last executing test programs: 2m21.452122421s ago: executing program 0 (id=617): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x54000050, &(0x7f000015a000/0x1000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2m20.51113896s ago: executing program 0 (id=621): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) setregid(0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_pidfd_open(r1, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pidfd_getfd(r4, r5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 2m20.086220676s ago: executing program 0 (id=624): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async, rerun: 32) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x9, 0x4000) (async) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000440)=""/60, 0x3c}], 0x1, 0x0, 0x6) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000540)=""/71, 0x72) (async) r4 = io_uring_setup(0x30d9, &(0x7f00000004c0)={0x0, 0xcb76, 0x4, 0x0, 0x182}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x1b, 0x20000038, r5) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001680)=[{&(0x7f000001d740)=""/4110, 0x100e}], 0x1, &(0x7f00000016c0)=""/150, 0x96}, 0x965}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/190, 0xbe}, {&(0x7f00000018c0)=""/117, 0x75}, {&(0x7f0000001940)=""/70, 0x46}], 0x3, &(0x7f000001c700)=""/4100, 0x1004}, 0x8}, {{&(0x7f0000001a00)=@qipcrtr, 0x80, &(0x7f0000001ac0), 0x0, &(0x7f0000001b00)=""/81, 0x51}}, {{&(0x7f0000000680)=@llc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/126, 0x7e}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f0000000940)=""/125, 0x7d}], 0x4, &(0x7f0000000a00)=""/247, 0xf7}, 0x9}, {{&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/2, 0x2}, {&(0x7f0000000bc0)=""/4, 0x4}, {&(0x7f0000000c00)=""/216, 0xd8}], 0x3, &(0x7f0000000d40)=""/223, 0xdf}, 0x9}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/49, 0x31}], 0x1, &(0x7f0000000f40)=""/163, 0xa3}, 0xff}], 0x6, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) fstat(0xffffffffffffffff, 0x0) (async) madvise(&(0x7f000087c000/0x4000)=nil, 0x4000, 0x4) 2m19.942033383s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x198}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e"], 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120101028973fdffd112b6dd9f00010203010902120001c520d00709041ee200ff011560c9d4fccb00f80baec851fd8d7498c48c658b92c15a8d390000000000000000000000001ab1549c246372e3d7ff0ba37c7da0856fab"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2m18.491848068s ago: executing program 1 (id=629): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sync() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_vhci(0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="73ab50b23324238f2b6106b5a365422a4e795546312d75a563a1305452fe240465f0834adc8ff6eeb3e6c1fef95890dfe97826da9f1df1dea68a3455dfc8bed1d378fb98b717fb26c377efaf4c45bb8b728a8674a59255b1", 0x58) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xd3f, 0x10000, 0x0, 0x24a}, &(0x7f0000000100), &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x124, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xdc, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x124}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0xffc0}}}}}}, 0x0) 2m17.116308344s ago: executing program 2 (id=632): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x100000001, 0x4) ftruncate(0xffffffffffffffff, 0x8800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16, @ANYRES64=0x0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES8=r1, @ANYRES64=r3, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$kvm(0x0, &(0x7f00000001c0), 0x2b82, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='veth1_to_hsr\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r5, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00007a2000/0x4000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd4, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r5, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) close(r5) r6 = dup(r4) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) read$FUSE(r6, &(0x7f00000088c0)={0x2020}, 0x2020) 2m16.741951796s ago: executing program 1 (id=635): socket(0x10, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xffffffffffffffff) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r7, 0x0, r7) eventfd(0x3) 2m15.160595745s ago: executing program 2 (id=636): memfd_secret(0x80000) bind$unix(0xffffffffffffffff, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x21, 0x803, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x11, 0x0, {0x4}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="8c0000005100"/20], &(0x7f00000000c0), 0x1000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4003516, 0x0, 0x0, 0x0, 0xfffffffffffffe57) 2m14.489625483s ago: executing program 0 (id=638): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000e00)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0xc000, 0x0) io_uring_enter(r6, 0x493f, 0xbb7a, 0x11, &(0x7f0000000240)={[0x28]}, 0x8) ppoll(&(0x7f0000000140)=[{r4, 0x80ad93555e0c34fe}, {r5, 0x1510}], 0x2, 0x0, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x3, "8686d7cb55e4ee1dd458373e3f183675760aca2d63c7d4ca072f31f8959bce00"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 2m14.258032389s ago: executing program 2 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r4, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000645a6d5d5d0de991bbc89d28be3b884c058000784f0c40000c00000186dd061000090180c200000bfe8800000000000000e8fd7b2a377624b9306e5a00000000000001000000000000fc00023655d7b1efe0114f4f1eeabb9db30c699aa06165e085ebb5d9fa50ae3b58bfcc2c5ef82d94f92f976595bcfd2440055afb570a82d878d05a0625c6d35f96051b9a40ef9636cdd220c8"], 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mount(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000300)='devpts\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\x89\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00', [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xff000000], 'veth0_virt_wifi\x00', 'tunl0\x00', {}, {0xff}, 0x33, 0xfb, 0x4, 0x63}, 0x0, 0x258, 0x278}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xfcf5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000280)='virtiofs\x00', 0x9001, &(0x7f0000000240)='\x84lM@\r\x91\xf4\x02x\xaeO\xf4\xc9\xa3f\x9e\x12\x06y\xf5\xe7@\xdc@r\x9ct\xdfy;\x16\x15') chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) 2m13.040045507s ago: executing program 1 (id=645): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sync() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_vhci(0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="73ab50b23324238f2b6106b5a365422a4e795546312d75a563a1305452fe240465f0834adc8ff6eeb3e6c1fef95890dfe97826da9f1df1dea68a3455dfc8bed1d378fb98b717fb26c377efaf4c45bb8b728a8674a59255b1", 0x58) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xd3f, 0x10000, 0x0, 0x24a}, &(0x7f0000000100), &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x124, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xdc, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x124}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0xffc0}}}}}}, 0x0) 2m11.110046663s ago: executing program 0 (id=647): syz_open_dev$usbfs(&(0x7f0000000080), 0xc, 0xca002) syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f000000400000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x7fffffff, 0x6, 0x2, 0x8, '].f', 0x5}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65af65c7f91800028014080700ff010000000000000000000000000001"], 0x48}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x149380, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122000009051d03"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) kexec_load(0x10000000200000, 0x0, 0x0, 0x3e0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f00007d0000)) setpriority(0x1, 0x0, 0x9) syz_usb_connect(0x3, 0x4a, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x0) 2m10.952555543s ago: executing program 1 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x198}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120101028973fdffd112b6dd9f00010203010902120001c520d00709041ee200ff011560c9d4fccb00f80baec851fd8d7498c48c658b92c15a8d390000000000000000000000001ab1549c246372e3d7ff0ba37c7da0856fab"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2m10.851435171s ago: executing program 2 (id=649): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000040)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @alu={0x4, 0x0, 0x2, 0x2, 0xb, 0xfffffffffffffffe, 0x10}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x1, 0x1, 0x3, 0x3, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @exit], &(0x7f0000000100)='GPL\x00', 0xe, 0x8d, &(0x7f0000000140)=""/141, 0x41000, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x8001, 0x100}, 0x10, 0x13f67, 0xffffffffffffffff, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x2, 0x5, 0x8, 0x9}, {0x0, 0x4, 0x8, 0x2}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0xfffffffa, @void, @value}, 0x94) r1 = fanotify_init(0x2, 0x800) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000400)={0x4801, r0}, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x50, '\x00', 0x0, r2, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000006c0)={@rand_addr, 0x0}, &(0x7f0000000700)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0xe, 0x85, &(0x7f0000000600)=""/133, 0x40f00, 0x28, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xd, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[r2], &(0x7f0000000800)=[{0x3, 0x2, 0xf, 0xa}, {0x3, 0x3, 0x5, 0x8}, {0x4, 0x2, 0x7, 0x7}, {0x4, 0x3, 0x10, 0x7}, {0x2, 0x5, 0x6}, {0x5, 0x3, 0xd}, {0x5, 0x2, 0x3, 0x4}], 0x10, 0xf8dc0000, @void, @value}, 0x94) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000940)={0x0, 0x0, @pic={0x5, 0x9, 0x3, 0x4, 0x9, 0x7, 0x5, 0x36, 0x75, 0x0, 0x5, 0x0, 0xc9, 0x1, 0x4, 0xce}}) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000b80)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000bc0)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xd8, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9bd1a13dd4816c2223bc1f773cc40d45a1966d300c6b20e8"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x44045) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x149000, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@newtclass={0x2c, 0x28, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {0xffe0, 0x10}, {0xb, 0x4}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc65afa28c84b3d06) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x4, 0x9, 0x98c, 0x6, 0x10000, r2, 0x7, '\x00', r4, r2, 0x3, 0x4, 0x1, 0x0, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x6, &(0x7f0000000f80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000fc0)='syzkaller\x00', 0xfff, 0x83, &(0x7f0000001000)=""/131, 0x41100, 0x2, '\x00', r4, 0x25, r7, 0x8, &(0x7f00000010c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x7, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000011c0)=[r8, r3], &(0x7f0000001200)=[{0x0, 0x4, 0xe, 0xc}, {0x3, 0x4, 0x5, 0x7}, {0x1, 0x4, 0xc, 0xb}, {0x5, 0x1, 0x10}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$inet(r6, &(0x7f0000001b40)={&(0x7f0000001300)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001340)="21d9bbe8e13982f4dc6cfd710753c87c51ce9a3be63f2ea2bea80b6d788fdb91383108df2c56cf264bfe95383730a224aa374b89bf579f573303b900b0f84b954c5babfcb6f7998fe6701917d2ddc3b743a66150e78c9a8557ff53366e9b1e9eb56b91e82e27194e93470cf2447a66dd88d8a17638bb572af299f62c5bbe7d68c11dbf690e512d24f0990499f3bc2d380158678e41c7c212975e4233f8b7d95b6c3cd050d1620a6d3decfcc5545a576b1563168b7ec35b7a96003b736d951942c621b36ea4d9c7769d92b126909d2ac08b5b9b68b607f3539e2a11d629e73a57be109abf84c0f054a25c2f8e6b", 0xed}, {&(0x7f0000001440)="c93c397a450ad8adb2d0e7b980a9aafd77dcd5630c1c32466b77b728dbcf2bd27f485d7682c1989403adc5817dccdb09d81feb2373c14c65e4608f3f31e45ae965abd3dddfc33ea371db44f0ee43d71cba8a5efa4a6b9afbbfe120a78198744ee48a", 0x62}, {&(0x7f00000014c0)="6ba64ed7ad96364186468968e7d3614d5ad7f643836707108d2f835d8bb19df9e5b9ea5acb3f2a5824acefaeaaafa810f558685156b61967ddfe61bc68cb2d6f9172e3943c540dacfcbc8080fc8fe148b6dca8f3d0ad21fe9e1269fff4e05db4828f119b76e12393cd522cc902c749c2562700ff942e4a0ecabdacc9f182b1bd77a70ba422ddd41d84900619689e8412ff82c1d11e9b3a878528b85af4b1311e7f15b6aeccb329543d0e385e7d3a9ceb63ea207143c49876b3f208eb15125aaa70aafc8daa8f8d387350ae8de8cbf04a2392f7f2b14a9044de383d62d0bea9e87f1ec5bf4abe95ea321631", 0xeb}, {&(0x7f00000015c0)="e2e3ecc5475f27c5b09fc66a3e0433dd5c6932c1e6875b208d70b1859527a07347076d5f82bad41e9e89090398580323baa07bfd969f4ff0df97eb1e67b4666addf3c80b05e9f003775afa485626fa346effb04c8c6c0a576711b2734bbc6764812408215953ae5427ea6fb40026e14d776de23c33a747071cbc1d3dc7d590dc0e84ced02359a868269df9abda046b78000519811999f5c089088c337ec9885a9103ea9b98a4a9bcd0904bbc925f80f6df4cd4121a", 0xb5}, {&(0x7f0000001680)="93f160e095f42b45829428ed53a2ab910783aca9249c7408b86047dd8021adb7312d90f6b9299e84b73472e6478e3fd01f2a6334dc09285082f83d773022048874777f36f74dfd8f436ad9d3c022eed82a", 0x51}, {&(0x7f0000001700)="e06e7754faecbc99781846e1465a4ac4e11ad997e9789c792d5d3e83fb5d9b8305de8416f508a002633080569c6a6513dbb74326967bece1e2f62e8e22c4f1d5831387444aa0326b7de02de0f2bb321703e184f47ed999ab0b6e8cb2d8ff860158d6233650ecca57f806eae495ad30f91ce8fa439ad145d97fb70f4e17a9eca09a53862ed6f43eb82bee99d2c14a49e85a85b313", 0x94}, {&(0x7f00000017c0)="82d270500f276707edefe795b6ca2275cd30d4f9b668cd4ccb3d8fef613f96287c06eacd34503203c9df8ad488fa05233a88c984ce25d5d6d8732664beca0f8747dc154ff7c5fceb3cc0aaac4f412edb7d8b6a6c13eea4bb6a4d45a8ad", 0x5d}, {&(0x7f0000001840)="fe494ebd3e0ff9a03890ecfe2eaec27f8f828dd5182d680e66f35da813405dd7dc0bbbdcdf57f94c52aff72d34425a229807d7ecccbc6fae4910eeaa7561199a98f5147b109a7aa3a275ab76ec0f1599b2a02cb5c47955da23125dc86a2736667acba4a6de7fb825711b37bfe15db09b8032678e1a2289851c28f8", 0x7b}, {&(0x7f00000018c0)="be4c4d11cd25896d9fb1c851200bb4e315cfdb79cea7eee603c7535401be64229e0043a21bf2102dbb93a00f54b921123942eaeeddc7b721dada53aa564c", 0x3e}, {&(0x7f0000001900)="43cf21df2820a1d8814cf11edc66ce22d25c244df1e9f16d6fcb9f7067e30dc8d647943132aa6c1f80b1dcde9f64c3e490a1e1d2d5d800522f6a0549053d532cca732234273da439614ecacd3c88f93794951e5ca051306fda352dbb3181c2d6afd2322d1edd9bd912320267666173883b58fdb8730e0ce7f0057c4e7be468b5406a2746a80cf720a38b53393e2c6d9e90cbbafa9cf0871ab09aef733bba57e9e95ad48f05e0c3a6eaba9189b2c257e3d0de931185ec38c97d078bf5cea959f92ac9dd71eb8a78be0c8afaad0e3f73dec1af7e", 0xd3}], 0xa, &(0x7f0000001ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8158849}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5f5b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}], 0x48}, 0x4040000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000001b80)={0x0, @reserved}) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000001d80)={&(0x7f0000001c40)={0x1d, r4}, 0x10, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x6, 0x82, 0x7, {r9, r10/1000+10000}, {}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x1d, 0x1, 0x0, 0x0, "fc44b272b2855967263170fbcf186d4caf390bf824b0b0289ebd134433ccd5935a96b0b28af0d0fbe6a2aee89dd9197739abea28524186eda1e97cd6796ce7aa"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r11 = getpgrp(0xffffffffffffffff) sched_setaffinity(r11, 0x8, &(0x7f0000001dc0)=0x2) pselect6(0x40, &(0x7f0000001e00)={0x7f, 0x40, 0x926, 0xb8, 0x55, 0x1, 0x0, 0x5}, &(0x7f0000001e40)={0x9, 0xca0, 0x8000000000000001, 0x42ab03d2, 0x7a5d, 0x2, 0xffffffff}, &(0x7f0000001e80)={0x7, 0x3, 0xffffffffffff8001, 0x2, 0x8, 0x0, 0x2, 0xb0d3}, &(0x7f0000001ec0)={0x0, 0x989680}, &(0x7f0000001f40)={&(0x7f0000001f00)={[0x3]}, 0x8}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000001fc0)=@userptr={0xfffffffa, 0x9, 0x4, 0x100000, 0x2, {}, {0x2, 0x2, 0x8, 0xa4, 0x4, 0x4, "457f9b11"}, 0x8, 0x2, {&(0x7f0000001f80)}}) 2m10.61814731s ago: executing program 2 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000ce"]) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r5, r5, 0x0, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @rand_addr=0x3}}}}) 2m10.562527398s ago: executing program 2 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = dup(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000a3f000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0xf, 0x0, [@remote, @empty, @multicast1]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000001680)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x2, @ib={0x1b, 0x7, 0x8000, {}, 0x3d38, 0xc, 0x728}}}, 0xa0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x0, 0x1}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, r2, 0x25, 0x3d, @val=@netfilter={0x7, 0x1, 0x5}}, 0x20) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r12 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) write$P9_RREADLINK(r12, &(0x7f0000000280)={0xf00, 0x17, 0x0, {0xf00}}, 0x1b) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x9, 0x0, 0x81, 0xff, 0x21a00, 0x4, 0x5, 0x5, 0x6, 0x8, {0xd66d, 0x10001}, 0x7, 0x5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m10.171260016s ago: executing program 3 (id=652): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x54000050, &(0x7f000015a000/0x1000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2m9.019242302s ago: executing program 3 (id=653): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x4, 0x72}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x4, 0x72}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r3, 0x24, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt(r5, 0x2, 0x8, &(0x7f0000000000)="6aff6cba2990f8aeb98447e8d0d63fc19f26cb599e9047666416f6d6b6a917a08ec2008fcbf35c66ac359020f1f6643c40191d74eb", 0x35) 2m8.929605479s ago: executing program 3 (id=654): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0xa) (async, rerun: 32) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f0000000000), 0xa00040, &(0x7f0000002d00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}]}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) (async, rerun: 32) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) (async, rerun: 32) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x6, 0x7ffd, 0xffffbf8b, 0x3, 0x9, "635d509d2718c014df1a4569ec44cf1dd88567", 0x7, 0xed}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000022c0)=""/139) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0xfffffffffffffeb0) (rerun: 64) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r7, 0x4010744d, 0x20000000) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x18) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) (async, rerun: 32) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r13, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r11, r13, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r10}, 0x20) 2m8.735481355s ago: executing program 3 (id=656): creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0100001000010025bd7000fddbdf25fc020000000000000000000000000001ffffffff0000000000000000000000005ce500094e2100000200802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000e000004d3ff000000ac1414bb000000000000000000000000010000000000000008000000000000000000000000000000ae05000000000000010000000000000014d1742f000000000600000000000000060000000000000001000000000000000700000000000000090000000000000007000000000000000200000009000000fbffffff27bd700003350000020001090000000000000000ac000700fe880000000000000000000000000101640101000000000000000000000000004e2100054e2400030a0020003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xffffffffffffffda, r4, {0xfffffffffffffffd}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0xffffffffefffffbc, 0xe04}}, 0xfffffffffffffe8a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10418, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="cb0ae3971ad1f379592591d7ed9a8d5b83697e31fb50"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x5c, 0x2) r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r9, 0x0, 0x0}) io_uring_enter(r9, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800001, 0x40010, r13, 0x2c411000) 2m7.752411757s ago: executing program 1 (id=659): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x100928a) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af25, &(0x7f0000000140)=0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) 1m55.183965458s ago: executing program 32 (id=647): syz_open_dev$usbfs(&(0x7f0000000080), 0xc, 0xca002) syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f000000400000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x7fffffff, 0x6, 0x2, 0x8, '].f', 0x5}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65af65c7f91800028014080700ff010000000000000000000000000001"], 0x48}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x149380, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122000009051d03"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) kexec_load(0x10000000200000, 0x0, 0x0, 0x3e0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f00007d0000)) setpriority(0x1, 0x0, 0x9) syz_usb_connect(0x3, 0x4a, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x0) 1m54.740989928s ago: executing program 33 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = dup(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000a3f000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0xf, 0x0, [@remote, @empty, @multicast1]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000001680)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x2, @ib={0x1b, 0x7, 0x8000, {}, 0x3d38, 0xc, 0x728}}}, 0xa0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x0, 0x1}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, r2, 0x25, 0x3d, @val=@netfilter={0x7, 0x1, 0x5}}, 0x20) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r12 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) write$P9_RREADLINK(r12, &(0x7f0000000280)={0xf00, 0x17, 0x0, {0xf00}}, 0x1b) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x9, 0x0, 0x81, 0xff, 0x21a00, 0x4, 0x5, 0x5, 0x6, 0x8, {0xd66d, 0x10001}, 0x7, 0x5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m50.901701413s ago: executing program 34 (id=659): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x100928a) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af25, &(0x7f0000000140)=0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) 1m50.463447785s ago: executing program 35 (id=656): creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0100001000010025bd7000fddbdf25fc020000000000000000000000000001ffffffff0000000000000000000000005ce500094e2100000200802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000e000004d3ff000000ac1414bb000000000000000000000000010000000000000008000000000000000000000000000000ae05000000000000010000000000000014d1742f000000000600000000000000060000000000000001000000000000000700000000000000090000000000000007000000000000000200000009000000fbffffff27bd700003350000020001090000000000000000ac000700fe880000000000000000000000000101640101000000000000000000000000004e2100054e2400030a0020003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xffffffffffffffda, r4, {0xfffffffffffffffd}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0xffffffffefffffbc, 0xe04}}, 0xfffffffffffffe8a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10418, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="cb0ae3971ad1f379592591d7ed9a8d5b83697e31fb50"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x5c, 0x2) r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r9, 0x0, 0x0}) io_uring_enter(r9, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800001, 0x40010, r13, 0x2c411000) 6.885968446s ago: executing program 6 (id=991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xfffff423, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000007c0)=[{{&(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000600)=[@rights={{0x30, 0x1, 0x1, [r0, r2, r7, 0xffffffffffffffff, 0xffffffffffffffff, r6, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r6, r2, r0, r2, r6]}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r1, 0xffffffffffffffff, r7, r7, r4, r4]}}, @rights={{0x10}}], 0xb0, 0x2c0a4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="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", 0x114}], 0x1, 0x0, 0x0, 0x20040010}}], 0x2, 0x2404c004) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = io_uring_setup(0xdac, &(0x7f0000000180)) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 6.8856153s ago: executing program 7 (id=992): r0 = socket(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r5) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000cdd89cf0a0d7caf3148c378914d3e57dcf7693717672f33857416278b56a4b22006f89b036b4aaa6821d8c9f5084295c3066dfb4762f86ac457ab72645e9768d334de1dd2cafc59115334579bab9f85670224d12d9672adecea82df3", @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48010) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x3d, 0x0, 0x20000000) 5.158048881s ago: executing program 7 (id=996): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000580)="3960fecd42719c582005ac85d1371f87f351ddca534c81b9a5f27178010e9acf", 0x20}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000009c0)="0bf2658d01f6530a6c49fec933", 0xd}], 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r8, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r9, 0x0) 4.901270311s ago: executing program 5 (id=997): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000000000003400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008ddba436f026b3e0c6c1e878e500"/41], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0xc, 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0x1f, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000080611078000000000063012e09000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.891959026s ago: executing program 6 (id=998): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x5, 0x9, 0x6, 0x434, 0x80000000, 0x0, 0x17, 0x4}}) 4.692882547s ago: executing program 4 (id=1000): syz_usb_connect(0x2, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010062726964676500002c00028005002e"], 0x5c}}, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x27a) (async) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r5, &(0x7f0000000180)="ca0e808b", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x4}, 0x14}}, 0x2000c000) (async) sendfile(r9, r8, &(0x7f0000002080)=0x64, 0x23b) 4.678882727s ago: executing program 6 (id=1001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0xd00, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x842) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x4081) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940805891550f4a8000000006700008000f00002000009000080fff5dd000000100001000004", 0x4e}], 0x1) socketpair(0x1d, 0x4, 0x9, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x0, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x3fffd, 0x0, 0x1, 0x1, 0x3f}, 0x20) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000180)={@empty, 0x0, r9}) 4.529886882s ago: executing program 5 (id=1002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009078103"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x8, 0x1, @tid=r3}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xc6}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x3}, {}, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x4, 0x51, &(0x7f0000001240)=ANY=[@ANYBLOB="12011001020000402505a1a440000102cd7609023f00010108200909040009030206000f0924060000b7ff01c8052400ffff0d240f01010000800700ffffd3090582020004040706090503024000047b07e0dd2dc65328ed45cab1e48e713ca679117d360b7ed318387db483ad32f803ad72539e5cfd1a08d785646a7fd265e8e7a62a631278d9b61bf330ccf3d34cb84e7858d870bd691e89a1077af30294823a43578214987a0917a41a3f02f1486ab4ab0be92ca889e93026fde45ea079d32cbe5d81e50fa376563c8a5b372da121dd1219479385df325867ec"], &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0x4, 0xc, 0x20, 0x8}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xaa, 0x9, 0x6, 0x6, 0x81}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x814}}, {0x1b, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0306d94713f27f4c8ac5caa23c916b10e047941be453f26a8b61"]}, {0xc8, &(0x7f0000000240)=@string={0xc8, 0x3, "b249659069e3b256c4bc120cec7a61664ffc3ab645cbcdfd00d78d7e42da45b89f5f34fa3c5563bcd692cfad29060e1df789327e1d6fbce30b62ac0e999bba8b4db8ac44f2a14a1cdef037167fb7baef2c012b8d08e5c2456065daeb48c11500f9699b75221751502cb3aeb8a700f453f161c029c6e373c5877261cfadc1d2a368ca27b1fc118837212a196f8b8c556a9e26e6107db4ffa01596a3fdef78033637ef5fc03526ad04c15ea249b2a045093f875f7ddeba5458cdc9e3199ac82e28af780d575b74"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "ff0c1e16ca2fb1be8179242c2e54b555c4f4d4f2d426d297fddb8f5beb1bed822d5f2f2fa408639309e65ccfccd3aaa83cb7453f95a302b2654cc282f78a6213abfab74f52ca9f27db48e094d0067623de20189ca8"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4001}}, {0x27, &(0x7f0000000440)=@string={0x27, 0x3, "36bf420a90b5cc1adf134c546c1e8ac4ad1a737583d6fb9263b1de6f8c64e13e22327d7649"}}, {0x35, &(0x7f00000004c0)=@string={0x35, 0x3, "86d469849bb6d065448a8141c75e789fa2b54a6bb6ad5e9feba10c2341aa7b37b8f728e757aaaea9e36c0a396704d5f4d5821b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io(r1, 0x0, 0x0) (async) lseek(r0, 0x51d, 0x3) (async) syz_usb_control_io(r1, 0x0, 0x0) 3.909837104s ago: executing program 7 (id=1003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0x11a) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 3.632926728s ago: executing program 6 (id=1004): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c91, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0xb9bc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async, rerun: 64) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) (async, rerun: 64) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 32) accept4(r5, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) 3.574129166s ago: executing program 4 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000200000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002"], 0x138}, 0x1, 0xe}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @raw_data=[0x8001, 0x7, 0x3, 0x3ad, 0x4, 0x4, 0x5, 0xcce, 0x100, 0x800, 0x3f, 0x401, 0x3, 0x5, 0x4049, 0x6, 0xfffffffc, 0x80000001, 0x7, 0x2, 0xd70, 0x4, 0x8000, 0x3, 0x7, 0x34b, 0x8, 0x4, 0xac8e3500, 0x2, 0xf2, 0x200]}) 3.520222103s ago: executing program 7 (id=1006): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xfc, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x727b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd68}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff6e3b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x37}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x820) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x10200, 0x2, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$setpipe(r2, 0x407, 0x1) getpid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={0x0, 0xc11b}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x5, 0x5, 0x10001, 0x2000, 0x492aeefa, 0x4, 0x5f5, r4}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000440)={0x4, [0x8, 0x566, 0x7, 0x8805]}, &(0x7f0000000480)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xcfe2022865965439}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) sendto$netrom(r7, &(0x7f0000000740)="f8a5f99981262776983983d390dffaaecaed0503348f68d821", 0x19, 0x0, 0x0, 0x0) getpid() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) bind$llc(r8, &(0x7f0000000800)={0x1a, 0x335, 0x1a, 0x8, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSETKEYCODE(r9, 0x4b4d, &(0x7f0000000840)={0x7f, 0x8}) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) socket(0x10, 0x0, 0x8) recvfrom$l2tp(r7, &(0x7f0000000980)=""/2, 0x2, 0x40000160, &(0x7f00000009c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r4, 0x1}, 0x8) 3.267793752s ago: executing program 7 (id=1007): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@deltaction={0xa8, 0x31, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff9264}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x22ef}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf21}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x253ef000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000500)="af6a1c0926dc1b8fc2fd2531969ab04d24137885ac253d1a788ec91353b726397fa7a03fedbc361658036041d6819a145dd99b1b32b7d6a7248bc665b93b28074663e196cb395f7b82bdda65a20245d911e8aa85adedb21970690b722060cce280ffbf7862dcd6aeb4e8e1b25db9130d0639161b19eb70ae5744c7b8d93cadf8a16c0063718e2da838fe1c3441b769f2441be88f424cc62d24ce8806f029ee576c742a3b2dda8ec9f02ca86bb658ffe4680a627ce0d5f52208d1f630710d6452a3098e722e03f756f0556e", 0xcb}, {&(0x7f0000000040)="cd73e9777eaa59152fe17344094b35d2559291", 0x13}, {&(0x7f0000000300)="bf59a6cd8e83d61930a1f33980369b1a915eb346b7e397ee6d432d70108392ea80f7682c44fd85d20cf0722c5759782cf6ea102212744b0edc948845f784830451d822f8fb0a3369bb6f341423a5e7d25aa2bea1e1bf247e239f302746261068691d6d8d609804eb7806c00e651f77b4d504d742bb236ac62d59752aa3a4c5ea35b81274687209495557452544a1c742a717d705aee256042c44e21626d8a66d55f5078488dde08fd3a20b80893e9b10294291ce1e8a10709597f5cab0c0", 0xbe}, {&(0x7f0000000100)="0f195cab63d7ef1fc371e57e990cc1af4bf2504c6f8bbd9ed42b9198fc1673ba42ec4db38a96fd7f4c9f037d3dc7690afedd740dd33aa2", 0x37}, {&(0x7f0000000180)="c3b14ef16a5518076522e90a150bed6d4f00cc7dd55279", 0x17}], 0x6, &(0x7f0000000440), 0x0, 0x4048014}}], 0x1, 0x844) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001030000000000000000000000000000049a1c62060000000000000000000000000000000000000a9c000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000c00e0000000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.166093096s ago: executing program 6 (id=1008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) tee(r1, 0xffffffffffffffff, 0xff, 0x1) syz_usb_connect$uac1(0x3, 0x9c, &(0x7f0000000380)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203ffffffff000301fd00060904000000010100000a24010200800201020d240801ff0f08380e449ae1cd0f240603060406000400080009000009040100000102000009040101010102000009050109200001060d07250180060200090402000001020000090402010101020000072401f710011008240201070240000905820910004edb74072501805f0010"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0xee, 0x450}) 2.733699522s ago: executing program 8 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010028bf7000fcdbdf251a000000050092000300000008009a61db197c3dd34160004a000000094abfaa0f694b767f420e60ad29048c9664964cc23185b5ea423c2254052038acd8ecee4b9cec326dba18cf9b4f4d368e82ef"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000884) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001140)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x40804) socket$inet6(0xa, 0x80002, 0x88) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}}, 0xc000) 2.666442735s ago: executing program 8 (id=1010): r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x102, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x28}}, 0x40) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r6, r4, r5, 0x2000000, 0xffffffff, 0x80000001, 0x0, 0x0, 0x4000000, 0xd, 0x20000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x2a082, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCCONS(r8, 0x541d) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) r10 = socket$inet(0x2, 0x2000000080002, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000100)=0x8000, 0xd, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, 0x0}, 0x78) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) 2.550170831s ago: executing program 5 (id=1011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008ef17626000000000000109022400010000300009040000010300020009210000000122050009058103"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000206f907000000000000000000000000050004000000fdffffffffffffff7a31000000000c0007800500150000000000050005000a00000005000100060100000c000300686173683a697000"], 0x50}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="200c050000000526e2abc639d67bac29ffb383eee3e4075527b3fc218d5513cc43f45bd362c37db4c2c259efa225e0af36b4f1aa80538de2eb01c990cbb391ec1edfffbbe518"], 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008ef17626000000000000109022400010000300009040000010300020009210000000122050009058103"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000206f907000000000000000000000000050004000000fdffffffffffffff7a31000000000c0007800500150000000000050005000a00000005000100060100000c000300686173683a697000"], 0x50}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000800)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="200c050000000526e2abc639d67bac29ffb383eee3e4075527b3fc218d5513cc43f45bd362c37db4c2c259efa225e0af36b4f1aa80538de2eb01c990cbb391ec1edfffbbe518"], 0x0, 0x0, 0x0}, 0x0) (async) 2.541720528s ago: executing program 8 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) r6 = dup3(r4, r5, 0x80000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r8 = creat(0x0, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000001200)={0x0, 0x110000, 0x1800, 0x5}, 0x20) ioctl$PTP_ENABLE_PPS(r9, 0x40043d04, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080028bd7000fcdbdf2503d7620000000500380000005ea91da8731fce913126bab1e98e9479f16142468b0035000600000016002a00000000000880340031cb000008000600c786e1cc0a84186992b805510000000000", @ANYRES32=r10, @ANYBLOB="000035000300000008000b001000000005002a0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24040080) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000003d0007010400f5ffffff0000047c0000319de87421d3e132be4ce2fc362469ed5323e9f085ae520f90c9e658be2e5c6ff1abab3f5deca627c6d050bdf39c9623d45f385eb4914ff30eae8e7d079d9495b96af9"], 0x14}}, 0x4040040) 2.333192446s ago: executing program 7 (id=1013): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000f6ff000000000000000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8eaffffb702000008000000b703000000000300850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000f6ff000000000000000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8eaffffb702000008000000b703000000000300850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffff9c, 0x0, 0x20000, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff9ff0000000000000000850000003600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff9ff0000000000000000850000003600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0xffffffffffffffff, 0x5, &(0x7f0000000240)={0x5, 0xff}, &(0x7f0000000540)) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000680)=@in6={0xa, 0x4e21, 0xa, @mcast1, 0x200}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000940)="76bf1a36bb700b59ed853132b1e9e75480cd1126afed35544cd3c362012fe9594366729ceb98247ca0a9b2458eb5e169b719d44b9bf563200799ef708030d092305b53afc90e2898b101c4cb0320a7dc34e7ae74f512603b9253b0f1578579c42e4b9b14a37bf3bacd71477753ad4ada0c1925a966cd45dc6a1e88594aae12ccd66d4374fd5dae52eb18570a625edc783daabe3d969eabff46b1", 0x9a}, {&(0x7f0000000c00)="7123506e518bf0cbdd8020db5708f2fe1b9adbee382f7ae6686bbeaafe7e3273e2d8eadb567a874fdd7b62b479e5d5185109c858cdb75034b87999dabce26a932438202109e13475c5350c6c9988e215ac2be2cebc007f6f09b0d4fcc71cac54a07018242354a53d18337776de158371800025f993dab2cb3a4f4cf8ec695a6bb1d72c9fd4e12e799ecb3b616f9b2d18ca6115e6afb5a6bb720c90becb3c4ea75fcd1e7ee4bee7983f9a1e71dc93240412931de5984477470f91d9b5f9d0a34c06ed90c8410776d3d61f38bd075c090e9c7859c7bdf3236d6b13b91d9f1f11ceb961cafa465a8894a63b8cb8f0e2d8c3a495c8ce6c2e576279350a9a738859a7ccc2a58f548a864ed4800e28dcba92aa64ec37b6f8f0cec1f4db41f4a8790ad1a0dd9643b175b56fe19b4e0c6b045f7e5d48b5061d5d7bf653d395d6e717aebac7096dc061be06397ee77ba46a8687da7130c23214b3ecfbd794d2b7a70736c8a906ed5714ac81c5dccafabbe06a1c93affb0ca6dcc38c1e0b235530f9ca4a51b3048750fbc3ad2a16ce25aab03d268f88dd95ee588184bdd769fd7ac09b81fad54639a09f455d03f9f765c1412ab878c2b9cd1cbeccdfda9577c6563f5c81312dac0adc00cfffe752687e5fe62c828d335b6e5dd967b763092a6c0b816a5e39f7f5bcc03a59dfbb92e8b462d0e4aec6b02219e3cf92f67df8c74225a76062089336c623221cf7658b12e60b5e3f8c7a4ea9f78d3dc98099af0f1361d8ce111824291b82520c9349b5afa9b33b20cdb71b7be9af685adb83b5bd056d95c44f0d91291f2349925bd8a5a6bfad2df27a0d974046177e9f54a5e57e2d2c679430f9fdc29e13bd057fc97cf86f2abf9a05516385f425878e93e9309b75f83913ddfe6c9ad762216413699a6dd7ce15cfe39c5a7b5d55074cf866a4afa8e18d1bd04bc8a9ff9fcf8cf649f2e4d69603a3b02e25b814f5a11fb566b3cef32cdeee7e58e9dbdef0706309f70d0deea56cc3cd023252a59eb6b29b39379f606ac84098336460fb433f08e1562e448cdba7ae82289a0cdc6b76e01452c822a6809f1f8c0e93cfa1fea1b72a351716381eb8cb64759cb01c5f67996407f664c7e0dc028b9368df713894b49c56b8e7cc1abee2ddad917ef0d876757aff5d6ecd49d24cef8719e576300af0ee82be4175f64f6e87f4a259f88b52a0f5d50eb0403336879947cf3cd09ba105ee2825f3a60ae6fa3f95e6347897038bc674a5beec18a3c96ba62efac8a59b3cfe74847ea8e0fd98913a4721a0f5c09c5b673c2f44bfe6c48aaba5c73bbf140e85764e1f53126714f5417b8adc1352bb87cddec49c7d9d396c5a34131029a122e49130ae89d496fa812e53f681bbb4fc82151a623de86fb6148107b9a2a16164ddb1075c4911a8efd02111fa4e53c4c3c5b9bf2bbf4c7629a8576fd3ad7cb0d3e30e492de4e8aa57974ec861eb60ca8191bfadde6d777a3afd9121a68c1c2e6781b66f75c3ae0c5e8fbfeed73d4ba04c17a58025f34d851c1cd4a34d3e2a3256300de812d19d2d80139faa32c845c2006ee74a00671d56b2771a2b687d1aa84a0580e7f4bb9f72c302e8f0c7c90e64219e9d3839557fd9f81263be01b7caa497d57c234f7128387181862118aa31ff76c0b3328aec3da44ca523646645ea871c75000dfcdd72b160d121ebecdfba5e69b36af57b4bbba6980ef3041a9e9918d28503c64dee5b17a38bd0e0293897b7340c152da5a7c3e773f9eec92b59a21fc7651c83f23153b852536ffd650faaed59ca8161b03ed72d783a99cb10991edfba0db89d95c2c3f02757ce1083c94e9b653997dc3c59c2d728af8029a6525cc4d4789fcd9c83da3a483d2fe4c74443cfcaa1b855d0e08cefa592f41fe91a7c5381a246ea0c009afb0745b7e180b8b40a46a8f9308f9270bdb98ea76f4b306afded3685fe831e20e9bb2713cb47c7e5b30c51fce5afd598a2fe566bc861ff5ec20177578504541361b6a6a4e1aeda2d401e9633eaf198447428f89a6c9749b421eef97ef5a7813cac2c40487d5cf2978a7cf183b14e3014fa4aa7a15dbb8881bf4c92d95e9b8631b6e52df4277cb1a225df462bc1b2669225834abacaa8cfd3d4b5a99193d585a45b78ae410f6a20193f7a2fa24cc7b1171842fdf936392423b872d018a0b4c2a6eb23bab624a724ecd96688eb7c3a135ffd5c818ce120ad6b7180f76a466610efbd58560376ab61065846e993010b84f3914fca45e98768a6a7ac7ba8159fe2887bc0c6a4ee6d3ddf3f193a6271aa5977c3a45fb48b8ffc6988ee54f12614783cc8540856085aacfbeb8eade3646bfa995be64c49ba5764f64c35c2c172a95ee2f732bd454205ada0aad9a7f87c7852d9307e8b49f120d90c83702c7f45bc8ec6c488c8a2cd34dd0cb58fd5447e5cc5d7ee23466bb1fa769ae190fdd9786deda2d7fc33986826caeca35de9ca12b31b602ac949ecf6df475539fa5b697a33da9f04a7096bd375d9ce4a9468db1c80132af0019c12a85554a836b57b3c9f2a3a6377e963e9e616f3828c6cddc594eb70693ef916bed0c2403dbe5f6a4e386b952a03892c61b619b7649f7e95240fed29f763b7461f2ecf4e80cebe626c86325e3c46e4bec7abf9315500722edc5954760f00b65991b4888b1c994cd1d8f8336d499e1b726f3854dd98cfc185302d80d74f6577d532fd5ab770cf642e7a7fe74535e299163110ff9b33c0edee189152354d878926dd2f5c8100214d1f92047c134ee075356dc9aad5e4522c6a5c0ed82d4b7f532f37eefe9edaf9eb15d3c79d7dae92163612b379df2aa7338de2894d0590a02d67fbfa68848cee1bb56ece66c77c17d06d2a9ad00d8774d02d465b13774fc7fc4175031c29fbbd44135e839dbcbf56314a196e9aecdf2428382c8acf3e34ad1f8bc0a56e97b2cf1e453b611b1d264f6cee3e3a8265661d048b2c019ffebbae4d43f70a85ed8c19491029f99592857011f8568a4fe98dfbfd61af34384a767f44ddf500cf1ceac8d08bce911bfa6232ba6c7d38d974658322374e120b936ba61fa7548fe5bf4f18c62bcc973d6f94a8bc7b4bdd5e600fb6b9f82f8504dbd785acde00b878a543e03c9603b773dbb10d4e2d154a6c3bc01a5caf913c5df3d6f23f29c0fcc6145dd2a71d90718615f5a088aa37929af98a69a6cf793fc137d895df5ff169176f2b5f6af4ff8be72ffcc25e72aa00a7082f65951331e72140f7faa21a5e4b74dc90f8a04f7303e9d93cd78f9f0faae129df8a938891bb4875abe39d9dfb13e535ce702201b19978721530e1b8f4e76f5b3b10b8e858ee7c7b47ef9858e41d82d89e60796e0660dc3e0262b7b9176ce454382182242ca90dc083870c23a0abdef71f42763900d96e9bc160e22ec30bf352a956a5961fba0285385c48783d3f791633c5ed7070b9a83697f4d3815d6d47495fcdaeea3bb9c035d24beedcaa1b2bdf2ece19257e62e44121bb43748af9e9cda5b50e18ef582e83db6766dfe29dd688d50deb34a8c5aaa792f265af6115d95ee31f58d84a1048d57a6c75baa791490bc9ee97204f6185f71a72ac1070f0054b30194d828652c134b786e93ba10781a8297c852817aefa6f206c300fe30920582fbd62fc5d4b3035599007c68e0e49bc22caa0664f2f38f708c11aaf5074f30fdc01fd048afe9e09124398dcb25c6bfb4956c527b7bfb5f993185dc3f3b42a094c6f8ebfc919d72c05ffa42dbd3496df117c34e1a8ca65cd17b4d126913b98bd1c487ba2c4d017a249e1eca3d331a3a622c89ce0f83bd829d4a44a87b3bfa4df3438501a720fb763e4e438ca8be35bd463a8ddd8e4d14c45a5e4434566f905b9da2b30c85ab7ac5bc0669838745916d3967641ddaa0b5290b596d4e418bb123c0bf7443947b359154db299b93f46d42977a94a246f8880dc7e36e8c19805f259c282e6c7a5533d5c7cc750acc8e895482c6cb0513af92d724205b4fe860e4342c2862c176575a2d1626096f00baa1d7e2bd6daf36de46025d5e13a3e582907d326c99a1aa61167118ce7210b1967e41f6f46f6fd90712e9bcb71b643dc59649b61df69f70ed9ffadf43532bb0f6791bb02edbe01c2b3f31404949eb4d89e5d756aa404c69cf03f11b0b451cc3a7771672d3e492c3c3d422dd32a99e08b438ddeb7dab1f4cf75b720196dfd2fa436974340ada6567a4e4dbac69c9e4f376f3793f5e6cd0a82f291cfccb207e4f144f125fc506530a2c8536ebca3945c4468acc02a3b0d6098ac918aecfe0f112492d24501f968b5f3efeaf00a2033f727869034f7259486de2fbd53276c1392ddc4e42127dba8652a8a955f17c03bdaa6b2b63bfe3b859fa9697c09daa8e5969c5c96184fadbbd4dc0f1c34c3c80ff706e508009d83ae2504b5badb924b9ce2d0a134d1c2bde9e97b2b08818339f891fb1eb31438bdc97c5051a6e521b5ac584a5e018e17e70781a509491f1a244416c42fc0c17865ea1c4df3e84ca50b5b2cc2225b80400a0b53f5d4e747d2ca64a2402d874d692b43d42bda4654716c074b3df73ed6347d0269b4846e4a387631f0e3cf40e4b3ce6c706f527b53b96bca5b83ce4f480f29c775d4e7bfa8849dd8991f8a020d6d77f32a00b96b9d50a847688de80ece88c61b059c70d5652f3785c3d0c971067d5214dac4aa53cfd442ebbfda835bf3ddd4fe79582a7563376bb2798ce27ebf4d58a4021cd7e555c5b0f8af34bd864cb23f1830abfbf932a0ae8dfd52ae99a21094e7028835256ae65c824e3edb0e7faae8a81ead849238127a0d34e8c2fbf653a8858f3db8888548d4e6c17a9167df81e80f04767dc4e8ebd6b333668da0c31544fe6cf647daac80b01550c0e2aeeb9753585701ae18be2edf49b455caf68149da24b1655de6742ff4d57d0a254cf6945f28d346597612c628afe4a5a292a0b69e741142b332637f6a324058758a42d171d02f2363677fe7581fa3fae143b9ed14f0636614f86f5dd66a121090f1304cb7a42f6743e73ec8ea89d2ab1ac6c6a93abaea7b5390efd32c662af9680cb2b324a88e2912651a6c7391232f121650d9aadf806be9fa42153e50a4be7d087a0fb28846ca7045a1f9590c3d17e17eb087bfa0b0dc3c86e631afbfb18f24f49b9c7949daf27326308b1a54a9d5ce0f06a53f6e864d6bd8baa5250deaf9cde322d2fb0db019d218a04583af8c7330cc661b0788b96df3879f91d06c4f90fda6f071d019db7c137b9d748fa81b36c8e24b6f46785c0dbc8aaa0acac21a568a9bb83f33c3a0dd6ede69ad2786d09cbd3a85b45edb7825ed3f98c77380fa42a631aa88be1f191a8bd34c87c481f670183603a7bb8e1e220caf0c8a4385e1c5556183c3f868e6384e5bcb39c178ab3f97de5a5c8f8bcf0aae9859abcf36c6c9eaf1fb43aba36e6fea9dc865051d4af9394dbf80209418e0a5651e8536ce15f17e5a267aa120b3682a927fe0edd8702ec08a75f203dd8900360d964a40c19a2526af0776a3c53c21b2a2b61eb773907a012b72edb0530e854542fb7277da2f2d30c2ecdaa3b8c6b1c3ce0f25589f99cc778c317a77fe2a87ff27dd503e33e44afa7d7fa5343734b56625274d1ecebffe29a0b78458d2a211a27e62faf6dee6f645488c33186525e1a0f49c2517ffaadc5180ef60c5c2015866f3273e93e80062039dbc6ec36251f6e9d52b6e7aa6e788e36a46ee872b1661f43753fc9d1541d81e04ce56001390cc3bcbddebd4f8daacbcd7ab5ee7aacd431ec28ac00e3f83d0", 