last executing test programs: 19.432628838s ago: executing program 2 (id=2212): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={r2, 0x0, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x2, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r3}, 0x38) syz_usb_connect(0x1, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001640)=""/233, &(0x7f00000002c0), &(0x7f0000000440), 0x5, r3}, 0x38) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 17.091596922s ago: executing program 2 (id=2224): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x14) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22b90ea3ce5b73b185c22fca5e7c73ec1623f4fedd7dd2b10c565feaf4ff98ef08fc7aa2fc53a2a2c47bc1cc1f4596c673a2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="180000000000feff100a0000000104000000000000000000"], 0x18}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x1, @mcast1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000440)="a72b69c6d380d33d4953cad33a6b053df8624622bbe8b730c805d3e414230ff1ad8bbddbc85fbf0d94f3c2f37a64cc4436a8e534c26670233e40ea09017143fd42d14831e22b30", 0x47}, {&(0x7f00000004c0)="efe301d629b67276b45220e88534386717b1e66a68824bb1781b2119f1cf0af8cc9bf38244bd98ca4b36f5c6b0c64dff9428492ddb91ec99a9160493d70e80c64a", 0x41}, {&(0x7f0000000540)="82c3e4aa4a5d4669c7ded40f64533d740b443aa0e25eb9390a30ff2c8d107d319d59022ce044afc7d5b7c2d4a2695f73dd27638a6d82b71e6bec005ac23ed200a51b9647c56037cf8e3a6696996e30aed94be3d4527e2987d8d4f73f4698b8cf24787acd6afab9d7ce6021cedce184eac327717b91fb2ca05b7b23f7467fd7832889686235740351a821c0a432e6b6067621767bbbc8510e9a85d024989147503a956ac07a29a2c4500319b4ba8b198565a63b8c75", 0xb5}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="900000000000000029000000370000003b0e000000000000072800000001080818000400000000000000020000000000000001000000000000000100000000000000c910000000000000000000000000000000010738000000010cac06000c00000000000000ff01000000000000b90e0000000000004704000000000000fdffffffffffffff03000000000000000000800000000000000029000000370000003a0c000000000000010900000000000000000007314443ad5734037b4036be986e785e985b410ae9369025bd42b92e93d47c0b9cbba47b14d7f3824c589695210a570c76b7540623a26e47ffd79949553b5c23b9353e44128c7c0efb08e1af013acf5d49b15d8deaca61b80001000000c0000000000000002900000037000000321500000000000001020000059187ef7a8d2c7a33ce2ce8c7e358726ec9100f92b803286cd42f957cbb1c3b5c77058781214613cd46b3c8e23b8b3f328228bb415d654ecba5b6ae750968dc3ec44d551d23411f898442dbebd3d427fca4c74c5bc03210dbd9be6465bb0896b9b876c7930bea7a27ea2090e672e4da8fae9b1172b2145498a1da57191637f6cb34b51202d222f5d35fe8d578e9ca05dbc5c5c204000000090100000100c20400000005200000000000000029000000040000003c0000000000000000010000000000001400000000000000290000003400000006000000000000005000000000000000290000000400000006060000000000000730000000000a090500fdffffffffffffff08000000000000000e000000000000000800000000000000fe3a00000000000000000000000024000000000000002900000032000000fc010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000028000000000000002900000001000000000000040100c20400000006000000000000001400200000000000290000003e000000cc0eab0600000000"], 0x2e8}}, {{&(0x7f0000001c80)={0xa, 0x4e20, 0x4, @private0, 0x40}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001cc0)="bb86ccfd8d025ed7c00473aba81f3beb60042be5aa8ba944b81d3c8968b88895574b7dce11eca27c1cbc86ce60fd86f51be9f5da9dbdfbd64f5a6abe59b770669cc80849436b4e1bb02687834fd5005e57ab63d2a1e5a38e7b2ec7ec52fa", 0x5e}, {&(0x7f0000001d40)="bd310fb72d1a519a9acb8879ab9e5649ad6ba3c4580aa70353de663f5fae85619c7555a26dfd2737b14d91db47c3bc982428f4e1be741d31a61874617fba00ab28f615d5e4cd40c0399fc1a533e264b7e3349e3a14f38dc0d28231b4d2763e7f7639388370831f8954006dbd6c56ec4accd466cbedb0f753f9e900c422bbef927db07d8c9b6fab41f1533f9ab5ae32553d443eb1cb05417d97385a6307c116f075b893202946ac64b5674fbd34cac4d949b246305c2f", 0xb6}, {&(0x7f0000001e00)="5de61972304a7d190753517fba3fc1743a78e6e0bd0f167992919c58a06b5f5847c601e2264236794e43a64274a94b58c347fc1d04c584c00a28d2c8ae2a0784fbaf80f39d4cba17de73ae7ba407f336375da50b70c944c2a8ac36a14eaa380c7fa6172747b0c8fcc1bf3c653262c1198ad5327414c08734be6b290156d3a0207b526da00c27cf3030a3d7f50f0120cdf6f9c157aa5fac5438e7a3b1cd7d425d685c6e", 0xa3}, {&(0x7f0000001ec0)="c169311b169c81e3b2a531f7a171ccf5fbfa1b0583eda82298086f55b07b917e8a0a25ff2aaee3c63c0f59000a9488a037511e90ce8b25ebb2941e2888a22c867dbde83474fbd2a931dad0ff34e5e2bc3b5105a6cae71d068bc81bc72ef32ba6f0c8e2", 0x63}, {&(0x7f0000001f80)="d6ec60ffbf06", 0x6}, {&(0x7f0000001fc0)="baad8b8f90f0668ad17bc04b50bd972b319f6e2e7a2fa4cebbdffd51e5fd89fe58bf5d2530c0a015", 0x28}, {&(0x7f0000002000)="14c290ba98d91e6a66bedadfa39e1d6399bed65e7c373c82bd2cd8e38ca3dab189907d02d7771c07fa28a4cb286dff64d33203d1887a838a30e8b949f3c307611ddd63f015bd0367180ee5e1070db4c5312c0df57321448436910b715650f72d927150bd728015e0d3e6994a9c733829a2b2fe06bd9fcc146d5583ba80c59534c92d67f3759bcce5245256c35c6b07e369b15c23486889927cb30c84d1aa246132758a88174e07a75a8b35d93484e07672c52eae11acfc61b4d19e550914a35cce87befb08ee9676", 0xc8}, {&(0x7f0000002100)="9fc4254a50693b492aca0e35886d25ba62c6c7a41703880c9cf86f661141f7e0ae9b55955409fe97eef45a773d118c604916ff065c1759394e5db99781", 0x3d}], 0x8, &(0x7f0000001a40)=ANY=[@ANYBLOB="14000000000000002900001400000000000000290000003e0000006cb8695c0000000014000000000000002900000043000000010100000000000001c3444519d4695cd1fa3f0aa0fc5b7995a96f03644252032e6cc500ba8a1f55492db03419e9cdb515f13eb1cb75b5042a1a150ca11051b57675be5f3f7e1302edd9022f04d020176e8c265dbb381492cfa66729a7ad134b52616e34c5cb2dc09eb742ba8e4af2924d6755b1bc7b81ce0fad56851ee8762e1f77a72fd083359003525718dd2817265fa25aaf988e64e2766c17bb6315d8818d1fcea56e9d9316423486c0679cc5a58b39b12d000000000000000000000000002e514adb7b8e67fcf2bad335b92cbf7bcbcb0d1d5a449b31287d05a979d06217607da41ee107879da79828259fa5dd3635c9547101653d6d1d58dfd52705ab6c312a1da8896b90181f38ffa1ca1d3180a39aa092ccc787e7e266f5cb23c81a0f03a98aabe026fb2d"], 0x48}}, {{&(0x7f0000002280)={0xa, 0x4e20, 0x0, @private2, 0x1}, 0x1c, &(0x7f00000033c0)=[{0x0}, {&(0x7f00000032c0)="0ed9866f6bb40f49bf595ec7c828fb1b2a1c9118fefd88a1c656cabe8fb641835501ed3cbcbe5b50c3b835a1a2658e45c8390ec6244e75fa612e54b59f1ac981e669e33e1576c1e0b610045cad94d40a28387e1e98a7ee578de9084e8f8704c86a717f4530d4aef6a8bd550ccb637715fb3fa172a65d8614d222d749ed75425c95cc05f3d77ce14faedc22a02b3e2d3569a2c4ecdfcecccf2fe3b2775f476d8c4ee53227e756afc9345b89656c58a8e60294404d01723cae8157b905a49e5d8a4f966f4bfcab4623c112fd12ed16ac8b57d16719d7b91c648810cdb360f58ae5cbd865a634b55f6e3ba3bdeed638d449f9a32e57b0175d", 0xf7}], 0x2}}], 0x5, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xb49e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$tipc(0x1e, 0x5, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$PTP_PIN_GETFUNC(r7, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x8, 0x3, 0x1}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) connect$bt_sco(r6, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 16.070327457s ago: executing program 2 (id=2229): r0 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x20000000, 0x217}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x8184c, 0x0, 0x9, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x801c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000240)=0x10) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.91482846s ago: executing program 2 (id=2231): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="b1fb590cf09f3926cc9fa0e05fc6858c8ec4ff8774df7da7797b4abd81b23b6a59d1e8fdcedb153a6791c1ae11ec3e2b764cf36668c9609fba43a25e254ea6cdb4a7a12d063ecbe36e6622a786af2e0ea3644100cf11cc218a9e3fcb2eddd72e4f020580be6cdd119abed323fbf05587af18e1a567e8d3b07db54610ca7b71b6da4faebd94cacff0e1c76e3dafced6cedc3056a4d80cb40d30203a8a52928e2e2dc409d39f9a0375da2c8b0d8e14937f7bf12df0e39699897055264e8d58d634f4f6ee5459a38e", 0xc7, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "a6f9f514a4fa888489d504e9dc383f59460818286dec9b214ce54ccaf99e75727e8c7dd0c076fc24f4d1fa891cba107e3e150286ff4a64d51949b875c8bcccdf", 0x3f}, 0x48, 0x0) r3 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000480)="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", 0x1000, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r1, r2, r3}, &(0x7f0000000400)=""/35, 0x23, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x10000, 0x8], 0x40}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 13.6069641s ago: executing program 2 (id=2243): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = syz_clone(0x4000400, &(0x7f0000000200)="cbbac9a0d9d68b66d53a7376d303f72010dc2e7e2430534f6e7efb88bc93f231c036edf6369e352c37aa3a52431d0eae31baa8f01170164b65616e162af53dba6823313a896644ea0e4cc80d6832327bc1afcbdb1c68c0f20e1f178f39f62dd0c08b1d54526ce6e3241deff92c75dfab27b3b2755e855529d90344f8f64115444b19d9260db2e12b476d98affef1a59d2d85951e605c1df3449787e5e535d095f54c6b92e24a3066d89c5c1a1053970d2091c1415d20bb", 0xb7, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000002c0)="0d2d9517b92564fc6d3dbc6243c62c574534498fc0a316253cc39ac5a20f300edcaa29826bdcc826d0d9e5ac8d8b5c14936642a24a0706ffdaf74ac720ccc2c3c8f962c829f45cb7dcb732164507df71cfe702d7a7fc26ff0828031570af35fe7f1358015f93e88e5840ab92e547c5514fb92eef99aa4c4867fd365828478cc17d") prlimit64(r2, 0x2, &(0x7f0000000180)={0x7, 0x4}, &(0x7f0000000380)) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r5) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0xffffffffffefffff, 0x400}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="000400002a000400020000000000000e000000000c000180060000008848060000000f8065003780080040000300000008001400", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="e1e9e49c766fad3aac610fc52d0f19bc49695d514547216591b81bcc4440fe861fb714022810934c370a6856040012800400fa8077913464b13d730aa170103ddfdd3fdd613d4fc327e50bac3c81cca55d368b7f5b624f25d13fdf0d80577b6edbc0a437a725a0b7e1e6ca052d62c28af183f1d5bf1d3c2d86738b7253ffa3a0fbc4198925c635193fd70946f294aa551574140168c7f193b4fcc284a26e52972db68e935513c66b56a5d5f8306ba1db4e838053000000"], 0x400}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) 12.043891645s ago: executing program 2 (id=2248): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x1000800, 0x4) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r1, &(0x7f0000012400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x4000103d1) prlimit64(r2, 0xd, &(0x7f00000000c0)={0xe54, 0x100008d}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x9) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69ecce", 0xe8}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e1532a8", 0x32}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000dc0)="e94b02", 0x3}], 0x9, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x706}}, './file0\x00'}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) 9.010577099s ago: executing program 4 (id=2256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000f060101000000000000000007000008050001000700000006000b"], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x20008000) (fail_nth: 7) 8.450883501s ago: executing program 4 (id=2260): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xb, 0x4, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x33b441, 0x0) 6.976135946s ago: executing program 3 (id=2267): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x11}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) 6.975038982s ago: executing program 1 (id=2269): brk(0x100000001) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000003800), 0x62400) fcntl$setstatus(r0, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x20000006) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x125042, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, 0x0) close(r3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x6d9d, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x62, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00', 0x101}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000070000000000000000", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) 6.046765012s ago: executing program 3 (id=2270): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x0, 0x9}, {0xd97e}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) listen(r1, 0x4) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063110700000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x902, 0x12) setreuid(0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0xffd7, 0x1) pselect6(0x40, &(0x7f0000000080)={0x100000001, 0x100000000, 0xf94, 0x8000000000000001, 0x100, 0x8000000000000000, 0xffff, 0x7fffffffffffffff}, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x5, 0x138, 0xfbf6, 0xfffffffffffff551, 0x7}, &(0x7f0000000100)={0x2, 0x8, 0xdb, 0x100000000, 0x3, 0x8, 0x4, 0x93e}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f0000000280)={[0xffffffffffffffff]}, 0x8}) 6.002295934s ago: executing program 3 (id=2271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0403", @ANYRES16], 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4, @remote, 0xd}, 0x1c) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x9, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc) 5.943985511s ago: executing program 0 (id=2272): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x1, 0x80001, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x17ba, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x2, 0x354}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$netlink(0x10, 0x3, 0x10) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000300)=""/250, 0xfa}], 0x2, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="2b20ca7696c4"], 