb: error while querying for an remote control event. [ 1151.763417][T18381] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.792583][T18381] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.816161][T18488] syz.2.3270[18488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.816242][T18488] syz.2.3270[18488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.827766][T18488] syz.2.3270[18488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.994341][T18492] syz.5.3271[18492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.015465][ T5867] m920x_read = error: -19 [ 1152.031789][ T5867] dvb-usb: error while querying for an remote control event. [ 1152.045184][T18492] syz.5.3271[18492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.045322][T18492] syz.5.3271[18492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1152.220137][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1153.024418][T18381] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.033204][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 1153.033219][ T29] audit: type=1326 audit(1737010152.931:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18487 comm="syz.2.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4799785d29 code=0x7ffc0000 [ 1153.034917][T18381] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.047550][ T5822] m920x_read = error: -19 [ 1153.101242][ T5822] dvb-usb: error while querying for an remote control event. [ 1153.216235][ T29] audit: type=1400 audit(1737010153.471:5676): avc: denied { read } for pid=18497 comm="syz.1.3272" dev="nsfs" ino=4026532943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1153.238220][ T5867] m920x_read = error: -19 [ 1153.242719][ T5867] dvb-usb: error while querying for an remote control event. [ 1153.260201][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1153.281320][ T29] audit: type=1400 audit(1737010153.471:5677): avc: denied { open } for pid=18497 comm="syz.1.3272" path="net:[4026532943]" dev="nsfs" ino=4026532943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1153.335470][ T29] audit: type=1400 audit(1737010153.471:5678): avc: denied { create } for pid=18497 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.361016][ T5867] m920x_read = error: -19 [ 1153.365360][ T5867] dvb-usb: error while querying for an remote control event. [ 1153.403011][ T29] audit: type=1400 audit(1737010153.541:5679): avc: denied { map_create } for pid=18497 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1153.456596][ T29] audit: type=1400 audit(1737010153.541:5680): avc: denied { map_read map_write } for pid=18497 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1153.506543][ T5867] m920x_read = error: -19 [ 1153.511016][ T5867] dvb-usb: error while querying for an remote control event. [ 1153.531304][T18381] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.549501][ T29] audit: type=1400 audit(1737010153.541:5681): avc: denied { read } for pid=18499 comm="syz.2.3273" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1153.591176][T18381] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.650728][ T900] m920x_read = error: -19 [ 1153.655197][ T900] dvb-usb: error while querying for an remote control event. [ 1153.970414][ T900] m920x_read = error: -19 [ 1153.974775][ T900] dvb-usb: error while querying for an remote control event. [ 1153.990204][ T29] audit: type=1400 audit(1737010153.541:5682): avc: denied { open } for pid=18499 comm="syz.2.3273" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1154.013898][ T29] audit: type=1400 audit(1737010153.741:5683): avc: denied { create } for pid=18499 comm="syz.2.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1154.034055][ T29] audit: type=1400 audit(1737010153.751:5684): avc: denied { bind } for pid=18499 comm="syz.2.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1154.091373][ T5822] m920x_read = error: -19 [ 1154.095729][ T5822] dvb-usb: error while querying for an remote control event. [ 1154.106388][T18381] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.140540][T18381] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.210353][ T900] m920x_read = error: -19 [ 1154.214797][ T5867] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1154.222753][ T900] dvb-usb: error while querying for an remote control event. [ 1154.300324][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1154.340947][ T900] m920x_read = error: -19 [ 1154.345562][ T900] dvb-usb: error while querying for an remote control event. [ 1154.409625][ T5867] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1154.517973][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.634702][ T900] m920x_read = error: -19 [ 1154.668181][ T900] dvb-usb: error while querying for an remote control event. [ 1154.710099][ T5867] usb 3-1: config 0 descriptor?? [ 1154.761236][ T5867] cp210x 3-1:0.0: cp210x converter detected [ 1154.850993][ T5822] m920x_read = error: -19 [ 1154.857677][ T5822] dvb-usb: error while querying for an remote control event. [ 1154.870052][T18517] netlink: 'syz.5.3279': attribute type 5 has an invalid length. [ 1155.350468][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1155.606255][T18381] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1155.613021][ T900] m920x_read = error: -19 [ 1155.613059][ T900] dvb-usb: error while querying for an remote control event. [ 1156.380582][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1156.443661][T18381] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1156.461289][T18381] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1156.536941][T18381] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1156.556975][ T5822] m920x_read = error: -19 [ 1156.561541][ T5822] dvb-usb: error while querying for an remote control event. [ 