0x1000}, {&(0x7f0000000a00)="ba8462d22980c05e815bb3db685b8aa899b7bde622a14d1d33974575c0837c1e315150b77b48244d77a5dac9f73437473b6a0486c76099f0554affe80120f1d62c973244cce775d680d3126db5ebec5941318d4190b1a176e384e16cf986b3df96963e7d21ea60ae6e049a094143819c97ba23", 0x73}, {&(0x7f0000000a80)="05e34e76fc5d16d5f19ce303bdc99acda020375c7b4bc5c8aa053f46e514703b4d57d70dcf5de4f2c43c30ce33c51538d2097d4fa0b3b5064beecca19fb291b95a9ac23202f877c07453eb6d75dcd3700639abed205c312f6ab8c3f77ccf447e8967fbdaca36e52ed3dc160763a729dd91ace3a4b84b0abb697415ce5c214c56e5d5a7adee4e65477416de2287883c228870b246dfdc400a1242d195fd87bf691988d10255f58299051366b9", 0xac}, {&(0x7f0000000b40)="f5edd5e2b48eb68df68624dac07073c42a54ae91fc879f1f59b8fb40a3503dd4232cd3b2cef53f7fdf7a4d66b8663df3644020a5b69adb57a7e73005e5a0fd2b2d79067b00cfdaa6464634ff2bae1f228609e5e53d1a8b889c6afb3db76d8b4e432be5d126e62a1da14ae49fc08dbeffa863", 0x72}, {&(0x7f0000001c00)="f7a17275cf21a8048306c713f26b0e4a9e495f0f65b2ec84ddb80b58334480577ecde477f32691846850765fc980f261cbce6f03f1efcae998fcdbfb4e5678dfd16b56aeae0fecfb2b31366aa6d785c99ac95f85e55835e9aa744aa7408ba3c18baf9053489d8c7af43ec140f30beda758cba0e637d4dba123e0ee304ac6049a4641e0dec6800533e7f4719494870377e9ddd9ede0f39a91d032cba949ea72f7f567d492c5dc24ed503cae8f08408389d6335bf60416e3eb71945c97aeece2f151c5cc0d5334d2c88a90beb4c3c27b59920337e24f81e7c2cbc29e794bad9ec1758f5e2265788650e32a6747d4808bbf0611c0c0e4a666423e", 0xf9}], 0x6, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x230}, 0x80) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) (async) r4 = dup(r3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x5}, &(0x7f0000000240), &(0x7f00000002c0)) (async) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x5}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffc, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) read$usbfs(r4, &(0x7f0000000000)=""/153, 0x99) ioctl$TCSETS(r3, 0x5402, &(0x7f0000010400)={0x2, 0x614, 0x7, 0xffffffff, 0x9, "972c700500141000000000002000052c707400"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001d80)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x40, &(0x7f0000000440)) (async) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x40, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x88, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64533d30303030303030303030303030303030303032303030302c757348c25f69643d", @ANYRESDEC=r10, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030332c636f6e746578743d726f6f742c646566636f6e746578743d73797374656d5f752c66736e616d653d9f2c7365636c6162656c2c00"]) syz_usb_control_io(r9, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r12) (async) fchdir(r12) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) 2.011922694s ago: executing program 4 (id=1014): socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d8beb934db72377f2649b9869488cb787ef3b9b7c3b0cf471afe966b55436d21b56d7d66c6fa18e21942a0ce5a3cbc07106b2206f51f85e79c8bea7aadaab451d9fc7e3c2db9b00be8f102778661083861442da478ec5974e98214fd590d8f39627e47c92bb05b379baa86958dbf3000000000000aa159cf20e26c7fe19d795f91809b51d7d22acdbfb348dfa501a46f8fd48ed1915af6d51353f5603d4edf659059dfe72a8680d948e67f889186393ce77adbd8fe4b9ab8eb76b06aaa0", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) truncate(&(0x7f0000000140)='./file0\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000340)=ANY=[@ANYBLOB="23242c726e67002c002c232c2f6465762f76696d1b6d002c66756e633d5b455845435f4b45524e454c5f434845434b2c736d61636b6673666c6f6f723d2c00"]) (async) r9 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0cc5640, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 1.962095272s ago: executing program 8 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$overlay(0x0, &(0x7f0000002180)='./file1\x00', &(0x7f0000000080), 0x884, &(0x7f0000000100)={[{@volatile}], [{@uid_eq={'uid', 0x3d, r0}}, {@fowner_gt={'fowner>', r0}}]}) 1.923233662s ago: executing program 8 (id=1016): syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) clock_gettime(0x6, &(0x7f0000000000)) 1.805087927s ago: executing program 4 (id=1017): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xc8503, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000900000003000000b6", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000050000000500"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000801}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000003180)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r4 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x202, 0x110, 0x11}, 0x18) mkdirat(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 809.900078ms ago: executing program 4 (id=1018): msgget(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x4, 0x40000) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x168) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa35f6ee040000000000000000000003140600fe8000000000000000000000000000eafe7ffffffc00000015000000000000aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setuid(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x58, 0x30, 0x1, 0x70bd27, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbaf4c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x20000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 388.766542ms ago: executing program 8 (id=1019): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x13, @string={0x13, 0x3, "27709e67a039ed8d571d79ff090ace5201"}}, 0x0, 0x0}, 0x0) 379.969091ms ago: executing program 4 (id=1020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b35, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x3}]}}, 0x0}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000180)={0x10}) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000680)={0x8b29b5239e271618, 0x5, 0x64, "b48ad60500008331bbcb3d46124d7f070fb3d875f06a150da032f209ef8bd5c1fce0b1e263568812b53f01ae369d552436721b2e540f9b692b77aa789aaf37389122101d49cb68371b05ff2c92f5e4faf204c80d754e36495a18c26fe9b849f488f4a72f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000000c0)={0x14, &(0x7f00000003c0)={0x0, 0xf, 0xf3, {0xf3, 0x9, "5c44700db949dcc0065d31cce063e5eab6dcc9a0a20376346994221ebf2cdce21691b846c0278dc189eef01110a1e5e644576541a4f5a2ea53055f42a1389585d3cf4eb0eb15e9c68a2fcfd260b6cdee25a4c569cf30cbcde6d795033f5dc1d7e5284cd47514284ddef5ae1ae6cb0ccc8d5275e15279c9c8a20db4157b1d82bad2033757210ef738a692939a824c05c8a53ebbe476f4aae957ef4ee044ce53a190491e761c857fa4a469e1a2a388b7ccbe765905789fd624a36b90914924aed8c2e6a62c094de53e21e2fab84489ceaf3c21ca3693353beb9b07363d0e6a5199422e9d2a5f120a1836da51c6bf5c42668c"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000100)={0x20, 0x2a, 0x27, "8eff908c6ed0fee1ab71607ae50cd5f48c4ca8fb226bb6e402e99745d8fe2ed2b3555a5a21fc1b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xd7, 0x4, 0x200, 0xb, 0x9, 0x5, 0x0, 0x1, 0x2, 0x1, 0x2, 0x7fff}}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x27}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lremovexattr(0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000140)={0x11, 0x3, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r8, 0x567, 0x60, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x76, &(0x7f0000000cc0)=ANY=[]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 281.211594ms ago: executing program 5 (id=1021): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x23, @rand_addr=0x64010100, 0x4e24, 0x0, 'sh\x00', 0x8, 0x2, 0xb}, {@remote, 0x4e23, 0x4, 0x600, 0x8000, 0x9}}, 0x44) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x35cf, &(0x7f00000000c0)={0x0, 0xb187, 0x8, 0x3, 0x2f9, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) sched_setscheduler(r3, 0x0, &(0x7f0000000240)=0x3) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000280), 0x0, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044010}, 0x8040) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000480)={0xae7, 0x47425247, 0x3, @stepwise={0x2, 0x10, 0x5, 0xf59, 0x8, 0x7fffffff}}) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000004c0)) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/reserved_size', 0x141442, 0x8) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000540)) (async) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1409, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x54, 0x60}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x580}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80000}, 0x20000040) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000880), r6) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4400008}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xcc, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004090}, 0x40080) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000d40)={'syztnl0\x00', 0x0, 0x1, 0x10, 0x4, 0x0, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x1b, 0xcb, [@loopback, @empty, @multicast1, @loopback, @empty, @empty]}, @cipso={0x86, 0x6d, 0x2, [{0x7, 0xb, "4f7a4422e534575f19"}, {0x6, 0x9, "24f6ed9b80510a"}, {0x0, 0xf, "9634d077e37c1e06df6ebec05c"}, {0x1, 0xa, "22525180fa002df1"}, {0x2, 0xd, "1deb281b93aee2b7be6430"}, {0x7, 0xa, "80e1f39fc8d0f558"}, {0x0, 0x5, "d08353"}, {0x1, 0x6, "4760b926"}, {0x0, 0x9, "04fca5a8497639"}, {0x0, 0xf, "019f02dfb152c2c07a7d7c8e1a"}]}, @ssrr={0x89, 0x23, 0x31, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @multicast1, @private=0xa010102, @local, @multicast1, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x8d, 0x0, 0xd, [0x5, 0x2]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x1a, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa77a}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xcf}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @generic={0xfd, 0x8, 0x8, 0xc, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0xb, 0x7, 0x5, 0xfffffffffffffff0, 0x1}, @jmp={0x5, 0x1, 0x1, 0x38491bdaed7589bf, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x5, 0xb5, &(0x7f0000000c80)=""/181, 0x40f00, 0x3, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0xa, 0x32, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[r5], 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001000)=0x0) sched_setscheduler(r11, 0x3, &(0x7f0000001040)=0x1) (async) r12 = openat(r5, &(0x7f0000001080)='./file0\x00', 0x220600, 0x5) ioctl$HIDIOCGFIELDINFO(r12, 0xc038480a, &(0x7f00000010c0)={0x1, 0x3, 0x78, 0x8, 0x7, 0x6, 0x8, 0x1, 0x7fffffff, 0x4ab, 0x3, 0x4, 0x6, 0xe9}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f0000001140), 0x8, 0x0) 279.522949ms ago: executing program 5 (id=1022): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x81, 0xffffeff8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x9}}}, 0x24}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0)=r2, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r10, r2, 0x4, r2}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) 137.064681ms ago: executing program 6 (id=1023): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7fffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x501100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080), 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x9, 0x2000, 0x80, 0x5, 0xfffff6f5, 0x7fffffff, 0x0, 0x0, 0x40, 0x127d}}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r5, 0x0) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./bus\x00', 0x0) 0s ago: executing program 5 (id=1024): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0x30}, 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) kernel console output (not intermixed with test programs): 8] dvb-usb: error -19 while querying for an remote control event. [ 278.539672][ T5908] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 278.554385][T12420] afs: Unknown parameter 'j´{¯k' [ 278.800104][ T46] gspca_sunplus: reg_w_riv err -110 [ 278.875881][ T5908] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 278.885585][ T5908] usb 9-1: can't read configurations, error -61 [ 278.909130][ T46] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 278.935619][ T5908] usb usb9-port1: attempt power cycle [ 278.953286][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 278.953295][ T29] audit: type=1400 audit(1736104494.740:1275): avc: denied { connect } for pid=12422 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.089825][ T5867] m920x_read = error: -19 [ 279.098942][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 279.340263][ T5908] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 279.374163][ T5908] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 279.391752][ T5908] usb 9-1: can't read configurations, error -61 [ 279.416578][ T5868] m920x_read = error: -19 [ 279.421405][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 279.480392][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.498478][T12437] lo speed is unknown, defaulting to 1000 [ 279.507942][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.582944][ T5908] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 279.589770][ T972] m920x_read = error: -19 [ 279.594928][ T972] dvb-usb: error -19 while querying for an remote control event. [ 279.639686][ T5867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 279.698442][ T29] audit: type=1800 audit(1736104495.480:1276): pid=12443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.722" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 279.719976][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.760039][ T5868] m920x_read = error: -19 [ 279.764589][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 279.833488][ T46] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 279.853170][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 279.864834][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 279.875844][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 279.893416][ T5908] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 279.901075][ T5908] usb 9-1: can't read configurations, error -61 [ 279.907646][ T5908] usb usb9-port1: unable to enumerate USB device [ 279.935996][ T5867] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 279.945222][ T5868] m920x_read = error: -19 [ 279.949812][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 279.958979][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.967450][ T5867] usb 5-1: Product: syz [ 279.978356][ T5867] usb 5-1: Manufacturer: syz [ 279.990033][ T5867] usb 5-1: SerialNumber: syz [ 279.990358][ T46] usb 8-1: device descriptor read/64, error -71 [ 280.017142][ T5867] usb 5-1: config 0 descriptor?? [ 280.124792][ T5868] m920x_read = error: -19 [ 280.131152][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 280.249762][ T46] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 280.289720][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.289758][ T5868] m920x_read = error: -19 [ 280.322255][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 280.360624][ T29] audit: type=1326 audit(1736104496.150:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.399817][ T46] usb 8-1: device descriptor read/64, error -71 [ 280.408949][ T29] audit: type=1326 audit(1736104496.150:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.474108][ T29] audit: type=1326 audit(1736104496.150:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.500380][ T5868] m920x_read = error: -19 [ 280.504784][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 280.516414][ T29] audit: type=1326 audit(1736104496.150:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.526947][ T5908] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 280.559522][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.569074][ T29] audit: type=1326 audit(1736104496.150:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.608459][ T29] audit: type=1326 audit(1736104496.150:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.646099][ T29] audit: type=1326 audit(1736104496.150:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.669467][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.682987][ T972] m920x_read = error: -19 [ 280.683210][ T5908] usb 6-1: config 0 descriptor?? [ 280.692806][ T46] usb usb8-port1: attempt power cycle [ 280.695429][ T972] dvb-usb: error -19 while querying for an remote control event. [ 280.717763][T12496] __vm_enough_memory: pid: 12496, comm: syz.6.712, bytes: 21199742124032 not enough memory for the allocation [ 280.733253][ T29] audit: type=1326 audit(1736104496.150:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.8.