0x8) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000400)="1939ac37792da4790bbf6c8d4e0c04a66266f60890714a09c5e3d621bea75eb3ddd6c30217120fa33d46ef95f97f4eddda168a96b70b58e735231bf25e41ea79f607545767317c6be300c4469a50673c9bd567e80206d87ff821c9fd1cadf53500753f713f1cc8ccbe1d8ecc29f497432b130a0a9d532aeb3b6c513de400b27441a1b4657d5f201b32d2e9b66e58f9425bbaeb57e0eea161a98e27b3158ceebb904152fd7ecb5583433a75d986c4ea2bd11c9915bf36ceaf7ff00313a4ceb12f1e192e7fbbda654bb7a150151ee80929860e38b861a34efa4cd7c2ea00608398b366975104e31d1b9c15eea1966a5ce6a8e9ff415c56fb89891bf05a7188f7f78dacd0b6c3cb115de11c7caab43a96d0018076017a4cdbf6ff59b9d66a51ac3da0747e920309b0356536f3f8dad4f92e9d012529dd3b528bc8b258804bf4d093694e4fdd6b0aa45a05c41f9946129d8e1a47c04889fc8dc5065dfd61cd9b7f3267242ee90aaa48acc997c50cbee6864800378f44dde09e3b6c63bed1a9a6801decf33050eefb6bb25001295cd88d3a99246eba33bab0eda10d4d9ffaa2cbd100b5739fbaf1b2eac1d91cc9484dc7ca4947933faf1e12a971b063a325ae6bb1647cafb8ea74b27b9773a41791d48cf57ad32e33bf49335aa0e7c461c4a08fc1c219c70d8a40e282873eb0d51bb7800d1c9385ed56b89cc8de41d0be9b3b1fd1edc4240ae1d6eaec5d4d55c7059470a775582f9a16577a363f9addeab3378733011d8a6559538917684ff8f74b01d039dde56aea1556388cc5a609f896d0d67e2bdecc66089d679fda1e11a1ea851b9aba8d515ab104d515d39fbd11b1b0d035b6c8c67f3a752e76998572ea4b6dd142e2985d2dbe5a55b30e8fa0b884b31c99631ec339a756ed84db815bf9b750f7835b34768ae85c46e2a1d66cf3889dc30731a079c62265361cd1a2d194394a0a076dd51c5ba1c0ca31e3e2a319e5f543fccabe87057fcce7df688e3f2fcc1a46afdd7887b9563e9e9db704c4e1fb928700361c8894b11e694f8d73d07acf1c99d11d7c051eee79e2442c156564eaa8a63b9d5ee6836b210d1f0c18b7a9445f254ba2095e3ac918a49a6b4e51696bd4469fc58f86af56f1bdc6ede1eaf2099c40b0b90f5643c6fca283633f11e3f8ab8468ec447cbbeef9735429db95ab8e002cbc2615dd0ec35e99f028f60e6b13737d1228665e071d7d1532f7ef1c67c6eb47a137363fc7f986512475f33e49549d1a0ee25617ef30c80b8a194583999258ad4b376544ec16e3a9794d8edadc44ab208aeda98454f5f200a1e765f6053a9a3b52217860c14f1ff3fc222f9f3261d4ca3c6f920405664b0877fb7aa8afd8cc7c8bfc014ecbe35f6a224ccb4c11d9729a649bd0a8d8a751a951eeb82e21ba89cc2025a5d7bc4f620c0a5cdb12ca1d9aee9987901cbf10a064a31d48deaeb1b173ef83319d95a27ecb7fd06fbbdc58b01089c752c248ae7b943b0d1065e23df7c9c173f4c346f88a4c5eadb242af93985e03ca811de083a97e29c213142d9b78b9a1fc7231d2748bc15296f99930e6aed11a814a1fbfe4ae4bf73e7dbd1400831af36b5801755f97b454cdd4dad09f4d1f48bec19b981b829db9736eeb894a24d6f8f34d412d466955d031223d196969d7d92904cc4c8a7d8284975e2fc4626046da183f043558ca08d341a576a7b60bd0f11be8f79b377d958c819419eba03217acd5ccbfc260bbff17069b332c63f566e0a9c03bf522d0e446a4a8c50461d0f6f598115a9035ee334a275aacb6bf7d91fdc09f6bf921867edead2d6f4c1527a25c6fa3ecbd80dbd24786c162c4a3f5ae3dae0a371c62895d330d109f88f69e5fee014f0c18864c194b40d2f26174c4f800ddfb89756562d9d9d17d2d11cc2c6a7b80d0a00b5a66edab3e2778ffd641b45700e3f69cf482abce6a4da3de8f0cf97423e084e8d88848b6458fe629e84722df82f10757661d5da235b8c7e36ddffed85714046294bd0601f98551e335ce8dc33c6f093026babd7eacc6cecc199626fdee07128fab236eaa7aa6c94237df726f41774721b26dfdffc35e0d3d93fdac07285aaff12189a10a80bfdd6d88bb41f903edbbf08a6b45185c8a34c58511419e45eead51d9cb4931d47e840ab0815be49f1c65508335901ab01d60e651fad0b2762161ba191482a00d4c60d020e06411ee73a952098852cdc12f703a901f80ab3ffcd61a7ccdaba9ff592178fb9102fabeaa28b369309e07036ef3adeb41e51ea5b4b7d9d7716c35b5e4484aacbac6f10c9c90b0abbe0a0bf31dd529b1493138899d78981ac0017b3e2629fb8ea095c0c6e52833646cc455c7ab722421b20895d4463800e1b27b0a5478675a7ccbe3c95974f5880b13e7c8150db2ed5cee708a366d427dbbe80c537846f7b47aebb0a7480ec7f63df61aad2838bacac652d3ddc743eca6b966c1cad49e2eac8ab2456ac8c4f2ca73bf4315796b4828925fb33547441a0159df3c773b99a49e2f5dea6aa2113a37cf5b4fe18f0443e76af65c7424a352be1b8c09d1c026c517f121ebeb9a6ebc9838aea1043526370003388d39ddae36090d08a05969f45cd430f7ff2a6b7af2f8eb60135052c45e8249f1869a0c193a5da29d7ac562af25b22a7c3ea5bd10aed95f55501a6324305d724e173695f859108c7e0590cc55e1791f5f86df43c0badb2278f40e8cddae209aee8e9710d2feaf807eb80427ba0de6e91ab2e5915dbb9d62bb8c4d88818a3386e7466399f9804feef9be26f08d0c892e1046706d2c0a37ff66b676a11c2487c0735fd387cdf79f7f85ad603c0f62a311e83256cfcf9b52c41708f7829b829b8c898b9d7ecd27878879c03c9acb4f7ef72022efa5507441bb175ee93e0965be34555ad972b4a0e55b3e06ca8759477ac6dd669eeb6bc5052b188bcd2fcd6458149d2814454a5fde22dab921c31294c0bb45319026999ec0755321fce39ebae2e57195441818ccccc43591e8ced6cf0e04a5d625b77269be9332b72be2c39676acfb2fb5c71ecbc7ede2f55d66c3f5513ed66005a93e4a6399de4cc7bf3d9072999f0ac6dc19db36a8ce22f368ad56a9b19ce94d42388667df1e85bb731b67f828ce38589a4936920fcff04131d0cc36ee4dd9520029aa2b0ef804b144c5b7bdd26049cf0ee6c525f801e2f59dca17b327563426b9b0005b0c43db740bae3383561a7e069c08cf7d053f225d70eaf5fe666f52e5127455339a7042d54a4db8ab6c67aa595de8ce302ac76ad72f35bedfa9e4fda3e739abdddc75eb2f0342240dcd9abb2de1d7117f6cede35f6b5d79ee0b5a08f0d93815d29d65ef338d0c3b26206f7a79d5419bf7a0b1ca5c96883ce93fcfdc375653509c28141621ed11be39056019fac90a30854a9d037852a8da889798e6ca2383b704768fe72a849ec4f989cb103eb4df47576b3938b5bb1b11c06998ca7541cf12c697bc1e74b8c630a09b3737f5677c9628045ae3e86b98cd92756673f569482296e75fe95466612e3f8505836e4a5a3a37aa1489d107253fd61d593f8c90c8c1e89eec106ed24ceab1a1b6ee44f8b75f80d9c448022e18951d9d09ff106457a53138918caadffa1d7ce6add3ecdf92c4442c5996326257d6e7bcb3d81885681fce96e13e0bf353bc7f5309b88570ded82b6389d6283e65e635f6fff08afc7c2ad59675e566fbedf9057796f887be00bf9e4c5da28afedc8a3246425f1fc94a83570fff9a0965fb46703f9aa94eecf639abdb2edf9e7a358c84166bff05658f0f5c9ed66a3345b600ee26bfad2c148262dade2fb0aa3d185f803ebb5b37d753a0bcab8c361b5476fdf732fedde28e0e9bd6fc29a5ec4b87d53546725def68d13b295bbc85c6ab020e7a8da41b3b1434101079ddbd50175cb26c16e60b2dad95bdd316f6db490e9798d876271f1ca56cff69b6c0df781c29f59c4e8a04307d7f1f3f9f5f7fbb1e9611bdebd66199599beab50029d3bd7bac310cc9c000d4168abed23d310bdaf81a15a9470582e6fe4b8d18cf78d6dcd60b07e4d5872f71357039e46f3efee1d672e93c4f75058c92cbf93015b9d25550f0ec6074ca7b0afb13335a0e8f33ecd7b687f799f19cbc08977aae1e79d6c93e24dbf0543d3d908898d41521c65ee2e09e42591ed198e0dd770e7b4a8136d691bea40c492eb086642955ff3fcd623eb7793f7fefb9343078724a416e76e9cca490603dc70e363336dfaac3eb124a92fe09c1da965f6c27f9995685c65f34d76e858aa613746f3fbfcc39869f600842eedc553b372624bf0cf5ec290c4eac976420580271409d61ebb7339725d535983f4cca91d485806bad14a724998347eb54eb2887245fcbcbe27c32d215ea7d3a1ea9ebb7114d2f4b2e50c168e7c602120037f03202879113afc0342b04dfe7a928c1bca89bc4cc282895f113a8b7412cfa6c8f87464f8569e438fd31c1a163b2506e6cd30d48b65b9dbf585fb3a4c19643ae9d44aa72092224286611905d85ca1dfba32ef90dc3ad6e60c3389ef7ee9c48c7d439580f5c955c074da5f12fe731c48ac41ca241b66e8624c7a25de258611a42ab86c24fd9fd7afcca5941097f4fc8ea019fd7705d222a6f8b86f2cab1c5c78a8ed8459565d2b608f5f45b31927a8d6f74b066c0a083c121a617b6500b465b4e5d94f6925dfc12adb298b6426a000d62188a014e232c6f878e2fc0cbc28020158210033174e83ce83d03e11f49f3ed6366b52c409ae0fff28cabb0d23a9596d015029d1d7adce0ec23d75fc21011aa9910665a22a3377faf29ebece45803d31e5d0b339ff449a748d4917328735fc20c2a7a5da8e9de05ceedfe5b955fde5e817a36930e1ccce55b929591be7fbab05857e5492d58086db2403589663a5cd524e079b6297ef81ea84532769cd9c50f320424ae5e9bef605637635ec3853821b1eb39e61e4cb182b97ed63190ce2f17a23945775e0be195f5aae8d318d3be73a3da55dd1400e5baff85ad4c50ad91640ae4adaade75424ac4843f7691082338327bbede174705ad1620e6e5198fc3c09acd4d4d2ac3d66f5def200e9f0e0e906da0df993782590b1a4b79410b5dc08ae2ef187070586e82926e046216f6b878780979299b7f59ac39792c0cb9152971eb0b4d28c2dc86d1cd1530250b5a7532029b81a6f7838fefb2474fc0217c98509daf3190b30ba25d4f6c6e14bb14c74bea934eda2973cb5b37a102e8d8cf7e874a388c83c2594a1ca6c4795c93d180f1a18b596cdb4008c8a1de44157110621d91cd7b3d8252a78e10bbeeeab8c9d4329fb94a7433c87f275e88f905c276d5a78e84f8819c79e971db19317bf32712ddb5e6e3b781803009fb063b4659e2f0b916d2d363a0c16f467e3724a53bedf65939433cbc0773d24a986a756f5ec2cdaefd4e1e009585cd2975b97dc83d7aa9056b218f9c27283ed239b730298eefd7f8910d7750f75aadc996a03e44f2d1254b18ba35add5430f767787ca36f4908428ed286f3aca1e417a52502f7d18007077ce8002e086beef348465cc728f0c67d74a8d9dd0ca24f3177ee1071a83a19dadd2aeb363059c478b9b534d8d5eae022ab2a0bf8f740973bee8e351d5226d654e9d4cd6a9fd9f3937407d233c6da57b190108e57c1012bfb7f28cca286d74e3817b9d011b32cbfaef63a12f175d188ce05c1a16f25d12cd4e155ce38f64a0d45622c418069d695f450371aaf0faadd86b349b30101089eee3493190a280b5b7159a8f88fde199df17", 0x1000}, {&(0x7f0000001400)="c17e01fd285d5ef29b57f6d42982fbc839f496e47e9936353d4c460887a74bea0e976c924b3eb199eea809bd347d228b48fc4c627ad2e7ea8b50dc15ac4e43ed8ff18435302fc6651423188dd4fbb7fd5c3f18c9b6a3ab078681cfcc579b3935480cdbc00b441bce2ca35d2e4d23a4746b819d9dd4772a27d552232f0d63f7231378442b7f9dea1e24bc731edaf9a0b5638416277a342cc95a0eceb6ac3815ef0aeb4bde515aea7598868471064c", 0xae}, {&(0x7f0000000280)="96e2d87db583afdc00a00272fe414deba505c48131ad2db426d429495bd2b5ea2c25647773aaf43f65296d05ef1844", 0x2f}], 0x3) 5.919574558s ago: executing program 3 (id=2273): getgroups(0xfffffffffffffdf8, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0xfffffffffffffffc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0xf9, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000514010028bd7000fedbdf25080007"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_open_procfs(r1, &(0x7f0000000440)='net/icmp6\x00') syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x3}]}}}]}, 0x48}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x33, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}, "77df3b40ee"}}}}}}, 0x0) 4.787089364s ago: executing program 4 (id=2274): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r1 = epoll_create1(0x80000) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) 4.786264355s ago: executing program 3 (id=2275): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) syz_emit_ethernet(0xa1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000408900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x68, 0xcc, 0x8e, 0x20, 0x148f, 0x2070, 0xa6af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4, 0x1}}]}}]}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x3b) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6db}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.729630178s ago: executing program 0 (id=2276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r3, 0x0, r5, 0x0, 0xfdef, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000002c000480050003000100000005000300000000000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000080)={'geneve1\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) tkill(r10, 0x41) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r12, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000400)=0x3, 0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000023c0), r14) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r14, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000380)={0x2c, r15, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004400}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0001251e0008000300", @ANYRES32=r13, @ANYBLOB="2e000600000000000000000000000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r17, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8884) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x40d, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x2}]}}}]}, 0x54}}, 0x8080) 4.591457218s ago: executing program 4 (id=2277): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r1, 0xb}}, 0x10) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 4.35274881s ago: executing program 1 (id=2278): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0x1f, 0x0, 0x0, @empty}}, 0x0, 0x60, 0xfffffff5, 0x0, 0xb3550aa4ba878396}, 0x9c) 3.738389855s ago: executing program 1 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x48}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x111}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) 3.68537946s ago: executing program 0 (id=2280): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = getpid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000380)={0x11}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x3000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r7, 0x1}}, 0xe657bbfd39b558be) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000005c0)=ANY=[], 0x20000) 3.636579804s ago: executing program 1 (id=2281): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaac64) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000080000"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) dup(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x30) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 3.368939334s ago: executing program 1 (id=2282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018005d8d000000000000000002000000000000050000000005001b0038000000141afbdec20008800c0001800600010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3d6e8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000240)={0xfffffff7, 0xa}) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 2.532756956s ago: executing program 0 (id=2283): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x545002, 0x0) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x7a, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ee222}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x10001, 0x0, 0xa, 0xfb5fe, 0x1bef42}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x647, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x1000, 0x0) utime(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x4, 0x7fffffffffffffff}) ioperm(0x9, 0x1200000000000000, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.368609289s ago: executing program 4 (id=2284): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) splice(r2, &(0x7f00000000c0)=0xffffffffffffffff, r7, &(0x7f0000000100)=0x2, 0x288, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0x1c0}], 0x1}}], 0x1, 0x81) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r8, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)}}], 0x2, 0x8090) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)={0x6, 0x0, 0x80000000, 0x0, 0x40004}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 2.359719427s ago: executing program 0 (id=2285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000080)) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1001) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) r8 = syz_open_procfs(0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f00000000c0)=0x7f, 0x8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 166.376328ms ago: executing program 3 (id=2286): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r1 = open(&(0x7f0000000380)='./file0\x00', 0x8000, 0x2) openat$cgroup_int(r1, &(0x7f00000003c0)='blkio.reset_stats\x00', 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xd7e, 0x29b, 0x4, 0x4010, r3, 0x81, '\x00', 0x0, r0, 0x5, 0x5, 0x5, 0xa, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x5, 0xfffff02c}, {0x6}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x5, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x8, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x3ea, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x7, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x4, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x1, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x200005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x3, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x3c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x3ff) mq_notify(0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 86.342306ms ago: executing program 0 (id=2287): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd6cf00b0d8000000010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000600)={0xffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 85.319832ms ago: executing program 1 (id=2288): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) r2 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0xd, 0x4, 0x9}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1, 0x0, 0x1}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d24030013dffe9bdc3b44d2cd55005a90f57f07703aeff0f64ebbee07962c2211b44e65d76641cb01f552f436dd", 0x31}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0xffffffffffffff3f, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPRESSIONS={0x0, 0x12, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @byteorder={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x0, 0x1, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_OP, @NFTA_BYTEORDER_SIZE={0x0, 0x5, 0x1, 0x0, 0xf1}, @NFTA_BYTEORDER_SREG={0xfffffffc, 0x1, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_OP={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x0, 0x5, 0x1, 0x0, 0xa6}]}}}, {0x0, 0x1, 0x0, 0x1, @limit={{}, @void}}]}, @NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "9f0bb67f328cb5447c1c3c8600326452c017b0aeeed6a10e180e22282ecf88d83a0d6fce11ff6c2e440049980332d27dbd997d9d400a175c53531f5a964b570621a0fe80f9fd9b611e8abb73714c419635508414515837bfa8f7a53f444f423498f7f3873ff67b0a7952bbfda5cde656a17b4d416e25ce39012a15eb6b33d3bc673e48bee7d65ccdb073c68b84bcc9330c615747c91e9c5eecf5b9990a41b5a713d48cfd6ff676d4c6ee27"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x111}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) 0s ago: executing program 4 (id=2289): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_ID={0x1}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) kernel console output (not intermixed with test programs): SerialNumber=3 [ 534.802541][T11878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 534.815822][T11877] usb 5-1: Product: syz [ 534.821138][T11877] usb 5-1: Manufacturer: syz [ 534.825840][T11878] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 534.834938][T11877] usb 5-1: SerialNumber: syz [ 534.844760][T11877] usb 5-1: config 0 descriptor?? [ 534.850485][T11878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.861653][T11877] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 534.876193][T11878] usb 3-1: config 0 descriptor?? [ 534.939187][T11875] m920x_read = error: -19 [ 534.943652][T11875] dvb-usb: error -19 while querying for an remote control event. [ 535.768698][T12590] __vm_enough_memory: pid: 12590, comm: syz.3.1862, bytes: 4503599627366400 not enough