1156.570079][T18525] syz.1.3281[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.570159][T18525] syz.1.3281[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.582376][T18525] syz.1.3281[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1156.763219][ T5822] m920x_read = error: -19 [ 1156.782221][ T5822] dvb-usb: error while querying for an remote control event. [ 1156.789918][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1156.803081][ T5867] usb 3-1: USB disconnect, device number 34 [ 1156.867025][T18532] overlayfs: failed to resolve './file0': -2 [ 1157.396643][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1157.405195][ T5867] cp210x 3-1:0.0: device disconnected [ 1157.412934][ T900] m920x_read = error: -19 [ 1157.417312][ T900] dvb-usb: error while querying for an remote control event. [ 1157.420750][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1157.450048][T18538] syz.5.3284[18538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.450150][T18538] syz.5.3284[18538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.462197][T18538] syz.5.3284[18538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1157.654556][ T900] m920x_read = error: -19 [ 1157.700068][ T900] dvb-usb: error while querying for an remote control event. [ 1157.956571][ T900] m920x_read = error: -19 [ 1157.976546][ T900] dvb-usb: error while querying for an remote control event. [ 1158.191773][ T900] m920x_read = error: -19 [ 1158.196580][ T900] dvb-usb: error while querying for an remote control event. [ 1158.328015][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 1158.328033][ T29] audit: type=1326 audit(1737010157.731:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.5.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1158.357615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.400995][ T29] audit: type=1326 audit(1737010157.731:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.5.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1158.443349][ T29] audit: type=1326 audit(1737010157.731:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18537 comm="syz.5.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f1385d29 code=0x7ffc0000 [ 1158.467059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1158.503594][ T5868] m920x_read = error: -19 [ 1158.508136][ T5868] dvb-usb: error while querying for an remote control event. [ 1159.500858][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1160.541055][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1161.580852][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1162.620857][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1163.660854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1164.700858][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1165.740914][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1166.780860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1167.820866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1168.860903][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1169.900866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1170.940863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1171.980871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1173.020865][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1174.060870][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1175.100872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1176.140872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1177.187606][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1178.220879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1179.260891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1180.300880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1181.340900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1182.380880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1183.420888][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1184.460883][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1185.500884][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1186.540890][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1187.580888][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1188.620910][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1189.660890][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1190.700890][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1191.740953][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1192.780900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1193.820896][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1194.860898][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1195.900906][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1196.940900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1197.980900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1199.020906][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1200.060929][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1201.100908][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1202.140917][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1203.180909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1204.220915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1205.260912][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1206.300916][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1207.340923][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1208.380915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1209.420922][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1210.460946][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1211.500926][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1212.540924][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1213.580924][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1214.620928][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