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3df85d29 code=0x7ffc0000 [ 280.869800][ T5850] m920x_read = error: -19 [ 280.874582][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 280.882518][ T5868] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 280.914307][ T5908] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 280.927186][ T5908] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 280.935765][ T5908] [drm:udl_init] *ERROR* Selecting channel failed [ 280.952441][ T5908] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 280.959330][ T5908] [drm] Initialized udl on minor 2 [ 280.965545][ T5908] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.975520][ T5908] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 280.985288][ T5907] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.996095][ T5908] usb 6-1: USB disconnect, device number 7 [ 281.002109][ T5907] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 281.019729][ T5817] Bluetooth: hci3: command 0x0405 tx timeout [ 281.050046][ T5868] usb 9-1: Using ep0 maxpacket: 16 [ 281.055576][ T5850] m920x_read = error: -19 [ 281.061192][ T5868] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.071552][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 281.082051][ T5868] usb 9-1: config 0 has no interface number 0 [ 281.088840][ T5868] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.100453][ T5868] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.110956][ T5868] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 281.120243][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.129787][ T5868] usb 9-1: config 0 descriptor?? [ 281.129795][ T46] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 281.162844][ T46] usb 8-1: device descriptor read/8, error -71 [ 281.240648][ T5850] m920x_read = error: -19 [ 281.246775][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 281.409822][ T46] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 281.410689][ T5850] m920x_read = error: -19 [ 281.422154][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 281.443335][ T46] usb 8-1: device descriptor read/8, error -71 [ 281.572042][ T46] usb usb8-port1: unable to enumerate USB device [ 281.589798][ T5850] m920x_read = error: -19 [ 281.596361][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 281.744475][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.755105][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.763381][ T5850] m920x_read = error: -19 [ 281.768454][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 281.775762][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.791395][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.806672][ T5868] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.000E/input/input34 [ 281.844034][ T5868] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0071.000E/input/input35 [ 281.864377][ T9] usb 7-1: USB disconnect, device number 3 [ 281.877712][ T5868] uclogic 0003:28BD:0071.000E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.8-1/input1 [ 281.939767][ T5868] m920x_read = error: -19 [ 281.944217][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 282.021092][ T5868] usb 9-1: USB disconnect, device number 9 [ 282.110863][ T5850] m920x_read = error: -19 [ 282.115327][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 282.239794][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 282.279771][ T5868] m920x_read = error: -19 [ 282.284890][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 282.393196][ T9] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 282.412103][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.423087][ T9] usb 7-1: config 0 descriptor?? [ 282.493279][ T5868] m920x_read = error: -19 [ 282.516244][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 282.609622][T12578] netlink: 'syz.5.732': attribute type 2 has an invalid length. [ 282.731852][ T972] m920x_read = error: -19 [ 282.788783][ T972] dvb-usb: error -19 while querying for an remote control event. [ 282.812063][ T9] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 282.820998][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 283.124393][ T972] m920x_read = error: -19 [ 283.128801][ T972] dvb-usb: error -19 while querying for an remote control event. [ 283.251620][ T9] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 283.265918][ T9] [drm] Initialized udl on minor 2 [ 283.324779][ T972] m920x_read = error: -19 [ 283.329220][ T972] dvb-usb: error -19 while querying for an remote control event. [ 283.490226][ T972] m920x_read = error: -19 [ 283.494721][ T972] dvb-usb: error -19 while querying for an remote control event. [ 283.668399][T12609] input: syz1 as /devices/virtual/input/input36 [ 283.680234][ T972] m920x_read = error: -19 [ 283.684746][ T972] dvb-usb: error -19 while querying for an remote control event. [ 283.860438][ T972] m920x_read = error: -19 [ 283.865031][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.068023][ T972] m920x_read = error: -19 [ 284.086783][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.259751][ T972] m920x_read = error: -19 [ 284.264187][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.389680][ T46] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 284.429713][ T972] m920x_read = error: -19 [ 284.434368][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.490817][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 284.490875][ T29] audit: type=1400 audit(1736104500.280:1313): avc: denied { watch } for pid=12626 comm="syz.5.741" path="/16" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 284.519121][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.525450][ T29] audit: type=1400 audit(1736104500.280:1314): avc: denied { watch_sb watch_reads } for pid=12626 comm="syz.5.741" path="/16" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.606045][ T972] m920x_read = error: -19 [ 284.608935][ T46] usb 9-1: config index 0 descriptor too short (expected 65195, got 72) [ 284.612377][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.620057][ T5908] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 284.645695][ T46] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.663302][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.685493][ T46] usb 9-1: Product: syz [ 284.695144][ T46] usb 9-1: Manufacturer: syz [ 284.715247][ T46] usb 9-1: SerialNumber: syz [ 284.736110][ T46] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.750687][ T5909] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 284.791854][ T972] m920x_read = error: -19 [ 284.796235][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.809267][T12621] team0 (unregistering): Port device team_slave_0 removed [ 284.830172][T12621] team0 (unregistering): Port device team_slave_1 removed [ 284.840210][ T5908] usb 8-1: Using ep0 maxpacket: 32 [ 284.850519][ T5908] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 284.881211][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.892888][ T5908] usb 8-1: config 0 descriptor?? [ 284.934724][ T5908] gspca_main: sunplus-2.14.0 probing 041e:400b [ 284.953615][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.961919][ T972] m920x_read = error: -19 [ 284.966471][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 284.973546][ T972] dvb-usb: error -19 while querying for an remote control event. [ 284.975218][ T29] audit: type=1400 audit(1736104500.770:1315): avc: denied { read } for pid=12616 comm="syz.8.740" path="socket:[23638]" dev="sockfs" ino=23638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.983021][ T5850] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 285.004972][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 285.087248][ T9] usb 7-1: USB disconnect, device number 4 [ 285.095984][ T5850] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 285.138761][ T5868] usb 9-1: USB disconnect, device number 10 [ 285.196998][ T5850] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 285.209861][ T972] m920x_read = error: -19 [ 285.214216][ T972] dvb-usb: error -19 while querying for an remote control event. [ 285.229753][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 285.244928][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.275368][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.386940][T12698] netlink: 'syz.8.744': attribute type 2 has an invalid length. [ 285.420342][ T972] m920x_read = error: -19 [ 285.680057][ T972] dvb-usb: error -19 while querying for an remote control event. [ 285.738228][ T5907] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 285.806430][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 285.822075][ T5909] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 285.829085][ T5909] ath9k_htc: Failed to initialize the device [ 285.845122][ T5907] usb 6-1: Product: syz [ 285.849395][ T5907] usb 6-1: Manufacturer: syz [ 285.849812][ T9] m920x_read = error: -19 [ 285.866858][ T5907] usb 6-1: SerialNumber: syz [ 285.866884][ T5868] usb 9-1: ath9k_htc: USB layer deinitialized [ 285.881190][ T5907] appletouch 6-1:1.0: Could not find int-in endpoint [ 285.887913][ T5907] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 285.896332][ T9] dvb-usb: error -19 while querying for an remote control event. [ 285.922125][ T5908] gspca_sunplus: reg_r err -32 [ 285.924755][T12615] __vm_enough_memory: pid: 12615, comm: syz.7.738, bytes: 21199757750272 not enough memory for the allocation [ 285.926960][ T5908] sunplus 8-1:0.0: probe with driver sunplus failed with error -32 [ 285.947431][ T5907] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 286.051552][ T5850] m920x_read = error: -19 [ 286.055984][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 286.083944][T12630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.118274][T12630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.156743][ T5868] usb 6-1: USB disconnect, device number 8 [ 286.388838][ T29] audit: type=1400 audit(1736104502.170:1316): avc: denied { setopt } for pid=12684 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 286.442560][ T5850] m920x_read = error: -19 [ 286.449836][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 286.467285][ T29] audit: type=1400 audit(1736104502.170:1317): avc: denied { read } for pid=12684 comm="syz.6.743" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.621608][ T5868] m920x_read = error: -19 [ 286.635722][ T29] audit: type=1400 audit(1736104502.170:1318): avc: denied { open } for pid=12684 comm="syz.6.743" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.660283][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 286.716014][ T29] audit: type=1400 audit(1736104502.470:1319): avc: denied { ioctl } for pid=12733 comm="syz.4.748" path="socket:[22913]" dev="sockfs" ino=22913 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.819768][ T5868] m920x_read = error: -19 [ 286.867762][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 286.923748][ T5868] usb 8-1: USB disconnect, device number 8 [ 286.968341][ T29] audit: type=1400 audit(1736104502.750:1320): avc: denied { create } for pid=12741 comm="syz.5.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.998105][T12740] lo speed is unknown, defaulting to 1000 [ 287.059769][ T972] m920x_read = error: -19 [ 287.064399][ T972] dvb-usb: error -19 while querying for an remote control event. [ 287.096542][ T29] audit: type=1400 audit(1736104502.860:1321): avc: denied { audit_write } for pid=12739 comm="syz.6.749" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 287.117731][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.179917][ T29] audit: type=1400 audit(1736104502.970:1322): avc: denied { write } for pid=12770 comm="syz.4.754" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 287.202695][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.294454][ T972] m920x_read = error: -19 [ 287.306365][ T972] dvb-usb: error -19 while querying for an remote control event. [ 287.476913][ T972] m920x_read = error: -19 [ 287.553639][ T972] dvb-usb: error -19 while querying for an remote control event. [ 287.722763][T12805] netlink: 'syz.4.756': attribute type 2 has an invalid length. [ 287.794177][ T972] m920x_read = error: -19 [ 287.899426][ T972] dvb-usb: error -19 while querying for an remote control event. [ 288.090074][ T5907] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 288.090275][ T5850] m920x_read = error: -19 [ 288.103335][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 288.216285][T12816] netlink: 'syz.6.758': attribute type 2 has an invalid length. [ 288.330571][ T5850] m920x_read = error: -19 [ 288.332269][ T5907] usb 9-1: device descriptor read/64, error -71 [ 288.335024][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 288.475850][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 288.484810][T12821] bridge_slave_1: left allmulticast mode [ 288.490667][T12821] bridge_slave_1: left promiscuous mode [ 288.496503][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.535814][ T972] m920x_read = error: -19 [ 288.540378][ T972] dvb-usb: error -19 while querying for an remote control event. [ 288.549271][T12821] bridge_slave_0: left allmulticast mode [ 288.555902][T12821] bridge_slave_0: left promiscuous mode [ 288.572906][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.690115][ T5907] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 288.700056][ T5868] m920x_read = error: -19 [ 288.704830][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 288.720496][T12825] netlink: 'syz.4.759': attribute type 12 has an invalid length. [ 289.045521][ T5909] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 289.045718][ T5868] m920x_read = error: -19 [ 289.053431][ T5907] usb 9-1: device descriptor read/64, error -71 [ 289.057773][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 289.176948][ T5907] usb usb9-port1: attempt power cycle [ 289.240466][ T5909] usb 8-1: Using ep0 maxpacket: 16 [ 289.258628][ T5909] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 289.259798][ T5850] m920x_read = error: -19 [ 289.270359][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.272308][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 289.296332][ T5909] usb 8-1: Product: syz [ 289.303194][ T5909] usb 8-1: Manufacturer: syz [ 289.308038][ T5909] usb 8-1: SerialNumber: syz [ 289.361531][ T5909] usb 8-1: config 0 descriptor?? [ 289.394807][ T5909] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 289.439835][ T5850] m920x_read = error: -19 [ 289.451012][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 289.525480][ T969] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 289.539683][ T5907] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 289.563346][ T5907] usb 9-1: device descriptor read/8, error -71 [ 289.638645][T12865] netlink: 'syz.4.767': attribute type 10 has an invalid length. [ 289.639822][ T5850] m920x_read = error: -19 [ 289.652396][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 289.689811][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 289.696947][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.707892][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.717835][ T969] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 289.727160][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.745148][ T969] usb 6-1: config 0 descriptor?? [ 289.819706][ T5907] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 289.819783][ T5850] m920x_read = error: -19 [ 289.841279][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 289.854554][ T5909] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71 [ 289.870118][ T5909] usb 8-1: USB disconnect, device number 9 [ 289.870294][ T5907] usb 9-1: device descriptor read/8, error -71 [ 289.920864][T12875] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3150105819 (25200846552 ns) > initial count (8234761088 ns). Using initial count to start timer. [ 289.999723][ T5850] m920x_read = error: -19 [ 290.004316][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 290.019980][ T5907] usb usb9-port1: unable to enumerate USB device [ 290.176557][ T969] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 290.179718][ T5850] m920x_read = error: -19 [ 290.188012][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 290.192550][ T969] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 290.202873][ T969] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 290.205599][T12893] netlink: 'syz.6.770': attribute type 2 has an invalid length. [ 290.215899][ T969] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 290.226431][ T969] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 290.237380][ T969] elan 0003:04F3:0755.000F: failed to start in urb: -90 [ 290.268781][ T969] elan 0003:04F3:0755.000F: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 290.280100][ T5909] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 290.409975][ T5868] m920x_read = error: -19 [ 290.415420][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 290.490321][ T5909] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.549608][ T5909] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.593133][ T5909] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.609878][ T9] m920x_read = error: -19 [ 290.614291][ T9] dvb-usb: error -19 while querying for an remote control event. [ 290.625564][ T5907] usb 6-1: USB disconnect, device number 9 [ 290.627385][T12904] netlink: 'syz.6.771': attribute type 1 has an invalid length. [ 290.633313][ T5909] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 290.639370][T12904] netlink: 'syz.6.771': attribute type 4 has an invalid length. [ 290.656344][T12904] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.771'. [ 290.661613][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.707676][T12882] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 290.779779][ T9] m920x_read = error: -19 [ 290.784270][ T9] dvb-usb: error -19 while querying for an remote control event. [ 290.803619][T12924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.811131][T12924] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 290.892918][T12929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.974684][ T9] m920x_read = error: -19 [ 290.994075][ T9] dvb-usb: error -19 while querying for an remote control event. [ 291.005019][T12924] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.035549][T12924] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 291.151898][T12924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.159820][T12924] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 291.191372][ T5850] m920x_read = error: -19 [ 291.212245][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 291.227183][T12924] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.337213][T12924] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 291.376059][T12924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.382475][ T5850] m920x_read = error: -19 [ 291.386862][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 291.396894][T12924] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 291.505350][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 291.505366][ T29] audit: type=1400 audit(1736104507.290:1334): avc: denied { ioctl } for pid=12957 comm="syz.5.776" path="socket:[24024]" dev="sockfs" ino=24024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.536696][ T29] audit: type=1400 audit(1736104507.290:1335): avc: denied { connect } for pid=12957 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.556530][ T29] audit: type=1400 audit(1736104507.290:1336): avc: denied { write } for pid=12957 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.576257][ T9] m920x_read = error: -19 [ 291.580667][ T9] dvb-usb: error -19 while querying for an remote control event. [ 291.665562][ T5909] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 291.673548][ T5909] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input37 [ 291.701755][ T5909] usb 8-1: USB disconnect, device number 10 [ 291.707683][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 291.740091][ T9] m920x_read = error: -19 [ 291.744505][ T9] dvb-usb: error -19 while querying for an remote control event. [ 291.815476][T12977] netlink: 104 bytes leftover after parsing attributes in process `syz.5.776'. [ 291.830277][ T969] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 292.009787][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 292.028038][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.142996][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.190864][ T969] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 292.257841][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.501233][ T969] usb 7-1: config 0 descriptor?? [ 292.538744][T12986] batman_adv: batadv0: Adding interface: ipvlan2 [ 292.545950][T12986] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.574948][T12986] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 292.578710][ T9] m920x_read = error: -19 [ 292.589891][ T9] dvb-usb: error -19 while querying for an remote control event. [ 292.593724][T12989] pim6reg: entered allmulticast mode [ 292.739819][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 292.749932][ T5850] m920x_read = error: -19 [ 292.754326][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 293.691747][ T5850] m920x_read = error: -19 [ 293.696338][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 293.731355][ T29] audit: type=1400 audit(1736104508.880:1337): avc: denied { create } for pid=12995 comm="syz.7.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 293.794223][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 293.872110][ T5850] m920x_read = error: -19 [ 293.950102][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.972668][ T969] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 293.976268][T13003] netlink: 'syz.5.781': attribute type 2 has an invalid length. [ 293.996124][ T969] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 294.032713][ T969] corsair 0003:1B1C:1B02.0010: item fetching failed at offset 2/5 [ 294.033017][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 294.076938][ T29] audit: type=1400 audit(1736104509.830:1338): avc: denied { connect } for pid=13004 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.107032][ T969] corsair 0003:1B1C:1B02.0010: parse failed [ 294.116350][ T29] audit: type=1400 audit(1736104509.850:1339): avc: denied { write } for pid=13004 comm="syz.4.783" laddr=fe80::a8aa:aaff:feaa:aaaa lport=11 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.167695][ T9] usb 9-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 294.178120][ T969] corsair 0003:1B1C:1B02.0010: probe with driver corsair failed with error -22 [ 294.215206][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.223732][ T9] usb 9-1: Product: syz [ 294.229450][ T9] usb 9-1: Manufacturer: syz [ 294.235583][ T9] usb 9-1: SerialNumber: syz [ 294.289081][ T5850] m920x_read = error: -19 [ 294.294016][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 294.621011][ T9] usb 9-1: config 0 descriptor?? [ 294.626377][ T5868] m920x_read = error: -19 [ 294.630914][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 294.651273][ T969] usb 7-1: USB disconnect, device number 5 [ 295.021422][ T5850] m920x_read = error: -19 [ 295.025782][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 295.085707][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 295.113730][T13006] netlink: 'syz.4.783': attribute type 21 has an invalid length. [ 295.129240][ T29] audit: type=1400 audit(1736104510.910:1340): avc: denied { write } for pid=13017 comm="syz.5.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 295.145356][T13006] netlink: 164 bytes leftover after parsing attributes in process `syz.4.783'. [ 295.173427][ T9] ttusb-dec 9-1:0.0: probe with driver ttusb-dec failed with error -22 [ 295.194562][ T9] usb 9-1: USB disconnect, device number 15 [ 295.238355][ T5850] m920x_read = error: -19 [ 295.243025][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 295.409944][ T9] m920x_read = error: -19 [ 295.414313][ T9] dvb-usb: error -19 while querying for an remote control event. [ 295.433813][ T29] audit: type=1400 audit(1736104511.220:1341): avc: denied { create } for pid=13063 comm="syz.7.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.483365][ T29] audit: type=1400 audit(1736104511.250:1342): avc: denied { bind } for pid=13063 comm="syz.7.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.583676][ T9] m920x_read = error: -19 [ 295.588794][ T9] dvb-usb: error -19 while querying for an remote control event. [ 295.619462][ T29] audit: type=1400 audit(1736104511.250:1343): avc: denied { listen } for pid=13063 comm="syz.7.