memory for the allocation [ 535.955817][T11875] m920x_read = error: -19 [ 535.960358][T11875] dvb-usb: error -19 while querying for an remote control event. [ 536.139264][ T972] m920x_read = error: -19 [ 536.143656][ T972] dvb-usb: error -19 while querying for an remote control event. [ 536.297073][T11878] usb 3-1: string descriptor 0 read error: -71 [ 536.302618][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 536.317781][T11878] uclogic 0003:5543:0045.000A: failed retrieving string descriptor #200: -71 [ 536.326909][T11875] m920x_read = error: -19 [ 536.342035][T11875] dvb-usb: error -19 while querying for an remote control event. [ 536.361176][T11878] uclogic 0003:5543:0045.000A: failed retrieving pen parameters: -71 [ 536.634704][ T972] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 537.264526][T11877] gspca_spca1528: reg_w err -110 [ 537.279295][T11875] m920x_read = error: -19 [ 537.283685][T11875] dvb-usb: error -19 while querying for an remote control event. [ 537.291594][T11877] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 537.306630][T11878] uclogic 0003:5543:0045.000A: failed probing pen v2 parameters: -71 [ 537.328278][T11878] uclogic 0003:5543:0045.000A: failed probing parameters: -71 [ 537.339182][T11878] uclogic 0003:5543:0045.000A: probe with driver uclogic failed with error -71 [ 537.357193][T11878] usb 3-1: USB disconnect, device number 53 [ 537.479414][T11877] m920x_read = error: -19 [ 537.483769][T11877] dvb-usb: error -19 while querying for an remote control event. [ 537.614494][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.719312][T11878] m920x_read = error: -19 [ 537.737280][T11878] dvb-usb: error -19 while querying for an remote control event. [ 537.796727][T12616] syz.2.1872: attempt to access beyond end of device [ 537.796727][T12616] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 537.811909][T12616] XFS (nbd2): SB validate failed with error -5. [ 537.929230][T11878] m920x_read = error: -19 [ 538.642162][T11878] dvb-usb: error -19 while querying for an remote control event. [ 538.669065][ T5865] usb 5-1: USB disconnect, device number 85 [ 538.852405][T11878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.936830][T11877] m920x_read = error: -19 [ 538.944250][ T6228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.961219][T11877] dvb-usb: error -19 while querying for an remote control event. [ 539.104468][T12637] 9pnet: p9_errstr2errno: server reported unknown error [ 539.119231][T11878] m920x_read = error: -19 [ 539.651465][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 539.827856][T11878] dvb-usb: error -19 while querying for an remote control event. [ 539.843346][T12640] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1876'. [ 540.088426][T11877] m920x_read = error: -19 [ 540.386197][T11877] dvb-usb: error -19 while querying for an remote control event. [ 540.557627][ T29] audit: type=1400 audit(1739089379.647:754): avc: denied { bind } for pid=12641 comm="syz.2.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 541.221318][T11877] m920x_read = error: -19 [ 541.225672][T11877] dvb-usb: error -19 while querying for an remote control event. [ 541.309698][T12653] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1880'. [ 541.318844][T12653] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1880'. [ 541.389202][T11877] m920x_read = error: -19 [ 541.393565][T11877] dvb-usb: error -19 while querying for an remote control event. [ 541.409144][ T29] audit: type=1400 audit(1739089380.497:755): avc: denied { setopt } for pid=12654 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 541.433706][T12658] FAULT_INJECTION: forcing a failure. [ 541.433706][T12658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.448020][T12658] CPU: 0 UID: 0 PID: 12658 Comm: syz.1.1884 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 541.448042][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 541.448051][T12658] Call Trace: [ 541.448056][T12658] [ 541.448062][T12658] dump_stack_lvl+0x16c/0x1f0 [ 541.448085][T12658] should_fail_ex+0x50a/0x650 [ 541.448112][T12658] _copy_from_iter+0x2a1/0x1560 [ 541.448139][T12658] ? trace_lock_acquire+0x14e/0x1f0 [ 541.448159][T12658] ? __alloc_skb+0x1fe/0x380 [ 541.448184][T12658] ? __pfx__copy_from_iter+0x10/0x10 [ 541.448208][T12658] ? __virt_addr_valid+0x1a4/0x590 [ 541.448230][T12658] ? __virt_addr_valid+0x5e/0x590 [ 541.448246][T12658] ? __phys_addr_symbol+0x30/0x80 [ 541.448262][T12658] ? __check_object_size+0x488/0x710 [ 541.448284][T12658] netlink_sendmsg+0x813/0xd70 [ 541.448308][T12658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.448335][T12658] ____sys_sendmsg+0xaaf/0xc90 [ 541.448361][T12658] ? copy_msghdr_from_user+0x10b/0x160 [ 541.448382][T12658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.448419][T12658] ___sys_sendmsg+0x135/0x1e0 [ 541.448441][T12658] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.448471][T12658] ? __pfx_lock_release+0x10/0x10 [ 541.448492][T12658] ? trace_lock_acquire+0x14e/0x1f0 [ 541.448518][T12658] ? __fget_files+0x206/0x3a0 [ 541.448539][T12658] __sys_sendmsg+0x16e/0x220 [ 541.448559][T12658] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.448596][T12658] do_syscall_64+0xcd/0x250 [ 541.448615][T12658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.448636][T12658] RIP: 0033:0x7ff76658cde9 [ 541.448649][T12658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.448664][T12658] RSP: 002b:00007ff76737c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.448679][T12658] RAX: ffffffffffffffda RBX: 00007ff7667a5fa0 RCX: 00007ff76658cde9 [ 541.448689][T12658] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 541.448699][T12658] RBP: 00007ff76737c090 R08: 0000000000000000 R09: 0000000000000000 [ 541.448708][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.448716][T12658] R13: 0000000000000000 R14: 00007ff7667a5fa0 R15: 00007ffc4d5e4c08 [ 541.448737][T12658] [ 541.801694][T11877] m920x_read = error: -19 [ 541.806060][T11877] dvb-usb: error -19 while querying for an remote control event. [ 542.099144][T11878] m920x_read = error: -19 [ 542.145823][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 542.151885][T11878] dvb-usb: error -19 while querying for an remote control event. [ 542.168623][T12662] SELinux: failed to load policy [ 542.314512][T12673] lo speed is unknown, defaulting to 1000 [ 542.330094][T11878] m920x_read = error: -19 [ 542.334447][T11878] dvb-usb: error -19 while querying for an remote control event. [ 542.352379][T12673] »»»»»» speed is unknown, defaulting to 1000 [ 542.352882][T12672] lo speed is unknown, defaulting to 1000 [ 542.507103][T12673] »»»»»» speed is unknown, defaulting to 1000 [ 542.515046][T12672] »»»»»» speed is unknown, defaulting to 1000 [ 542.583540][T12682] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1886'. [ 542.596689][T12682] overlay: filesystem on ./bus not supported as upperdir [ 542.604173][ T5865] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 542.771473][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 542.796139][ T5865] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 542.926697][ T5865] usb 1-1: config 0 has no interface number 0 [ 542.984689][T11878] m920x_read = error: -19 [ 542.989473][T11878] dvb-usb: error -19 while querying for an remote control event. [ 543.004200][ T5865] usb 1-1: config 0 interface 184 has no altsetting 0 [ 543.025754][ T5865] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 543.051223][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.067300][ T5865] usb 1-1: Product: syz [ 543.083114][ T5865] usb 1-1: Manufacturer: syz [ 543.092950][ T5865] usb 1-1: SerialNumber: syz [ 543.108490][ T5865] usb 1-1: config 0 descriptor?? [ 543.122601][ T5865] smsc75xx v1.0.0 [ 543.271285][T11878] m920x_read = error: -19 [ 543.275997][T11878] dvb-usb: error -19 while querying for an remote control event. [ 544.069036][ T5865] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 544.123480][T11879] m920x_read = error: -19 [ 544.127837][T11879] dvb-usb: error -19 while querying for an remote control event. [ 544.227987][ T5865] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 544.242057][T12672] »»»»»» speed is unknown, defaulting to 1000 [ 544.289232][T11879] m920x_read = error: -19 [ 544.301599][T11879] dvb-usb: error -19 while querying for an remote control event. [ 544.317342][T12703] FAULT_INJECTION: forcing a failure. [ 544.317342][T12703] name failslab, interval 1, probability 0, space 0, times 0 [ 544.336583][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.4.1894 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 544.336604][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 544.336613][T12703] Call Trace: [ 544.336618][T12703] [ 544.336625][T12703] dump_stack_lvl+0x16c/0x1f0 [ 544.336649][T12703] should_fail_ex+0x50a/0x650 [ 544.336674][T12703] ? fs_reclaim_acquire+0xae/0x150 [ 544.336698][T12703] ? kernfs_fop_write_iter+0x223/0x500 [ 544.336717][T12703] should_failslab+0xc2/0x120 [ 544.336737][T12703] __kmalloc_noprof+0xcb/0x510 [ 544.336752][T12703] ? rcu_is_watching+0x12/0xc0 [ 544.336776][T12703] kernfs_fop_write_iter+0x223/0x500 [ 544.336799][T12703] vfs_write+0x5ae/0x1150 [ 544.336824][T12703] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 544.336844][T12703] ? __pfx___mutex_lock+0x10/0x10 [ 544.336862][T12703] ? __pfx_vfs_write+0x10/0x10 [ 544.336904][T12703] ksys_write+0x12b/0x250 [ 544.336928][T12703] ? __pfx_ksys_write+0x10/0x10 [ 544.336959][T12703] do_syscall_64+0xcd/0x250 [ 544.336979][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.337001][T12703] RIP: 0033:0x7f9d3778cde9 [ 544.337014][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.337029][T12703] RSP: 002b:00007f9d355d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.337044][T12703] RAX: ffffffffffffffda RBX: 00007f9d379a6080 RCX: 00007f9d3778cde9 [ 544.337055][T12703] RDX: 0000000000000002 RSI: 0000400000000000 RDI: 0000000000000005 [ 544.337064][T12703] RBP: 00007f9d355d5090 R08: 0000000000000000 R09: 0000000000000000 [ 544.337073][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.337082][T12703] R13: 0000000000000000 R14: 00007f9d379a6080 R15: 00007ffe04ee8b98 [ 544.337103][T12703] [ 544.525968][T11879] m920x_read = error: -19 [ 544.530361][T11879] dvb-usb: error -19 while querying for an remote control event. [ 544.689188][T11879] m920x_read = error: -19 [ 544.693553][T11879] dvb-usb: error -19 while querying for an remote control event. [ 544.740997][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.859224][T11879] m920x_read = error: -19 [ 544.863621][T11879] dvb-usb: error -19 while querying for an remote control event. [ 545.879268][T11879] m920x_read = error: -19 [ 545.896310][T11879] dvb-usb: error -19 while querying for an remote control event. [ 545.964830][T12712] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 546.019997][ T6231] Bluetooth: (null): Invalid header checksum [ 546.076454][ T6231] Bluetooth: (null): Invalid header checksum [ 546.099292][ T972] m920x_read = error: -19 [ 546.108625][ T972] dvb-usb: error -19 while querying for an remote control event. [ 546.173426][ T151] Bluetooth: (null): Invalid header checksum [ 546.288533][ T6235] Bluetooth: (null): Invalid header checksum [ 546.318262][ T5865] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 546.329193][ T5865] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 546.329301][T11879] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 546.338726][ T5865] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 546.338839][ T5865] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 546.346439][T11878] m920x_read = error: -19 [ 546.361885][ T5865] usb 1-1: USB disconnect, device number 57 [ 546.394466][ T6235] Bluetooth: (null): Invalid header checksum [ 546.417200][T11878] dvb-usb: error -19 while querying for an remote control event. [ 546.522324][T12720] syz.4.1899: attempt to access beyond end of device [ 546.522324][T12720] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 546.600148][T11879] usb 3-1: Using ep0 maxpacket: 8 [ 546.661547][ T151] Bluetooth: (null): Invalid header checksum [ 546.671726][ T6231] Bluetooth: (null): Invalid header checksum [ 546.729197][T11879] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 546.744423][ T6231] Bluetooth: (null): Invalid header checksum [ 546.871800][T11878] m920x_read = error: -19 [ 546.876149][T11878] dvb-usb: error -19 while querying for an remote control event. [ 546.884740][T11879] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.890593][ T6231] Bluetooth: (null): Invalid header checksum [ 546.903346][T11879] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 546.916217][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'. [ 546.949213][T11879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 546.968476][T11879] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice=ff.fb [ 546.978111][ T151] Bluetooth: (null): Invalid header checksum [ 547.030902][T11879] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 547.047589][T11879] usb 3-1: Product: syz [ 547.061460][T11879] usb 3-1: Manufacturer: syz [ 547.077292][T11879] usb 3-1: config 0 descriptor?? [ 547.088743][ T6229] Bluetooth: (null): Invalid header checksum [ 547.099229][T11878] m920x_read = error: -19 [ 547.103606][T11878] dvb-usb: error -19 while querying for an remote control event. [ 547.126215][ T5865] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 547.136420][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 547.189631][ T6231] Bluetooth: (null): Invalid header checksum [ 547.279197][T11878] m920x_read = error: -19 [ 547.283611][T11878] dvb-usb: error -19 while querying for an remote control event. [ 547.291167][T12734] lo speed is unknown, defaulting to 1000 [ 547.298717][T12734] »»»»»» speed is unknown, defaulting to 1000 [ 547.302874][ T972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.317245][ T151] Bluetooth: (null): Invalid header checksum [ 547.340711][T11879] usbhid 3-1:0.0: can't add hid device: -71 [ 547.349533][T11879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 547.363414][T11879] usb 3-1: USB disconnect, device number 54 [ 547.459633][ T5865] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 547.570494][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.753586][ T5865] usb 2-1: config 0 descriptor?? [ 547.826310][T12726] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 547.865851][T11878] m920x_read = error: -19 [ 547.870272][T11878] dvb-usb: error -19 while querying for an remote control event. [ 547.882134][T12734] »»»»»» speed is unknown, defaulting to 1000 [ 547.969327][ T5827] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 548.029360][ T972] m920x_read = error: -19 [ 548.033880][ T972] dvb-usb: error -19 while querying for an remote control event. [ 548.209668][T11879] m920x_read = error: -19 [ 548.214049][T11879] dvb-usb: error -19 while querying for an remote control event. [ 548.259179][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 548.290782][ T5827] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 548.536138][T12749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48671 sclass=netlink_route_socket pid=12749 comm=syz.4.1909 [ 548.644273][ T5827] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.697519][T11879] m920x_read = error: -19 [ 548.708971][T11879] dvb-usb: error -19 while querying for an remote control event. [ 548.724563][ T5827] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.737875][ T5827] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.741015][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.749044][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.762602][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.780049][ T5827] usb 1-1: Product: syz [ 548.787479][ T5827] usb 1-1: Manufacturer: syz [ 548.793210][ T53] Bluetooth: hci1: unexpected event for opcode 0x204e [ 548.800730][ T5827] usb 1-1: SerialNumber: syz [ 548.869223][T11879] m920x_read = error: -19 [ 548.875913][T11879] dvb-usb: error -19 while querying for an remote control event. [ 549.018905][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 549.035613][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 549.045207][ T5827] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 549.049739][T11879] m920x_read = error: -19 [ 549.059583][T11878] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 549.059927][ T5865] usb 2-1: USB disconnect, device number 54 [ 549.071632][T11879] dvb-usb: error -19 while querying for an remote control event. [ 549.081357][ T5827] usb 1-1: USB disconnect, device number 58 [ 549.281164][T11879] m920x_read = error: -19 [ 549.285533][T11879] dvb-usb: error -19 while querying for an remote control event. [ 549.293553][T11878] usb 3-1: Using ep0 maxpacket: 8 [ 549.875380][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.893874][T11878] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 549.909275][T11878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.917455][T11878] usb 3-1: Product: syz [ 549.922253][T11878] usb 3-1: Manufacturer: syz [ 549.926853][T11878] usb 3-1: SerialNumber: syz [ 549.960511][T11878] usb 3-1: config 0 descriptor?? [ 550.059635][T11879] m920x_read = error: -19 [ 550.069119][T11879] dvb-usb: error -19 while querying for an remote control event. [ 550.095250][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 550.185986][T11878] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 550.213652][T12771] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1918'. [ 550.228487][ T29] audit: type=1400 audit(1739089389.317:756): avc: denied { ioctl } for pid=12769 comm="syz.1.1918" path="socket:[36366]" dev="sockfs" ino=36366 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 550.255264][T11875] m920x_read = error: -19 [ 550.264915][T11875] dvb-usb: error -19 while querying for an remote control event. [ 550.389945][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.532734][T12777] usb usb9: usbfs: process 12777 (syz.0.1919) did not claim interface 0 before use [ 551.186387][T11877] m920x_read = error: -19 [ 551.234477][ T972] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 551.368758][T11877] dvb-usb: error -19 while querying for an remote control event. [ 551.529167][ T972] usb 5-1: Using ep0 maxpacket: 8 [ 551.536382][ T53] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 551.543429][T11875] m920x_read = error: -19 [ 551.833287][T11875] dvb-usb: error -19 while querying for an remote control event. [ 551.857511][ T972] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 551.887847][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.930714][ T972] usb 5-1: Product: syz [ 551.941732][ T972] usb 5-1: Manufacturer: syz [ 552.009156][T11869] m920x_read = error: -19 [ 552.039898][ T972] usb 5-1: SerialNumber: syz [ 552.045309][T11869] dvb-usb: error -19 while querying for an remote control event. [ 552.255502][ T972] usb 5-1: config 0 descriptor?? [ 552.419251][T11879] m920x_read = error: -19 [ 552.423674][T11879] dvb-usb: error -19 while querying for an remote control event. [ 552.464482][ T972] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 552.509309][T11875] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 552.599728][T11879] m920x_read = error: -19 [ 552.604528][T11879] dvb-usb: error -19 while querying for an remote control event. [ 552.689170][T11875] usb 2-1: Using ep0 maxpacket: 16 [ 552.697822][T11875] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 552.709693][T11875] usb 2-1: config 0 has no interface number 0 [ 552.716334][T11875] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 552.728344][T11878] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 552.741167][T11875] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fe.f5 [ 552.755884][T11878] usb 3-1: USB disconnect, device number 55 [ 552.761918][T11875] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 552.772766][T11879] m920x_read = error: -19 [ 552.777986][T11879] dvb-usb: error -19 while querying for an remote control event. [ 552.786740][T11875] usb 2-1: Product: syz [ 552.791017][T11875] usb 2-1: SerialNumber: syz [ 552.797014][T11875] usb 2-1: config 0 descriptor?? [ 552.959287][T11878] m920x_read = error: -19 [ 552.963677][T11878] dvb-usb: error -19 while querying for an remote control event. [ 553.032017][T11875] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 553.039266][T11875] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 553.054124][T11875] usb 2-1: USB disconnect, device number 55 [ 553.139242][T11878] m920x_read = error: -19 [ 553.150930][T11878] dvb-usb: error -19 while querying for an remote control event. [ 554.079684][T11875] m920x_read = error: -19 [ 554.084035][T11875] dvb-usb: error -19 while querying for an remote control event. [ 554.138616][T12799] overlayfs: failed to clone upperpath [ 554.279269][T11878] m920x_read = error: -19 [ 554.296325][T11878] dvb-usb: error -19 while querying for an remote control event. [ 554.425806][ T51] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 554.489260][T11878] m920x_read = error: -19 [ 554.494509][T11878] dvb-usb: error -19 while querying for an remote control event. [ 554.589684][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 554.598770][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.612734][ T51] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 554.621960][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.630049][ T51] usb 3-1: Product: syz [ 554.634307][ T51] usb 3-1: Manufacturer: syz [ 554.638946][ T51] usb 3-1: SerialNumber: syz [ 554.671944][ T51] usb 3-1: config 0 descriptor?? [ 554.680146][T11878] m920x_read = error: -19 [ 554.690341][T11878] dvb-usb: error -19 while querying for an remote control event. [ 554.789238][ T5865] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 554.950956][ T5865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 554.959063][T11878] m920x_read = error: -19 [ 554.964610][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.964920][T11878] dvb-usb: error -19 while querying for an remote control event. [ 554.983704][T12804] block nbd0: shutting down sockets [ 554.983899][ T972] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 555.008227][ T972] usb 5-1: USB disconnect, device number 86 [ 555.012845][T12822] lo speed is unknown, defaulting to 1000 [ 555.182066][ T5865] usb 2-1: config 0 descriptor?? [ 555.217998][T12822] »»»»»» speed is unknown, defaulting to 1000 [ 555.424362][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.520341][T11878] m920x_read = error: -19 [ 555.524701][T11878] dvb-usb: error -19 while querying for an remote control event. [ 555.571752][ T53] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 555.580540][ T53] Bluetooth: hci4: Injecting HCI hardware error event [ 555.589946][ T5829] Bluetooth: hci4: hardware error 0x00 [ 555.689443][T11878] m920x_read = error: -19 [ 555.702435][T11878] dvb-usb: error -19 while querying for an remote control event. [ 555.899155][T11878] m920x_read = error: -19 [ 555.908603][ T5865] ath6kl: Failed to submit usb control message: -71 [ 555.915731][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 555.926893][ T5865] ath6kl: Unable to send get target info: -71 [ 555.928592][T11878] dvb-usb: error -19 while querying for an remote control event. [ 555.934922][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 555.948323][ T5865] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 556.646947][ T5865] usb 2-1: USB disconnect, device number 56 [ 556.850511][T11878] m920x_read = error: -19 [ 556.854916][T11878] dvb-usb: error -19 while querying for an remote control event. [ 556.925991][T12822] »»»»»» speed is unknown, defaulting to 1000 [ 557.079429][T11878] m920x_read = error: -19 [ 557.083906][T11878] dvb-usb: error -19 while querying for an remote control event. [ 557.260368][T11878] m920x_read = error: -19 [ 557.270383][T11878] dvb-usb: error -19 while querying for an remote control event. [ 557.520678][T11878] m920x_read = error: -19 [ 557.525042][T11878] dvb-usb: error -19 while querying for an remote control event. [ 557.649383][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 557.689234][T11878] m920x_read = error: -19 [ 557.709544][T11878] dvb-usb: error -19 while querying for an remote control event. [ 557.794973][T12860] CIFS: Unable to determine destination address [ 558.429237][T11878] m920x_read = error: -19 [ 558.433608][T11878] dvb-usb: error -19 while querying for an remote control event. [ 558.507374][ T51] usb 3-1: USB disconnect, device number 56 [ 558.871987][ T5865] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 558.895160][T11878] m920x_read = error: -19 [ 558.899607][T11878] dvb-usb: error -19 while querying for an remote control event. [ 559.123415][T11878] m920x_read = error: -19 [ 559.127803][T11878] dvb-usb: error -19 while querying for an remote control event. [ 559.289304][T11878] m920x_read = error: -19 [ 559.293668][T11878] dvb-usb: error -19 while querying for an remote control event. [ 559.409232][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 559.423944][ T5865] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.876862][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.891961][ T5865] usb 5-1: Product: syz [ 559.896217][ T5865] usb 5-1: Manufacturer: syz [ 559.900919][ T5865] usb 5-1: SerialNumber: syz [ 559.909492][ T29] audit: type=1326 audit(1739089398.537:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 559.918676][T11878] m920x_read = error: -19 [ 559.942777][T11878] dvb-usb: error -19 while querying for an remote control event. [ 559.956820][ T5865] usb 5-1: config 0 descriptor?? [ 559.994685][ T29] audit: type=1326 audit(1739089398.537:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.067827][ T29] audit: type=1326 audit(1739089398.537:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.113671][ T29] audit: type=1326 audit(1739089398.547:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.120049][T11878] m920x_read = error: -19 [ 560.137335][ T29] audit: type=1326 audit(1739089398.547:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.165086][ T29] audit: type=1326 audit(1739089398.547:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.193248][ T29] audit: type=1326 audit(1739089398.547:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.193392][ T5865] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 560.216736][T11878] dvb-usb: error -19 while querying for an remote control event. [ 560.233415][ T29] audit: type=1326 audit(1739089398.547:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.281595][ T29] audit: type=1326 audit(1739089398.557:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.340224][ T29] audit: type=1326 audit(1739089398.807:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12867 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x7ffc0000 [ 560.369515][T11878] m920x_read = error: -19 [ 560.373996][T11878] dvb-usb: error -19 while querying for an remote control event. [ 560.593988][T11878] m920x_read = error: -19 [ 560.650430][T11878] dvb-usb: error -19 while querying for an remote control event. [ 560.882274][T11878] m920x_read = error: -19 [ 560.922770][T11878] dvb-usb: error -19 while querying for an remote control event. [ 561.224572][T11879] m920x_read = error: -19 [ 561.232753][T11879] dvb-usb: error -19 while querying for an remote control event. [ 561.240516][T12894] netlink: 'syz.1.1947': attribute type 19 has an invalid length. [ 561.272870][T12894] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1947'. [ 561.287316][ T6228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.747255][T11879] m920x_read = error: -19 [ 561.751670][T11879] dvb-usb: error -19 while querying for an remote control event. [ 561.851852][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 561.872843][T12905] lo speed is unknown, defaulting to 1000 [ 561.915122][T12905] »»»»»» speed is unknown, defaulting to 1000 [ 561.921396][T11879] m920x_read = error: -19 [ 561.926389][T11879] dvb-usb: error -19 while querying for an remote control event. [ 561.995772][ T5865] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 562.009283][ T5865] usb 5-1: USB disconnect, device number 87 [ 562.087878][T12905] »»»»»» speed is unknown, defaulting to 1000 [ 562.119166][ T972] m920x_read = error: -19 [ 562.123788][ T972] dvb-usb: error -19 while querying for an remote control event. [ 562.310163][ T972] m920x_read = error: -19 [ 562.314545][ T972] dvb-usb: error -19 while querying for an remote control event. [ 562.322391][T11879] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 562.489740][ T972] m920x_read = error: -19 [ 562.494105][ T972] dvb-usb: error -19 while querying for an remote control event. [ 562.502394][T11879] usb 3-1: Using ep0 maxpacket: 8 [ 562.517911][T11879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.528849][T11879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.531976][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.583738][T11879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.609126][T11879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.639371][T11879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 562.644147][T12927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12927 comm=syz.4.1957 [ 562.648811][T11879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.669291][T11875] m920x_read = error: -19 [ 562.673627][T11875] dvb-usb: error -19 while querying for an remote control event. [ 562.829131][ T972] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 563.134706][T11878] m920x_read = error: -19 [ 563.139157][T11878] dvb-usb: error -19 while querying for an remote control event. [ 563.164469][T11879] usb 3-1: usb_control_msg returned -32 [ 563.171150][ T6235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.179176][T11879] usbtmc 3-1:16.0: can't read capabilities [ 563.229218][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 563.242381][ T972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.252237][T12933] lo speed is unknown, defaulting to 1000 [ 563.261342][T12933] »»»»»» speed is unknown, defaulting to 1000 [ 563.264178][ T972] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 563.295111][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.312589][T11875] m920x_read = error: -19 [ 563.316986][ T972] usb 1-1: Product: syz [ 563.322956][T11875] dvb-usb: error -19 while querying for an remote control event. [ 563.339061][ T972] usb 1-1: Manufacturer: syz [ 563.344058][ T972] usb 1-1: SerialNumber: syz [ 563.357169][T12936] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1960'. [ 563.360232][ T972] usb 1-1: config 0 descriptor?? [ 563.499411][T11879] m920x_read = error: -19 [ 563.514956][T11879] dvb-usb: error -19 while querying for an remote control event. [ 563.647032][T12933] »»»»»» speed is unknown, defaulting to 1000 [ 563.719540][T11879] m920x_read = error: -19 [ 563.723909][T11879] dvb-usb: error -19 while querying for an remote control event. [ 564.356897][T12943] lo speed is unknown, defaulting to 1000 [ 564.367047][T12943] »»»»»» speed is unknown, defaulting to 1000 [ 564.489361][T11879] m920x_read = error: -19 [ 564.502380][T12943] »»»»»» speed is unknown, defaulting to 1000 [ 564.504252][T11879] dvb-usb: error -19 while querying for an remote control event. [ 564.652731][T12934] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1959'. [ 564.699186][T11879] m920x_read = error: -19 [ 564.703852][T11879] dvb-usb: error -19 while querying for an remote control event. [ 564.879399][T11879] m920x_read = error: -19 [ 564.884377][T11879] dvb-usb: error -19 while querying for an remote control event. [ 564.995006][T11879] usb 1-1: USB disconnect, device number 59 [ 565.050476][T11875] m920x_read = error: -19 [ 565.055928][T11875] dvb-usb: error -19 while querying for an remote control event. [ 565.155616][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1964'. [ 565.215526][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1965'. [ 565.224742][T11879] m920x_read = error: -19 [ 565.229929][T12958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1965'. [ 565.238923][T11879] dvb-usb: error -19 while querying for an remote control event. [ 565.326034][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 565.326048][ T29] audit: type=1400 audit(1739089404.417:776): avc: denied { setopt } for pid=12959 comm="syz.1.