last executing test programs: 3m20.540277967s ago: executing program 4 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a010200f5ffffff000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008"], 0x25c}}, 0x0) 3m20.233091179s ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200003600000000000000000000008500000027000000850000007d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0xa4000061) (async, rerun: 64) close(r6) (async, rerun: 64) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) (async, rerun: 64) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000300), 0x0) (rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8090000009782762f1700", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x1c, 0x43, 0x1, 0x870bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) 3m19.298027335s ago: executing program 4 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000000)='./file1\x00', 0x118) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3m18.285231373s ago: executing program 4 (id=250): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}, {@uuid_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r2 = memfd_create(&(0x7f0000000840)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x92\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xae\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xbb\f\x00\x00\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04\x8c\xb4\x82\t\xc0\xa3*\xbd\xcf\x92\x1e\x94L\x82\x9fe>T\xab\x06u0\xec\x00\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8c\x8a\xc6S\tg\x00\x00\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb7\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x9a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\xb5-\xcd\x1f\xf4\xe1,\xb7\xa7?#!\xf0$\xa4rp(B\xeb\xac\x1c\x83\xbap\x93\x87\'\x02\xcf\bK\xed\xe4\x95^4\x98oI\xe3\xe9\xa4i4}\xf9:\xee\xee\x8f\x1c\xa2\xc5p\xbb\xfc\xd0t\xb0\a\x84~\xd7z\xd6k\x9bg}\xab\xcb^Mw\xcf\xa2\x8a\xf6E\xfb\x8eE/\xf9V_\xc10\xb9\xb7\xaf\xd8\x82\xf9\x93{*\x8e\x9f\xa2\x82\xe8\xa9\x9b7\x9esW\x01-\xe89\xdeb\xf1W\x83\xfc:\a\xdd?\x19\xae\xe3\xfeB\x90\x0e\xf3tz\xf6\xe4\xc1D\xc7w\xe7\x90=\x87Y\x00'/574, 0x1) syz_clone(0x5080200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x5080200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xbd5c0a5df1f2fe20) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) (async) close(0x3) close(0x4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @remote, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18}}], 0xf}, 0x0) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @remote, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18}}], 0xf}, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) (async) close(0x4) execveat(r2, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r2, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 3m17.068980277s ago: executing program 4 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000073c1fda305000000000000001811000045ae70e2aeee183271ae402b8835", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000caeb8510560842ac71e10000000109021200010000800009f87222f37a6f43b9"], 0x0) 3m15.720848018s ago: executing program 4 (id=269): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000001cc0), 0x800) (rerun: 32) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="000007000000072312273a05008132257589630a6b24951899101e80cd802075d082e57d5ff02d"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x105900) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99b5d48, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc14) (async) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 3m14.759753766s ago: executing program 32 (id=269): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000001cc0), 0x800) (rerun: 32) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="000007000000072312273a05008132257589630a6b24951899101e80cd802075d082e57d5ff02d"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x105900) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99b5d48, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc14) (async) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 2m26.169308262s ago: executing program 3 (id=437): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000030a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c000140"], 0x25c}}, 0x0) 2m25.22900042s ago: executing program 3 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="4801000010000100000000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffff00000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 2m25.037058361s ago: executing program 3 (id=442): syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) eventfd2(0x2, 0x80000) eventfd2(0x4, 0xc0801) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x201000000300) io_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0x30, 0x2, "44fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x1, 0x3, 0x3, &(0x7f0000000140)={0x8, "b1c57f58ec8e52ca3741ee71ba4f77417e9b12abbe574890f8865ae9b48a50e659"}}) syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904"], 0x0) 2m22.678877709s ago: executing program 3 (id=449): unshare(0x400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x81, 0xca}, {0x6}]}, 0x10) syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffffe, 0x2100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m20.352477617s ago: executing program 3 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400078008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fbdbdf250100000014000c00ff01000000000000000000000000000108000400ac1414bb08000200010000000c00030004000000000000000c000300030000000000000014000b00fc01000000000000000000000000000108000700", @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x180, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0xb25, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9], [0x0, 0x401, 0xfffffffc, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x95e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x4000002, 0x4, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x1, 0x0, 0x1, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}, 0x45c) 2m18.348682167s ago: executing program 3 (id=464): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000060000000000000018700907800800000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c58"], 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) 2m2.571838721s ago: executing program 33 (id=464): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000060000000000000018700907800800000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c58"], 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) 1m58.108628601s ago: executing program 1 (id=483): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffffe}, {0x0, 0x100000000000000}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r1}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 1m56.581280925s ago: executing program 1 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x1b00}}, 0x68}}, 0x0) 1m56.214623767s ago: executing program 1 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) syz_usb_connect(0x0, 0xb7, &(0x7f0000000400)=ANY=[@ANYBLOB="120100030ee3c6409911156863fd010203010902a50001818100000004ed0609ed51da020a24010a0b06020102012403050703020495062404029cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200040a4102072501030708000725010108040009050b001000480509072501010702000905050000042703080905010c0002ff03000000000000000501000725010103d00009058008200000b4ac09050701ff01043b10"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, [{0x0, 0x0}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41e}}, {0x0, 0x0}, {0x4b, &(0x7f0000000640)=ANY=[@ANYBLOB="4b0330dbb2c994a0e7566c9b2ad589ffb9b4a69f0e416d521907bc9f87c32bd11cd97f9f9e75fec91ef33d9d7cf2e4594a93a993b87ad664dd3a3df60e8a48f2f729494af847e1ce481456c2351cdc65f0621a978652720b2b8ed9a2746a3c946fe3a0b2cce5c3eb4eb5ba9b4e4c256e9c9c754711bd8f362237157fe3dadc1053183a98393ac0ce996752b2578529d2c7d87195e6191557472fce0e8e5261b8fb03a6cfbd54471a254d0333a8bae0e079fa5060645abbf4"]}]}) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x111103) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(0xffffffffffffffff, 0x4d, 0x0, 0x1000f4) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x1, 0x1, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x14, 0x0, @fd_index, 0x9, &(0x7f00000001c0)=""/62, 0x3e, 0xa}) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0xbf6e, 0x1, 0x6}, 0x18, 0x2) landlock_restrict_self(r4, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x44, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14001200", @ANYRESHEX=r0, @ANYBLOB="0503000000000000000007000000"], 0x14}}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="00b7c6ba", @ANYRES16=r7, @ANYBLOB="10002bbd7000fedbdf2506000000080034000000000008003b00090000000a000900ffffffffffff000008000b0002000000050037000100000005002a000000000008002b000700000008003a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) 1m50.296608394s ago: executing program 1 (id=493): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000001f000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m46.385147013s ago: executing program 1 (id=495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x34b242, 0x71e027edf1421bd) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x8, 0x100}, &(0x7f0000000180)=0xc) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r7, r7, 0x0, 0x0) keyctl$read(0xb, r7, &(0x7f0000000080)=""/105, 0x69) 1m44.562191899s ago: executing program 1 (id=497): socket(0x15, 0x802, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m28.99921587s ago: executing program 34 (id=497): socket(0x15, 0x802, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 31.48511348s ago: executing program 7 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x12) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r5, r4, 0x0, 0x94, &(0x7f0000000340)='\x17Y\x03\x00\x00\x00\xd1?<.)[u\x84\xe0.+\xb4\xd4\x92\xbc\xe6\xce\xb2\x02\x00 \x00\xdd\xc08\xf1\xb7*\x84#-A\x96*\xfb\x11\x1a\xd3\xfd\x14\x00\x00\x00\x00\x00\x00\x00\x91\xb1\xaf\x85\x1c\x85\x1b\x96\xe8\xc0\x89_\x83g\x9f\xaf\x16\x00\x00\x00\xcf\xb7\xcb\xca\xb8\xc3WZ\x8bA\xd9Jmf\xa8\x9b\xbf+\xaff\x965\xacs\xc3\xb9\x0eZG\xcd\xfeo\x91\xc5\xcc\xba\xfc\xba\xe7\"\xd9\xb5\xf7\xc9\xb2\xf7E\xaeD:\x18S\xe8\xc0as\xe4t\xfd\xd1\xf1\xc8\xa8\x10\xd9M\x16Ro\xe9\xa9|\x9a\xdd['}, 0x30) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x5}}}, 0x24}}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r8 = eventfd(0x9) write$eventfd(r8, &(0x7f0000000140)=0xffffffffffffffff, 0x8) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r9, 0x80304d65, &(0x7f00000000c0)) 27.822812382s ago: executing program 7 (id=644): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300080ff7f00bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 27.208967677s ago: executing program 7 (id=646): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 26.629443043s ago: executing program 7 (id=648): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) memfd_secret(0x80000) socketpair(0x1e, 0x1, 0xa1, &(0x7f00000000c0)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)={0x0}}, 0x20048041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 25.851740581s ago: executing program 7 (id=651): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000b64f811c9500"/24], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x2000000000fb8}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x8000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad1, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xc4, 0x0, &(0x7f0000000500)="77d3a2eea0e42648529388b70a51143587880566004f9cb8d2662c515b285debda3c6cd3987900e5301700ad17b494773f0c48ee8fcf02c2755a8aa9d7327f90e234cc03c3be8d54266db8215cb629475ecafa961e6f1bf9511940cfd963b9e7a009b9354e229339261adead36f27f395e67324f2ee85e24dd68a5cddbeb3298b481eb2cd148ca0b1087c77ad5a12aee0b2a42d5c483a889d989e861d5f5a053aa939e5e255a39385e78fe9929baaff791d418edcc7d8f4bbb7d1cda50a7b6fc06cf779b", 0x0, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500180000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x1000, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r10, &(0x7f0000000400)="9bd7", 0x0}, 0x20) 22.104811589s ago: executing program 7 (id=661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x0, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x4}, 0x2, 0x1}, {0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfd, 0xfc}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0xfffffe01) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(0x0, 0x0, 0xffffffffffffffa6, 0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) dup(0xffffffffffffffff) 7.568868705s ago: executing program 5 (id=707): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) memfd_secret(0x80000) socketpair(0x1e, 0x1, 0xa1, &(0x7f00000000c0)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)={0x0}}, 0x20048041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x10, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) 7.20905385s ago: executing program 2 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000100001cf7bc78b380af49d000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b4000000000060004"], 0x108}}, 0x0) 6.494357165s ago: executing program 35 (id=661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x0, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x4}, 0x2, 0x1}, {0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfd, 0xfc}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0xfffffe01) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(0x0, 0x0, 0xffffffffffffffa6, 0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) dup(0xffffffffffffffff) 6.466724226s ago: executing program 5 (id=711): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, 0x0, 0x0) shutdown(r6, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpgid(r0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e200000000000000a00002f00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa00000000000000"], 0xfc}}, 0x0) 6.337262353s ago: executing program 2 (id=712): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback={0xff0f}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 6.310145643s ago: executing program 0 (id=713): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000100aa4e200e22"], 0x0) 6.225637509s ago: executing program 0 (id=714): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x10, 0x200, &(0x7f0000000180)="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"}) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x20000000000002da, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 5.041382699s ago: executing program 0 (id=716): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (async) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async, rerun: 64) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRES32, @ANYRES32], 0x0) (rerun: 64) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080)) 4.929008132s ago: executing program 2 (id=717): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x58, &(0x7f00000003c0)={@multicast, @random="58a4ab044a92", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3c, 0x4a, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast, {[@noop]}}, {0x400, 0x4e20, 0x32, 0x0, @gue={{0x1, 0x1, 0x2, 0x2, 0x0, @void}, "887bf384cc78f4e9c9739b73368a85e7c563e9a488b2e9d967cfbd986f49add6841dd9110b8d"}}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r0}) read(r0, &(0x7f0000000080)=""/146, 0x92) 2.831709487s ago: executing program 6 (id=724): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x2000c080) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) 2.257791318s ago: executing program 6 (id=725): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x10, 0x200, &(0x7f0000000180)="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"}) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x20000000000002da, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.52105572s ago: executing program 0 (id=726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x1000000}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 1.470274454s ago: executing program 0 (id=727): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x700}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 