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.769821][ T5850] m920x_read = error: -19 [ 295.774345][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 296.149809][T13087] netlink: 'syz.5.795': attribute type 2 has an invalid length. [ 296.468761][ T5850] m920x_read = error: -19 [ 296.478682][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.796'. [ 296.487793][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 296.904478][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 296.904532][ T29] audit: type=1400 audit(1736104512.620:1349): avc: denied { getattr } for pid=13090 comm="syz.7.798" path="socket:[24579]" dev="sockfs" ino=24579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 296.934452][ T5850] m920x_read = error: -19 [ 296.938766][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 297.003897][T13092] input: syz1 as /devices/virtual/input/input38 [ 297.167199][T13093] IPVS: length: 24 != 49176 [ 297.219648][ T29] audit: type=1400 audit(1736104512.940:1350): avc: denied { getopt } for pid=13060 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 297.291940][ T29] audit: type=1400 audit(1736104513.060:1351): avc: denied { read } for pid=13112 comm="syz.8.801" path="socket:[24192]" dev="sockfs" ino=24192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.303185][ T5850] m920x_read = error: -19 [ 297.320096][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 297.489489][ T9] m920x_read = error: -19 [ 297.494193][ T9] dvb-usb: error -19 while querying for an remote control event. [ 297.688881][ T29] audit: type=1400 audit(1736104513.360:1352): avc: denied { watch_mount } for pid=13103 comm="syz.5.799" path="/31" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 297.711224][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.744726][ T9] m920x_read = error: -19 [ 297.762622][T13127] netlink: 96 bytes leftover after parsing attributes in process `syz.6.797'. [ 297.773902][ T9] dvb-usb: error -19 while querying for an remote control event. [ 297.818458][T13130] netlink: 'syz.7.800': attribute type 19 has an invalid length. [ 297.832911][ T29] audit: type=1400 audit(1736104513.620:1353): avc: denied { read } for pid=13095 comm="syz.6.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.035309][ T29] audit: type=1400 audit(1736104513.800:1354): avc: denied { shutdown } for pid=13095 comm="syz.6.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.136914][ T5850] m920x_read = error: -19 [ 298.352218][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 298.457178][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 298.522537][ T5850] m920x_read = error: -19 [ 298.574749][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 298.778444][ T5850] m920x_read = error: -19 [ 298.785098][ T9] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 298.798289][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.807491][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 298.870608][ T9] usb 9-1: config 0 descriptor?? [ 298.956846][ T29] audit: type=1400 audit(1736104514.740:1355): avc: denied { create } for pid=13142 comm="syz.7.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 299.008406][ T29] audit: type=1400 audit(1736104514.770:1356): avc: denied { ioctl } for pid=13142 comm="syz.7.805" path="socket:[24227]" dev="sockfs" ino=24227 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 299.170675][ T5850] m920x_read = error: -19 [ 299.175605][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 299.184413][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 299.193111][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 299.201259][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 299.215197][ T9] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 299.459972][ T29] audit: type=1400 audit(1736104515.240:1357): avc: denied { connect } for pid=13157 comm="syz.7.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.623737][ T9] [drm] Initialized udl on minor 2 [ 299.669859][ T972] m920x_read = error: -19 [ 299.674278][ T972] dvb-usb: error -19 while querying for an remote control event. [ 299.690801][ T9] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 299.716280][ T9] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 299.766011][ T29] audit: type=1400 audit(1736104515.520:1358): avc: denied { mount } for pid=13175 comm="syz.5.810" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.776572][T13179] netlink: 'syz.7.809': attribute type 2 has an invalid length. [ 299.802970][ T9] usb 9-1: USB disconnect, device number 16 [ 299.920535][ T5850] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 299.951937][ T5850] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 299.960081][ T5850] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 299.966881][ T5850] m920x_read = error: -19 [ 299.971416][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 300.273174][ T972] m920x_read = error: -19 [ 300.277754][ T972] dvb-usb: error -19 while querying for an remote control event. [ 300.400449][T13190] netlink: 'syz.7.813': attribute type 1 has an invalid length. [ 300.439740][ T5850] m920x_read = error: -19 [ 300.447642][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 300.782109][ T9] m920x_read = error: -19 [ 300.790919][ T9] dvb-usb: error -19 while querying for an remote control event. [ 300.868154][T13198] netlink: 'syz.4.812': attribute type 2 has an invalid length. [ 300.889717][ T5867] iguanair 5-1:0.0: failed to get version [ 300.956725][ T5867] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 300.965055][ T5850] m920x_read = error: -19 [ 300.969497][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 300.993776][ T5867] usb 5-1: USB disconnect, device number 31 [ 301.046147][T13223] netlink: 'syz.7.817': attribute type 12 has an invalid length. [ 301.139984][ T9] m920x_read = error: -19 [ 301.144371][ T9] dvb-usb: error -19 while querying for an remote control event. [ 301.291147][ T5867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 301.311845][ T9] m920x_read = error: -19 [ 301.316820][ T9] dvb-usb: error -19 while querying for an remote control event. [ 301.550226][ T5850] m920x_read = error: -19 [ 301.632526][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 301.708954][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.722619][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.740560][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.804764][ T9] m920x_read = error: -19 [ 301.809158][ T9] dvb-usb: error -19 while querying for an remote control event. [ 301.938468][ T5867] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.991562][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.014079][ T9] m920x_read = error: -19 [ 302.014734][ T5867] usb 5-1: config 0 descriptor?? [ 302.024382][ T9] dvb-usb: error -19 while querying for an remote control event. [ 302.151024][ T969] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 302.189803][ T9] m920x_read = error: -19 [ 302.199646][ T9] dvb-usb: error -19 while querying for an remote control event. [ 302.381830][ T9] m920x_read = error: -19 [ 302.386382][ T9] dvb-usb: error -19 while querying for an remote control event. [ 302.537660][ T5867] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 302.551817][ T969] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 302.562718][ T969] usb 9-1: config 0 has no interface number 0 [ 302.569983][ T9] m920x_read = error: -19 [ 302.574575][ T9] dvb-usb: error -19 while querying for an remote control event. [ 302.576883][ T969] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 302.593834][ T5867] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 302.615103][ T969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.751146][ T5850] m920x_read = error: -19 [ 302.755523][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 302.776157][ T969] usb 9-1: config 0 descriptor?? [ 302.930206][ T5850] m920x_read = error: -19 [ 302.937277][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 303.175880][ T5850] usb 5-1: USB disconnect, device number 32 [ 303.186833][ T5867] m920x_read = error: -19 [ 303.193492][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 303.284384][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 303.284401][ T29] audit: type=1400 audit(1736104519.070:1371): avc: denied { watch watch_reads } for pid=13276 comm="syz.6.826" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 303.419820][ T9] m920x_read = error: -19 [ 303.424192][ T9] dvb-usb: error -19 while querying for an remote control event. [ 303.622588][ T9] m920x_read = error: -19 [ 303.631734][ T9] dvb-usb: error -19 while querying for an remote control event. [ 303.865043][ T5867] m920x_read = error: -19 [ 303.894201][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 304.156377][ T5867] m920x_read = error: -19 [ 304.207413][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 304.275891][ T5909] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 304.306984][ T969] usb 9-1: string descriptor 0 read error: -71 [ 304.320073][ T969] usbtest 9-1:0.31: Linux user mode test driver [ 304.407552][T13306] mkiss: ax0: crc mode is auto. [ 304.574344][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 304.585993][ T5909] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 304.766924][ T29] audit: type=1400 audit(1736104520.320:1372): avc: denied { read } for pid=13299 comm="syz.7.829" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 304.821190][ T5850] m920x_read = error: -19 [ 304.825563][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 304.841243][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.851218][ T969] usbtest 9-1:0.31: low-speed {control} tests [ 304.870845][ T969] usb 9-1: USB disconnect, device number 17 [ 304.877448][ T5909] usb 7-1: config 0 descriptor?? [ 304.883912][ T5909] cp210x 7-1:0.0: cp210x converter detected [ 304.896966][ T29] audit: type=1400 audit(1736104520.320:1373): avc: denied { open } for pid=13299 comm="syz.7.829" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 304.922530][ T29] audit: type=1400 audit(1736104520.320:1374): avc: denied { ioctl } for pid=13299 comm="syz.7.829" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 305.061608][ T5850] m920x_read = error: -19 [ 305.071130][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 305.332169][ T5850] m920x_read = error: -19 [ 305.339636][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 305.381970][ T5909] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 305.406684][ T29] audit: type=1400 audit(1736104521.190:1375): avc: denied { append } for pid=13344 comm="syz.8.833" name="mouse0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 305.463347][ T5909] usb 7-1: cp210x converter now attached to ttyUSB0 [ 305.464072][ T29] audit: type=1400 audit(1736104521.190:1376): avc: denied { open } for pid=13344 comm="syz.8.833" path="/dev/input/mouse0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 305.558202][ T5850] m920x_read = error: -19 [ 305.577587][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 305.746702][ T29] audit: type=1400 audit(1736104521.530:1377): avc: denied { create } for pid=13356 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 305.808604][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'. [ 305.820323][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.829174][T13361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.837889][T13361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.845529][ T9] m920x_read = error: -19 [ 305.850181][ T9] dvb-usb: error -19 while querying for an remote control event. [ 305.858976][T13361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.871301][T13361] batman_adv: batadv0: Removing interface: ipvlan2 [ 305.883348][ T29] audit: type=1400 audit(1736104521.670:1378): avc: denied { setopt } for pid=13364 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.925655][ T29] audit: type=1400 audit(1736104521.710:1379): avc: denied { create } for pid=13359 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.019949][ T9] m920x_read = error: -19 [ 306.040126][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 306.041825][ T9] dvb-usb: error -19 while querying for an remote control event. [ 306.060514][ T29] audit: type=1400 audit(1736104521.850:1380): avc: denied { create } for pid=13368 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.190529][T13380] netlink: 'syz.8.840': attribute type 1 has an invalid length. [ 306.214780][T13380] bond1: entered promiscuous mode [ 306.220057][T13380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.241850][T13380] netlink: 64 bytes leftover after parsing attributes in process `syz.8.840'. [ 306.250917][ T9] m920x_read = error: -19 [ 306.255249][ T9] dvb-usb: error -19 while querying for an remote control event. [ 306.430486][ T9] m920x_read = error: -19 [ 306.485189][ T9] dvb-usb: error -19 while querying for an remote control event. [ 306.693902][ T9] m920x_read = error: -19 [ 306.698630][ T9] dvb-usb: error -19 while querying for an remote control event. [ 306.775014][ T5908] usb 7-1: USB disconnect, device number 6 [ 306.789272][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.136479][ T9] m920x_read = error: -19 [ 307.140980][ T9] dvb-usb: error -19 while querying for an remote control event. [ 307.158412][ T5908] cp210x 7-1:0.0: device disconnected [ 307.459703][ T5850] m920x_read = error: -19 [ 307.464072][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 307.696895][ T5850] m920x_read = error: -19 [ 307.701343][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 308.454721][ T9] m920x_read = error: -19 [ 308.454770][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 308.454780][ T29] audit: type=1400 audit(1736104523.700:1383): avc: denied { create } for pid=13471 comm="syz.8.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 308.459072][ T9] dvb-usb: error -19 while querying for an remote control event. [ 308.657383][ T9] m920x_read = error: -19 [ 308.662419][ T9] dvb-usb: error -19 while querying for an remote control event. [ 308.835721][ T5850] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 308.844090][ T9] m920x_read = error: -19 [ 308.848449][ T9] dvb-usb: error -19 while querying for an remote control event. [ 308.902187][T13502] kvm: emulating exchange as write [ 309.013481][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 309.021399][ T9] m920x_read = error: -19 [ 309.027084][ T5850] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 309.039838][ T9] dvb-usb: error -19 while querying for an remote control event. [ 309.054015][ T5850] usb 5-1: config 0 has no interface number 0 [ 309.067725][ T5850] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 309.079198][ T29] audit: type=1400 audit(1736104524.850:1384): avc: denied { create } for pid=13521 comm="syz.7.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 309.103400][ T29] audit: type=1400 audit(1736104524.850:1385): avc: denied { getopt } for pid=13521 comm="syz.7.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 309.254475][T13523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.263096][ T5909] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 309.263527][ T5868] m920x_read = error: -19 [ 309.294895][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 310.042962][ T29] audit: type=1400 audit(1736104524.850:1386): avc: denied { ioctl } for pid=13521 comm="syz.7.861" path="socket:[25835]" dev="sockfs" ino=25835 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 310.162511][ T5850] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 310.171695][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.179866][ T5850] usb 5-1: Product: syz [ 310.184022][ T5850] usb 5-1: Manufacturer: syz [ 310.188609][ T5850] usb 5-1: SerialNumber: syz [ 310.573030][ T5868] m920x_read = error: -19 [ 310.577405][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 310.594054][ T5850] usb 5-1: config 0 descriptor?? [ 310.600156][ T5850] usb 5-1: can't set config #0, error -71 [ 310.601588][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.606936][ T5850] usb 5-1: USB disconnect, device number 33 [ 310.635005][T13536] netdevsim netdevsim6: Direct firmware load for printk failed with error -2 [ 310.646685][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.656487][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 310.669349][ T5909] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 310.678585][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.689475][T13536] netdevsim netdevsim6: Falling back to sysfs fallback for: printk [ 310.694675][ T5909] usb 6-1: config 0 descriptor?? [ 310.739849][ T5867] m920x_read = error: -19 [ 310.745702][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 310.879715][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 310.909749][ T5868] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 310.925691][ T5867] m920x_read = error: -19 [ 310.930398][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 310.954893][ T5909] usbhid 6-1:0.0: can't add hid device: -71 [ 310.959740][ T5850] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 310.961390][ T5909] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 310.982489][ T5909] usb 6-1: USB disconnect, device number 10 [ 311.052940][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 311.062410][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.070622][ T5868] usb 8-1: device descriptor read/64, error -71 [ 311.150370][ T29] audit: type=1400 audit(1736104526.870:1387): avc: denied { create } for pid=13569 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.178910][ T5867] m920x_read = error: -19 [ 311.184037][ T9] usb 9-1: config 0 descriptor?? [ 311.189521][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 311.203905][ T29] audit: type=1400 audit(1736104526.870:1388): avc: denied { shutdown } for pid=13569 comm="syz.5.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.223963][ T5850] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 311.238949][ T9] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input39 [ 311.249842][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.279065][ T5850] usb 5-1: config 0 descriptor?? [ 311.296233][ T5850] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 311.345512][T13582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.402345][T13529] [U] vÔ3 [ 311.409691][ T5868] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 311.420442][ T9] m920x_read = error: -19 [ 311.424797][ T9] dvb-usb: error -19 while querying for an remote control event. [ 311.455836][ T29] audit: type=1400 audit(1736104527.240:1389): avc: denied { write } for pid=13537 comm="syz.8.863" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 311.491973][ T5908] usb 9-1: USB disconnect, device number 18 [ 311.536659][ T5850] gp8psk: usb in 128 operation failed. [ 311.547724][ T5850] gp8psk: usb in 137 operation failed. [ 311.553251][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.577853][ T5868] usb 8-1: device descriptor read/64, error -71 [ 311.699642][ T5866] m920x_read = error: -19 [ 311.709200][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 311.742941][ T5850] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 311.758479][ T5850] usb 5-1: media controller created [ 311.850898][ T5868] usb usb8-port1: attempt power cycle [ 311.951342][ T5867] m920x_read = error: -19 [ 311.955708][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 311.966595][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.984950][ T5850] gp8psk_fe: Frontend attached [ 311.990304][ T5850] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 311.999718][ T5850] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 312.082595][ T5850] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 312.110602][ T5850] gp8psk: found Genpix USB device pID = 203 (hex) [ 312.129836][ T5866] m920x_read = error: -19 [ 312.134260][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 312.360271][T13635] netlink: 100 bytes leftover after parsing attributes in process `syz.5.873'. [ 312.671837][ T5908] usb 5-1: USB disconnect, device number 34 [ 312.727385][ T5908] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 313.034067][ T5866] m920x_read = error: -19 [ 313.038426][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 313.046237][ T5868] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 313.070286][ T5868] usb 8-1: device descriptor read/8, error -71 [ 313.109690][ T5867] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 313.179687][ T5866] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 313.211082][ T5850] m920x_read = error: -19 [ 313.215674][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 313.271032][ T5867] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 313.289945][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.309862][ T5868] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 313.317743][ T5866] usb 9-1: device descriptor read/64, error -71 [ 313.355576][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.479839][ T5867] usb 7-1: config 0 descriptor?? [ 313.484917][ T5868] usb 8-1: device descriptor read/8, error -71 [ 313.510287][ T5850] m920x_read = error: -19 [ 313.514650][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 313.613274][ T5868] usb usb8-port1: unable to enumerate USB device [ 313.683848][ T5850] m920x_read = error: -19 [ 313.688232][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 313.748617][ T5867] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 313.757239][ T5867] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 313.765144][ T5866] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 313.773498][ T5867] [drm:udl_init] *ERROR* Selecting channel failed [ 313.900352][ T5868] m920x_read = error: -19 [ 313.918621][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 313.953107][ T5867] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 314.027889][ T5866] usb 9-1: device descriptor read/64, error -71 [ 314.146725][ T5868] m920x_read = error: -19 [ 314.153900][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 314.162060][ T5867] [drm] Initialized udl on minor 2 [ 314.726499][ T5866] usb usb9-port1: attempt power cycle [ 314.732289][ T5867] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.747302][ T5867] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 314.757030][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.765027][ T5867] usb 7-1: USB disconnect, device number 7 [ 314.775121][ T9] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 314.784195][ T9] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 314.829969][T13677] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.877' sets config #0 [ 314.871609][ T29] audit: type=1400 audit(1736104530.660:1390): avc: denied { append } for pid=13687 comm="syz.7.878" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.195192][ T5868] m920x_read = error: -19 [ 315.200056][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 315.259728][ T5866] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 315.369262][ T9] m920x_read = error: -19 [ 315.492445][ T5866] usb 9-1: device not accepting address 21, error -71 [ 315.615256][ T9] dvb-usb: error -19 while querying for an remote control event. [ 315.659880][ T29] audit: type=1400 audit(1736104531.390:1391): avc: denied { read } for pid=13697 comm="syz.6.880" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 315.920967][T13704] Process accounting resumed [ 316.045256][ T29] audit: type=1404 audit(1736104531.820:1392): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 316.069698][ T5868] m920x_read = error: -19 [ 316.074101][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 316.080211][ T29] audit: type=1400 audit(1736104531.830:1393): avc: denied { execmem } for pid=13710 comm="syz.8.