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 565.349180][T12960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1966'. [ 565.456811][T11879] m920x_read = error: -19 [ 565.461526][T11879] dvb-usb: error -19 while querying for an remote control event. [ 565.509228][ T5865] usb 3-1: USB disconnect, device number 57 [ 566.074540][T11879] m920x_read = error: -19 [ 566.085743][T11879] dvb-usb: error -19 while querying for an remote control event. [ 566.305599][T12968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1969'. [ 566.315841][T11879] m920x_read = error: -19 [ 566.832746][T11879] dvb-usb: error -19 while querying for an remote control event. [ 566.863674][ T6229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.079276][T11879] m920x_read = error: -19 [ 567.083639][T11879] dvb-usb: error -19 while querying for an remote control event. [ 567.098658][ T29] audit: type=1400 audit(1739089406.157:777): avc: denied { read } for pid=12972 comm="syz.4.1971" path="socket:[36706]" dev="sockfs" ino=36706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 567.219280][T11875] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 567.326294][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 567.374281][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 567.454178][T11879] m920x_read = error: -19 [ 567.458149][T12981] netlink: 'syz.4.1971': attribute type 7 has an invalid length. [ 567.459109][T11879] dvb-usb: error -19 while querying for an remote control event. [ 567.490339][T11875] usb 2-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 567.502647][T12986] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 567.519208][T11875] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 567.606869][T11875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.642288][T11875] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 567.653077][T11879] m920x_read = error: -19 [ 567.660143][T11879] dvb-usb: error -19 while querying for an remote control event. [ 567.839402][T11875] m920x_read = error: -19 [ 567.974049][T11875] dvb-usb: error -19 while querying for an remote control event. [ 568.141040][ T9080] usb 2-1: USB disconnect, device number 57 [ 568.164559][T11879] m920x_read = error: -19 [ 568.219955][T11879] dvb-usb: error -19 while querying for an remote control event. [ 568.903056][T11879] m920x_read = error: -19 [ 568.911753][T11879] dvb-usb: error -19 while querying for an remote control event. [ 568.929724][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.137567][T11879] m920x_read = error: -19 [ 569.145869][T11879] dvb-usb: error -19 while querying for an remote control event. [ 569.720208][T11879] m920x_read = error: -19 [ 569.727739][T11879] dvb-usb: error -19 while querying for an remote control event. [ 569.909199][T11879] m920x_read = error: -19 [ 569.978250][T13032] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1984'. [ 570.468129][T11879] dvb-usb: error -19 while querying for an remote control event. [ 570.717721][T11879] m920x_read = error: -19 [ 570.777365][T11879] dvb-usb: error -19 while querying for an remote control event. [ 571.122507][T11879] m920x_read = error: -19 [ 571.126836][T11879] dvb-usb: error -19 while querying for an remote control event. [ 571.339378][ T972] m920x_read = error: -19 [ 571.343902][ T972] dvb-usb: error -19 while querying for an remote control event. [ 571.465411][T11879] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 571.906567][T13059] SELinux: security_context_str_to_sid () failed with errno=-22 [ 572.441311][T11878] m920x_read = error: -19 [ 572.445679][T11878] dvb-usb: error -19 while querying for an remote control event. [ 572.495738][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 572.520802][T11879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.564362][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 572.613446][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 572.640695][T13061] netlink: 'syz.2.1994': attribute type 7 has an invalid length. [ 572.722317][T13063] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 572.725263][T11878] m920x_read = error: -19 [ 572.738260][T11878] dvb-usb: error -19 while querying for an remote control event. [ 572.754307][T11879] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.767090][T11879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.776525][ T6235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.795072][T11879] usb 2-1: Product: syz [ 572.809138][T11879] usb 2-1: Manufacturer: syz [ 572.813803][T11879] usb 2-1: SerialNumber: syz [ 572.835753][T11879] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 572.857050][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 572.909190][T11879] m920x_read = error: -19 [ 572.913556][T11879] dvb-usb: error -19 while querying for an remote control event. [ 573.045526][ T29] audit: type=1400 audit(1739089412.137:778): avc: denied { nlmsg_write } for pid=13044 comm="syz.1.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 573.080223][T11878] usb 2-1: USB disconnect, device number 58 [ 573.119196][T11879] m920x_read = error: -19 [ 573.122028][T13085] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 573.123529][T11879] dvb-usb: error -19 while querying for an remote control event. [ 573.282900][ T9080] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 573.437228][T11878] m920x_read = error: -19 [ 573.512453][T11878] dvb-usb: error -19 while querying for an remote control event. [ 573.518451][ T9080] usb 1-1: Using ep0 maxpacket: 32 [ 573.602043][ T9080] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 573.725422][ T9080] usb 1-1: config 0 has no interface number 0 [ 573.791904][ T9080] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 573.871255][ T9080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.899595][ T9080] usb 1-1: Product: syz [ 573.908268][ T9080] usb 1-1: Manufacturer: syz [ 573.924880][ T9080] usb 1-1: SerialNumber: syz [ 574.068178][ T9080] usb 1-1: config 0 descriptor?? [ 574.330665][ T9080] smsc95xx v2.0.0 [ 574.772810][T11878] m920x_read = error: -19 [ 574.777176][T11878] dvb-usb: error -19 while querying for an remote control event. [ 574.806140][ T6231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.984510][ T9080] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 574.993155][T11878] m920x_read = error: -19 [ 575.036439][ T9080] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 575.177672][T11878] dvb-usb: error -19 while querying for an remote control event. [ 575.217875][ T9080] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 575.235477][ T9080] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 575.275809][ T9080] usb 1-1: USB disconnect, device number 60 [ 575.351124][T13107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2088 sclass=netlink_xfrm_socket pid=13107 comm=syz.3.2012 [ 575.367229][T13105] netlink: 'syz.4.2008': attribute type 11 has an invalid length. [ 575.379511][T11879] m920x_read = error: -19 [ 575.389100][T11879] dvb-usb: error -19 while querying for an remote control event. [ 575.550442][T11879] m920x_read = error: -19 [ 575.554810][T11879] dvb-usb: error -19 while querying for an remote control event. [ 575.602394][T13113] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 575.684084][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 575.697244][T13113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.718413][T13118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.727287][T13118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.740528][T13118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.748065][T13118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.755927][T11879] m920x_read = error: -19 [ 575.763679][T11879] dvb-usb: error -19 while querying for an remote control event. [ 576.094362][ T972] m920x_read = error: -19 [ 576.099026][ T972] dvb-usb: error -19 while querying for an remote control event. [ 576.167712][T13119] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 576.259466][ T972] m920x_read = error: -19 [ 576.284061][ T972] dvb-usb: error -19 while querying for an remote control event. [ 576.339980][T13119] bond3: (slave batadv1): making interface the new active one [ 576.397421][T13119] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 576.529391][ T972] m920x_read = error: -19 [ 576.539164][ T972] dvb-usb: error -19 while querying for an remote control event. [ 576.604580][ T29] audit: type=1326 audit(1739089415.697:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.3.2017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f9558cde9 code=0x0 [ 576.730401][ T972] m920x_read = error: -19 [ 576.734803][ T972] dvb-usb: error -19 while querying for an remote control event. [ 576.899215][T11879] m920x_read = error: -19 [ 576.903589][T11879] dvb-usb: error -19 while querying for an remote control event. [ 576.999194][ T972] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 576.999206][ T5865] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 577.079254][T11879] m920x_read = error: -19 [ 577.083663][T11879] dvb-usb: error -19 while querying for an remote control event. [ 577.149339][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 577.156056][ T5865] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 577.164272][ T5865] usb 3-1: config 0 has no interface number 0 [ 577.180628][ T5865] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 577.190598][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.198661][ T5865] usb 3-1: Product: syz [ 577.204389][ C0] hrtimer: interrupt took 460050 ns [ 577.210525][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 577.215854][ T5865] usb 3-1: Manufacturer: syz [ 577.217986][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 577.221294][ T5865] usb 3-1: SerialNumber: syz [ 577.242734][ T972] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.245565][ T5865] usb 3-1: config 0 descriptor?? [ 577.252983][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.265073][T11879] m920x_read = error: -19 [ 577.269672][T11879] dvb-usb: error -19 while querying for an remote control event. [ 577.277975][ T972] usb 2-1: Product: syz [ 577.282514][ T972] usb 2-1: Manufacturer: syz [ 577.287112][ T972] usb 2-1: SerialNumber: syz [ 577.294670][ T972] usb 2-1: config 0 descriptor?? [ 577.302155][ T972] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 577.311857][ T972] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 577.429235][T11878] m920x_read = error: -19 [ 577.433642][T11878] dvb-usb: error -19 while querying for an remote control event. [ 577.480208][ T9080] usb 3-1: USB disconnect, device number 58 [ 577.535646][ T29] audit: type=1800 audit(1739089416.627:780): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2025" name="file1" dev="tmpfs" ino=2602 res=0 errno=0 [ 577.589206][T11879] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 577.599270][T11878] m920x_read = error: -19 [ 577.604060][T11878] dvb-usb: error -19 while querying for an remote control event. [ 577.769260][T11878] m920x_read = error: -19 [ 577.773765][T11878] dvb-usb: error -19 while querying for an remote control event. [ 577.782612][T11879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.793672][T11879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.804051][T11879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.816941][T11879] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 577.826019][T11879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.835542][T11879] usb 1-1: config 0 descriptor?? [ 577.904176][ T972] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 577.939654][T11878] m920x_read = error: -19 [ 577.944284][T11878] dvb-usb: error -19 while querying for an remote control event. [ 578.147039][T11878] m920x_read = error: -19 [ 578.152018][T11878] dvb-usb: error -19 while querying for an remote control event. [ 578.295745][T13163] autofs: Unknown parameter '0x0000000000000000' [ 578.333046][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 578.342009][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 578.351083][T13164] netlink: 'syz.2.2027': attribute type 13 has an invalid length. [ 578.645364][ T6231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.732351][T11878] m920x_read = error: -19 [ 578.736713][T11878] dvb-usb: error -19 while querying for an remote control event. [ 578.906085][ T29] audit: type=1400 audit(1739089417.987:781): avc: denied { getopt } for pid=13172 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 578.931796][T11878] m920x_read = error: -19 [ 578.946796][T11878] dvb-usb: error -19 while querying for an remote control event. [ 579.841954][T11879] usbhid 1-1:0.0: can't add hid device: -71 [ 579.848154][ T972] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 579.859171][T11879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 579.866959][ T972] em28xx 2-1:0.0: board has no eeprom [ 579.876239][T11879] usb 1-1: USB disconnect, device number 61 [ 580.041581][T11872] m920x_read = error: -19 [ 580.045982][T11872] dvb-usb: error -19 while querying for an remote control event. [ 580.352444][ T29] audit: type=1400 audit(1739089419.437:782): avc: denied { setopt } for pid=13180 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.484944][ T6231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 580.646161][T11872] m920x_read = error: -19 [ 580.745760][T13187] sctp: [Deprecated]: syz.2.2034 (pid 13187) Use of int in maxseg socket option. [ 580.745760][T13187] Use struct sctp_assoc_value instead [ 580.884248][T11872] dvb-usb: error -19 while querying for an remote control event. [ 581.590205][ T972] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 581.599602][T11872] m920x_read = error: -19 [ 581.604569][T11872] dvb-usb: error -19 while querying for an remote control event. [ 581.613314][ T972] em28xx 2-1:0.0: dvb set to bulk mode. [ 581.643812][T11875] em28xx 2-1:0.0: Binding DVB extension [ 581.682459][ T972] usb 2-1: USB disconnect, device number 59 [ 581.713275][ T972] em28xx 2-1:0.0: Disconnecting em28xx [ 581.835897][T11872] m920x_read = error: -19 [ 581.848350][T11875] em28xx 2-1:0.0: Registering input extension [ 581.893844][ T29] audit: type=1400 audit(1739089420.967:783): avc: denied { map } for pid=13193 comm="syz.3.2036" path="socket:[38041]" dev="sockfs" ino=38041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 581.902964][T11872] dvb-usb: error -19 while querying for an remote control event. [ 581.972967][ T29] audit: type=1400 audit(1739089420.967:784): avc: denied { accept } for pid=13193 comm="syz.3.2036" path="socket:[38041]" dev="sockfs" ino=38041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 581.997747][ T972] em28xx 2-1:0.0: Closing input extension [ 582.016211][ T972] em28xx 2-1:0.0: Freeing device [ 582.169973][ T29] audit: type=1400 audit(1739089421.237:785): avc: denied { bind } for pid=13199 comm="syz.1.