1.376764628s ago: executing program 2 (id=728): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x200000100000011, 0x3, 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, 0x0, 0x0) shutdown(r6, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpgid(r0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e200000000000000a00ff8000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa00000000000000"], 0xfc}}, 0x0) 1.37646148s ago: executing program 5 (id=729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x80, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x104) write$binfmt_elf64(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xba, 0x2, 0x7, 0x1, 0x2, 0x3e, 0x4, 0x170, 0x40, 0x15a, 0xb7d, 0x42, 0x38, 0x0, 0x81, 0x0, 0x40eb}, [], "4ecec64fbd9e822c0621b46d2c2a20c71c7de1f8812b9f1e33d42c"}, 0x5b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) landlock_restrict_self(r4, 0x0) 1.254484799s ago: executing program 6 (id=730): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0xfffffffe}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @local}, 0x10) syz_usb_connect(0x1, 0x62, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX=r0], 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x4000000000000) 1.133123948s ago: executing program 0 (id=731): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x18010000) 74.783904ms ago: executing program 5 (id=732): futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffdfffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="60020148c58234e0ea8abc00", @ANYRESOCT=0x0], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x1, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="ff", 0x1}, {0x0}], 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x300) (async) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x40000000000, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x8}}, 0xffffffffffffff87) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x2}}, 0x18) (async) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000000680)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0xfffffffe}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000080)=@ll={0x11, 0x15, 0x0, 0x1, 0x24, 0x6, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)="e27ceced9a2ce03950b2722e9704cb7bef1b98bf421f712177a4fc8f0be6f5c177ef71965a343bf2079bcb1e88f3eaa267ae7fc8f43296b1b4e4726fcc309b557a96fb3dd086c60fe3f1803d9f35483c6ebc093f0169fc2011bfc15f2d941b3a8c319e4af30e6094733f8a56533fdd61677eb0e1c1bda9b71307eb0518dd301069ad1644562c9533cb402beb1041f10be53fd9e0a7d4d0199b94c96737e4b9ff51d1d2f7e4", 0xa5}, {&(0x7f0000000100)="823fe981bd2fcb36f14a216ead9cdf050e3d5937d6f058122f", 0x19}], 0x2}}], 0x2, 0x240008d0) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x4000000000000a6, 0x2000000022, &(0x7f0000000480)) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1]) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 2 (id=733): r0 = socket(0x25, 0x1, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r6 = socket(0x10, 0x3, 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) kexec_load(0x3, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="67c4e85e649f24b32e420f227b9727907783ca37562050c14f3970332654e047bcdf65a4eca990f7da6086f8582fe816e62796cf655f945d6649c397b852529c9a0d69787f574fbc38220c6fac88fb193eafc96d0e02a5eb3c", 0x59, 0xfffffffff00143be, 0x93}], 0x0) preadv2(r1, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000640)=""/215, 0xd7}], 0x2, 0x2b, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/67, 0x43}], 0x1, &(0x7f0000001a40)=[{&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000800)=""/49, 0x31}, {0x0}, {&(0x7f0000001880)=""/17, 0x11}, {&(0x7f00000018c0)=""/190, 0xbe}, {&(0x7f0000001980)=""/141, 0x8d}], 0x8, 0x0) kernel console output (not intermixed with test programs): 387.423:370): avc: denied { write } for pid=7751 comm="syz.2.468" path="socket:[14380]" dev="sockfs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.920648][ T976] rc_core: IR keymap rc-twinhan1027 not found [ 187.932099][ T976] Registered IR keymap rc-empty [ 188.010865][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 188.054061][ T976] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 188.115142][ T30] audit: type=1400 audit(1750125387.833:371): avc: denied { ioctl } for pid=7751 comm="syz.2.468" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.125107][ T976] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 188.290136][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 188.551913][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.181617][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.213672][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 189.646070][ T7756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.471'. [ 189.655028][ T7756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.471'. [ 189.663932][ T7756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.471'. [ 189.673003][ T976] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 189.773010][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 189.851771][ T10] m920x_read = error: -71 [ 189.867640][ T10] dvb-usb: error -71 while querying for an remote control event. [ 189.959183][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.971267][ T7759] loop6: detected capacity change from 0 to 7 [ 190.015026][ T7759] Dev loop6: unable to read RDB block 7 [ 190.032353][ T976] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 190.049231][ T24] usb 6-1: config 0 descriptor?? [ 190.067734][ T24] usb 6-1: can't set config #0, error -71 [ 190.100442][ T7759] loop6: unable to read partition table [ 190.108392][ T30] audit: type=1400 audit(1750125389.823:372): avc: denied { ioctl } for pid=7760 comm="syz.5.473" path="socket:[14417]" dev="sockfs" ino=14417 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 190.293806][ T10] m920x_read = error: -71 [ 190.304959][ T10] dvb-usb: error -71 while querying for an remote control event. [ 190.305419][ T7759] loop6: partition table beyond EOD, [ 190.312898][ T24] usb 6-1: USB disconnect, device number 10 [ 190.381647][ T7759] truncated [ 190.439998][ T976] usb 2-1: USB disconnect, device number 12 [ 190.569842][ T5904] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.364076][ T10] m920x_read = error: -19 [ 191.369958][ T7759] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.371042][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 191.382751][ T30] audit: type=1400 audit(1750125389.823:373): avc: denied { create } for pid=7760 comm="syz.5.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.544930][ T10] dvb-usb: error -19 while querying for an remote control event. [ 191.621272][ T5904] usb 3-1: device descriptor read/64, error -32 [ 193.830498][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.836827][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.339766][ C0] sched: DL replenish lagged too much [ 195.992026][ T5903] m920x_read = error: -19 [ 196.100792][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 200.570005][ T5904] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.962971][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.475'. [ 201.053140][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 201.090730][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.476'. [ 201.143872][ T30] audit: type=1400 audit(1750125400.863:374): avc: denied { write } for pid=7770 comm="syz.1.476" path="socket:[14480]" dev="sockfs" ino=14480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.676550][ T5903] m920x_read = error: -19 [ 201.775379][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 201.789869][ T5818] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 202.032287][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 202.179871][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 202.266741][ T976] m920x_read = error: -19 [ 202.274499][ T976] dvb-usb: error -19 while querying for an remote control event. [ 202.321162][ T5818] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 202.389841][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.604428][ T5818] usb 1-1: config 0 descriptor?? [ 202.764700][ T5903] m920x_read = error: -19 [ 202.900963][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 203.117854][ T5903] m920x_read = error: -19 [ 203.196061][ T5818] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 203.663987][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 204.090795][ T5903] m920x_read = error: -19 [ 204.160440][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 204.441325][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.953647][ T5903] m920x_read = error: -19 [ 204.980468][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 204.983814][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.310959][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.352986][ T7779] m920x_read = error: -19 [ 205.361061][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 206.004197][ T5818] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 206.040881][ T7779] m920x_read = error: -19 [ 206.052074][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 206.076868][ T5818] usb 1-1: media controller created [ 206.205845][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.685080][ T7779] m920x_read = error: -19 [ 206.701895][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 206.890984][ T5818] az6027: usb out operation failed. (-71) [ 206.926112][ T5818] az6027: usb out operation failed. (-71) [ 206.955742][ T5818] stb0899_attach: Driver disabled by Kconfig [ 207.022677][ T5818] az6027: no front-end attached [ 207.022677][ T5818] [ 207.023639][ T5818] az6027: usb out operation failed. (-71) [ 207.023672][ T5818] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.026404][ T5818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 207.036024][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.038082][ T5818] dvb-usb: schedule remote query interval to 400 msecs. [ 207.038107][ T5818] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.054337][ T5818] usb 1-1: USB disconnect, device number 12 [ 207.065990][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.067898][ T7779] m920x_read = error: -19 [ 207.067936][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 207.068608][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.090582][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.091614][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.241966][ T7779] m920x_read = error: -19 [ 207.241992][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 207.283251][ T5818] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 207.430328][ T7779] m920x_read = error: -19 [ 207.430347][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 207.608557][ T5903] m920x_read = error: -19 [ 207.608587][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 207.774717][ T5903] m920x_read = error: -19 [ 207.774734][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 208.049134][ T30] audit: type=1400 audit(1750125407.753:375): avc: denied { connect } for pid=7794 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.191034][ T5903] m920x_read = error: -19 [ 208.191062][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 208.250121][ T30] audit: type=1400 audit(1750125407.913:376): avc: denied { setopt } for pid=7794 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.313502][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 208.317145][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 208.441368][ T5883] m920x_read = error: -19 [ 208.441393][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 208.457283][ T3475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.593111][ T5904] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 208.677405][ T7779] m920x_read = error: -19 [ 208.677429][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 208.719170][ T3475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.738827][ T7810] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 208.738864][ T7810] netlink: 180 bytes leftover after parsing attributes in process `syz.2.490'. [ 208.766589][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.767480][ T5904] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 208.767504][ T5904] usb 2-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 208.770096][ T5904] usb 2-1: string descriptor 0 read error: -22 [ 208.770204][ T5904] usb 2-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=fd.63 [ 208.770228][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.083123][ T5835] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 209.149961][ T5818] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 209.245270][ T5835] Bluetooth: hci1: command tx timeout [ 209.449867][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 209.453491][ T5818] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 209.453564][ T5818] usb 3-1: config 0 has no interface number 0 [ 209.750976][ T5883] m920x_read = error: -19 [ 209.751002][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 209.906800][ T5818] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 209.906832][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.906854][ T5818] usb 3-1: Product: syz [ 209.906869][ T5818] usb 3-1: Manufacturer: syz [ 209.906885][ T5818] usb 3-1: SerialNumber: syz [ 209.937404][ T943] usb 2-1: USB disconnect, device number 13 [ 209.951913][ T5944] m920x_read = error: -19 [ 209.951936][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 209.952278][ T5818] usb 3-1: config 0 descriptor?? [ 209.957993][ T5818] ttusb_dec_send_command: command bulk message failed: error -22 [ 209.958191][ T5818] ttusb-dec 3-1:0.217: probe with driver ttusb-dec failed with error -22 [ 210.651672][ T5903] m920x_read = error: -19 [ 210.651691][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 211.320261][ T5823] Bluetooth: hci1: command tx timeout [ 211.428932][ T3475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.485669][ T5883] m920x_read = error: -19 [ 211.485692][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 211.764963][ T5883] m920x_read = error: -19 [ 211.764984][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 211.765106][ T5818] usb 3-1: USB disconnect, device number 16 [ 212.951819][ T5883] m920x_read = error: -19 [ 212.951837][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 213.400103][ T5823] Bluetooth: hci1: command tx timeout [ 215.242980][ T5903] m920x_read = error: -19 [ 215.242998][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 215.442887][ T5903] m920x_read = error: -19 [ 215.442906][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 215.479998][ T5823] Bluetooth: hci1: command tx timeout [ 215.621651][ T5883] m920x_read = error: -19 [ 215.621668][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 216.613931][ T5944] m920x_read = error: -19 [ 216.613950][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 216.966796][ T5883] m920x_read = error: -19 [ 216.966826][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 217.535661][ T5903] m920x_read = error: -19 [ 217.535693][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 217.599984][ T3475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.742916][ T5903] m920x_read = error: -19 [ 217.742946][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 217.914754][ T5944] m920x_read = error: -19 [ 217.914782][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 218.091075][ T5944] m920x_read = error: -19 [ 218.091103][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 218.288635][ T5903] m920x_read = error: -19 [ 218.288662][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 218.462535][ T5944] m920x_read = error: -19 [ 218.480265][ T7795] tty tty2: ldisc open failed (-12), clearing slot 1 [ 219.489922][ T943] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 219.527965][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 219.543839][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 219.641176][ T7851] netlink: 'syz.5.499': attribute type 16 has an invalid length. [ 219.675398][ T7851] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.499'. [ 219.710015][ T943] usb 3-1: Using ep0 maxpacket: 8 [ 219.736242][ T943] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 