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 316.105333][T13713] sp0: Synchronizing with TNC [ 316.150203][ T29] audit: type=1400 audit(1736104531.830:1394): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.495840][ T5867] m920x_read = error: -19 [ 316.509621][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 316.517450][ T29] audit: type=1400 audit(1736104531.860:1395): avc: denied { read } for pid=13712 comm="syz.6.885" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 316.540301][ T29] audit: type=1404 audit(1736104531.900:1396): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 316.555316][ T29] audit: type=1400 audit(1736104531.910:1397): avc: denied { prog_load } for pid=13710 comm="syz.8.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.574511][ T29] audit: type=1400 audit(1736104531.910:1398): avc: denied { bpf } for pid=13710 comm="syz.8.884" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 316.597461][ T29] audit: type=1400 audit(1736104531.920:1399): avc: denied { read write } for pid=13712 comm="syz.6.885" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.669661][ T5867] m920x_read = error: -19 [ 316.674612][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 316.780204][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.783146][T13728] netlink: 'syz.4.888': attribute type 2 has an invalid length. [ 317.189701][ T5868] m920x_read = error: -19 [ 317.194080][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 317.399949][ T5867] m920x_read = error: -19 [ 317.404377][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 318.376356][ T9] m920x_read = error: -19 [ 318.386349][ T9] dvb-usb: error -19 while querying for an remote control event. [ 318.923550][T13742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.978462][ T5868] m920x_read = error: -19 [ 318.982994][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 319.316401][ T5868] m920x_read = error: -19 [ 319.320901][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 319.449480][T13748] netlink: 32 bytes leftover after parsing attributes in process `syz.7.892'. [ 319.479741][ T5866] m920x_read = error: -19 [ 319.484174][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 319.519714][ T5909] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 319.544203][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.893'. [ 319.649719][ T5868] m920x_read = error: -19 [ 319.654823][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 319.941724][T13759] block device autoloading is deprecated and will be removed. [ 320.046955][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 320.197422][ T5909] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 320.262034][ T5909] usb 5-1: can't read configurations, error -22 [ 320.342029][ T5868] m920x_read = error: -19 [ 320.346522][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 320.438213][ T5866] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 320.509727][ T5867] m920x_read = error: -19 [ 320.514213][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 320.535651][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 320.535667][ T29] audit: type=1400 audit(1736104536.320:1439): avc: denied { read write } for pid=13763 comm="syz.6.895" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.589694][ T5866] usb 8-1: device descriptor read/64, error -71 [ 320.644205][ T29] audit: type=1400 audit(1736104536.320:1440): avc: denied { open } for pid=13763 comm="syz.6.895" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.704873][ T29] audit: type=1400 audit(1736104536.320:1441): avc: denied { ioctl } for pid=13763 comm="syz.6.895" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.729655][ T5867] m920x_read = error: -19 [ 320.734686][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 320.777369][ T29] audit: type=1400 audit(1736104536.320:1442): avc: denied { create } for pid=13763 comm="syz.6.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.801303][ T29] audit: type=1400 audit(1736104536.560:1443): avc: denied { mounton } for pid=13777 comm="syz.6.898" path=2F34312FE91F7189591E9233614B dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 320.830286][ T5866] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 320.908765][ T5867] m920x_read = error: -19 [ 320.921832][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 320.932255][ T29] audit: type=1400 audit(1736104536.720:1444): avc: denied { create } for pid=13784 comm="syz.8.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 320.969666][ T5866] usb 8-1: device descriptor read/64, error -71 [ 320.969666][ T29] audit: type=1400 audit(1736104536.740:1445): avc: denied { name_bind } for pid=13790 comm="syz.6.900" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 320.969699][ T29] audit: type=1400 audit(1736104536.740:1446): avc: denied { node_bind } for pid=13790 comm="syz.6.900" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 321.021739][ T29] audit: type=1400 audit(1736104536.760:1447): avc: denied { ioctl } for pid=13789 comm="syz.5.899" path="socket:[25278]" dev="sockfs" ino=25278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.046759][ T29] audit: type=1400 audit(1736104536.760:1448): avc: denied { write } for pid=13789 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.081472][ T5866] usb usb8-port1: attempt power cycle [ 321.123278][ T5867] m920x_read = error: -19 [ 321.127911][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 321.945858][ T5867] m920x_read = error: -19 [ 321.950325][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 322.043925][ T5866] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 322.096247][ T5866] usb 8-1: device descriptor read/8, error -71 [ 322.118269][ T5868] m920x_read = error: -19 [ 322.127983][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 322.291178][ T5868] m920x_read = error: -19 [ 322.411071][ T5866] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 322.419942][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 322.453388][ T5866] usb 8-1: device descriptor read/8, error -71 [ 322.570206][ T5866] usb usb8-port1: unable to enumerate USB device [ 322.594968][ T5866] m920x_read = error: -19 [ 322.599506][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 322.719646][ T46] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 322.829746][ T5868] m920x_read = error: -19 [ 322.834175][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 322.949710][ T5866] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 323.129765][ T5868] m920x_read = error: -19 [ 323.139376][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 323.156804][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.188585][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.222242][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 323.388254][ T5868] m920x_read = error: -19 [ 323.392822][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 323.401773][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.415007][ T5866] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.426339][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.441938][ T5866] usb 7-1: config 0 descriptor?? [ 323.538699][T13864] netlink: 48 bytes leftover after parsing attributes in process `syz.7.912'. [ 323.683178][ T5868] m920x_read = error: -19 [ 323.688788][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 323.862655][ T5868] m920x_read = error: -19 [ 323.868140][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 324.047894][ T5866] plantronics 0003:047F:FFFF.0012: ignoring exceeding usage max [ 324.058700][ T5866] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 324.124213][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.142363][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.216843][ T5867] m920x_read = error: -19 [ 324.216864][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 324.269345][ T5866] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 324.298030][T13868] tty tty4: ldisc open failed (-12), clearing slot 3 [ 324.370269][ T5868] m920x_read = error: -19 [ 324.374967][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 324.540531][ T5867] m920x_read = error: -19 [ 324.545074][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 324.712349][ T5867] m920x_read = error: -19 [ 324.717659][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 324.961523][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.308439][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.317325][ T5866] m920x_read = error: -19 [ 325.321878][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 325.352027][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.363436][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.394281][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.433563][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.459108][ T46] usb 9-1: unable to get BOS descriptor or descriptor too short [ 325.470214][ T46] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 325.473196][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.480976][ T46] usb 9-1: can't read configurations, error -71 [ 325.500486][ T5850] m920x_read = error: -19 [ 325.505297][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 325.535411][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.575191][ T5868] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 325.615481][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 325.615524][ T29] audit: type=1400 audit(1736104541.400:1514): avc: denied { nlmsg_read } for pid=13912 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 325.619753][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 325.949908][ T5850] m920x_read = error: -19 [ 325.955363][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 325.995015][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.004242][ T29] audit: type=1400 audit(1736104541.790:1515): avc: denied { write } for pid=13894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.014591][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.035267][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.045658][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.057506][ T29] audit: type=1400 audit(1736104541.830:1516): avc: denied { unmount } for pid=10407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 326.069861][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.078192][ T29] audit: type=1400 audit(1736104541.850:1517): avc: denied { add_name } for pid=13894 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.109930][ T29] audit: type=1400 audit(1736104541.850:1518): avc: denied { create } for pid=13894 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.132669][ T29] audit: type=1400 audit(1736104541.850:1519): avc: denied { write } for pid=13894 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.link" dev="tmpfs" ino=2240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.132677][ T9] m920x_read = error: -19 [ 326.132695][ T9] dvb-usb: error -19 while querying for an remote control event. [ 326.159182][ T29] audit: type=1400 audit(1736104541.850:1520): avc: denied { append } for pid=13894 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.link" dev="tmpfs" ino=2240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.207506][ T5868] usb 8-1: config 0 has no interfaces? [ 326.213369][ T5868] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 326.229764][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.237227][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.245765][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.257075][ T5868] usb 8-1: config 0 descriptor?? [ 326.262260][ T29] audit: type=1400 audit(1736104542.050:1521): avc: denied { remove_name } for pid=13939 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=2240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.628058][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.649655][ T29] audit: type=1400 audit(1736104542.050:1522): avc: denied { unlink } for pid=13939 comm="rm" name="resolv.conf.dummy0.link" dev="tmpfs" ino=2240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.691994][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.699415][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.739634][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.747055][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.758071][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.921'. [ 326.767505][T13952] netlink: 256 bytes leftover after parsing attributes in process `syz.8.921'. [ 326.776560][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.786542][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.794107][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.801680][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.809072][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.816519][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.824318][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.832081][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.840295][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.847699][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.855173][ T5867] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 326.863526][ T8] m920x_read = error: -19 [ 326.867866][ T8] dvb-usb: error -19 while querying for an remote control event. [ 326.889371][ T5867] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 327.030039][ T8] m920x_read = error: -19 [ 327.034410][ T8] dvb-usb: error -19 while querying for an remote control event. [ 327.069745][ T29] audit: type=1400 audit(1736104542.830:1523): avc: denied { create } for pid=13947 comm="syz.8.921" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 327.135252][ T5850] usb 7-1: USB disconnect, device number 8 [ 327.539799][ T46] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 327.729002][ T5866] m920x_read = error: -19 [ 327.733577][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 327.939716][ T46] usb 9-1: device descriptor read/64, error -71 [ 327.965410][ T5867] m920x_read = error: -19 [ 327.970028][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 328.004084][ T5908] usb 8-1: USB disconnect, device number 19 [ 328.129761][ T5867] m920x_read = error: -19 [ 328.136904][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 328.232814][ T46] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 328.299696][ T5850] m920x_read = error: -19 [ 328.304127][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 328.336266][T14000] team0 (unregistering): Port device team_slave_0 removed [ 328.369764][ T5866] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 328.379640][ T46] usb 9-1: device descriptor read/64, error -71 [ 328.425827][T14000] team0 (unregistering): Port device team_slave_1 removed [ 328.459726][ T5867] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 328.495737][ T8] m920x_read = error: -19 [ 328.500639][ T8] dvb-usb: error -19 while querying for an remote control event. [ 328.512163][ T46] usb usb9-port1: attempt power cycle [ 328.529834][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 328.561844][ T5866] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 328.594030][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.619174][ T5866] usb 6-1: config 0 descriptor?? [ 328.637499][ T5866] gspca_main: sunplus-2.14.0 probing 041e:400b [ 328.650761][ T5867] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 328.662213][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.679817][ T8] m920x_read = error: -19 [ 328.684245][ T8] dvb-usb: error -19 while querying for an remote control event. [ 328.696822][ T5867] usb 5-1: config 0 descriptor?? [ 328.713499][ T5867] cp210x 5-1:0.0: cp210x converter detected [ 328.871068][ T8] m920x_read = error: -19 [ 328.890009][ T46] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 328.890085][ T8] dvb-usb: error -19 while querying for an remote control event. [ 329.153804][ T46] usb 9-1: device descriptor read/8, error -71 [ 329.243463][ T8] m920x_read = error: -19 [ 329.264575][ T8] dvb-usb: error -19 while querying for an remote control event. [ 329.329351][ T5867] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 329.358053][ T5867] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 329.379333][ T5867] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 329.391042][ T5867] usb 5-1: cp210x converter now attached to ttyUSB0 [ 329.402231][T14030] dccp_close: ABORT with 32 bytes unread [ 329.419916][ T46] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 329.461532][ T46] usb 9-1: device descriptor read/8, error -71 [ 329.469809][ T5867] m920x_read = error: -19 [ 329.474138][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 329.555652][ T5866] gspca_sunplus: reg_r err -32 [ 329.561077][T13989] __vm_enough_memory: pid: 13989, comm: syz.5.923, bytes: 21200399060992 not enough memory for the allocation [ 329.562011][ T5866] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 329.586399][ T5908] usb 5-1: USB disconnect, device number 37 [ 329.593215][ T46] usb usb9-port1: unable to enumerate USB device [ 329.604711][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 329.614924][ T5908] cp210x 5-1:0.0: device disconnected [ 329.619879][ T8] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 329.639123][ T5866] usb 6-1: USB disconnect, device number 11 [ 329.649068][ T5867] m920x_read = error: -19 [ 329.655450][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 329.781090][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 329.799280][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.819959][ T5866] m920x_read = error: -19 [ 329.824424][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 329.839709][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.852791][ T8] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 329.862768][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.875493][ T8] usb 8-1: config 0 descriptor?? [ 329.991035][ T5866] m920x_read = error: -19 [ 329.996304][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 330.164260][ T5866] m920x_read = error: -19 [ 330.172000][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 330.371067][ T5866] m920x_read = error: -19 [ 330.388563][ T8] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 330.406804][T14142] netlink: 96 bytes leftover after parsing attributes in process `syz.4.935'. [ 330.416356][T14142] netlink: 'syz.4.935': attribute type 5 has an invalid length. [ 330.424248][T14142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.935'. [ 330.458991][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 330.479962][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 330.509729][ T8] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 330.549135][ T8] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 330.561937][ T8] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 330.616482][ T8] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 330.628171][ T8] appleir 0003:05AC:8241.0014: No inputs registered, leaving [ 330.721051][ T5866] m920x_read = error: -19 [ 330.725411][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 330.758848][ T8] appleir 0003:05AC:8241.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 330.889732][ T8] m920x_read = error: -19 [ 330.894123][ T8] dvb-usb: error -19 while querying for an remote control event. [ 331.006740][ T5908] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 331.039654][T14161] netlink: 'syz.8.939': attribute type 2 has an invalid length. [ 331.069695][ T8] m920x_read = error: -19 [ 331.074024][ T8] dvb-usb: error -19 while querying for an remote control event. [ 331.091425][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 331.091436][ T29] audit: type=1400 audit(1736104546.870:1547): avc: denied { setattr } for pid=14158 comm="syz.6.940" name="TIPC" dev="sockfs" ino=26437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.804509][ T8] m920x_read = error: -19 [ 331.808923][ T8] dvb-usb: error -19 while querying for an remote control event. [ 331.968496][ T5908] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 331.977668][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.985842][ T5908] usb 5-1: Product: syz [ 331.990076][ T5908] usb 5-1: Manufacturer: syz [ 331.994732][ T5908] usb 5-1: SerialNumber: syz [ 332.017475][ T5866] m920x_read = error: -19 [ 332.022923][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 332.602864][ T29] audit: type=1400 audit(1736104547.850:1548): avc: denied { ioctl } for pid=14168 comm="syz.5.944" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26479 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 332.643846][ T5866] m920x_read = error: -19 [ 332.648171][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 332.676340][ T29] audit: type=1400 audit(1736104547.850:1549): avc: denied { create } for pid=14168 comm="syz.5.