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 582.170586][T11872] m920x_read = error: -19 [ 582.374679][T11872] dvb-usb: error -19 while querying for an remote control event. [ 582.918556][ T29] audit: type=1400 audit(1739089422.007:786): avc: denied { setattr } for pid=13199 comm="syz.1.2039" name="NETLINK" dev="sockfs" ino=38073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 583.016698][T11878] m920x_read = error: -19 [ 583.060160][T11878] dvb-usb: error -19 while querying for an remote control event. [ 583.230755][T11878] m920x_read = error: -19 [ 583.262578][T11878] dvb-usb: error -19 while querying for an remote control event. [ 583.449787][T11878] m920x_read = error: -19 [ 583.454404][T11878] dvb-usb: error -19 while querying for an remote control event. [ 583.517586][T13228] lo speed is unknown, defaulting to 1000 [ 583.527652][T13228] »»»»»» speed is unknown, defaulting to 1000 [ 583.636278][ T29] audit: type=1326 audit(1739089422.727:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13226 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d51d8cde9 code=0x7fc00000 [ 583.662874][ T9080] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 583.679235][T11878] m920x_read = error: -19 [ 583.683604][T11878] dvb-usb: error -19 while querying for an remote control event. [ 583.729182][ T29] audit: type=1326 audit(1739089422.817:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13226 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d51d8cde9 code=0x7fc00000 [ 583.798481][ T29] audit: type=1326 audit(1739089422.817:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13226 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d51d8cde9 code=0x7fc00000 [ 583.878583][ T9080] usb 2-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.905326][T11878] m920x_read = error: -19 [ 583.906346][ T9080] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 583.924131][T13228] »»»»»» speed is unknown, defaulting to 1000 [ 583.940089][ T9080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.955743][T11878] dvb-usb: error -19 while querying for an remote control event. [ 584.012599][ T9080] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 584.332150][ T6231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.340368][T11878] m920x_read = error: -19 [ 584.361385][T11878] dvb-usb: error -19 while querying for an remote control event. [ 584.429530][T11878] usb 2-1: USB disconnect, device number 60 [ 584.569347][T11872] m920x_read = error: -19 [ 584.580277][T11872] dvb-usb: error -19 while querying for an remote control event. [ 584.829014][T13250] hub 2-0:1.0: USB hub found [ 584.836025][T13250] hub 2-0:1.0: 1 port detected [ 585.273263][T11878] m920x_read = error: -19 [ 585.277650][T11878] dvb-usb: error -19 while querying for an remote control event. [ 585.439274][T11872] m920x_read = error: -19 [ 585.459220][T11872] dvb-usb: error -19 while querying for an remote control event. [ 585.487939][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2055'. [ 585.539362][T13258] netlink: 492 bytes leftover after parsing attributes in process `syz.0.2055'. [ 585.659417][T11878] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 585.679244][T11872] m920x_read = error: -19 [ 585.685614][T11872] dvb-usb: error -19 while querying for an remote control event. [ 585.756639][T13269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13269 comm=syz.0.2055 [ 585.824443][T11878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.907739][T11872] m920x_read = error: -19 [ 585.921585][T11872] dvb-usb: error -19 while querying for an remote control event. [ 585.932400][T13267] sp0: Synchronizing with TNC [ 585.937811][T11878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.958914][T11878] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 585.984149][T11878] usb 5-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 586.006189][T13258] netlink: 'syz.0.2055': attribute type 18 has an invalid length. [ 586.014097][T11878] usb 5-1: Product: syz [ 586.029955][T11878] usb 5-1: Manufacturer: syz [ 586.036084][T11878] usb 5-1: config 0 descriptor?? [ 586.061437][T13258] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.070702][T13258] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.079448][T13258] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.088144][T13258] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.119151][T11875] m920x_read = error: -19 [ 586.123611][T11875] dvb-usb: error -19 while querying for an remote control event. [ 586.163834][T13276] netlink: 'syz.2.2056': attribute type 2 has an invalid length. [ 586.195894][T13276] netlink: 'syz.2.2056': attribute type 1 has an invalid length. [ 586.242218][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.297699][T11875] m920x_read = error: -19 [ 586.305507][T11875] dvb-usb: error -19 while querying for an remote control event. [ 586.523166][T11875] m920x_read = error: -19 [ 586.527554][T11875] dvb-usb: error -19 while querying for an remote control event. [ 586.709967][T11875] m920x_read = error: -19 [ 586.714884][T11875] dvb-usb: error -19 while querying for an remote control event. [ 586.938673][T13287] netlink: 'syz.3.2059': attribute type 4 has an invalid length. [ 587.115673][ T29] audit: type=1400 audit(1739089426.207:790): avc: denied { map } for pid=13286 comm="syz.3.2059" path="socket:[37490]" dev="sockfs" ino=37490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 587.285822][T11872] m920x_read = error: -19 [ 587.291983][T11872] dvb-usb: error -19 while querying for an remote control event. [ 587.335592][T13291] FAULT_INJECTION: forcing a failure. [ 587.335592][T13291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.350601][T13291] CPU: 1 UID: 0 PID: 13291 Comm: syz.2.2060 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 587.350625][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 587.350634][T13291] Call Trace: [ 587.350640][T13291] [ 587.350647][T13291] dump_stack_lvl+0x16c/0x1f0 [ 587.350669][T13291] should_fail_ex+0x50a/0x650 [ 587.350697][T13291] _copy_from_iter+0x2a1/0x1560 [ 587.350733][T13291] ? __pfx__copy_from_iter+0x10/0x10 [ 587.350760][T13291] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 587.350781][T13291] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 587.350805][T13291] ? __pfx_lock_release+0x10/0x10 [ 587.350834][T13291] copy_page_from_iter+0xa5/0x120 [ 587.350862][T13291] tun_build_skb.constprop.0+0x294/0x1120 [ 587.350892][T13291] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 587.350916][T13291] ? avc_has_perm_noaudit+0x119/0x3a0 [ 587.350932][T13291] ? __pfx_lock_release+0x10/0x10 [ 587.350956][T13291] ? trace_lock_acquire+0x14e/0x1f0 [ 587.350985][T13291] ? __lock_acquire+0xcc5/0x3c40 [ 587.351013][T13291] tun_get_user+0x870/0x3e50 [ 587.351043][T13291] ? inode_has_perm+0x16f/0x1d0 [ 587.351062][T13291] ? __pfx_tun_get_user+0x10/0x10 [ 587.351083][T13291] ? find_held_lock+0x2d/0x110 [ 587.351105][T13291] ? __pfx_lock_release+0x10/0x10 [ 587.351139][T13291] tun_chr_write_iter+0xdc/0x210 [ 587.351164][T13291] vfs_write+0x5ae/0x1150 [ 587.351190][T13291] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 587.351214][T13291] ? __pfx_vfs_write+0x10/0x10 [ 587.351240][T13291] ? __fget_files+0x40/0x3a0 [ 587.351268][T13291] ksys_write+0x12b/0x250 [ 587.351292][T13291] ? __pfx_ksys_write+0x10/0x10 [ 587.351323][T13291] do_syscall_64+0xcd/0x250 [ 587.351342][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.351365][T13291] RIP: 0033:0x7f4918b8b89f [ 587.351379][T13291] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 587.351395][T13291] RSP: 002b:00007f491999e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 587.351411][T13291] RAX: ffffffffffffffda RBX: 00007f4918da5fa0 RCX: 00007f4918b8b89f [ 587.351422][T13291] RDX: 0000000000000022 RSI: 0000400000000280 RDI: 00000000000000c8 [ 587.351431][T13291] RBP: 00007f491999e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.351441][T13291] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001 [ 587.351450][T13291] R13: 0000000000000001 R14: 00007f4918da5fa0 R15: 00007ffcdb8ba738 [ 587.351471][T13291] [ 587.603976][T11872] m920x_read = error: -19 [ 587.609244][T11872] dvb-usb: error -19 while querying for an remote control event. [ 587.645829][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 587.655885][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 587.671427][T13293] netlink: 'syz.3.2061': attribute type 7 has an invalid length. [ 587.706247][T13294] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 587.758644][ T29] audit: type=1400 audit(1739089426.777:791): avc: denied { wake_alarm } for pid=13297 comm="syz.2.2062" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 587.792006][T11872] m920x_read = error: -19 [ 587.796385][T11872] dvb-usb: error -19 while querying for an remote control event. [ 587.892197][ T29] audit: type=1400 audit(1739089426.987:792): avc: denied { bind } for pid=13303 comm="syz.2.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 587.959857][T11872] m920x_read = error: -19 [ 587.973933][T11872] dvb-usb: error -19 while querying for an remote control event. [ 588.007097][T13309] libceph: resolve '400' (ret=-3): failed [ 588.020151][T13313] xt_socket: unknown flags 0xc [ 588.131685][T11872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.160783][T11872] m920x_read = error: -19 [ 588.181555][T11872] dvb-usb: error -19 while querying for an remote control event. [ 588.299452][T13316] xt_CT: No such helper "syz0" [ 588.489962][T11872] m920x_read = error: -19 [ 588.494489][T11872] dvb-usb: error -19 while querying for an remote control event. [ 588.669365][T11872] m920x_read = error: -19 [ 588.679184][T11872] dvb-usb: error -19 while querying for an remote control event. [ 588.691038][T11878] usbhid 5-1:0.0: can't add hid device: -71 [ 588.701557][T11878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 588.745799][T11878] usb 5-1: USB disconnect, device number 88 [ 588.769303][ T5865] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 588.869880][T11872] m920x_read = error: -19 [ 588.874248][T11872] dvb-usb: error -19 while querying for an remote control event. [ 588.946300][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 588.956296][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.148592][ T5865] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 589.306194][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.338771][ T5865] usb 2-1: Product: syz [ 589.382844][ T5865] usb 2-1: Manufacturer: syz [ 589.398516][ T5865] usb 2-1: SerialNumber: syz [ 589.430173][ T5865] usb 2-1: config 0 descriptor?? [ 589.444521][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 589.456040][T13348] syzkaller1: entered promiscuous mode [ 589.470336][ T5865] hub 2-1:0.0: bad descriptor, ignoring hub [ 589.489414][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 589.498479][T13348] syzkaller1: entered allmulticast mode [ 589.504306][ T5865] hub 2-1:0.0: probe with driver hub failed with error -5 [ 589.535756][T13345] netlink: 'syz.0.2075': attribute type 7 has an invalid length. [ 589.586065][T13346] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 589.821023][T11872] m920x_read = error: -19 [ 589.825391][T11872] dvb-usb: error -19 while querying for an remote control event. [ 589.864194][T13350] lo speed is unknown, defaulting to 1000 [ 589.873271][T13350] »»»»»» speed is unknown, defaulting to 1000 [ 590.204666][T11872] m920x_read = error: -19 [ 590.214458][T13357] FAT-fs (nullb0): bogus number of reserved sectors [ 590.221404][T13357] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 590.726086][T11872] dvb-usb: error -19 while querying for an remote control event. [ 590.738890][ T6229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.930808][T11872] m920x_read = error: -19 [ 591.014745][T11872] dvb-usb: error -19 while querying for an remote control event. [ 591.077766][T13362] syz.0.2082: attempt to access beyond end of device [ 591.077766][T13362] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 591.437576][T11875] m920x_read = error: -19 [ 591.449706][ T29] audit: type=1400 audit(1739089430.497:793): avc: denied { accept } for pid=13368 comm="syz.3.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 591.481606][T11875] dvb-usb: error -19 while querying for an remote control event. [ 591.490507][T13350] »»»»»» speed is unknown, defaulting to 1000 [ 591.659532][T11875] m920x_read = error: -19 [ 591.664131][T11875] dvb-usb: error -19 while querying for an remote control event. [ 591.770108][T13377] FAULT_INJECTION: forcing a failure. [ 591.770108][T13377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.784451][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.0.2087 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 591.784472][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 591.784482][T13377] Call Trace: [ 591.784487][T13377] [ 591.784493][T13377] dump_stack_lvl+0x16c/0x1f0 [ 591.784514][T13377] should_fail_ex+0x50a/0x650 [ 591.784541][T13377] _copy_to_user+0x32/0xd0 [ 591.784558][T13377] simple_read_from_buffer+0xd0/0x160 [ 591.784582][T13377] proc_fail_nth_read+0x198/0x270 [ 591.784611][T13377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.784634][T13377] ? rw_verify_area+0xcf/0x680 [ 591.784655][T13377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.784676][T13377] vfs_read+0x1df/0xbf0 [ 591.784699][T13377] ? __fget_files+0x1fc/0x3a0 [ 591.784714][T13377] ? __pfx___mutex_lock+0x10/0x10 [ 591.784731][T13377] ? __pfx_vfs_read+0x10/0x10 [ 591.784761][T13377] ? __fget_files+0x206/0x3a0 [ 591.784781][T13377] ksys_read+0x12b/0x250 [ 591.784803][T13377] ? __pfx_ksys_read+0x10/0x10 [ 591.784833][T13377] do_syscall_64+0xcd/0x250 [ 591.784850][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.784872][T13377] RIP: 0033:0x7f9d51d8b7fc [ 591.784883][T13377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.784898][T13377] RSP: 002b:00007f9d52ba6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.784912][T13377] RAX: ffffffffffffffda RBX: 00007f9d51fa5fa0 RCX: 00007f9d51d8b7fc [ 591.784922][T13377] RDX: 000000000000000f RSI: 00007f9d52ba60a0 RDI: 0000000000000005 [ 591.784932][T13377] RBP: 00007f9d52ba6090 R08: 0000000000000000 R09: 0000000000000000 [ 591.784942][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.784951][T13377] R13: 0000000000000000 R14: 00007f9d51fa5fa0 R15: 00007ffde5325908 [ 591.784971][T13377] [ 591.970691][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.977444][ T6231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.983818][T11875] m920x_read = error: -19 [ 591.992313][T11875] dvb-usb: error -19 while querying for an remote control event. [ 592.169272][T11875] m920x_read = error: -19 [ 592.173654][T11875] dvb-usb: error -19 while querying for an remote control event. [ 592.349705][T11875] m920x_read = error: -19 [ 592.358050][T11875] dvb-usb: error -19 while querying for an remote control event. [ 592.419270][ T9080] usb 2-1: USB disconnect, device number 61 [ 592.519223][T11875] m920x_read = error: -19 [ 592.526225][T11875] dvb-usb: error -19 while querying for an remote control event. [ 592.689237][T11875] m920x_read = error: -19 [ 592.693611][T11875] dvb-usb: error -19 while querying for an remote control event. [ 592.844997][T13391] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2093'. [ 592.949135][T11875] m920x_read = error: -19 [ 592.953565][T11875] dvb-usb: error -19 while querying for an remote control event. [ 593.135320][T11875] m920x_read = error: -19 [ 593.150224][T11875] dvb-usb: error -19 while querying for an remote control event. [ 594.135737][T11875] m920x_read = error: -19 [ 594.158956][T11875] dvb-usb: error -19 while querying for an remote control event. [ 594.279266][ T5865] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 594.289282][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 594.449395][T11875] m920x_read = error: -19 [ 594.453935][T11875] dvb-usb: error -19 while querying for an remote control event. [ 594.474780][T13415] netlink: 'syz.3.2099': attribute type 8 has an invalid length. [ 594.569167][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 594.591052][T13420] FAULT_INJECTION: forcing a failure. [ 594.591052][T13420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.600484][ T5865] usb 3-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=85.16 [ 594.613281][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.1.2100 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 594.613304][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 594.613313][T13420] Call Trace: [ 594.613318][T13420] [ 594.613325][T13420] dump_stack_lvl+0x16c/0x1f0 [ 594.613348][T13420] should_fail_ex+0x50a/0x650 [ 594.613376][T13420] _copy_from_user+0x2e/0xd0 [ 594.613393][T13420] copy_msghdr_from_user+0x99/0x160 [ 594.613416][T13420] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 594.613448][T13420] ___sys_sendmsg+0xff/0x1e0 [ 594.613470][T13420] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.613501][T13420] ? __pfx_lock_release+0x10/0x10 [ 594.613524][T13420] ? trace_lock_acquire+0x14e/0x1f0 [ 594.613551][T13420] ? __fget_files+0x206/0x3a0 [ 594.613580][T13420] __sys_sendmsg+0x16e/0x220 [ 594.613600][T13420] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.613634][T13420] do_syscall_64+0xcd/0x250 [ 594.613653][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.613676][T13420] RIP: 0033:0x7ff76658cde9 [ 594.613689][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.613703][T13420] RSP: 002b:00007ff76735b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.613719][T13420] RAX: ffffffffffffffda RBX: 00007ff7667a6080 RCX: 00007ff76658cde9 [ 594.613729][T13420] RDX: 0000000004040800 RSI: 0000400000000180 RDI: 0000000000000004 [ 594.613739][T13420] RBP: 00007ff76735b090 R08: 0000000000000000 R09: 0000000000000000 [ 594.613749][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.613758][T13420] R13: 0000000000000000 R14: 00007ff7667a6080 R15: 00007ffc4d5e4c08 [ 594.613778][T13420] [ 594.790476][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.823289][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.860135][ T5865] usb 3-1: Product: syz [ 594.864413][ T5865] usb 3-1: Manufacturer: syz [ 594.869140][ T5865] usb 3-1: SerialNumber: syz [ 594.976155][T11872] m920x_read = error: -19 [ 595.069214][T11872] dvb-usb: error -19 while querying for an remote control event. [ 595.230038][T11872] m920x_read = error: -19 [ 595.235081][T11875] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 595.242966][T11872] dvb-usb: error -19 while querying for an remote control event. [ 595.434644][T11872] m920x_read = error: -19 [ 595.440889][T11875] usb 5-1: Using ep0 maxpacket: 32 [ 595.463049][T11875] usb 5-1: config 0 has no interfaces? [ 595.498660][T11875] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 595.552557][T11872] dvb-usb: error -19 while querying for an remote control event. [ 595.574519][T11875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.679175][T11875] usb 5-1: config 0 descriptor?? [ 595.750828][T11875] m920x_read = error: -19 [ 595.756189][T11875] dvb-usb: error -19 while querying for an remote control event. [ 595.776627][T13434] tipc: Enabling of bearer rejected, failed to enable media [ 595.979848][T11875] m920x_read = error: -19 [ 595.984575][T11875] dvb-usb: error -19 while querying for an remote control event. [ 595.995991][T13440] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 596.049964][T13416] xt_CT: No such helper "pptp" [ 596.057280][T11875] usb 5-1: USB disconnect, device number 89 [ 596.242107][T11872] m920x_read = error: -19 [ 596.246557][T11872] dvb-usb: error -19 while querying for an remote control event. [ 596.489402][T11872] m920x_read = error: -19 [ 596.499499][T11872] dvb-usb: error -19 while querying for an remote control event. [ 596.514325][ T6229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.724130][T11875] m920x_read = error: -19 [ 596.728532][T11875] dvb-usb: error -19 while querying for an remote control event. [ 596.856466][ T5865] qmi_wwan 3-1:5.0: bogus CDC Union: master=0, slave=1 [ 596.864178][ T5865] qmi_wwan 3-1:5.0: probe with driver qmi_wwan failed with error -22 [ 596.907048][ T5865] usb 3-1: USB disconnect, device number 59 [ 596.939209][T11872] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 596.959278][T11875] m920x_read = error: -19 [ 596.967483][T11875] dvb-usb: error -19 while querying for an remote control event. [ 597.099324][T11872] usb 1-1: Using ep0 maxpacket: 8 [ 597.113713][T11872] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 597.140993][T11872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.159257][T11878] m920x_read = error: -19 [ 597.173797][T11878] dvb-usb: error -19 while querying for an remote control event. [ 597.191860][T11872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.212212][T11872] usb 1-1: Product: syz [ 597.223716][T11872] usb 1-1: Manufacturer: syz [ 597.241738][T11872] usb 1-1: SerialNumber: syz [ 597.248103][T13461] input: syz0 as /devices/virtual/input/input73 [ 597.253794][T13446] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 597.359169][T11872] m920x_read = error: -19 [ 597.363917][T11872] dvb-usb: error -19 while querying for an remote control event. [ 597.371741][T11875] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 597.589383][T11875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.700115][T11872] m920x_read = error: -19 [ 597.709228][T11872] dvb-usb: error -19 while querying for an remote control event. [ 597.732158][ T6231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 597.733869][T11875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.775759][T11875] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 597.784859][T11875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.797295][T11875] usb 3-1: config 0 descriptor?? [ 597.929474][T11872] m920x_read = error: -19 [ 597.934189][T11872] dvb-usb: error -19 while querying for an remote control event. [ 597.967187][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.979469][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.048235][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 598.098669][ T29] audit: type=1400 audit(1739089437.187:794): avc: denied { getopt } for pid=13473 comm="syz.1.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 598.118380][ T972] m920x_read = error: -19 [ 598.123368][ T972] dvb-usb: error -19 while querying for an remote control event. [ 598.189273][T11872] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 598.215547][T11875] hid-multitouch 0003:0EEF:72D0.000B: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 598.318179][T11875] m920x_read = error: -19 [ 598.333059][T11875] dvb-usb: error -19 while querying for an remote control event. [ 598.352455][T11872] usb 5-1: Using ep0 maxpacket: 32 [ 598.367025][T11872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.384904][T11872] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 598.395868][T11872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.408315][T11872] usb 5-1: Product: syz [ 598.421431][T11872] usb 5-1: Manufacturer: syz [ 598.433466][T11872] usb 5-1: SerialNumber: syz [ 598.445265][T11875] usb 3-1: USB disconnect, device number 60 [ 598.456417][T11872] usb 5-1: config 0 descriptor?? [ 598.509353][ T972] m920x_read = error: -19 [ 598.519187][ T972] dvb-usb: error -19 while querying for an remote control event. [ 598.811474][T11875] m920x_read = error: -19 [ 599.194364][T11875] dvb-usb: error -19 while querying for an remote control event. [ 599.209148][T11872] gs_usb 5-1:0.0: Configuring for 12 interfaces [ 599.222796][T11872] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 599.248795][T11875] usb 1-1: USB disconnect, device number 62 [ 599.254784][T11872] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 599.491892][T11879] m920x_read = error: -19 [ 599.516754][T11879] dvb-usb: error -19 while querying for an remote control event. [ 599.555173][T13497] syz.2.2125: attempt to access beyond end of device [ 599.555173][T13497] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 599.690632][T11875] m920x_read = error: -19 [ 599.694984][T11875] dvb-usb: error -19 while querying for an remote control event. [ 599.847074][T13508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2127'. [ 599.869869][T11875] m920x_read = error: -19 [ 599.877656][T11875] dvb-usb: error -19 while querying for an remote control event. [ 600.040020][T11875] m920x_read = error: -19 [ 600.044525][T11875] dvb-usb: error -19 while querying for an remote control event. [ 600.272449][T11875] m920x_read = error: -19 [ 600.312107][T13522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2131'. [ 600.529210][T11875] dvb-usb: error -19 while querying for an remote control event. [ 600.713816][T11872] m920x_read = error: -19 [ 600.718186][T11872] dvb-usb: error -19 while querying for an remote control event. [ 600.763687][T13519] ALSA: mixer_oss: invalid OSS volume 'u' [ 600.899176][T11872] m920x_read = error: -19 [ 600.903574][T11872] dvb-usb: error -19 while querying for an remote control event. [ 601.655162][ T6228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.935917][T11872] m920x_read = error: -19 [ 601.945985][T11872] dvb-usb: error -19 while querying for an remote control event. [ 602.043958][T13537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2136'. [ 602.149844][T11879] m920x_read = error: -19 [ 602.154222][T11879] dvb-usb: error -19 while querying for an remote control event. [ 602.787565][T11879] m920x_read = error: -19 [ 602.792397][T11879] dvb-usb: error -19 while querying for an remote control event. [ 602.963159][T11879] m920x_read = error: -19 [ 602.967600][T11879] dvb-usb: error -19 while querying for an remote control event. [ 603.281586][T11879] m920x_read = error: -19 [ 603.285936][T11879] dvb-usb: error -19 while querying for an remote control event. [ 603.469163][T11879] m920x_read = error: -19 [ 603.473845][T11879] dvb-usb: error -19 while querying for an remote control event. [ 603.504898][ T6235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.649928][T11875] m920x_read = error: -19 [ 603.654509][T11875] dvb-usb: error -19 while querying for an remote control event. [ 604.009719][T11875] m920x_read = error: -19 [ 604.014206][T11875] dvb-usb: error -19 while querying for an remote control event. [ 604.179166][T11875] m920x_read = error: -19 [ 604.186552][T11875] dvb-usb: error -19 while querying for an remote control event. [ 604.194948][T13576] sctp: [Deprecated]: syz.3.2149 (pid 13576) Use of int in maxseg socket option. [ 604.194948][T13576] Use struct sctp_assoc_value instead [ 604.609128][T13582] syz.0.2150: attempt to access beyond end of device [ 604.609128][T13582] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 604.989296][T11872] m920x_read = error: -19 [ 605.531775][T11872] dvb-usb: error -19 while querying for an remote control event. [ 605.706920][T11872] m920x_read = error: -19 [ 605.738468][T11872] dvb-usb: error -19 while querying for an remote control event. [ 605.799476][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 605.817742][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 605.830776][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 605.940018][T11872] m920x_read = error: -19 [ 605.946993][T11872] dvb-usb: error -19 while querying for an remote control event. [ 606.323415][T11872] m920x_read = error: -19 [ 606.327813][T11875] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 606.337589][T11872] dvb-usb: error -19 while querying for an remote control event. [ 607.083684][T11872] m920x_read = error: -19 [ 607.088026][T11872] dvb-usb: error -19 while querying for an remote control event. [ 607.173281][T11875] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 607.181680][T11875] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 607.193480][T11875] usb 3-1: config 220 has no interface number 2 [ 607.213615][T11875] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 607.240419][T11875] usb 3-1: config 220 interface 0 has no altsetting 0 [ 607.247265][T11875] usb 3-1: config 220 interface 76 has no altsetting 0 [ 607.256429][T11875] usb 3-1: config 220 interface 1 has no altsetting 0 [ 607.263515][T13606] netlink: 'syz.0.2154': attribute type 10 has an invalid length. [ 607.286475][T11875] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 607.295931][T11872] m920x_read = error: -19 [ 607.300421][T11872] dvb-usb: error -19 while querying for an remote control event. [ 607.309221][T11875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.317620][T11875] usb 3-1: Product: syz [ 607.322328][T11875] usb 3-1: Manufacturer: syz [ 607.326983][T11875] usb 3-1: SerialNumber: syz [ 607.333857][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.374366][T13606] team0: Port device wlan1 added [ 607.479188][T11872] m920x_read = error: -19 [ 607.484626][T11872] dvb-usb: error -19 while querying for an remote control event. [ 608.203268][T11872] m920x_read = error: -19 [ 608.207627][T11872] dvb-usb: error -19 while querying for an remote control event. [ 608.270437][ T29] audit: type=1326 audit(1739089447.347:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.2.2151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4918b8cde9 code=0x0 [ 608.389240][T11872] m920x_read = error: -19 [ 608.393647][T11872] dvb-usb: error -19 while querying for an remote control event. [ 608.451040][ T29] audit: type=1400 audit(1739089447.547:796): avc: denied { connect } for pid=13611 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 608.476530][T13614] netlink: 'syz.0.2158': attribute type 4 has an invalid length. [ 608.500836][T11872] usb 5-1: USB disconnect, device number 90 [ 608.527186][T13617] netlink: 'syz.0.2158': attribute type 4 has an invalid length. [ 608.535220][ T29] audit: type=1400 audit(1739089447.567:797): avc: denied { ioctl } for pid=13611 comm="syz.0.2158" path="socket:[39216]" dev="sockfs" ino=39216 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 608.539128][ T5864] »»»»»» speed is unknown, defaulting to 1000 [ 608.560331][ T29] audit: type=1400 audit(1739089447.567:798): avc: denied { listen } for pid=13611 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 608.592955][ T29] audit: type=1400 audit(1739089447.567:799): avc: denied { accept } for pid=13611 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 608.614948][T11879] m920x_read = error: -19 [ 608.620236][T11879] dvb-usb: error -19 while querying for an remote control event. [ 608.668545][ T29] audit: type=1400 audit(1739089447.687:800): avc: denied { read } for pid=13615 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 608.789155][T11872] m920x_read = error: -19 [ 608.793571][T11872] dvb-usb: error -19 while querying for an remote control event. [ 608.959174][T11872] m920x_read = error: -19 [ 608.969003][T11872] dvb-usb: error -19 while querying for an remote control event. [ 609.159168][T11872] m920x_read = error: -19 [ 609.231275][T11872] dvb-usb: error -19 while querying for an remote control event. [ 609.263248][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.724738][T11875] usb 3-1: selecting invalid altsetting 0 [ 609.797974][T11875] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 609.832659][T11875] usb 3-1: No valid video chain found. [ 609.839294][T11872] m920x_read = error: -19 [ 609.857864][T11872] dvb-usb: error -19 while querying for an remote control event. [ 609.870142][T11875] usb 3-1: selecting invalid altsetting 0 [ 609.879140][T11875] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 609.909807][T11875] usb 3-1: USB disconnect, device number 61 [ 610.132971][T11872] m920x_read = error: -19 [ 610.137701][T11872] dvb-usb: error -19 while querying for an remote control event. [ 610.245214][T13651] syz.0.2170: attempt to access beyond end of device [ 610.245214][T13651] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 610.309759][T11875] m920x_read = error: -19 [ 610.354169][T11875] dvb-usb: error -19 while querying for an remote control event. [ 610.639212][T11872] m920x_read = error: -19 [ 610.643732][T11872] dvb-usb: error -19 while querying for an remote control event. [ 610.676388][ T29] audit: type=1400 audit(1739089449.767:801): avc: denied { execute } for pid=13657 comm="syz.3.2173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 610.769277][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 610.903509][T11872] m920x_read = error: -19 [ 610.907899][T11872] dvb-usb: error -19 while querying for an remote control event. [ 610.945185][ T29] audit: type=1326 audit(1739089450.037:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918b8cde9 code=0x7ffc0000 [ 610.984247][ T29] audit: type=1326 audit(1739089450.037:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4918b8cde9 code=0x7ffc0000 [ 610.991049][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.007545][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.020919][ T29] audit: type=1326 audit(1739089450.037:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.2.