219.752283][ T30] audit: type=1400 audit(1750125419.423:377): avc: denied { append } for pid=7850 comm="syz.5.499" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.816830][ T943] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 219.816863][ T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.816883][ T943] usb 3-1: Product: syz [ 219.816899][ T943] usb 3-1: Manufacturer: syz [ 219.816915][ T943] usb 3-1: SerialNumber: syz [ 219.819359][ T943] usb 3-1: config 0 descriptor?? [ 219.831091][ T943] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 219.919096][ T3475] bridge_slave_1: left allmulticast mode [ 219.919151][ T3475] bridge_slave_1: left promiscuous mode [ 219.919343][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.936634][ T3475] bridge_slave_0: left allmulticast mode [ 219.936661][ T3475] bridge_slave_0: left promiscuous mode [ 219.936895][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.036301][ T943] gspca_zc3xx: reg_w_i err -71 [ 220.439031][ T30] audit: type=1326 audit(1750125420.153:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 220.496470][ T30] audit: type=1326 audit(1750125420.183:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 221.839894][ T943] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 221.881281][ T5944] m920x_read = error: -19 [ 221.892420][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 221.964735][ T943] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 223.967693][ T5944] m920x_read = error: -19 [ 223.975774][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 224.043749][ T943] usb 3-1: USB disconnect, device number 17 [ 224.088464][ T5818] IPVS: starting estimator thread 0... [ 225.173863][ T5944] m920x_read = error: -19 [ 225.204950][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 225.218254][ T30] audit: type=1326 audit(1750125420.183:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218306][ T30] audit: type=1326 audit(1750125420.213:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218346][ T30] audit: type=1326 audit(1750125420.213:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218384][ T30] audit: type=1326 audit(1750125420.213:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218422][ T30] audit: type=1326 audit(1750125420.213:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218461][ T30] audit: type=1326 audit(1750125420.213:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218504][ T30] audit: type=1326 audit(1750125420.243:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218543][ T30] audit: type=1326 audit(1750125420.243:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218583][ T30] audit: type=1326 audit(1750125420.243:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.218621][ T30] audit: type=1326 audit(1750125420.243:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa496f8e929 code=0x7ffc0000 [ 225.300114][ T7866] IPVS: using max 42 ests per chain, 100800 per kthread [ 225.592103][ T7871] netlink: 340 bytes leftover after parsing attributes in process `syz.5.502'. [ 225.640237][ T7871] netlink: 48 bytes leftover after parsing attributes in process `syz.5.502'. [ 225.701071][ T7876] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 226.968002][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.986533][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.036080][ T3475] bond0 (unregistering): Released all slaves [ 228.112178][ T7896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.298580][ T3475] bond1 (unregistering): (slave bond2): Releasing backup interface [ 229.385016][ T3475] bond1 (unregistering): Released all slaves [ 229.628372][ T5823] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 230.645090][ T5944] m920x_read = error: -19 [ 231.753073][ T3475] bond2 (unregistering): Released all slaves [ 231.780052][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 231.799412][ T7876] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.836942][ T7878] veth3: entered promiscuous mode [ 233.042983][ T5944] m920x_read = error: -19 [ 233.051196][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 233.806084][ T5944] m920x_read = error: -19 [ 233.831777][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 233.938889][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.078923][ T5944] m920x_read = error: -19 [ 234.086906][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 234.101895][ T7912] netlink: 68 bytes leftover after parsing attributes in process `syz.5.508'. [ 234.374193][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.395005][ T5944] m920x_read = error: -19 [ 234.406472][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 234.463376][ T7797] bridge_slave_0: entered allmulticast mode [ 234.529982][ T7797] bridge_slave_0: entered promiscuous mode [ 234.599891][ T3475] tipc: Left network mode [ 234.630685][ T5944] m920x_read = error: -19 [ 234.766854][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 234.908745][ T7920] FAULT_INJECTION: forcing a failure. [ 234.908745][ T7920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.988197][ T7920] CPU: 1 UID: 0 PID: 7920 Comm: syz.0.512 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 234.988226][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.988237][ T7920] Call Trace: [ 234.988243][ T7920] [ 234.988251][ T7920] dump_stack_lvl+0x16c/0x1f0 [ 234.988283][ T7920] should_fail_ex+0x512/0x640 [ 234.988312][ T7920] _copy_from_user+0x2e/0xd0 [ 234.988338][ T7920] do_sock_getsockopt+0x5f4/0x800 [ 234.988361][ T7920] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 234.988378][ T7920] ? __fget_files+0x204/0x3c0 [ 234.988415][ T7920] __sys_getsockopt+0x12f/0x260 [ 234.988446][ T7920] __x64_sys_getsockopt+0xbd/0x160 [ 234.988469][ T7920] ? do_syscall_64+0x91/0x4c0 [ 234.988500][ T7920] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.988526][ T7920] do_syscall_64+0xcd/0x4c0 [ 234.988554][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.988572][ T7920] RIP: 0033:0x7fa496f8e929 [ 234.988587][ T7920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.988604][ T7920] RSP: 002b:00007fa497e72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 234.988622][ T7920] RAX: ffffffffffffffda RBX: 00007fa4971b5fa0 RCX: 00007fa496f8e929 [ 234.988633][ T7920] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 234.988643][ T7920] RBP: 00007fa497e72090 R08: 00002000000002c0 R09: 0000000000000000 [ 234.988654][ T7920] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 234.988664][ T7920] R13: 0000000000000000 R14: 00007fa4971b5fa0 R15: 00007fff85c53708 [ 234.988687][ T7920] [ 235.380581][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.554407][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.569437][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.578062][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.589236][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.625742][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.659446][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.680481][ T7797] bridge_slave_1: entered allmulticast mode [ 235.700440][ T7797] bridge_slave_1: entered promiscuous mode [ 235.878239][ T7927] netlink: 340 bytes leftover after parsing attributes in process `syz.0.514'. [ 236.035314][ T7927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.514'. [ 236.144718][ T5944] m920x_read = error: -19 [ 236.441041][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 236.441060][ T30] audit: type=1400 audit(1750125436.153:443): avc: denied { listen } for pid=7929 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.999263][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 237.421056][ T5944] m920x_read = error: -19 [ 237.421074][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 238.347586][ T5835] Bluetooth: hci3: command tx timeout [ 238.694734][ T5903] m920x_read = error: -19 [ 238.694763][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 239.417439][ T5883] m920x_read = error: -19 [ 239.417463][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 239.688689][ T5903] m920x_read = error: -19 [ 239.688718][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 239.792034][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.833352][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.234203][ T976] m920x_read = error: -19 [ 240.360791][ T5823] Bluetooth: hci3: command tx timeout [ 240.365585][ T976] dvb-usb: error -19 while querying for an remote control event. [ 240.993922][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 240.998411][ T5944] m920x_read = error: -19 [ 241.075151][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 241.082355][ T7948] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 241.166540][ T7797] team0: Port device team_slave_0 added [ 241.329957][ T5944] m920x_read = error: -19 [ 241.334352][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 241.442552][ T7940] veth0: entered promiscuous mode [ 241.476285][ T7943] veth0: left promiscuous mode [ 241.660492][ T7797] team0: Port device team_slave_1 added [ 241.666212][ T943] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.683050][ T5944] m920x_read = error: -19 [ 241.687438][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 241.829872][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 241.836882][ T943] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 241.854083][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.907392][ T943] usb 1-1: config 0 descriptor?? [ 241.979871][ T3475] hsr_slave_0: left promiscuous mode [ 242.381623][ T943] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 242.442612][ T5823] Bluetooth: hci3: command tx timeout [ 242.633701][ T976] m920x_read = error: -19 [ 242.638071][ T976] dvb-usb: error -19 while querying for an remote control event. [ 242.686750][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.698489][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.740527][ T3475] hsr_slave_1: left promiscuous mode [ 242.763820][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.800959][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.830108][ T5944] m920x_read = error: -19 [ 242.848483][ T943] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 242.870007][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.879421][ T943] usb 1-1: media controller created [ 242.886108][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 242.904113][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.930167][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.946340][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.092811][ T3475] veth1_macvtap: left promiscuous mode [ 243.108552][ T943] az6027: usb out operation failed. (-71) [ 243.130138][ T5883] m920x_read = error: -19 [ 243.134717][ T3475] veth0_macvtap: left promiscuous mode [ 243.135012][ T3475] veth1_vlan: left promiscuous mode [ 243.135110][ T3475] veth0_vlan: left promiscuous mode [ 243.146982][ T943] az6027: usb out operation failed. (-71) [ 243.189372][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 243.236307][ T943] stb0899_attach: Driver disabled by Kconfig [ 243.263127][ T943] az6027: no front-end attached [ 243.263127][ T943] [ 243.326121][ T943] az6027: usb out operation failed. (-71) [ 243.351241][ T943] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 243.414322][ T943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 243.524238][ T943] dvb-usb: schedule remote query interval to 400 msecs. [ 243.554000][ T7973] FAULT_INJECTION: forcing a failure. [ 243.554000][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.585853][ T943] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 243.634464][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.2.522 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 243.634496][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.634507][ T7973] Call Trace: [ 243.634514][ T7973] [ 243.634521][ T7973] dump_stack_lvl+0x16c/0x1f0 [ 243.634554][ T7973] should_fail_ex+0x512/0x640 [ 243.634583][ T7973] _copy_from_user+0x2e/0xd0 [ 243.634609][ T7973] sctp_getsockopt+0x29db/0x6b90 [ 243.634631][ T7973] ? avc_has_perm_noaudit+0x117/0x3b0 [ 243.634655][ T7973] ? __pfx_sctp_getsockopt+0x10/0x10 [ 243.634679][ T7973] ? avc_has_perm+0x11a/0x1c0 [ 243.634696][ T7973] ? __pfx_avc_has_perm+0x10/0x10 [ 243.634724][ T7973] ? sock_has_perm+0x259/0x2f0 [ 243.634752][ T7973] ? find_held_lock+0x2b/0x80 [ 243.634772][ T7973] ? __might_fault+0xe3/0x190 [ 243.634794][ T7973] ? __might_fault+0xe3/0x190 [ 243.634813][ T7973] ? __might_fault+0x13b/0x190 [ 243.634841][ T7973] ? sock_common_getsockopt+0x21/0xb0 [ 243.634858][ T7973] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 243.634878][ T7973] do_sock_getsockopt+0x3fc/0x800 [ 243.634899][ T7973] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 243.634916][ T7973] ? __fget_files+0x204/0x3c0 [ 243.634952][ T7973] __sys_getsockopt+0x12f/0x260 [ 243.634983][ T7973] __x64_sys_getsockopt+0xbd/0x160 [ 243.635005][ T7973] ? do_syscall_64+0x91/0x4c0 [ 243.635030][ T7973] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.635055][ T7973] do_syscall_64+0xcd/0x4c0 [ 243.635082][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.635100][ T7973] RIP: 0033:0x7fd220d8e929 [ 243.635115][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.635132][ T7973] RSP: 002b:00007fd21ebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 243.635149][ T7973] RAX: ffffffffffffffda RBX: 00007fd220fb5fa0 RCX: 00007fd220d8e929 [ 243.635161][ T7973] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 243.635171][ T7973] RBP: 00007fd21ebf6090 R08: 00002000000002c0 R09: 0000000000000000 [ 243.635182][ T7973] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 243.635192][ T7973] R13: 0000000000000000 R14: 00007fd220fb5fa0 R15: 00007fffebd8abb8 [ 243.635217][ T7973] [ 243.636972][ T943] usb 1-1: USB disconnect, device number 13 [ 243.975333][ T5883] m920x_read = error: -19 [ 244.229691][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 244.520399][ T5823] Bluetooth: hci3: command tx timeout [ 244.526797][ T943] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 244.573793][ T5883] m920x_read = error: -19 [ 244.578193][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 244.852407][ T5883] m920x_read = error: -19 [ 244.856797][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 245.059865][ T943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 245.231916][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 245.265821][ T943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.289067][ T943] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 245.302502][ T943] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 245.331136][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.363278][ T943] usb 1-1: config 0 descriptor?? [ 245.585758][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 245.674182][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 245.735633][ T5883] m920x_read = error: -19 [ 245.745674][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 246.236776][ T5883] m920x_read = error: -19 [ 246.263080][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 250.053491][ T5883] m920x_read = error: -19 [ 250.057861][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 251.542013][ T943] usb 1-1: string descriptor 0 read error: -32 [ 251.834702][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.849925][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.897710][ T7797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.945405][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.018718][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.065212][ T943] usb 1-1: USB disconnect, device number 14 [ 252.617030][ T7797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.674641][ T5883] m920x_read = error: -19 [ 252.691478][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 252.724790][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 252.918936][ T5883] m920x_read = error: -19 [ 253.215173][ T7797] hsr_slave_0: entered promiscuous mode [ 253.230715][ T7797] hsr_slave_1: entered promiscuous mode [ 253.301408][ T7797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.402646][ T7797] Cannot create hsr debugfs directory [ 253.474466][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 254.030245][ T5823] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 254.109399][ T5883] m920x_read = error: -19 [ 254.199981][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 255.092243][ T5883] m920x_read = error: -19 [ 255.199983][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 255.246417][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.252969][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.366624][ T5883] m920x_read = error: -19 [ 255.378057][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 255.565535][ T5883] m920x_read = error: -19 [ 255.593303][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 255.775575][ T5883] m920x_read = error: -19 [ 255.783893][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 255.972100][ T5883] m920x_read = error: -19 [ 256.033673][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 256.457921][ T5883] m920x_read = error: -19 [ 256.494409][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 256.972879][ T3475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.004871][ T3475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 257.096623][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 257.169916][ T5904] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 257.329014][ T30] audit: type=1326 audit(1750125457.043:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.5.