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.720722][ T5908] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.736603][ T29] audit: type=1400 audit(1736104548.460:1550): avc: denied { write } for pid=14178 comm="syz.8.946" name="tcp6" dev="proc" ino=4026534013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 332.745078][ T5909] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 332.842010][ T5866] m920x_read = error: -19 [ 332.847449][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 333.209374][ T8] usb 5-1: USB disconnect, device number 38 [ 333.229899][ T5909] usb 5-1: ath9k_htc: Unable to allocate URBs [ 333.236639][ T8] usb 5-1: ath9k_htc: USB layer deinitialized [ 333.379864][ T5866] m920x_read = error: -19 [ 333.384263][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 333.550032][ T8] m920x_read = error: -19 [ 333.554415][ T8] dvb-usb: error -19 while querying for an remote control event. [ 333.653754][T14208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.950'. [ 333.740215][ T8] m920x_read = error: -19 [ 333.744619][ T8] dvb-usb: error -19 while querying for an remote control event. [ 334.082091][T14210] netlink: 'syz.6.951': attribute type 4 has an invalid length. [ 334.185613][T14215] netlink: 'syz.4.952': attribute type 2 has an invalid length. [ 334.250396][ T5866] m920x_read = error: -19 [ 334.254742][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 334.352344][ T29] audit: type=1400 audit(1736104550.140:1551): avc: denied { create } for pid=14216 comm="syz.6.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.384409][ T29] audit: type=1400 audit(1736104550.170:1552): avc: denied { ioctl } for pid=14216 comm="syz.6.953" path="socket:[26926]" dev="sockfs" ino=26926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.421555][ T29] audit: type=1400 audit(1736104550.200:1553): avc: denied { ioctl } for pid=14216 comm="syz.6.953" path="socket:[26931]" dev="sockfs" ino=26931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.446718][ T29] audit: type=1400 audit(1736104550.200:1554): avc: denied { bind } for pid=14216 comm="syz.6.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.466808][ T29] audit: type=1400 audit(1736104550.200:1555): avc: denied { connect } for pid=14216 comm="syz.6.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.542542][T14217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14217 comm=syz.6.953 [ 334.555441][ T8] m920x_read = error: -19 [ 334.560049][ T8] dvb-usb: error -19 while querying for an remote control event. [ 335.179689][T14217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14217 comm=syz.6.953 [ 335.199252][ T29] audit: type=1400 audit(1736104550.980:1556): avc: denied { execute } for pid=14216 comm="syz.6.953" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 335.253059][T14220] netlink: 'syz.6.953': attribute type 1 has an invalid length. [ 335.309037][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.6.953'. [ 335.318580][ T5866] m920x_read = error: -19 [ 335.325863][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 335.489920][ T5866] m920x_read = error: -19 [ 335.494584][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 335.740605][ T5866] m920x_read = error: -19 [ 335.746017][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 335.943058][ T5866] m920x_read = error: -19 [ 335.947678][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 336.163271][ T5866] m920x_read = error: -19 [ 336.167664][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 336.345792][ T5866] m920x_read = error: -19 [ 336.359706][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 336.529792][ T5866] m920x_read = error: -19 [ 336.534173][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 336.700195][ T5867] m920x_read = error: -19 [ 336.704539][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 336.740042][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 336.869702][ T5867] m920x_read = error: -19 [ 336.874045][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 336.901912][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 336.908106][ T8] usb 7-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.931687][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.938277][ T8] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 336.966993][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.001179][ T8] usb 7-1: config 0 descriptor?? [ 337.049678][ T5867] m920x_read = error: -19 [ 337.054023][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 337.229696][ T5867] m920x_read = error: -19 [ 337.250077][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.268965][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 337.397925][ T5909] usb 8-1: USB disconnect, device number 20 [ 337.404507][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 337.404521][ T29] audit: type=1400 audit(1736104553.190:1570): avc: denied { watch watch_reads } for pid=14281 comm="syz.7.966" path="/46" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 337.450866][ T5866] m920x_read = error: -19 [ 337.455367][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 337.487574][ T8] hid-picolcd 0003:04D8:F002.0015: unexpected long global item [ 337.638070][ T5867] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 337.690227][ T5866] m920x_read = error: -19 [ 337.705173][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 337.777401][T14281] ALSA: mixer_oss: invalid OSS volume '' [ 337.784621][ T8] hid-picolcd 0003:04D8:F002.0015: device report parse failed [ 337.792274][ T8] hid-picolcd 0003:04D8:F002.0015: probe with driver hid-picolcd failed with error -22 [ 337.910168][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 337.923262][ T5867] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 337.936973][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.949711][ T8] m920x_read = error: -19 [ 337.954059][ T8] dvb-usb: error -19 while querying for an remote control event. [ 337.962279][ T5867] usb 5-1: config 0 has no interface number 0 [ 337.980102][ T5867] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 337.993803][ T5867] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 338.004696][ T8] usb 7-1: USB disconnect, device number 9 [ 338.012508][ T5867] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 338.030260][ T5867] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 338.039472][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.048466][ T5867] usb 5-1: Product: syz [ 338.053036][ T5867] usb 5-1: Manufacturer: syz [ 338.057660][ T5867] usb 5-1: SerialNumber: syz [ 338.066340][ T5867] usb 5-1: config 0 descriptor?? [ 338.074187][T14274] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 338.085275][ T5867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.112497][ T5867] snd-usb-audio 5-1:0.16: probe with driver snd-usb-audio failed with error -12 [ 338.140355][ T5867] m920x_read = error: -19 [ 338.145065][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 338.159724][ T5909] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 338.298174][ T8] usb 5-1: USB disconnect, device number 39 [ 338.310222][ T5867] m920x_read = error: -19 [ 338.315533][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 338.339993][ T5909] usb 8-1: Using ep0 maxpacket: 8 [ 338.349995][ T5909] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 338.358212][ T5909] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.368041][ T5909] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.378127][ T5909] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.388117][ T5909] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.402011][ T5909] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.411115][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.478929][T14343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14343 comm=syz.8.968 [ 338.479051][T14342] binder: 14341:14342 ioctl 4018620d 0 returned -22 [ 338.498722][ T8] m920x_read = error: -19 [ 338.502140][ T29] audit: type=1400 audit(1736104554.260:1571): avc: denied { ioctl } for pid=14341 comm="syz.8.968" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.503138][ T8] dvb-usb: error -19 while querying for an remote control event. [ 338.535606][ T29] audit: type=1400 audit(1736104554.280:1572): avc: denied { set_context_mgr } for pid=14341 comm="syz.8.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 338.625722][ T5909] usb 8-1: usb_control_msg returned -32 [ 338.632315][ T5909] usbtmc 8-1:16.0: can't read capabilities [ 338.810243][ T8] m920x_read = error: -19 [ 338.829036][ T8] dvb-usb: error -19 while querying for an remote control event. [ 338.997705][ T8] m920x_read = error: -19 [ 339.006555][ T8] dvb-usb: error -19 while querying for an remote control event. [ 339.037981][ T29] audit: type=1400 audit(1736104554.820:1573): avc: denied { write } for pid=14362 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 339.059851][ T29] audit: type=1400 audit(1736104554.820:1574): avc: denied { read } for pid=14362 comm="syz.4.971" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.096011][ T29] audit: type=1400 audit(1736104554.820:1575): avc: denied { open } for pid=14362 comm="syz.4.971" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.119046][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.144346][ T29] audit: type=1400 audit(1736104554.820:1576): avc: denied { ioctl } for pid=14362 comm="syz.4.971" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.168868][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.175945][ T29] audit: type=1326 audit(1736104554.950:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.6.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb85785d29 code=0x7ffc0000 [ 339.189708][ T5866] m920x_read = error: -19 [ 339.201108][ T29] audit: type=1326 audit(1736104554.950:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.6.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb85785d29 code=0x7ffc0000 [ 339.204173][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 339.261268][ T29] audit: type=1326 audit(1736104554.950:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14369 comm="syz.6.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbb85785d29 code=0x7ffc0000 [ 339.330034][ T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 339.587579][ T5866] m920x_read = error: -19 [ 339.593312][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 339.749968][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.760321][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.769648][ T5850] m920x_read = error: -19 [ 339.774001][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 339.802175][ T8] usb 5-1: config 0 descriptor?? [ 339.819407][ T8] cp210x 5-1:0.0: cp210x converter detected [ 339.939751][ T5866] m920x_read = error: -19 [ 339.944236][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 340.043439][ T8] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 340.071816][ T8] cp210x 5-1:0.0: querying part number failed [ 340.091264][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 340.149759][ T5850] m920x_read = error: -19 [ 340.155213][ T8] usb 5-1: USB disconnect, device number 40 [ 340.165968][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 340.246011][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.274639][ T8] cp210x 5-1:0.0: device disconnected [ 340.381299][ T5868] m920x_read = error: -19 [ 340.389916][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 340.499668][ T5866] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 340.621274][ T5850] m920x_read = error: -19 [ 340.625888][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 340.793306][ T5850] m920x_read = error: -19 [ 340.797953][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 340.819844][ T46] usb 8-1: USB disconnect, device number 21 [ 340.871805][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 341.054793][ T5850] m920x_read = error: -19 [ 341.059234][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 341.399982][ T5866] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 341.425750][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.460866][ T5866] usb 7-1: config 0 descriptor?? [ 341.489333][ T5866] gspca_main: sunplus-2.14.0 probing 041e:400b [ 341.569806][ T5850] m920x_read = error: -19 [ 341.574203][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 341.629753][ T5909] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 341.770940][ T5850] m920x_read = error: -19 [ 341.859695][ T5909] usb 9-1: Using ep0 maxpacket: 8 [ 341.864941][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 341.971048][ T5909] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 342.067070][ T5866] gspca_sunplus: reg_w_riv err -110 [ 342.072373][ T5866] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 342.105142][ T5909] usb 9-1: config 179 has no interface number 0 [ 342.124029][ T5909] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 342.129753][ T5850] m920x_read = error: -19 [ 342.139438][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 342.170434][ T5909] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 342.182128][ T5909] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.193826][ T5909] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 342.205436][ T5909] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 342.219253][ T5909] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 342.228332][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.254414][T14440] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 342.417204][ T5850] m920x_read = error: -19 [ 342.421660][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 342.555530][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 342.555565][ T29] audit: type=1400 audit(1736104558.320:1585): avc: denied { open } for pid=14462 comm="syz.4.983" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 342.591860][ T8] m920x_read = error: -19 [ 342.596294][ T8] dvb-usb: error -19 while querying for an remote control event. [ 343.266506][ T29] audit: type=1400 audit(1736104558.340:1586): avc: denied { ioctl } for pid=14462 comm="syz.4.983" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 343.363157][ T29] audit: type=1400 audit(1736104559.040:1587): avc: denied { unlink } for pid=14472 comm="syz.5.985" name="#21" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.399789][ T8] m920x_read = error: -19 [ 343.404199][ T8] dvb-usb: error -19 while querying for an remote control event. [ 343.439031][ T5909] usb 7-1: USB disconnect, device number 10 [ 343.445200][ T29] audit: type=1400 audit(1736104559.040:1588): avc: denied { mount } for pid=14472 comm="syz.5.985" name="/" dev="overlay" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 343.479731][ T29] audit: type=1400 audit(1736104559.260:1589): avc: denied { create } for pid=14475 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.482324][ T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input40 [ 343.554483][ T29] audit: type=1400 audit(1736104559.260:1590): avc: denied { connect } for pid=14475 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.579687][ T8] m920x_read = error: -19 [ 343.585234][ T8] dvb-usb: error -19 while querying for an remote control event. [ 343.717870][ T29] audit: type=1400 audit(1736104559.460:1591): avc: denied { unmount } for pid=10395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 343.785444][ T8] m920x_read = error: -19 [ 343.790281][ T8] dvb-usb: error -19 while querying for an remote control event. [ 343.812039][T14440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.839378][T14503] tmpfs: Bad value for 'mpol' [ 343.845120][T14440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.062900][ T8] m920x_read = error: -19 [ 344.067658][ T8] dvb-usb: error -19 while querying for an remote control event. [ 344.825847][ T5866] m920x_read = error: -19 [ 344.830283][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 344.882704][ T29] audit: type=1400 audit(1736104559.900:1592): avc: denied { bind } for pid=14502 comm="syz.6.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.505544][ T29] audit: type=1400 audit(1736104559.900:1593): avc: denied { listen } for pid=14502 comm="syz.6.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.852674][ T5866] m920x_read = error: -19 [ 345.857053][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 345.886951][ T29] audit: type=1400 audit(1736104559.900:1594): avc: denied { accept } for pid=14502 comm="syz.6.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.989677][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 346.110783][ T5850] m920x_read = error: -19 [ 346.126933][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 346.163246][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 346.171551][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 346.179052][T14528] netlink: 'syz.8.993': attribute type 49 has an invalid length. [ 346.187702][ T46] usb 9-1: USB disconnect, device number 29 [ 346.194919][ T46] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 347.398300][ T5866] m920x_read = error: -19 [ 347.403010][ T8] usb 6-1: device descriptor read/64, error -71 [ 347.409300][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 347.629619][ T5850] m920x_read = error: -19 [ 347.633989][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 347.833480][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 347.852505][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 347.852538][ T29] audit: type=1400 audit(1736104563.630:1596): avc: denied { append } for pid=14565 comm="syz.4.995" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 347.880685][ T5866] m920x_read = error: -19 [ 347.885912][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 348.194940][ T5866] m920x_read = error: -19 [ 348.199315][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 348.372531][ T5850] m920x_read = error: -19 [ 348.376969][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 348.686172][ T5850] m920x_read = error: -19 [ 348.709760][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 348.942219][ T5867] m920x_read = error: -19 [ 348.952519][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 349.079771][ T5909] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 349.121228][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 349.231393][ T5866] m920x_read = error: -19 [ 349.235817][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 349.274032][ T5909] usb 9-1: Using ep0 maxpacket: 8 [ 349.285769][ T29] audit: type=1400 audit(1736104565.070:1597): avc: denied { name_bind } for pid=14595 comm="syz.7.1003" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 349.317851][ T5909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.333458][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.346479][ T5909] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 349.349627][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 349.355913][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.370496][ T5909] usb 9-1: config 0 descriptor?? [ 349.376965][ T5909] qmi_wwan 9-1:0.0: probe with driver qmi_wwan failed with error -22 [ 349.382175][T14600] input: syz1 as /devices/virtual/input/input41 [ 349.399814][ T5850] m920x_read = error: -19 [ 349.404225][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 349.409666][ T29] audit: type=1400 audit(1736104565.150:1598): avc: denied { ioctl } for pid=14599 comm="syz.6.1004" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 349.430818][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.532069][ T29] audit: type=1400 audit(1736104565.320:1599): avc: denied { getopt } for pid=14609 comm="syz.7.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.558602][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.601064][ T5867] m920x_read = error: -19 [ 349.602366][ T5909] usb 9-1: USB disconnect, device number 30 [ 349.607384][ T5867] dvb-usb: error -19 while querying for an remote control event. [ 349.619096][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.620036][ T29] audit: type=1400 audit(1736104565.340:1600): avc: denied { create } for pid=14599 comm="syz.6.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.663300][ T29] audit: type=1400 audit(1736104565.340:1601): avc: denied { create } for pid=14609 comm="syz.7.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 349.681963][ T5866] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 349.692452][ T8] usb 6-1: config 0 descriptor?? [ 349.703806][ T8] hub 6-1:0.0: bad descriptor, ignoring hub [ 349.711408][ T8] hub 6-1:0.0: probe with driver hub failed with error -5 [ 349.717741][T14624] hsr0: entered promiscuous mode [ 349.719834][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 349.769761][ T8] m920x_read = error: -19 [ 349.774132][ T8] dvb-usb: error -19 while querying for an remote control event. [ 349.879620][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 349.887263][ T5866] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 349.896515][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.907448][ T5866] usb 5-1: Product: syz [ 349.911980][ T5866] usb 5-1: Manufacturer: syz [ 349.916590][ T5866] usb 5-1: SerialNumber: syz [ 349.925168][ T5866] usb 5-1: config 0 descriptor?? [ 349.934444][ T5866] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 349.941645][ T8] m920x_read = error: -19 [ 349.945993][ T8] dvb-usb: error -19 while querying for an remote control event. [ 349.969654][ T5867] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 350.109656][ T5866] m920x_read = error: -19 [ 350.114087][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 350.123430][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 350.131233][ T5867] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 350.143309][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 350.159493][ T5867] usb 7-1: can't read configurations, error -61 [ 350.179462][ T29] audit: type=1400 audit(1736104565.960:1602): avc: denied { create } for pid=14597 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.201250][T14598] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1005'. [ 350.215373][ T5909] usb 5-1: USB disconnect, device number 41 [ 350.224406][ T29] audit: type=1400 audit(1736104565.990:1603): avc: denied { write } for pid=14597 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.245102][ T29] audit: type=1400 audit(1736104565.990:1604): avc: denied { nlmsg_write } for pid=14597 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.280980][ T5866] m920x_read = error: -19 [ 350.283950][ T29] audit: type=1400 audit(1736104566.040:1605): avc: denied { create } for pid=14588 comm="syz.5.