1215.660930][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1216.700936][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1217.740987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1218.780932][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1219.820937][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1220.860934][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1221.900959][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1222.940937][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1223.980948][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1225.020940][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.060941][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1227.100944][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1228.140946][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1229.180954][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1230.220947][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1231.260951][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1232.300951][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1233.340952][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1234.380953][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1235.420976][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1236.460957][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1237.500963][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1238.540962][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1239.580960][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1240.620967][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1241.660969][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1242.700965][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1243.746272][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1244.780965][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1245.820968][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1246.860975][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1247.900972][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1248.940975][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1249.980981][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1251.020976][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1252.060978][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1253.100984][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1254.140977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1255.181012][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1256.220995][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1257.260985][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1258.300989][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1259.341009][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1260.381026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1261.420993][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1262.461009][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1263.500993][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1263.540937][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1263.547880][ C0] rcu: 1-...!: (0 ticks this GP) idle=263c/1/0x4000000000000000 softirq=68781/68781 fqs=0 [ 1263.559706][ C0] rcu: (detected by 0, t=10502 jiffies, g=74961, q=341 ncpus=2) [ 1263.567444][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1263.567473][ C1] NMI backtrace for cpu 1 [ 1263.567487][ C1] CPU: 1 UID: 0 PID: 18481 Comm: syz.3.3267 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 1263.567511][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1263.567523][ C1] RIP: 0010:lock_acquire.part.0+0x4b/0x380 [ 1263.567554][ C1] Code: 81 ec a8 00 00 00 48 c7 44 24 08 b3 8a b5 41 48 8d 5c 24 08 48 c7 44 24 10 a9 a1 94 8d 48 c1 eb 03 48 c7 44 24 18 50 da 76 81 <48> 8d 04 13 c7 00 f1 f1 f1 f1 c7 40 04 f1 f1 00 00 c7 40 08 00 00 [ 1263.567572][ C1] RSP: 0000:ffffc90000a18c98 EFLAGS: 00000802 [ 1263.567588][ C1] RAX: 0000000000000001 RBX: 1ffff92000143194 RCX: 0000000000000002 [ 1263.567602][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8e1bb900 [ 1263.567615][ C1] RBP: ffff88803565c810 R08: 0000000000000000 R09: 0000000000000000 [ 1263.567629][ C1] R10: ffffffff905f4997 R11: 0000000000000000 R12: 0000000000000000 [ 1263.567641][ C1] R13: ffffffff8e1bb900 R14: 0000000000000000 R15: 0000000000000000 [ 1263.567654][ C1] FS: 00007fdc036dc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1263.567675][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.567689][ C1] CR2: 0000000020c6f030 CR3: 0000000038b68000 CR4: 00000000003526f0 [ 1263.567703][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1263.567715][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1263.567728][ C1] Call Trace: [ 1263.567734][ C1] [ 1263.567744][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1263.567770][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1263.567790][ C1] ? nmi_handle+0x1ac/0x5d0 [ 1263.567812][ C1] ? lock_acquire.part.0+0x4b/0x380 [ 1263.567834][ C1] ? default_do_nmi+0x6a/0x160 [ 1263.567855][ C1] ? exc_nmi+0x170/0x1e0 [ 1263.567875][ C1] ? end_repeat_nmi+0xf/0x53 [ 1263.567907][ C1] ? lock_acquire.part.0+0x4b/0x380 [ 1263.567930][ C1] ? lock_acquire.part.0+0x4b/0x380 [ 1263.567953][ C1] ? lock_acquire.part.0+0x4b/0x380 [ 1263.567975][ C1] [ 1263.567982][ C1] [ 1263.567989][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1263.568011][ C1] ? rcu_is_watching+0x12/0xc0 [ 1263.568038][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1263.568068][ C1] ? advance_sched+0x679/0xc60 [ 1263.568089][ C1] ? lock_acquire+0x2f/0xb0 [ 1263.568109][ C1] ? advance_sched+0x679/0xc60 [ 1263.568130][ C1] advance_sched+0x67f/0xc60 [ 1263.568149][ C1] ? advance_sched+0x679/0xc60 [ 