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26498e929 code=0x7fc00000 [ 257.750304][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 257.763454][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.776428][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.804602][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 257.829597][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.855894][ T5904] usb 3-1: config 0 descriptor?? [ 257.869178][ T5883] m920x_read = error: -19 [ 257.907049][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 257.963890][ T3475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.978700][ T3475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 258.101889][ T5883] m920x_read = error: -19 [ 258.106290][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 258.322282][ T5883] m920x_read = error: -19 [ 258.326745][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 258.586197][ T5883] m920x_read = error: -19 [ 258.883889][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 258.912261][ T3475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.942427][ T3475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 259.096961][ T3475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.112185][ T3475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 259.124926][ T5883] m920x_read = error: -19 [ 259.129291][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 259.249946][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.314588][ T5883] m920x_read = error: -19 [ 259.329174][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 259.334863][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.368769][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.391717][ T7922] bridge_slave_0: entered allmulticast mode [ 259.422791][ T7922] bridge_slave_0: entered promiscuous mode [ 259.429990][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 259.441009][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.459895][ T7797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.477680][ T5818] usb 1-1: config 1 has an invalid interface number: 11 but max is 0 [ 259.496147][ T5818] usb 1-1: config 1 has no interface number 0 [ 259.515510][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.542377][ T5883] m920x_read = error: -19 [ 259.545390][ T5818] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=53.51 [ 259.546743][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 259.575713][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.595993][ T7922] bridge_slave_1: entered allmulticast mode [ 259.613281][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.627793][ T7922] bridge_slave_1: entered promiscuous mode [ 259.651746][ T5818] usb 1-1: Product: syz [ 259.655978][ T5818] usb 1-1: Manufacturer: syz [ 259.689410][ T5818] usb 1-1: SerialNumber: syz [ 259.714951][ T5883] m920x_read = error: -19 [ 259.719345][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 259.773444][ T7797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.850897][ T5904] usbhid 3-1:0.0: can't add hid device: -71 [ 259.903885][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.005259][ T976] m920x_read = error: -19 [ 260.020937][ T5904] usb 3-1: USB disconnect, device number 18 [ 260.037014][ T5818] usb 1-1: Expected 3 endpoints, found: 0 [ 260.066099][ T976] dvb-usb: error -19 while querying for an remote control event. [ 260.067519][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.133261][ T5818] usb 1-1: USB disconnect, device number 15 [ 260.145726][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 260.240206][ T5883] m920x_read = error: -19 [ 260.244618][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 260.323228][ T7797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.400064][ T7797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.446340][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.938032][ T7922] team0: Port device team_slave_0 added [ 261.070530][ T7922] team0: Port device team_slave_1 added [ 261.817166][ T30] audit: type=1400 audit(1750125461.523:445): avc: denied { setopt } for pid=8099 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.921105][ T5883] m920x_read = error: -19 [ 261.925483][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 262.341174][ T5883] m920x_read = error: -19 [ 262.345560][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 262.501313][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.543'. [ 262.520470][ T30] audit: type=1400 audit(1750125461.523:446): avc: denied { bind } for pid=8099 comm="syz.5.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 262.660466][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.709871][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.756560][ T5883] m920x_read = error: -19 [ 262.792358][ T8097] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 262.799198][ T8097] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.808489][ T8097] vhci_hcd vhci_hcd.0: Device attached [ 262.819036][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 262.890175][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 262.910104][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.995502][ T3475] bridge_slave_1: left allmulticast mode [ 263.001307][ T5870] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 263.013341][ T5883] m920x_read = error: -19 [ 263.017681][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 263.019877][ T5904] vhci_hcd: vhci_device speed not set [ 263.113263][ T30] audit: type=1400 audit(1750125462.773:447): avc: denied { setopt } for pid=8095 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.142086][ T3475] bridge_slave_1: left promiscuous mode [ 263.152047][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.170848][ T30] audit: type=1400 audit(1750125462.863:448): avc: denied { bind } for pid=8095 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.219828][ T5904] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 263.246502][ T8112] vhci_hcd: connection closed [ 263.260504][ T8113] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 263.271359][ T5870] usb 6-1: device descriptor read/64, error -71 [ 263.283031][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.291885][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.302347][ T3475] bridge_slave_0: left allmulticast mode [ 263.308886][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.318401][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.326461][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.341477][ T5883] m920x_read = error: -19 [ 263.345854][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 263.358945][ T3475] bridge_slave_0: left promiscuous mode [ 263.359136][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.364827][ T3554] vhci_hcd: stop threads [ 263.380814][ T3554] vhci_hcd: release socket [ 263.386067][ T3554] vhci_hcd: disconnect device [ 263.510859][ T5870] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 263.559497][ T5883] m920x_read = error: -19 [ 263.570733][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 263.660010][ T5870] usb 6-1: device descriptor read/64, error -71 [ 263.781240][ T5870] usb usb6-port1: attempt power cycle [ 263.803673][ T5883] m920x_read = error: -19 [ 263.813195][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 263.992404][ T3475] bond0 (unregistering): left promiscuous mode [ 263.998613][ T3475] bond_slave_0: left promiscuous mode [ 264.006432][ T3475] bond_slave_1: left promiscuous mode [ 264.008143][ T976] m920x_read = error: -19 [ 264.031193][ T976] dvb-usb: error -19 while querying for an remote control event. [ 264.057568][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.086410][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.107366][ T3475] bond0 (unregistering): Released all slaves [ 264.155503][ T5870] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 264.180445][ T5870] usb 6-1: device descriptor read/8, error -71 [ 264.278605][ T3475] bond1 (unregistering): Released all slaves [ 264.303691][ T976] m920x_read = error: -19 [ 264.323368][ T976] dvb-usb: error -19 while querying for an remote control event. [ 264.373257][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.444425][ T5870] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 264.460464][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.493258][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.513243][ T5870] usb 6-1: device descriptor read/8, error -71 [ 264.539970][ T5903] m920x_read = error: -19 [ 264.544381][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 264.555380][ T3475] tipc: Disabling bearer [ 264.562167][ T3475] tipc: Left network mode [ 264.620577][ T5870] usb usb6-port1: unable to enumerate USB device [ 264.669604][ T7922] hsr_slave_0: entered promiscuous mode [ 264.678176][ T7922] hsr_slave_1: entered promiscuous mode [ 264.693087][ T7922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.705042][ T7922] Cannot create hsr debugfs directory [ 264.719846][ T5903] m920x_read = error: -19 [ 264.724230][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 264.760053][ T976] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 264.790465][ T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 264.889901][ T5903] m920x_read = error: -19 [ 264.894293][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 264.920035][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 264.945054][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.949835][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 264.971593][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.987411][ T48] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 264.997857][ T976] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 265.007767][ T48] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 265.019602][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.041576][ T3475] hsr_slave_0: left promiscuous mode [ 265.054019][ T3475] hsr_slave_1: left promiscuous mode [ 265.064042][ T976] usb 3-1: config 0 descriptor?? [ 265.066979][ T48] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 265.070145][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.091085][ T5883] m920x_read = error: -19 [ 265.102801][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 265.103731][ T48] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 265.113666][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.132063][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.548'. [ 265.144483][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 265.154787][ T48] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 265.156201][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.176866][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.176873][ T48] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 265.192712][ T48] usb 1-1: Product: syz [ 265.196885][ T48] usb 1-1: Manufacturer: syz [ 265.201980][ T48] usb 1-1: SerialNumber: syz [ 265.222085][ T48] usb 1-1: config 0 descriptor?? [ 265.229380][ T48] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 265.234162][ T3475] veth1_macvtap: left promiscuous mode [ 265.249615][ T3475] veth0_macvtap: left promiscuous mode [ 265.256883][ T3475] veth1_vlan: left promiscuous mode [ 265.265020][ T48] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 265.265766][ T3475] veth0_vlan: left promiscuous mode [ 265.280732][ T5883] m920x_read = error: -19 [ 265.285107][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 265.403145][ T5835] Bluetooth: hci5: command tx timeout [ 265.463268][ T5883] m920x_read = error: -19 [ 265.467698][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 265.532155][ T30] audit: type=1400 audit(1750125465.243:449): avc: denied { write } for pid=8120 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 265.574711][ T5883] usb 1-1: USB disconnect, device number 16 [ 265.594268][ T5883] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 265.650081][ T7779] m920x_read = error: -19 [ 265.655728][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 265.679606][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 265.713298][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 265.822181][ T7779] m920x_read = error: -19 [ 265.828239][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 265.990333][ T7779] m920x_read = error: -19 [ 265.994696][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 266.170106][ T7779] m920x_read = error: -19 [ 266.179256][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 266.381823][ T7779] m920x_read = error: -19 [ 266.470451][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 266.783837][ T7779] m920x_read = error: -19 [ 266.807901][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 266.816680][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 266.951259][ T3475] IPVS: stop unused estimator thread 0... [ 266.989913][ T7779] m920x_read = error: -19 [ 267.010094][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 267.219872][ T7779] m920x_read = error: -19 [ 267.224288][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 267.410571][ T7779] m920x_read = error: -19 [ 267.428515][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 267.459018][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.472095][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.486045][ T5835] Bluetooth: hci5: command tx timeout [ 267.557490][ T8118] bridge_slave_0: entered allmulticast mode [ 267.601060][ T8118] bridge_slave_0: entered promiscuous mode [ 267.610632][ T7779] m920x_read = error: -19 [ 267.615016][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 267.625781][ T7922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.726380][ T30] audit: type=1400 audit(1750125467.423:450): avc: denied { mounton } for pid=8177 comm="syz.5.554" path="/syzcgroup/unified/syz5" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 267.906889][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 267.913024][ T5903] m920x_read = error: -19 [ 267.929883][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 267.937774][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 267.948082][ T976] usb 3-1: USB disconnect, device number 19 [ 268.089936][ T7779] m920x_read = error: -19 [ 268.258327][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 268.305383][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.318214][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.332992][ T8118] bridge_slave_1: entered allmulticast mode [ 268.351416][ T5904] vhci_hcd: vhci_device speed not set [ 268.377282][ T8118] bridge_slave_1: entered promiscuous mode [ 268.387850][ T7922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 268.512836][ T7779] m920x_read = error: -19 [ 268.517721][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 268.703259][ T7779] m920x_read = error: -19 [ 268.756590][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 269.098033][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.115380][ T7779] m920x_read = error: -19 [ 269.124988][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 269.130539][ T7922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 269.219462][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.266713][ T7922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 269.271753][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 269.329494][ T8118] team0: Port device team_slave_0 added [ 269.353287][ T8118] team0: Port device team_slave_1 added [ 269.360635][ T5903] m920x_read = error: -19 [ 269.364999][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 269.474924][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.484677][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.513584][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.520059][ T7779] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 269.528144][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.539235][ T5903] m920x_read = error: -19 [ 269.543722][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 269.544138][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.578800][ T5835] Bluetooth: hci5: command tx timeout [ 269.585922][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.704696][ T8118] hsr_slave_0: entered promiscuous mode [ 269.715437][ T7779] usb 6-1: Using ep0 maxpacket: 32 [ 269.721960][ T5903] m920x_read = error: -19 [ 269.723083][ T8118] hsr_slave_1: entered promiscuous mode [ 269.726286][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 269.756091][ T7779] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 269.775867][ T7779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.827382][ T7779] usb 6-1: config 0 descriptor?? [ 269.909866][ T5903] m920x_read = error: -19 [ 269.914499][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 270.036066][ T3475] bridge_slave_1: left allmulticast mode [ 270.047524][ T3475] bridge_slave_1: left promiscuous mode [ 270.054180][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.059479][ T7779] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 270.272283][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.316631][ T3475] bridge_slave_0: left allmulticast mode [ 270.460628][ T3475] bridge_slave_0: left promiscuous mode [ 270.470402][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.493931][ T5903] m920x_read = error: -19 [ 270.498314][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 270.508502][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.516585][ T7779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.531368][ T7779] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 270.538536][ T7779] usb 6-1: media controller created [ 270.595706][ T7779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.635985][ T7779] az6027: usb out operation failed. (-71) [ 270.659975][ T5903] m920x_read = error: -19 [ 270.664352][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 270.680411][ T7779] az6027: usb out operation failed. (-71) [ 270.696322][ T7779] stb0899_attach: Driver disabled by Kconfig [ 270.709927][ T7779] az6027: no front-end attached [ 270.709927][ T7779] [ 270.718808][ T7779] az6027: usb out operation failed. (-71) [ 270.724583][ T7779] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 270.739904][ T7779] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 270.783437][ T7779] dvb-usb: schedule remote query interval to 400 msecs. [ 270.802985][ T7779] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 270.819677][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.850221][ T7779] usb 6-1: USB disconnect, device number 15 [ 270.878286][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.879512][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'. [ 270.900325][ T5903] m920x_read = error: -19 [ 270.911742][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 270.938992][ T3475] bond0 (unregistering): Released all slaves [ 270.964182][ T7779] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 271.056439][ T3475] hsr_slave_0: left promiscuous mode [ 271.067102][ T3475] hsr_slave_1: left promiscuous mode [ 271.072863][ T976] m920x_read = error: -19 [ 271.077518][ T976] dvb-usb: error -19 while querying for an remote control event. [ 271.087897][ T5903] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 271.090333][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.107441][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.163058][ T8243] netlink: 340 bytes leftover after parsing attributes in process `syz.0.565'. [ 271.173592][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 271.429938][ T7779] m920x_read = error: -19 [ 271.456420][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 271.499922][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 271.511667][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.531717][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.534977][ T30] audit: type=1400 audit(1750125471.253:451): avc: denied { write } for pid=8244 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 271.544927][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 271.620658][ T7779] m920x_read = error: -19 [ 271.625073][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 271.640840][ T5835] Bluetooth: hci5: command tx timeout [ 271.695453][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 272.472683][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.517708][ T5903] usb 3-1: config 0 descriptor?? [ 272.541382][ T5835] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 272.633177][ T7779] m920x_read = error: -19 [ 272.645203][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 272.664479][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 272.712177][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 273.310669][ T7779] m920x_read = error: -19 [ 273.315106][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 273.644500][ T5883] m920x_read = error: -19 [ 273.649941][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 273.809914][ T5883] m920x_read = error: -19 [ 273.814318][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 274.033399][ T5883] m920x_read = error: -19 [ 274.037777][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 274.119770][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.152747][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.572'. [ 274.221042][ T30] audit: type=1400 audit(1750125473.863:452): avc: denied { nlmsg_read } for pid=8268 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.279254][ T5883] m920x_read = error: -19 [ 274.393234][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 274.463360][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 274.483166][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 274.503779][ T5903] usb 3-1: USB disconnect, device number 20 [ 274.546138][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.633842][ T5883] m920x_read = error: -19 [ 274.647283][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 274.664167][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.671364][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.801236][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.808388][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.850336][ T5903] m920x_read = error: -19 [ 274.854731][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 275.153352][ T5903] m920x_read = error: -19 [ 275.160218][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 275.337704][ T5903] m920x_read = error: -19 [ 275.361146][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 275.535089][ T8295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.575'. [ 275.921804][ T8293] ceph: No mds server is up or the cluster is laggy [ 275.975250][ T30] audit: type=1400 audit(1750125475.693:453): avc: denied { map } for pid=8301 comm="syz.2.577" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 276.011665][ T5944] m920x_read = error: -19 [ 276.016605][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 276.367016][ T5944] m920x_read = error: -19 [ 276.402703][ T30] audit: type=1400 audit(1750125475.783:454): avc: denied { map } for pid=8301 comm="syz.2.577" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.465998][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 276.618065][ T30] audit: type=1400 audit(1750125476.333:455): avc: denied { module_request } for pid=7922 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 276.706157][ T8118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.761274][ T5903] m920x_read = error: -19 [ 276.834483][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 276.861387][ T8118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.917273][ T8118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.975909][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.999230][ T8118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.010057][ T5944] m920x_read = error: -19 [ 277.015499][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 277.068477][ T30] audit: type=1400 audit(1750125476.783:456): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 277.189884][ T5903] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.204547][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.220256][ T5944] m920x_read = error: -19 [ 277.226075][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 277.253751][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.274313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.281475][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.292323][ T5883] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 277.333732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.340930][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.496281][ T5944] m920x_read = error: -19 [ 277.502323][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 277.521783][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 277.528526][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.543473][ T5903] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 277.553942][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.640870][ T8347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.583'. [ 277.802527][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 277.980756][ T7779] m920x_read = error: -19 [ 277.985151][ T7779] dvb-usb: error -19 while querying for an remote control event. [ 277.996593][ T5903] usb 6-1: config 0 descriptor?? [ 278.009769][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 278.018801][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.031738][ T5903] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 278.061261][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.092927][ T5883] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 278.106016][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.146334][ T5883] usb 3-1: config 0 descriptor?? [ 278.153184][ T5944] m920x_read = error: -19 [ 278.164605][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 278.293393][ T7922] veth0_vlan: entered promiscuous mode [ 278.306230][ T7922] veth1_vlan: entered promiscuous mode [ 278.344839][ T7922] veth0_macvtap: entered promiscuous mode [ 278.361464][ T7922] veth1_macvtap: entered promiscuous mode [ 278.466414][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.488585][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.518118][ T7922] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.541264][ T7922] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.547414][ T5944] m920x_read = error: -19 [ 278.560568][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 278.575331][ T7922] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.586936][ T7922] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.740619][ T5944] m920x_read = error: -19 [ 278.760936][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 278.773270][ T5903] gspca_vc032x: reg_r err -32 [ 278.855403][ T5903] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 279.091683][ T976] m920x_read = error: -19 [ 279.100673][ T976] dvb-usb: error -19 while querying for an remote control event. [ 279.159442][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.165207][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.194467][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.278844][ T976] m920x_read = error: -19 [ 279.284022][ T976] dvb-usb: error -19 while querying for an remote control event. [ 279.371716][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.453529][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.470249][ T976] m920x_read = error: -19 [ 279.480922][ T8380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.585'. [ 279.520473][ T976] dvb-usb: error -19 while querying for an remote control event. [ 279.909913][ T976] m920x_read = error: -19 [ 279.914309][ T976] dvb-usb: error -19 while querying for an remote control event. [ 279.916729][ T5904] usb 6-1: USB disconnect, device number 16 [ 279.998600][ T8394] netlink: 340 bytes leftover after parsing attributes in process `syz.5.587'. [ 280.046192][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.5.587'. [ 280.127830][ T976] m920x_read = error: -19 [ 280.139811][ T976] dvb-usb: error -19 while querying for an remote control event. [ 280.181896][ T5883] usbhid 3-1:0.0: can't add hid device: -71 [ 280.187941][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 280.213127][ T5883] usb 3-1: USB disconnect, device number 21 [ 280.255901][ T5870] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 280.330763][ T976] m920x_read = error: -19 [ 280.338015][ T976] dvb-usb: error -19 while querying for an remote control event. [ 280.373576][ T8118] veth0_vlan: entered promiscuous mode [ 280.385457][ T8118] veth1_vlan: entered promiscuous mode [ 280.479950][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 280.542046][ T976] m920x_read = error: -19 [ 280.546629][ T976] dvb-usb: error -19 while querying for an remote control event. [ 281.375408][ T8396] syz.7.510 (8396): drop_caches: 1 [ 281.406278][ T5870] usb 1-1: config 0 has an invalid interface number: 250 but max is 2 [ 281.415012][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.425772][ T5870] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 281.490509][ T8118] veth0_macvtap: entered promiscuous mode [ 281.499957][ T5883] m920x_read = error: -19 [ 281.504319][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 281.532443][ T5870] usb 1-1: config 0 has no interface number 0 [ 281.534312][ T8118] veth1_macvtap: entered promiscuous mode [ 281.561836][ T5870] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 281.573049][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.588073][ T5870] usb 1-1: Product: syz [ 281.593355][ T5870] usb 1-1: Manufacturer: syz [ 281.609356][ T5870] usb 1-1: SerialNumber: syz [ 281.640388][ T5870] usb 1-1: config 0 descriptor?? [ 281.643191][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.685922][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.696325][ T5883] m920x_read = error: -19 [ 281.700755][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 281.731721][ T8118] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.758147][ T8118] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.777440][ T8118] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.880033][ T5883] m920x_read = error: -19 [ 281.881218][ T8118] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.959984][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 282.155140][ T48] usb 1-1: USB disconnect, device number 17 [ 282.215481][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.233614][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.288872][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.303762][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.307779][ T8396] syz.7.510 (8396): drop_caches: 1 [ 282.529528][ T8423] netlink: 52 bytes leftover after parsing attributes in process `syz.7.593'. [ 282.538811][ T8423] netlink: 52 bytes leftover after parsing attributes in process `syz.7.593'. [ 282.547955][ T8423] netlink: 52 bytes leftover after parsing attributes in process `syz.7.593'. [ 282.706812][ T5883] m920x_read = error: -19 [ 282.727317][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 282.795538][ T8426] netlink: 68 bytes leftover after parsing attributes in process `syz.5.594'. [ 283.230837][ T5903] m920x_read = error: -19 [ 283.235985][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 283.423761][ T5903] m920x_read = error: -19 [ 283.428285][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 283.461215][ T5883] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 283.644482][ T5903] m920x_read = error: -19 [ 283.689206][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 283.752898][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 283.806180][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.853277][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 283.887918][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.914711][ T5883] usb 3-1: config 0 descriptor?? [ 283.938972][ T5883] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 283.960117][ T5944] m920x_read = error: -19 [ 283.964507][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 284.347215][ T5944] m920x_read = error: -19 [ 284.358130][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 284.553553][ T5903] m920x_read = error: -19 [ 284.567568][ T5883] gspca_vc032x: reg_r err -32 [ 284.573505][ T5883] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 284.586976][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 285.141478][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 285.297041][ T5883] m920x_read = error: -19 [ 285.427827][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 285.592877][ T30] audit: type=1400 audit(1750125485.313:457): avc: denied { ioctl } for pid=8484 comm="syz.7.606" path="socket:[19497]" dev="sockfs" ino=19497 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 285.617482][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.292590][ T30] audit: type=1400 audit(1750125485.433:458): avc: denied { read write } for pid=8484 comm="syz.7.606" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 286.316678][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.325660][ T30] audit: type=1400 audit(1750125485.433:459): avc: denied { open } for pid=8484 comm="syz.7.606" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 286.350607][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.460620][ T5944] m920x_read = error: -19 [ 286.465055][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 286.630419][ T8500] syz.0.608 (8500): drop_caches: 1 [ 286.636317][ T5903] m920x_read = error: -19 [ 286.640971][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 286.803227][ T5903] m920x_read = error: -19 [ 286.812165][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 286.894727][ T8510] netlink: 52 bytes leftover after parsing attributes in process `syz.5.609'. [ 286.931645][ T8510] netlink: 52 bytes leftover after parsing attributes in process `syz.5.609'. [ 286.940642][ T8510] netlink: 52 bytes leftover after parsing attributes in process `syz.5.609'. [ 286.961091][ T48] usb 3-1: USB disconnect, device number 22 [ 287.119855][ T5903] m920x_read = error: -19 [ 287.140416][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 287.159862][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.272712][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.613'. [ 287.349906][ T5903] m920x_read = error: -19 [ 287.354290][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 287.363664][ T8525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.475510][ T8525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.487303][ T30] audit: type=1400 audit(1750125487.193:460): avc: denied { mount } for pid=8530 comm="syz.6.616" name="/" dev="ramfs" ino=19563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 287.549919][ T5944] m920x_read = error: -19 [ 287.556555][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 287.716521][ T30] audit: type=1400 audit(1750125487.433:461): avc: denied { ioctl } for pid=8534 comm="syz.2.619" path="socket:[18517]" dev="sockfs" ino=18517 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.741176][ T5944] m920x_read = error: -19 [ 287.745527][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 288.152573][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 288.169286][ T30] audit: type=1400 audit(1750125487.803:462): avc: denied { getopt } for pid=8534 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.188750][ T8543] netlink: 'syz.5.620': attribute type 5 has an invalid length. [ 288.188774][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.620'. [ 288.252033][ T5944] m920x_read = error: -19 [ 288.275621][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 288.316895][ T8548] netlink: 'syz.7.622': attribute type 5 has an invalid length. [ 288.337763][ T8543] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 288.357763][ T8543] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 288.367432][ T8543] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 288.388278][ T8543] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 288.415081][ T8543] geneve2: entered promiscuous mode [ 288.434927][ T8543] geneve2: entered allmulticast mode [ 288.470312][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 288.480190][ T5944] m920x_read = error: -19 [ 288.484575][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 288.509497][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 288.642513][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.624'. [ 288.651518][ T5944] m920x_read = error: -19 [ 288.663899][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 288.702828][ T8559] chnl_net:caif_netlink_parms(): no params data found [ 288.869977][ T5903] m920x_read = error: -19 [ 288.874433][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 289.040568][ T5944] m920x_read = error: -19 [ 289.049177][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 289.259394][ T5903] m920x_read = error: -19 [ 289.327824][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 289.908005][ T5903] m920x_read = error: -19 [ 290.008429][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 290.097493][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 290.204648][ T5903] m920x_read = error: -19 [ 290.209383][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 290.331644][ T8591] netlink: 48 bytes leftover after parsing attributes in process `syz.6.630'. [ 290.767220][ T5944] m920x_read = error: -19 [ 290.771925][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 290.805702][ T8593] tmpfs: Unknown parameter 'mpmldefault:' [ 290.830135][ T5903] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 290.939936][ T5944] m920x_read = error: -19 [ 290.944303][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 291.041358][ T5903] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 291.054894][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.077224][ T30] audit: type=1400 audit(1750125490.793:463): avc: denied { connect } for pid=8598 comm="syz.5.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.096612][ T5903] usb 3-1: config 0 descriptor?? [ 291.100497][ T5903] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 291.175916][ T30] audit: type=1400 audit(1750125490.843:464): avc: denied { read } for pid=8598 comm="syz.5.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.182620][ T5944] m920x_read = error: -19 [ 291.207413][ T30] audit: type=1400 audit(1750125490.893:465): avc: denied { write } for pid=8598 comm="syz.5.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.224281][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 291.287812][ T30] audit: type=1400 audit(1750125490.893:466): avc: denied { audit_write } for pid=8598 comm="syz.5.632" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.409833][ T5944] m920x_read = error: -19 [ 291.414258][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 291.629517][ T8606] syz.6.633 (8606): drop_caches: 1 [ 291.638305][ T8583] netlink: 'syz.2.628': attribute type 29 has an invalid length. [ 291.646476][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 291.779880][ T8606] syz.6.633 (8606): drop_caches: 1 [ 291.915880][ T5903] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 292.061327][ T30] audit: type=1400 audit(1750125491.753:467): avc: denied { remount } for pid=8613 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 292.109931][ T5944] m920x_read = error: -19 [ 292.114361][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 292.240610][ T8620] sp0: Synchronizing with TNC [ 292.248433][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.634'. [ 292.361676][ T5944] m920x_read = error: -19 [ 292.372556][ T5903] gspca_cpia1: usb_control_msg 02, error -71 [ 292.381707][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 292.399755][ T5903] gspca_cpia1: usb_control_msg 05, error -71 [ 292.411621][ T5903] cpia1 3-1:0.0: unexpected systemstate: 00 [ 292.454493][ T5903] usb 3-1: USB disconnect, device number 23 [ 292.559846][ T5944] m920x_read = error: -19 [ 292.564332][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 292.753917][ T5944] m920x_read = error: -19 [ 292.758276][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 293.297767][ T8621] team0: Port device team_slave_0 removed [ 293.434140][ T5944] m920x_read = error: -19 [ 293.529905][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 293.632688][ T30] audit: type=1400 audit(1750125493.343:468): avc: denied { bind } for pid=8632 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.661038][ T8639] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 293.709837][ T5883] m920x_read = error: -19 [ 293.715622][ T8637] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 293.725063][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 293.788261][ T8637] overlayfs: missing 'lowerdir' [ 293.882656][ T5883] m920x_read = error: -19 [ 293.895685][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 294.100300][ T5883] m920x_read = error: -19 [ 294.105639][ T5944] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 294.113310][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 294.238008][ T8613] [U] è [ 294.262209][ T5944] usb 1-1: device descriptor read/64, error -71 [ 294.301015][ T5883] m920x_read = error: -19 [ 294.309797][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 294.481479][ T5883] m920x_read = error: -19 [ 294.485870][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 294.515750][ T5944] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 294.682604][ T5944] usb 1-1: device descriptor read/64, error -71 [ 294.700400][ T5903] m920x_read = error: -19 [ 294.704795][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 294.792455][ T5944] usb usb1-port1: attempt power cycle [ 294.863474][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.642'. [ 294.899992][ T976] m920x_read = error: -19 [ 294.904533][ T976] dvb-usb: error -19 while querying for an remote control event. [ 295.059869][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 295.087833][ T976] m920x_read = error: -19 [ 295.092868][ T976] dvb-usb: error -19 while querying for an remote control event. [ 295.568864][ T5944] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 295.642262][ T5944] usb 1-1: device descriptor read/8, error -71 [ 295.649928][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 295.669686][ T5883] usb 7-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=7b.54 [ 295.695574][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.711531][ T5883] usb 7-1: Product: syz [ 295.715737][ T5883] usb 7-1: Manufacturer: syz [ 295.731654][ T5883] usb 7-1: SerialNumber: syz [ 295.756403][ T5883] usb 7-1: config 0 descriptor?? [ 295.769943][ T5903] m920x_read = error: -19 [ 295.799697][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 295.937279][ T8678] SET target dimension over the limit! [ 295.950086][ T5944] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 296.073806][ T976] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 296.187803][ T5903] m920x_read = error: -19 [ 296.193265][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 296.202737][ T5944] usb 1-1: device descriptor read/8, error -71 [ 296.325136][ T5944] usb usb1-port1: unable to enumerate USB device [ 296.364943][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 296.643208][ T5944] m920x_read = error: -19 [ 296.647631][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 296.654654][ T8660] IPVS: persistence engine module ip_vs_pe_ not found [ 296.667636][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 296.686247][ T976] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 296.715668][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.734633][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 296.736232][ T976] usb 6-1: config 0 descriptor?? [ 296.772148][ T5883] ttusb_dec_send_command: command bulk message failed: error -22 [ 296.823286][ T5883] ttusb-dec 7-1:0.0: probe with driver ttusb-dec failed with error -22 [ 296.831837][ T5944] m920x_read = error: -19 [ 296.836631][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 296.895687][ T5883] usb 7-1: USB disconnect, device number 2 [ 297.118078][ T5890] m920x_read = error: -19 [ 297.184743][ T8696] netlink: 'syz.2.649': attribute type 2 has an invalid length. [ 297.189819][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 297.203183][ T976] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 297.233480][ T30] audit: type=1400 audit(1750125496.943:469): avc: denied { firmware_load } for pid=8693 comm="syz.7.648" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 297.341740][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.360501][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 297.378101][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.379879][ T30] audit: type=1400 audit(1750125497.083:470): avc: denied { append } for pid=8671 comm="syz.5.643" name="i2c-1" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.416918][ T976] usb 6-1: media controller created [ 297.430668][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.470349][ T8697] syz.7.648 (8697) used greatest stack depth: 18840 bytes left [ 297.486791][ T5883] m920x_read = error: -19 [ 297.579871][ T48] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 297.604001][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.612451][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 297.635142][ T976] az6027: usb out operation failed. (-71) [ 297.651129][ T976] az6027: usb out operation failed. (-71) [ 297.728735][ T8705] netlink: 48 bytes leftover after parsing attributes in process `syz.0.650'. [ 297.840475][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.088374][ T5890] m920x_read = error: -19 [ 298.092818][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 298.101298][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 152, changing to 11 [ 298.116571][ T976] stb0899_attach: Driver disabled by Kconfig [ 298.124085][ T976] az6027: no front-end attached [ 298.124085][ T976] [ 298.154201][ T976] az6027: usb out operation failed. (-71) [ 298.159603][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 42012, setting to 1024 [ 298.176743][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 298.211820][ T48] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 298.228886][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 298.274303][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.315376][ T48] usb 3-1: config 0 descriptor?? [ 298.343179][ T8707] Illegal XDP return value 212 on prog (id 140) dev N/A, expect packet loss! [ 298.343188][ T5890] m920x_read = error: -19 [ 298.348856][ T8696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 298.360483][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 298.372303][ T976] dvb-usb: schedule remote query interval to 400 msecs. [ 298.379305][ T976] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 298.410542][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.5.653'. [ 298.414646][ T30] audit: type=1400 audit(1750125498.113:471): avc: denied { connect } for pid=8708 comm="syz.6.