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.285447][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 350.316786][ T5867] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 350.489805][ T5866] m920x_read = error: -19 [ 350.516800][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 350.602038][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 350.661111][ T5867] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 350.729400][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 350.740382][ T5866] m920x_read = error: -19 [ 350.743459][ T5909] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 350.749654][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 350.776116][ T5909] usb 6-1: device reset changed ep0 maxpacket size! [ 350.779651][ T5867] usb 7-1: can't read configurations, error -61 [ 350.850553][ T5867] usb usb7-port1: attempt power cycle [ 350.869665][ T5909] usb 6-1: USB disconnect, device number 14 [ 350.917719][T14673] overlay: Unknown parameter 'uid' [ 350.925055][T14676] 9pnet_fd: Insufficient options for proto=fd [ 351.014697][ T5866] m920x_read = error: -19 [ 351.014720][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 351.169815][ T5866] m920x_read = error: -19 [ 351.174250][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 351.211490][ T5867] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 351.232354][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.240297][ T5867] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 351.249740][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 351.257557][ T5867] usb 7-1: can't read configurations, error -61 [ 351.264158][ T8] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 351.289858][ T5850] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 351.354806][ T5866] m920x_read = error: -19 [ 351.367764][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 351.403744][ T5867] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 351.423289][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.433627][ T5850] usb 8-1: device descriptor read/64, error -71 [ 351.446363][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.454426][ T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.465598][ T5867] usb 7-1: too many configurations: 255, using maximum allowed: 8 [ 351.477105][ T8] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.497315][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 351.512247][ T5867] usb 7-1: can't read configurations, error -61 [ 351.526983][ T5867] usb usb7-port1: unable to enumerate USB device [ 351.533662][ T5866] m920x_read = error: -19 [ 351.542168][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 351.556253][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.568182][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.582304][ T8] usb 9-1: Product: syz [ 351.586535][ T8] usb 9-1: Manufacturer: syz [ 351.593988][ T8] usb 9-1: SerialNumber: syz [ 351.626257][ T8] cdc_ncm 9-1:1.0: skipping garbage [ 351.633423][ T8] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 351.640400][ T8] cdc_ncm 9-1:1.0: bind() failure [ 351.679660][ T5909] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 351.679880][ T5850] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 351.709784][ T8] m920x_read = error: -19 [ 351.714159][ T8] dvb-usb: error -19 while querying for an remote control event. [ 351.819821][ T5850] usb 8-1: device descriptor read/64, error -71 [ 351.834186][ T46] usb 9-1: USB disconnect, device number 31 [ 351.841248][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 351.848674][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.861627][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.871414][ T5909] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 351.880266][ T8] m920x_read = error: -19 [ 351.880688][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.888363][ T8] dvb-usb: error -19 while querying for an remote control event. [ 351.902581][ T5909] usb 6-1: config 0 descriptor?? [ 351.940019][ T5850] usb usb8-port1: attempt power cycle [ 352.059802][ T8] m920x_read = error: -19 [ 352.064202][ T8] dvb-usb: error -19 while querying for an remote control event. [ 352.117729][T14657] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1011'. [ 352.230634][ T5866] m920x_read = error: -19 [ 352.238939][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 352.289932][ T5850] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 352.342100][ T5850] usb 8-1: device descriptor read/8, error -71 [ 352.346220][ T5909] lenovo 0003:17EF:6062.0016: unknown main item tag 0xe [ 352.424132][ T8] m920x_read = error: -19 [ 352.489259][ T8] dvb-usb: error -19 while querying for an remote control event. [ 352.502039][ T5909] lenovo 0003:17EF:6062.0016: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 352.560069][ T5908] usb 6-1: USB disconnect, device number 15 [ 352.611484][ T5850] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 352.649806][ T8] m920x_read = error: -19 [ 352.654218][ T8] dvb-usb: error -19 while querying for an remote control event. [ 352.662196][ T5850] usb 8-1: device descriptor read/8, error -71 [ 352.770062][ T5850] usb usb8-port1: unable to enumerate USB device [ 352.789832][ T5909] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 352.811251][ T969] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 352.842885][ T5850] m920x_read = error: -19 [ 352.847233][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 352.951416][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.962702][ T5909] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 352.972055][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.984100][ T969] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.996298][ T969] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.006718][ T5909] usb 5-1: config 0 descriptor?? [ 353.011882][ T5850] m920x_read = error: -19 [ 353.014322][ T969] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 353.016264][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 353.025663][ T969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.060766][ T969] usb 9-1: config 0 descriptor?? [ 353.199746][ T46] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 353.219667][ T5850] m920x_read = error: -19 [ 353.224083][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 353.379704][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 353.387669][ T46] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 353.389782][ T5850] m920x_read = error: -19 [ 353.398761][ T46] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.407241][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 353.412891][ T46] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.425051][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 353.433243][ T46] usb 7-1: config 0 interface 0 has no altsetting 0 [ 353.448643][ T46] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 353.457794][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.471715][ T5909] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 353.500914][ T46] usb 7-1: config 0 descriptor?? [ 353.507105][ T5909] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input42 [ 353.590023][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 353.600974][ T5850] m920x_read = error: -19 [ 353.605340][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 353.622564][ T8] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 353.625594][ T5909] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 353.632012][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.656288][ T8] usb 6-1: config 0 descriptor?? [ 353.664961][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 353.681699][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 353.681714][ T29] audit: type=1400 audit(1736104569.460:1617): avc: denied { bind } for pid=14716 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.711896][ T5909] [ 353.711904][ T5909] ====================================================== [ 353.711910][ T5909] WARNING: possible circular locking dependency detected [ 353.711917][ T5909] 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Not tainted [ 353.711927][ T5909] ------------------------------------------------------ [ 353.711933][ T5909] kworker/1:7/5909 is trying to acquire lock: [ 353.711945][ T5909] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 353.711986][ T5909] [ 353.711986][ T5909] but task is already holding lock: [ 353.711990][ T5909] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 353.712028][ T5909] [ 353.712028][ T5909] which lock already depends on the new lock. [ 353.712028][ T5909] [ 353.712033][ T5909] [ 353.712033][ T5909] the existing dependency chain (in reverse order) is: [ 353.712038][ T5909] [ 353.712038][ T5909] -> #2 (console_lock){+.+.}-{0:0}: [ 353.712059][ T5909] console_lock+0x7a/0xa0 [ 353.712079][ T5909] con_flush_chars+0x5e/0x80 [ 353.712100][ T5909] n_tty_receive_buf_common+0xa99/0x1980 [ 353.712120][ T5909] tty_ioctl+0x575/0x15d0 [ 353.712133][ T5909] __x64_sys_ioctl+0x190/0x200 [ 353.712155][ T5909] do_syscall_64+0xcd/0x250 [ 353.712176][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.712199][ T5909] [ 353.712199][ T5909] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 353.712220][ T5909] down_write+0x93/0x200 [ 353.712241][ T5909] n_tty_flush_buffer+0x25/0x1b0 [ 353.712259][ T5909] tty_buffer_flush+0x236/0x310 [ 353.712272][ T5909] tty_ldisc_flush+0x64/0xe0 [ 353.712293][ T5909] tty_port_close_start+0x337/0x540 [ 353.712309][ T5909] tty_port_close+0x26/0x160 [ 353.712325][ T5909] uart_close+0x7b/0x220 [ 353.712345][ T5909] tty_release+0x3a8/0x1410 [ 353.712358][ T5909] __fput+0x3f8/0xb60 [ 353.712376][ T5909] task_work_run+0x14e/0x250 [ 353.712393][ T5909] syscall_exit_to_user_mode+0x27b/0x2a0 [ 353.712413][ T5909] do_syscall_64+0xda/0x250 [ 353.712432][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.712459][ T5909] [ 353.712459][ T5909] -> #0 (&buf->lock){+.+.}-{4:4}: [ 353.712480][ T5909] __lock_acquire+0x249e/0x3c40 [ 353.712496][ T5909] lock_acquire.part.0+0x11b/0x380 [ 353.712512][ T5909] __mutex_lock+0x19b/0xa60 [ 353.712532][ T5909] tty_buffer_flush+0x72/0x310 [ 353.712545][ T5909] tty_ldisc_flush+0x64/0xe0 [ 353.712566][ T5909] __do_SAK+0x6a1/0x800 [ 353.712580][ T5909] vc_SAK+0x7f/0x310 [ 353.712599][ T5909] process_one_work+0x9c5/0x1ba0 [ 353.712615][ T5909] worker_thread+0x6c8/0xf00 [ 353.712630][ T5909] kthread+0x2c1/0x3a0 [ 353.712650][ T5909] ret_from_fork+0x45/0x80 [ 353.712666][ T5909] ret_from_fork_asm+0x1a/0x30 [ 353.712686][ T5909] [ 353.712686][ T5909] other info that might help us debug this: [ 353.712686][ T5909] [ 353.712691][ T5909] Chain exists of: [ 353.712691][ T5909] &buf->lock --> &tty->termios_rwsem --> console_lock [ 353.712691][ T5909] [ 353.712714][ T5909] Possible unsafe locking scenario: [ 353.712714][ T5909] [ 353.712718][ T5909] CPU0 CPU1 [ 353.712722][ T5909] ---- ---- [ 353.712726][ T5909] lock(console_lock); [ 353.712736][ T5909] lock(&tty->termios_rwsem); [ 353.712748][ T5909] lock(console_lock); [ 353.712758][ T5909] lock(&buf->lock); [ 353.712768][ T5909] [ 353.712768][ T5909] *** DEADLOCK *** [ 353.712768][ T5909] [ 353.712772][ T5909] 4 locks held by kworker/1:7/5909: [ 353.712782][ T5909] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 353.712819][ T5909] #1: ffffc90003967d80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 353.712858][ T5909] #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 353.712898][ T5909] #3: ffff88805b6b70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 353.712941][ T5909] [ 353.712941][ T5909] stack backtrace: [ 353.712946][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: kworker/1:7 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 353.712965][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.712975][ T5909] Workqueue: events vc_SAK [ 353.712988][ T5909] Call Trace: [ 353.712991][ T5909] [ 353.712995][ T5909] dump_stack_lvl+0x116/0x1f0 [ 353.713008][ T5909] print_circular_bug+0x419/0x5d0 [ 353.713019][ T5909] check_noncircular+0x31a/0x400 [ 353.713029][ T5909] ? __pfx_check_noncircular+0x10/0x10 [ 353.713046][ T5909] ? lockdep_lock+0xc6/0x200 [ 353.713070][ T5909] ? __pfx_lockdep_lock+0x10/0x10 [ 353.713093][ T5909] __lock_acquire+0x249e/0x3c40 [ 353.713114][ T5909] ? __pfx___lock_acquire+0x10/0x10 [ 353.713129][ T5909] lock_acquire.part.0+0x11b/0x380 [ 353.713139][ T5909] ? tty_buffer_flush+0x72/0x310 [ 353.713148][ T5909] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 353.713159][ T5909] ? rcu_is_watching+0x12/0xc0 [ 353.713172][ T5909] ? trace_lock_acquire+0x14e/0x1f0 [ 353.713189][ T5909] ? __pfx___lock_acquire+0x10/0x10 [ 353.713206][ T5909] ? tty_buffer_flush+0x72/0x310 [ 353.713220][ T5909] ? lock_acquire+0x2f/0xb0 [ 353.713236][ T5909] ? tty_buffer_flush+0x72/0x310 [ 353.713251][ T5909] __mutex_lock+0x19b/0xa60 [ 353.713266][ T5909] ? tty_buffer_flush+0x72/0x310 [ 353.713275][ T5909] ? tty_buffer_flush+0x72/0x310 [ 353.713283][ T5909] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 353.713294][ T5909] ? __pfx___mutex_lock+0x10/0x10 [ 353.713313][ T5909] ? trace_lock_acquire+0x14e/0x1f0 [ 353.713335][ T5909] ? mark_held_locks+0x9f/0xe0 [ 353.713352][ T5909] ? tty_ldisc_flush+0x1c/0xe0 [ 353.713374][ T5909] ? ldsem_down_read_trylock+0x11b/0x180 [ 353.713394][ T5909] ? tty_buffer_flush+0x72/0x310 [ 353.713405][ T5909] tty_buffer_flush+0x72/0x310 [ 353.713414][ T5909] tty_ldisc_flush+0x64/0xe0 [ 353.713426][ T5909] __do_SAK+0x6a1/0x800 [ 353.713435][ T5909] ? lock_acquire+0x2f/0xb0 [ 353.713450][ T5909] ? vc_SAK+0x13/0x310 [ 353.713464][ T5909] vc_SAK+0x7f/0x310 [ 353.713483][ T5909] process_one_work+0x9c5/0x1ba0 [ 353.713504][ T5909] ? __pfx_console_callback+0x10/0x10 [ 353.713519][ T5909] ? __pfx_process_one_work+0x10/0x10 [ 353.713535][ T5909] ? rcu_is_watching+0x12/0xc0 [ 353.713553][ T5909] ? assign_work+0x1a0/0x250 [ 353.713562][ T5909] worker_thread+0x6c8/0xf00 [ 353.713574][ T5909] ? __kthread_parkme+0x148/0x220 [ 353.713587][ T5909] ? __pfx_worker_thread+0x10/0x10 [ 353.713597][ T5909] kthread+0x2c1/0x3a0 [ 353.713611][ T5909] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.713629][ T5909] ? __pfx_kthread+0x10/0x10 [ 353.713649][ T5909] ret_from_fork+0x45/0x80 [ 353.713665][ T5909] ? __pfx_kthread+0x10/0x10 [ 353.713685][ T5909] ret_from_fork_asm+0x1a/0x30 [ 353.713703][ T5909] [ 353.715102][ T5909] tty tty1: SAK: killed process 14664 (syz.7.1013): by fd#8 [ 353.715248][ T5909] tty tty1: SAK: killed process 14665 (syz.7.1013): by fd#8 [ 353.715261][ T5909] tty tty1: SAK: killed process 14667 (syz.7.1013): by fd#8 [ 353.715273][ T5909] tty tty1: SAK: killed process 14668 (syz.7.1013): by fd#8 [ 353.789709][ T5850] m920x_read = error: -19 [ 354.450830][ T8] gspca_sunplus: reg_w_riv err -110 [ 354.450877][ T8] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 354.452678][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 354.482364][ T969] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0018/input/input43 [ 354.483342][ T969] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0018/input/input44 [ 354.484197][ T969] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0018/input/input45 [ 354.485969][ T969] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0018/input/input46 [ 354.488010][ T969] uclogic 0003:256C:006D.0018: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 354.609906][ T5850] m920x_read = error: -19 [ 354.609926][ T5850] dvb-usb: error -19 while querying for an remote control event. [ 354.611745][ T5850] usb 5-1: USB disconnect, device number 42 [ 354.706233][ T8] usb 9-1: USB disconnect, device number 32 [ 354.772341][ T5866] m920x_read = error: -19 [ 354.888788][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 355.050404][ T5866] m920x_read = error: -19 [ 355.054806][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 355.219649][ T5866] m920x_read = error: -19 [ 355.224025][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 355.391140][ T5866] m920x_read = error: -19 [ 355.395551][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 355.560785][ T5866] m920x_read = error: -19 [ 355.565875][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 355.573923][T14766] __vm_enough_memory: pid: 14766, comm: syz.5.1024, bytes: 21200399060992 not enough memory for the allocation [ 355.730224][ T5866] m920x_read = error: -19 [ 355.734600][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 355.818792][ T46] usbhid 7-1:0.0: can't add hid device: -71 [ 355.825786][ T46] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 355.838132][ T46] usb 7-1: USB disconnect, device number 15 [ 355.900775][ T5866] m920x_read = error: -19 [ 355.905729][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 356.070181][ T5866] m920x_read = error: -19 [ 356.074526][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 356.240215][ T5866] m920x_read = error: -19 [ 356.244625][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 356.410087][ T5866] m920x_read = error: -19 [ 356.414829][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 356.580430][ T5866] m920x_read = error: -19 [ 356.584784][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 356.610693][ T5866] usb 6-1: USB disconnect, device number 16 [ 356.749605][ T8] m920x_read = error: -19 [ 356.753955][ T8] dvb-usb: error -19 while querying for an remote control event. [ 356.920371][ T8] m920x_read = error: -19 [ 356.924714][ T8] dvb-usb: error -19 while querying for an remote control event. [ 357.090209][ T5866] m920x_read = error: -19 [ 357.094560][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 357.260337][ T5866] m920x_read = error: -19 [ 357.264705][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 357.430063][ T5866] m920x_read = error: -19 [ 357.434432][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 357.600395][ T5866] m920x_read = error: -19 [ 357.604731][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 357.770016][ T5866] m920x_read = error: -19 [ 357.774383][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 357.940313][ T5866] m920x_read = error: -19 [ 357.944674][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 358.110799][ T5866] m920x_read = error: -19 [ 358.115145][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 358.279964][ T5866] m920x_read = error: -19 [ 358.284320][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 358.450653][ T5866] m920x_read = error: -19 [ 358.454988][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 358.619961][ T5866] m920x_read = error: -19 [ 358.624310][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 358.790501][ T5866] m920x_read = error: -19 [ 358.794849][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 358.960047][ T5866] m920x_read = error: -19 [ 358.964422][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 359.130452][ T5866] m920x_read = error: -19 [ 359.134809][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 359.300091][ T5866] m920x_read = error: -19 [ 359.304455][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 359.470226][ T5866] m920x_read = error: -19 [ 359.474559][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 359.639944][ T5866] m920x_read = error: -19 [ 359.644283][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 359.810262][ T5866] m920x_read = error: -19 [ 359.814597][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 359.980454][ T5866] m920x_read = error: -19 [ 359.984800][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 360.150605][ T5866] m920x_read = error: -19 [ 360.154962][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 360.320149][ T5866] m920x_read = error: -19 [ 360.324483][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 360.490133][ T5866] m920x_read = error: -19 [ 360.494512][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 360.660429][ T5866] m920x_read = error: -19 [ 360.664762][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 360.830316][ T5866] m920x_read = error: -19 [ 360.834713][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 360.999652][ T5866] m920x_read = error: -19 [ 361.004051][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 361.170249][ T5866] m920x_read = error: -19 [ 361.174587][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 361.350073][ T5866] m920x_read = error: -19 [ 361.354427][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 361.520757][ T5866] m920x_read = error: -19 [ 361.525114][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 361.690563][ T5866] m920x_read = error: -19 [ 361.694925][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 361.859656][ T5866] m920x_read = error: -19 [ 361.863986][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 362.030550][ T5866] m920x_read = error: -19 [ 362.034900][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 362.201287][ T5866] m920x_read = error: -19 [ 362.205623][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 362.370202][ T5866] m920x_read = error: -19 [ 362.374539][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 362.540213][ T5866] m920x_read = error: -19 [ 362.544570][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 362.710382][ T5866] m920x_read = error: -19 [ 362.714737][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 362.879636][ T5866] m920x_read = error: -19 [ 362.884016][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 363.050612][ T5866] m920x_read = error: -19 [ 363.054946][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 363.220358][ T5866] m920x_read = error: -19 [ 363.224712][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 363.390074][ T5866] m920x_read = error: -19 [ 363.394467][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 363.560710][ T5866] m920x_read = error: -19 [ 363.565041][ T5866] dvb-usb: error -19 while querying for an remote control event. [ 363.730600][ T5866] m920x_read = error: -19 [ 363.734948][ T5866] dvb-usb: error -19 while querying for an remote control event.