1263.568175][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1263.568195][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 1263.568225][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1263.568252][ C1] ? read_tsc+0x9/0x20 [ 1263.568281][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1263.568313][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1263.568338][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1263.568368][ C1] [ 1263.568374][ C1] [ 1263.568381][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1263.568409][ C1] RIP: 0010:copy_msghdr_from_user+0x91/0x160 [ 1263.568432][ C1] Code: 00 48 89 84 24 98 00 00 00 31 c0 e8 99 e0 99 f8 31 c0 b9 07 00 00 00 48 89 ee 4c 8d 7c 24 20 ba 38 00 00 00 4c 89 ff f3 48 ab <4c> 89 ff e8 f7 17 a0 fb 31 ff 48 89 c5 48 89 c6 e8 9a db 99 f8 48 [ 1263.568450][ C1] RSP: 0000:ffffc9000f577a88 EFLAGS: 00000246 [ 1263.568465][ C1] RAX: 0000000000000000 RBX: 1ffff92001eaef51 RCX: 0000000000000000 [ 1263.568478][ C1] RDX: 0000000000000038 RSI: 0000000020c6f6c0 RDI: ffffc9000f577ae0 [ 1263.568491][ C1] RBP: 0000000020c6f6c0 R08: 0000000000000005 R09: 0000000000000000 [ 1263.568503][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc9000f577d98 [ 1263.568516][ C1] R13: ffffc9000f577bb0 R14: ffffc9000f577b90 R15: ffffc9000f577aa8 [ 1263.568537][ C1] ? copy_msghdr_from_user+0x77/0x160 [ 1263.568557][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1263.568581][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1263.568604][ C1] ___sys_recvmsg+0xdc/0x1a0 [ 1263.568624][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1263.568643][ C1] ? find_held_lock+0x2d/0x110 [ 1263.568676][ C1] ? __pfx___might_resched+0x10/0x10 [ 1263.568701][ C1] ? __might_fault+0xe3/0x190 [ 1263.568729][ C1] do_recvmmsg+0x2f8/0x740 [ 1263.568750][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1263.568770][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 1263.568790][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 1263.568817][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 1263.568838][ C1] ? __pfx_lock_release+0x10/0x10 [ 1263.568862][ C1] __x64_sys_recvmmsg+0x239/0x290 [ 1263.568884][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1263.568906][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 1263.568929][ C1] do_syscall_64+0xcd/0x250 [ 1263.568957][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.568984][ C1] RIP: 0033:0x7fdc02985d29 [ 1263.569002][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.569020][ C1] RSP: 002b:00007fdc036dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1263.569038][ C1] RAX: ffffffffffffffda RBX: 00007fdc02b76080 RCX: 00007fdc02985d29 [ 1263.569051][ C1] RDX: 000000000400034f RSI: 0000000020000480 RDI: 0000000000000004 [ 1263.569064][ C1] RBP: 00007fdc02a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1263.569077][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1263.569090][ C1] R13: 0000000000000001 R14: 00007fdc02b76080 R15: 00007ffcf91a1f38 [ 1263.569109][ C1] [ 1263.569468][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g74961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1264.115003][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=73574 [ 1264.122889][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g74961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1264.134259][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1264.144226][ C0] rcu: RCU grace-period kthread stack dump: [ 1264.150111][ C0] task:rcu_preempt state:I stack:28320 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1264.160316][ C0] Call Trace: [ 1264.163597][ C0] [ 1264.166535][ C0] __schedule+0xe58/0x5ad0 [ 1264.170967][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1264.176187][ C0] ? __pfx___schedule+0x10/0x10 [ 1264.181047][ C0] ? schedule+0x298/0x350 [ 1264.185389][ C0] ? __pfx_lock_release+0x10/0x10 [ 1264.190424][ C0] ? lock_acquire+0x2f/0xb0 [ 1264.194930][ C0] ? schedule+0x1fd/0x350 [ 1264.199276][ C0] schedule+0xe7/0x350 [ 1264.203355][ C0] schedule_timeout+0x124/0x280 [ 1264.208215][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1264.213596][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1264.218902][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1264.224717][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1264.230188][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1264.234961][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1264.240254][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1264.244941][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1264.250154][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1264.255972][ C0] rcu_gp_kthread+0x271/0x380 [ 1264.260657][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1264.265863][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1264.271078][ C0] ? __kthread_parkme+0x148/0x220 [ 1264.276120][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1264.281328][ C0] kthread+0x2c1/0x3a0 [ 1264.285408][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1264.290613][ C0] ? __pfx_kthread+0x10/0x10 [ 1264.295216][ C0] ret_from_fork+0x45/0x80 [ 1264.299636][ C0] ? __pfx_kthread+0x10/0x10 [ 1264.304244][ C0] ret_from_fork_asm+0x1a/0x30 [ 1264.309034][ C0] [ 1264.541035][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1265.581004][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1266.621000][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1267.660998][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1268.701009][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1269.741061][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1270.781003][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1271.821013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1272.861005][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available