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.511166][ T8709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.533926][ T8709] netlink: 8552 bytes leftover after parsing attributes in process `syz.6.652'. [ 298.600800][ T5890] m920x_read = error: -19 [ 298.632538][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 298.673723][ T976] usb 6-1: USB disconnect, device number 17 [ 298.720127][ T30] audit: type=1400 audit(1750125498.393:472): avc: denied { create } for pid=8708 comm="syz.6.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.753698][ T48] ath6kl: Failed to submit usb control message: -71 [ 298.761036][ T48] ath6kl: unable to send the bmi data to the device: -71 [ 298.768064][ T48] ath6kl: Unable to send get target info: -71 [ 298.812587][ T5890] m920x_read = error: -19 [ 298.817167][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 298.825427][ T30] audit: type=1400 audit(1750125498.433:473): avc: denied { listen } for pid=8708 comm="syz.6.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.844672][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.851233][ T30] audit: type=1400 audit(1750125498.433:474): avc: denied { ioctl } for pid=8708 comm="syz.6.652" path="socket:[19919]" dev="sockfs" ino=19919 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.877137][ T48] ath6kl: Failed to init ath6kl core: -71 [ 298.901757][ T48] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 298.952608][ T48] usb 3-1: USB disconnect, device number 24 [ 298.979846][ T5890] m920x_read = error: -19 [ 298.993066][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 299.170081][ T5890] m920x_read = error: -19 [ 299.175721][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 299.209399][ T8730] process 'syz.0.655' launched './file0' with NULL argv: empty string added [ 299.359998][ T5890] m920x_read = error: -19 [ 299.372143][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 299.550041][ T5890] m920x_read = error: -19 [ 299.557792][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 299.729813][ T5890] m920x_read = error: -19 [ 299.738338][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 299.909980][ T5890] m920x_read = error: -19 [ 299.914382][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 300.079819][ T5883] m920x_read = error: -19 [ 300.084203][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 300.260062][ T5890] m920x_read = error: -19 [ 300.266572][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 300.439983][ T5890] m920x_read = error: -19 [ 300.444394][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 300.629878][ T5890] m920x_read = error: -19 [ 300.634344][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 300.809821][ T5890] m920x_read = error: -19 [ 301.019789][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 301.190234][ T30] audit: type=1400 audit(1750125500.863:475): avc: denied { ioctl } for pid=8764 comm="syz.5.658" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 301.361735][ T976] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 301.372599][ T5890] m920x_read = error: -19 [ 301.376975][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 301.462159][ T8778] Cannot find add_set index 0 as target [ 301.491476][ T8776] FAULT_INJECTION: forcing a failure. [ 301.491476][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 301.713888][ T8776] CPU: 1 UID: 0 PID: 8776 Comm: syz.6.660 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 301.713914][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.713924][ T8776] Call Trace: [ 301.713929][ T8776] [ 301.713935][ T8776] dump_stack_lvl+0x16c/0x1f0 [ 301.713964][ T8776] should_fail_ex+0x512/0x640 [ 301.713990][ T8776] should_failslab+0xc2/0x120 [ 301.714016][ T8776] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 301.714040][ T8776] ? skb_clone+0x190/0x3f0 [ 301.714067][ T8776] skb_clone+0x190/0x3f0 [ 301.714092][ T8776] netlink_deliver_tap+0xabd/0xd30 [ 301.714114][ T8776] netlink_unicast+0x5df/0x7f0 [ 301.714134][ T8776] ? __pfx_netlink_unicast+0x10/0x10 [ 301.714159][ T8776] netlink_sendmsg+0x8d1/0xdd0 [ 301.714182][ T8776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.714209][ T8776] ____sys_sendmsg+0xa95/0xc70 [ 301.714230][ T8776] ? copy_msghdr_from_user+0x10a/0x160 [ 301.714254][ T8776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.714276][ T8776] ? __lock_acquire+0xb8a/0x1c90 [ 301.714308][ T8776] ___sys_sendmsg+0x134/0x1d0 [ 301.714332][ T8776] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.714390][ T8776] __sys_sendmsg+0x16d/0x220 [ 301.714415][ T8776] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.714438][ T8776] ? __pfx___schedule+0x10/0x10 [ 301.714477][ T8776] do_syscall_64+0xcd/0x4c0 [ 301.714506][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.714523][ T8776] RIP: 0033:0x7fc48a58e929 [ 301.714537][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.714554][ T8776] RSP: 002b:00007fc48b3af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.714571][ T8776] RAX: ffffffffffffffda RBX: 00007fc48a7b5fa0 RCX: 00007fc48a58e929 [ 301.714583][ T8776] RDX: 0000000004004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 301.714593][ T8776] RBP: 00007fc48b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 301.714603][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.714613][ T8776] R13: 0000000000000000 R14: 00007fc48a7b5fa0 R15: 00007ffc1a795de8 [ 301.714636][ T8776] [ 301.977858][ T5903] m920x_read = error: -19 [ 301.984881][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.661'. [ 302.003953][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 302.106204][ T8787] netlink: 'syz.2.663': attribute type 27 has an invalid length. [ 302.301199][ T5944] m920x_read = error: -19 [ 302.305586][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 303.306697][ T5944] m920x_read = error: -19 [ 303.311144][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 303.676576][ T5944] m920x_read = error: -19 [ 303.681241][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 303.856319][ T5944] m920x_read = error: -19 [ 303.913437][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 304.100893][ T5944] m920x_read = error: -19 [ 304.116118][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 304.817386][ T5944] m920x_read = error: -19 [ 304.829616][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 304.919948][ T30] audit: type=1400 audit(1750125504.633:476): avc: denied { write } for pid=8827 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.059822][ T5944] m920x_read = error: -19 [ 305.064218][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 305.114412][ T30] audit: type=1400 audit(1750125504.823:477): avc: denied { shutdown } for pid=8827 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 305.250062][ T5890] m920x_read = error: -19 [ 305.346293][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 305.405761][ T5944] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.530130][ T5890] m920x_read = error: -19 [ 305.542779][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 305.621343][ T5904] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 305.642944][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 305.665916][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 305.691779][ T5944] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 305.709885][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.717939][ T5944] usb 3-1: Product: syz [ 305.734048][ T5944] usb 3-1: Manufacturer: syz [ 305.738702][ T5944] usb 3-1: SerialNumber: syz [ 305.784986][ T5904] usb 1-1: device descriptor read/64, error -71 [ 305.888286][ T5890] m920x_read = error: -19 [ 305.892863][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 305.902948][ T5944] usb 3-1: config 0 descriptor?? [ 305.908762][ T8828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.921986][ T5944] hub 3-1:0.0: bad descriptor, ignoring hub [ 305.927982][ T5944] hub 3-1:0.0: probe with driver hub failed with error -5 [ 306.020516][ T5944] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 306.072803][ T5944] m920x_read = error: -19 [ 306.077326][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 306.154791][ T8861] FAULT_INJECTION: forcing a failure. [ 306.154791][ T8861] name failslab, interval 1, probability 0, space 0, times 0 [ 306.175582][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 306.205233][ T8861] CPU: 1 UID: 0 PID: 8861 Comm: syz.6.676 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 306.205259][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.205269][ T8861] Call Trace: [ 306.205275][ T8861] [ 306.205282][ T8861] dump_stack_lvl+0x16c/0x1f0 [ 306.205314][ T8861] should_fail_ex+0x512/0x640 [ 306.205337][ T8861] ? __kmalloc_noprof+0xbf/0x510 [ 306.205360][ T8861] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 306.205384][ T8861] should_failslab+0xc2/0x120 [ 306.205409][ T8861] __kmalloc_noprof+0xd2/0x510 [ 306.205432][ T8861] ? avc_has_perm_noaudit+0x149/0x3b0 [ 306.205453][ T8861] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 306.205482][ T8861] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 306.205505][ T8861] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.205535][ T8861] ? bpf_lsm_capable+0x9/0x10 [ 306.205554][ T8861] ? security_capable+0x7e/0x260 [ 306.205575][ T8861] ? ns_capable+0xd7/0x110 [ 306.205597][ T8861] genl_rcv_msg+0x55c/0x800 [ 306.205622][ T8861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.205649][ T8861] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 306.205674][ T8861] ? __pfx_nl80211_crit_protocol_stop+0x10/0x10 [ 306.205697][ T8861] ? __pfx_nl80211_post_doit+0x10/0x10 [ 306.205731][ T8861] netlink_rcv_skb+0x155/0x420 [ 306.205750][ T8861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.205773][ T8861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.205802][ T8861] ? netlink_deliver_tap+0x1ae/0xd30 [ 306.205823][ T8861] genl_rcv+0x28/0x40 [ 306.205842][ T8861] netlink_unicast+0x53d/0x7f0 [ 306.205863][ T8861] ? __pfx_netlink_unicast+0x10/0x10 [ 306.205888][ T8861] netlink_sendmsg+0x8d1/0xdd0 [ 306.205912][ T8861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.205940][ T8861] ____sys_sendmsg+0xa95/0xc70 [ 306.205961][ T8861] ? copy_msghdr_from_user+0x10a/0x160 [ 306.205985][ T8861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.206016][ T8861] ___sys_sendmsg+0x134/0x1d0 [ 306.206043][ T8861] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.206065][ T8861] ? __lock_acquire+0x622/0x1c90 [ 306.206125][ T8861] __sys_sendmsg+0x16d/0x220 [ 306.206150][ T8861] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.206191][ T8861] do_syscall_64+0xcd/0x4c0 [ 306.206219][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.206237][ T8861] RIP: 0033:0x7fc48a58e929 [ 306.206251][ T8861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.206271][ T8861] RSP: 002b:00007fc48b3af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.206289][ T8861] RAX: ffffffffffffffda RBX: 00007fc48a7b5fa0 RCX: 00007fc48a58e929 [ 306.206301][ T8861] RDX: 0000000004004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 306.206311][ T8861] RBP: 00007fc48b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 306.206322][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.206332][ T8861] R13: 0000000000000000 R14: 00007fc48a7b5fa0 R15: 00007ffc1a795de8 [ 306.206356][ T8861] [ 306.617161][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.677'. [ 306.650722][ T5890] m920x_read = error: -19 [ 306.656989][ T5944] usb 3-1: USB disconnect, device number 25 [ 306.657040][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 306.679097][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 306.699789][ T5904] usb 1-1: device descriptor read/64, error -71 [ 306.856382][ T5904] usb usb1-port1: attempt power cycle [ 306.887167][ T5890] m920x_read = error: -19 [ 306.899800][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 307.181428][ T5890] m920x_read = error: -19 [ 307.201090][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 307.220608][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 307.232473][ T5904] usb 1-1: device descriptor read/8, error -71 [ 307.401002][ T30] audit: type=1400 audit(1750125507.113:478): avc: denied { map } for pid=8882 comm="syz.2.679" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 307.459816][ T5944] m920x_read = error: -19 [ 307.464266][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 307.484175][ T30] audit: type=1400 audit(1750125507.113:479): avc: denied { execute } for pid=8882 comm="syz.2.679" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 307.508141][ T5904] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 307.524267][ T5904] usb 1-1: device descriptor read/8, error -71 [ 307.786205][ T5944] m920x_read = error: -19 [ 307.810698][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 307.990002][ T5944] m920x_read = error: -19 [ 307.994380][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 308.156886][ T5904] usb usb1-port1: unable to enumerate USB device [ 308.174689][ T5890] m920x_read = error: -19 [ 308.179085][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 308.370045][ T5944] m920x_read = error: -19 [ 308.374440][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 308.561477][ T5890] m920x_read = error: -19 [ 308.565877][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 308.728517][ T8918] netlink: 68 bytes leftover after parsing attributes in process `syz.5.681'. [ 308.845776][ T48] libceph: connect (1)[c::]:6789 error -101 [ 308.909288][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 309.169839][ T5890] m920x_read = error: -19 [ 309.174292][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 309.203777][ T8916] ceph: No mds server is up or the cluster is laggy [ 309.350758][ T5890] m920x_read = error: -19 [ 309.382767][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 309.660184][ T5890] m920x_read = error: -19 [ 309.712428][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 309.900086][ T5890] m920x_read = error: -19 [ 309.905741][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 309.951089][ T8935] FAULT_INJECTION: forcing a failure. [ 309.951089][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 309.951120][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.6.687 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 309.951142][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.951152][ T8935] Call Trace: [ 309.951158][ T8935] [ 309.951165][ T8935] dump_stack_lvl+0x16c/0x1f0 [ 309.951196][ T8935] should_fail_ex+0x512/0x640 [ 309.951219][ T8935] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 309.951244][ T8935] should_failslab+0xc2/0x120 [ 309.951269][ T8935] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 309.951292][ T8935] ? __alloc_skb+0x2b2/0x380 [ 309.951315][ T8935] ? bpf_lsm_capable+0x9/0x10 [ 309.951337][ T8935] __alloc_skb+0x2b2/0x380 [ 309.951360][ T8935] ? __pfx___alloc_skb+0x10/0x10 [ 309.951383][ T8935] ? genl_rcv_msg+0x540/0x800 [ 309.951403][ T8935] ? genl_rcv_msg+0x4bb/0x800 [ 309.951430][ T8935] netlink_ack+0x15d/0xb80 [ 309.951457][ T8935] netlink_rcv_skb+0x332/0x420 [ 309.951475][ T8935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.951498][ T8935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.951527][ T8935] ? netlink_deliver_tap+0x1ae/0xd30 [ 309.951549][ T8935] genl_rcv+0x28/0x40 [ 309.951567][ T8935] netlink_unicast+0x53d/0x7f0 [ 309.951588][ T8935] ? __pfx_netlink_unicast+0x10/0x10 [ 309.951614][ T8935] netlink_sendmsg+0x8d1/0xdd0 [ 309.951637][ T8935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.951665][ T8935] ____sys_sendmsg+0xa95/0xc70 [ 309.951685][ T8935] ? copy_msghdr_from_user+0x10a/0x160 [ 309.951709][ T8935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.951741][ T8935] ___sys_sendmsg+0x134/0x1d0 [ 309.951767][ T8935] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.951789][ T8935] ? __lock_acquire+0x622/0x1c90 [ 309.951848][ T8935] __sys_sendmsg+0x16d/0x220 [ 309.951888][ T8935] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.951930][ T8935] do_syscall_64+0xcd/0x4c0 [ 309.951958][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.951975][ T8935] RIP: 0033:0x7fc48a58e929 [ 309.951989][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.952005][ T8935] RSP: 002b:00007fc48b3af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.952021][ T8935] RAX: ffffffffffffffda RBX: 00007fc48a7b5fa0 RCX: 00007fc48a58e929 [ 309.952033][ T8935] RDX: 0000000004004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 309.952043][ T8935] RBP: 00007fc48b3af090 R08: 0000000000000000 R09: 0000000000000000 [ 309.952053][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.952063][ T8935] R13: 0000000000000000 R14: 00007fc48a7b5fa0 R15: 00007ffc1a795de8 [ 309.952087][ T8935] [ 310.080632][ T5890] m920x_read = error: -19 [ 310.080654][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 310.832632][ T5890] m920x_read = error: -19 [ 310.849259][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 311.029824][ T5903] m920x_read = error: -19 [ 311.246950][ T8950] binder: BINDER_SET_CONTEXT_MGR already set [ 311.253708][ T8950] binder: 8945:8950 ioctl 4018620d 200000000040 returned -16 [ 311.422622][ T30] audit: type=1400 audit(1750125510.943:480): avc: denied { set_context_mgr } for pid=8945 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 311.766203][ T5903] dvb-usb: error -19 while querying for an remote control event. [ 312.022207][ T30] audit: type=1400 audit(1750125510.953:481): avc: denied { write } for pid=8945 comm="syz.0.691" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 312.044811][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.059867][ T30] audit: type=1400 audit(1750125510.963:482): avc: denied { map } for pid=8945 comm="syz.0.691" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 312.083515][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.089656][ T5890] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 312.170058][ T5944] m920x_read = error: -19 [ 312.174444][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 312.259759][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 312.289908][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.302328][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 312.319785][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.339979][ T5944] m920x_read = error: -19 [ 312.344365][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 312.355201][ T5890] usb 3-1: config 0 descriptor?? [ 312.375200][ T5890] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 312.406895][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 312.679551][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 313.334884][ T8974] netlink: 68 bytes leftover after parsing attributes in process `syz.5.696'. [ 313.411900][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 313.419884][ T5944] m920x_read = error: -19 [ 313.426293][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 313.504208][ T8970] ceph: No mds server is up or the cluster is laggy [ 313.684513][ T5944] m920x_read = error: -19 [ 313.688927][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 313.863131][ T5944] m920x_read = error: -19 [ 313.867548][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 314.191609][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 314.407565][ T5944] m920x_read = error: -19 [ 314.428902][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 314.520821][ T5890] gspca_vc032x: reg_r err -32 [ 314.530025][ T5890] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 314.615409][ T5890] m920x_read = error: -19 [ 314.627155][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 314.799951][ T5890] m920x_read = error: -19 [ 314.816594][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 314.989797][ T5904] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 315.007650][ T976] m920x_read = error: -19 [ 315.012664][ T976] dvb-usb: error -19 while querying for an remote control event. [ 315.028019][ T9009] netlink: 340 bytes leftover after parsing attributes in process `syz.5.704'. [ 315.153038][ T9010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.180188][ T976] m920x_read = error: -19 [ 315.206202][ T976] dvb-usb: error -19 while querying for an remote control event. [ 315.541353][ T5904] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 315.549578][ T5904] usb 7-1: config 0 has no interface number 0 [ 315.562987][ T5904] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 315.570384][ T976] m920x_read = error: -19 [ 315.576522][ T976] dvb-usb: error -19 while querying for an remote control event. [ 315.608919][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.617250][ T5904] usb 7-1: Product: syz [ 315.622722][ T5904] usb 7-1: Manufacturer: syz [ 315.628274][ T5904] usb 7-1: SerialNumber: syz [ 315.720259][ T5904] usb 7-1: config 0 descriptor?? [ 315.762684][ T976] m920x_read = error: -19 [ 315.769839][ T976] dvb-usb: error -19 while querying for an remote control event. [ 315.933446][ T976] m920x_read = error: -19 [ 315.961213][ T976] dvb-usb: error -19 while querying for an remote control event. [ 316.051416][ T5904] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 316.074743][ T5944] usb 3-1: USB disconnect, device number 26 [ 316.266789][ T5904] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 316.320545][ T976] m920x_read = error: -19 [ 316.324935][ T976] dvb-usb: error -19 while querying for an remote control event. [ 316.424394][ T5904] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 316.433659][ T5904] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 316.456219][ T5904] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 316.537804][ T9032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.708'. [ 316.601561][ T976] m920x_read = error: -19 [ 316.606329][ T976] dvb-usb: error -19 while querying for an remote control event. [ 316.721806][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.728202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.934093][ T5904] usb 7-1: USB disconnect, device number 3 [ 316.969161][ T5904] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 316.981062][ T5904] keyspan 7-1:0.133: device disconnected [ 317.157053][ T976] m920x_read = error: -19 [ 317.170900][ T976] dvb-usb: error -19 while querying for an remote control event. [ 317.986695][ T9050] netlink: 68 bytes leftover after parsing attributes in process `syz.5.711'. [ 318.300935][ T976] m920x_read = error: -19 [ 318.305322][ T976] dvb-usb: error -19 while querying for an remote control event. [ 318.421695][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 318.427797][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 318.458931][ T9046] ceph: No mds server is up or the cluster is laggy [ 318.578730][ T5890] m920x_read = error: -19 [ 318.583364][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 318.654483][ T30] audit: type=1400 audit(1750125518.373:483): avc: denied { write } for pid=9055 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.749827][ T5890] m920x_read = error: -19 [ 318.754214][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 319.015424][ T976] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 319.164058][ T5890] m920x_read = error: -19 [ 319.185089][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 319.350048][ T5944] m920x_read = error: -19 [ 319.355514][ T5944] dvb-usb: error -19 while querying for an remote control event. [ 319.369665][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.482579][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 319.737688][ T9071] ceph: No mds server is up or the cluster is laggy [ 319.752523][ T976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 319.775956][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 319.786189][ T5890] m920x_read = error: -19 [ 319.786927][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.720'. [ 319.794285][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 319.807368][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 65535, setting to 64 [ 319.818775][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.819196][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 319.839762][ T976] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 319.839792][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.839811][ T976] usb 1-1: Product: syz [ 319.839826][ T976] usb 1-1: Manufacturer: syz [ 319.839839][ T976] usb 1-1: SerialNumber: syz [ 319.841867][ T976] usb 1-1: config 0 descriptor?? [ 319.939402][ T9058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.968871][ T976] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 319.990004][ T5890] m920x_read = error: -19 [ 319.994518][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 320.077137][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.088808][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.098168][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.106902][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.122660][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.157298][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.159898][ T5883] m920x_read = error: -19 [ 320.175244][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 320.184940][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.194984][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.206288][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.216040][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.232311][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.251619][ T5890] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 320.280181][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.302910][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.336841][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.346663][ T976] m920x_read = error: -19 [ 320.360327][ T976] dvb-usb: error -19 while querying for an remote control event. [ 320.378075][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.409781][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 320.420824][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 320.447248][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.471183][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.497544][ T5890] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 320.512550][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.560687][ T976] m920x_read = error: -19 [ 320.579841][ T976] dvb-usb: error -19 while querying for an remote control event. [ 320.611165][ T5890] usb 6-1: Product: syz [ 320.648911][ T5870] usb 1-1: USB disconnect, device number 26 [ 321.087786][ T5890] usb 6-1: Manufacturer: syz [ 321.106383][ T5890] usb 6-1: SerialNumber: syz [ 321.135444][ T5890] usb 6-1: config 0 descriptor?? [ 321.249875][ T5890] m920x_read = error: -19 [ 321.254280][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 321.413092][ T48] usb 6-1: USB disconnect, device number 18 [ 321.421638][ T5890] m920x_read = error: -19 [ 321.445555][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 321.618488][ T5890] m920x_read = error: -19 [ 321.723311][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 322.039941][ T5890] m920x_read = error: -19 [ 322.054790][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 322.096719][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 322.199979][ T5835] Bluetooth: hci1: command tx timeout [ 322.466817][ T976] m920x_read = error: -19 [ 322.471933][ T976] dvb-usb: error -19 while querying for an remote control event. [ 322.633012][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 323.125529][ T9135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.728'. [ 323.213595][ T976] m920x_read = error: -19 [ 323.323232][ T9134] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 323.453466][ T976] dvb-usb: error -19 while querying for an remote control event. [ 323.490035][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 323.539563][ T9148] ================================================================== [ 323.539576][ T9148] BUG: KASAN: wild-memory-access in get_futex_key+0x595/0x1540 [ 323.539603][ T9148] Read of size 8 at addr 1fffffff90a81b98 by task syz.5.732/9148 [ 323.539617][ T9148] [ 323.539625][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.5.732 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 323.539647][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.539657][ T9148] Call Trace: [ 323.539663][ T9148] [ 323.539670][ T9148] dump_stack_lvl+0x116/0x1f0 [ 323.539700][ T9148] kasan_report+0xe0/0x110 [ 323.539731][ T9148] ? get_futex_key+0x595/0x1540 [ 323.539755][ T9148] kasan_check_range+0x100/0x1b0 [ 323.539772][ T9148] get_futex_key+0x595/0x1540 [ 323.539796][ T9148] ? __pfx_get_futex_key+0x10/0x10 [ 323.539817][ T9148] ? futex_private_hash+0x197/0x4b0 [ 323.539841][ T9148] ? futex_private_hash+0x1a1/0x4b0 [ 323.539863][ T9148] futex_wait_multiple_setup+0x13c/0x7b0 [ 323.539888][ T9148] futex_wait_multiple+0xe6/0x480 [ 323.539907][ T9148] ? __pfx_futex_wait_multiple+0x10/0x10 [ 323.539923][ T9148] ? __kmalloc_noprof+0x242/0x510 [ 323.539943][ T9148] ? find_held_lock+0x2b/0x80 [ 323.539965][ T9148] __do_sys_futex_waitv+0x17f/0x2c0 [ 323.539989][ T9148] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 323.540016][ T9148] ? do_user_addr_fault+0x843/0x1370 [ 323.540043][ T9148] do_syscall_64+0xcd/0x4c0 [ 323.540069][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.540088][ T9148] RIP: 0033:0x7fa26498e929 [ 323.540101][ T9148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.540118][ T9148] RSP: 002b:00007fa2627f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 323.540135][ T9148] RAX: ffffffffffffffda RBX: 00007fa264bb5fa0 RCX: 00007fa26498e929 [ 323.540147][ T9148] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b00 [ 323.540157][ T9148] RBP: 00007fa264a10b39 R08: 0000000000000001 R09: 0000000000000000 [ 323.540167][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.540176][ T9148] R13: 0000000000000001 R14: 00007fa264bb5fa0 R15: 00007ffc5e8e9348 [ 323.540191][ T9148] [ 323.540197][ T9148] ================================================================== [ 323.540311][ T9148] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.540322][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.5.732 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 323.540342][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.540352][ T9148] Call Trace: [ 323.540357][ T9148] [ 323.540363][ T9148] dump_stack_lvl+0x3d/0x1f0 [ 323.540389][ T9148] panic+0x71c/0x800 [ 323.540413][ T9148] ? __pfx_panic+0x10/0x10 [ 323.540437][ T9148] ? rcu_is_watching+0x12/0xc0 [ 323.540460][ T9148] ? preempt_schedule_thunk+0x16/0x30 [ 323.540480][ T9148] ? get_futex_key+0x595/0x1540 [ 323.540502][ T9148] ? preempt_schedule_common+0x44/0xc0 [ 323.540527][ T9148] ? check_panic_on_warn+0x1f/0xb0 [ 323.540551][ T9148] ? get_futex_key+0x595/0x1540 [ 323.540573][ T9148] check_panic_on_warn+0xab/0xb0 [ 323.540598][ T9148] end_report+0x107/0x170 [ 323.540620][ T9148] kasan_report+0xee/0x110 [ 323.540644][ T9148] ? get_futex_key+0x595/0x1540 [ 323.540668][ T9148] kasan_check_range+0x100/0x1b0 [ 323.540685][ T9148] get_futex_key+0x595/0x1540 [ 323.540709][ T9148] ? __pfx_get_futex_key+0x10/0x10 [ 323.540736][ T9148] ? futex_private_hash+0x197/0x4b0 [ 323.540760][ T9148] ? futex_private_hash+0x1a1/0x4b0 [ 323.540784][ T9148] futex_wait_multiple_setup+0x13c/0x7b0 [ 323.540808][ T9148] futex_wait_multiple+0xe6/0x480 [ 323.540827][ T9148] ? __pfx_futex_wait_multiple+0x10/0x10 [ 323.540845][ T9148] ? __kmalloc_noprof+0x242/0x510 [ 323.540866][ T9148] ? find_held_lock+0x2b/0x80 [ 323.540888][ T9148] __do_sys_futex_waitv+0x17f/0x2c0 [ 323.540914][ T9148] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 323.540943][ T9148] ? do_user_addr_fault+0x843/0x1370 [ 323.540970][ T9148] do_syscall_64+0xcd/0x4c0 [ 323.540995][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.541012][ T9148] RIP: 0033:0x7fa26498e929 [ 323.541024][ T9148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.541040][ T9148] RSP: 002b:00007fa2627f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 323.541057][ T9148] RAX: ffffffffffffffda RBX: 00007fa264bb5fa0 RCX: 00007fa26498e929 [ 323.541068][ T9148] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b00 [ 323.541079][ T9148] RBP: 00007fa264a10b39 R08: 0000000000000001 R09: 0000000000000000 [ 323.541089][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.541099][ T9148] R13: 0000000000000001 R14: 00007fa264bb5fa0 R15: 00007ffc5e8e9348 [ 323.541116][ T9148] [ 323.541309][ T9148] Kernel Offset: disabled