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918b8cde9 code=0x7ffc0000 [ 611.029701][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.083398][T13672] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2175'. [ 611.096076][T13672] overlay: filesystem on ./bus not supported as upperdir [ 611.108188][ T5865] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 611.319480][ T5864] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 611.482079][T11872] m920x_read = error: -19 [ 611.486442][T11872] dvb-usb: error -19 while querying for an remote control event. [ 611.539262][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 611.557057][ T5864] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 611.574777][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.598687][ T5864] usb 5-1: Product: syz [ 611.695879][ T5864] usb 5-1: Manufacturer: syz [ 611.696341][T11875] m920x_read = error: -19 [ 611.705963][T11875] dvb-usb: error -19 while querying for an remote control event. [ 611.726247][ T5864] usb 5-1: SerialNumber: syz [ 611.739638][ T5864] usb 5-1: config 0 descriptor?? [ 611.869280][T11872] m920x_read = error: -19 [ 611.873782][T11872] dvb-usb: error -19 while querying for an remote control event. [ 612.010014][T11875] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 612.059271][T11872] m920x_read = error: -19 [ 612.078448][T11872] dvb-usb: error -19 while querying for an remote control event. [ 612.192281][T11875] usb 3-1: device descriptor read/64, error -71 [ 612.272114][ T5864] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 612.329424][T11872] m920x_read = error: -19 [ 612.334084][T11872] dvb-usb: error -19 while querying for an remote control event. [ 612.369951][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.501217][ T972] m920x_read = error: -19 [ 612.512546][T11875] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 612.531746][ T972] dvb-usb: error -19 while querying for an remote control event. [ 612.752037][ T972] m920x_read = error: -19 [ 612.756475][ T972] dvb-usb: error -19 while querying for an remote control event. [ 612.854390][T13695] overlayfs: failed to clone upperpath [ 613.223201][T11875] usb 3-1: device descriptor read/64, error -71 [ 613.252799][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 613.399776][T11875] usb usb3-port1: attempt power cycle [ 613.569649][ T972] m920x_read = error: -19 [ 613.580869][ T972] dvb-usb: error -19 while querying for an remote control event. [ 613.669204][ T5865] usb 1-1: device descriptor read/64, error -71 [ 613.747022][T11875] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 613.871024][ T972] m920x_read = error: -19 [ 613.884574][T11875] usb 3-1: device descriptor read/8, error -71 [ 613.894997][ T972] dvb-usb: error -19 while querying for an remote control event. [ 613.929620][ T5865] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 614.084870][ T972] m920x_read = error: -19 [ 614.094714][ T972] dvb-usb: error -19 while querying for an remote control event. [ 614.130292][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 614.141766][ T5865] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 614.149233][T11875] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 614.171028][ T5865] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 614.179644][T11875] usb 3-1: device descriptor read/8, error -71 [ 614.189138][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 614.197341][ T5865] usb 1-1: Product: syz [ 614.209288][ T5865] usb 1-1: Manufacturer: syz [ 614.213920][ T5865] usb 1-1: SerialNumber: syz [ 614.240051][ T5865] usb 1-1: config 0 descriptor?? [ 614.246323][T13693] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 614.259356][T11879] m920x_read = error: -19 [ 614.263706][T11879] dvb-usb: error -19 while querying for an remote control event. [ 614.280085][ T5865] hub 1-1:0.0: bad descriptor, ignoring hub [ 614.286049][ T5865] hub 1-1:0.0: probe with driver hub failed with error -5 [ 614.307115][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2189'. [ 614.324073][T11875] usb usb3-port1: unable to enumerate USB device [ 614.439249][T11875] m920x_read = error: -19 [ 614.443607][T11875] dvb-usb: error -19 while querying for an remote control event. [ 614.499487][ T5864] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 614.509870][ T5864] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 614.523966][ T5864] usb 5-1: media controller created [ 614.544930][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.586284][ T5864] i2c i2c-2: Added multiplexed i2c bus 3 [ 614.592110][ T5864] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 614.599965][ T5864] usb 5-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 614.608886][ T5864] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 614.619271][T11875] m920x_read = error: -19 [ 614.635583][T11875] dvb-usb: error -19 while querying for an remote control event. [ 614.647409][ T5864] DVB: Unable to find symbol r820t_attach() [ 614.746429][ T5864] usb 5-1: USB disconnect, device number 91 [ 614.777348][T13722] FAULT_INJECTION: forcing a failure. [ 614.777348][T13722] name failslab, interval 1, probability 0, space 0, times 0 [ 614.799715][T13722] CPU: 0 UID: 0 PID: 13722 Comm: syz.2.2193 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 614.799737][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 614.799747][T13722] Call Trace: [ 614.799752][T13722] [ 614.799759][T13722] dump_stack_lvl+0x16c/0x1f0 [ 614.799783][T13722] should_fail_ex+0x50a/0x650 [ 614.799806][T13722] ? fs_reclaim_acquire+0xae/0x150 [ 614.799831][T13722] ? tomoyo_realpath_from_path+0xb9/0x720 [ 614.799853][T13722] should_failslab+0xc2/0x120 [ 614.799871][T13722] __kmalloc_noprof+0xcb/0x510 [ 614.799887][T13722] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 614.799914][T13722] tomoyo_realpath_from_path+0xb9/0x720 [ 614.799936][T13722] ? tomoyo_path_number_perm+0x235/0x590 [ 614.799957][T13722] ? tomoyo_path_number_perm+0x235/0x590 [ 614.799979][T13722] tomoyo_path_number_perm+0x248/0x590 [ 614.799997][T13722] ? tomoyo_path_number_perm+0x235/0x590 [ 614.800019][T13722] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 614.800061][T13722] ? __pfx_lock_release+0x10/0x10 [ 614.800083][T13722] ? trace_lock_acquire+0x14e/0x1f0 [ 614.800104][T13722] ? lock_acquire+0x2f/0xb0 [ 614.800124][T13722] ? __fget_files+0x40/0x3a0 [ 614.800144][T13722] ? __fget_files+0x206/0x3a0 [ 614.800163][T13722] security_file_ioctl+0x9b/0x240 [ 614.800187][T13722] __x64_sys_ioctl+0xb7/0x200 [ 614.800211][T13722] do_syscall_64+0xcd/0x250 [ 614.800231][T13722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.800253][T13722] RIP: 0033:0x7f4918b8cde9 [ 614.800267][T13722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.800282][T13722] RSP: 002b:00007f491999e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.800298][T13722] RAX: ffffffffffffffda RBX: 00007f4918da5fa0 RCX: 00007f4918b8cde9 [ 614.800309][T13722] RDX: 0000400000000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 614.800320][T13722] RBP: 00007f491999e090 R08: 0000000000000000 R09: 0000000000000000 [ 614.800329][T13722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.800339][T13722] R13: 0000000000000000 R14: 00007f4918da5fa0 R15: 00007ffcdb8ba738 [ 614.800361][T13722] [ 614.800698][T13722] ERROR: Out of memory at tomoyo_realpath_from_path. [ 615.025442][T11875] m920x_read = error: -19 [ 615.030364][T11875] dvb-usb: error -19 while querying for an remote control event. [ 615.043604][ T151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.646997][T11875] m920x_read = error: -19 [ 615.651599][T11875] dvb-usb: error -19 while querying for an remote control event. [ 615.821871][ T5864] usb 1-1: USB disconnect, device number 64 [ 615.833932][T11879] m920x_read = error: -19 [ 615.864907][T11879] dvb-usb: error -19 while querying for an remote control event. [ 616.088850][T11879] m920x_read = error: -19 [ 616.099217][T11879] dvb-usb: error -19 while querying for an remote control event. [ 616.891894][T11879] m920x_read = error: -19 [ 616.896258][T11879] dvb-usb: error -19 while querying for an remote control event. [ 616.935498][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 616.935513][ T29] audit: type=1400 audit(1739089456.027:821): avc: denied { ioctl } for pid=13744 comm="syz.2.2202" path="socket:[40087]" dev="sockfs" ino=40087 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 617.539134][T11875] m920x_read = error: -19 [ 617.543500][T11875] dvb-usb: error -19 while querying for an remote control event. [ 617.585657][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.758000][T13755] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.760238][T13759] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 617.779207][T11875] m920x_read = error: -19 [ 617.784198][T11875] dvb-usb: error -19 while querying for an remote control event. [ 617.838546][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 617.888426][T13764] Device name cannot be null; rc = [-22] [ 617.894595][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 617.960761][ T5865] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 617.971775][T11875] m920x_read = error: -19 [ 617.976774][T11875] dvb-usb: error -19 while querying for an remote control event. [ 618.131021][ T5865] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 618.139203][ T5865] usb 3-1: config 0 has no interface number 0 [ 618.148446][ T5865] usb 3-1: New USB device found, idVendor=fba0, idProduct=4f36, bcdDevice=7e.e3 [ 618.157589][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.165623][ T5865] usb 3-1: Product: syz [ 618.169935][T11875] m920x_read = error: -19 [ 618.174255][T11875] dvb-usb: error -19 while querying for an remote control event. [ 618.184734][ T5865] usb 3-1: Manufacturer: syz [ 618.202352][ T5865] usb 3-1: SerialNumber: syz [ 618.217746][ T5865] usb 3-1: config 0 descriptor?? [ 618.232846][ T5865] usb 3-1: bad CDC descriptors [ 618.369206][T11875] m920x_read = error: -19 [ 618.380980][T11875] dvb-usb: error -19 while querying for an remote control event. [ 618.433468][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.465221][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.486276][ T5865] usb 3-1: USB disconnect, device number 66 [ 618.609508][T11875] m920x_read = error: -19 [ 618.618431][T11875] dvb-usb: error -19 while querying for an remote control event. [ 618.686980][T13786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2214'. [ 618.708699][T13788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 618.715234][T13788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 618.738059][T13788] vhci_hcd vhci_hcd.0: Device attached [ 618.781487][T11875] m920x_read = error: -19 [ 618.785848][T11875] dvb-usb: error -19 while querying for an remote control event. [ 618.879833][T13797] ipt_ECN: cannot use operation on non-tcp rule [ 618.919376][ T5865] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 618.979943][T11875] m920x_read = error: -19 [ 618.984715][T11875] dvb-usb: error -19 while querying for an remote control event. [ 618.990024][ T5864] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 619.165496][T11875] m920x_read = error: -19 [ 619.170305][ T53] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 619.178486][T11875] dvb-usb: error -19 while querying for an remote control event. [ 619.389389][T11875] m920x_read = error: -19 [ 619.422510][T11875] dvb-usb: error -19 while querying for an remote control event. [ 619.550598][T13789] vhci_hcd: connection reset by peer [ 619.649323][ T6235] vhci_hcd: stop threads [ 619.707919][T11879] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 619.719571][ T6235] vhci_hcd: release socket [ 619.724138][ T6235] vhci_hcd: disconnect device [ 619.771399][T11875] m920x_read = error: -19 [ 619.810599][ T5865] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 619.820092][ T5865] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 619.853598][T11875] dvb-usb: error -19 while querying for an remote control event. [ 619.861769][ T5865] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 619.889439][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 619.899241][T11879] usb 5-1: device descriptor read/64, error -71 [ 619.922503][ T5865] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 619.936809][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.039269][T11872] m920x_read = error: -19 [ 620.049125][T11872] dvb-usb: error -19 while querying for an remote control event. [ 620.139252][T11879] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 620.197609][ T5865] usb 3-1: string descriptor 0 read error: -71 [ 620.237752][ T5865] usb 3-1: USB disconnect, device number 67 [ 620.239196][T11872] m920x_read = error: -19 [ 620.257352][T11872] dvb-usb: error -19 while querying for an remote control event. [ 620.289218][T11879] usb 5-1: device descriptor read/64, error -71 [ 620.415420][T11879] usb usb5-port1: attempt power cycle [ 620.420901][ T29] audit: type=1400 audit(1739089459.507:822): avc: denied { accept } for pid=13811 comm="syz.0.2222" path="socket:[39666]" dev="sockfs" ino=39666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 620.444980][T11872] m920x_read = error: -19 [ 620.449878][T11872] dvb-usb: error -19 while querying for an remote control event. [ 620.522017][ T29] audit: type=1400 audit(1739089459.617:823): avc: denied { getopt } for pid=13811 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.609141][T11872] m920x_read = error: -19 [ 620.613654][T11872] dvb-usb: error -19 while querying for an remote control event. [ 620.640168][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.698834][ T29] audit: type=1400 audit(1739089459.787:824): avc: denied { execute } for pid=13816 comm="syz.3.2223" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=39671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 620.769804][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.789287][T11879] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 620.819943][T11879] usb 5-1: device descriptor read/8, error -71 [ 620.830771][T11872] m920x_read = error: -19 [ 620.835159][T11872] dvb-usb: error -19 while querying for an remote control event. [ 621.057226][T11872] m920x_read = error: -19 [ 621.061952][T11872] dvb-usb: error -19 while querying for an remote control event. [ 621.109441][T11879] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 621.669238][T11872] m920x_read = error: -19 [ 621.673662][T11872] dvb-usb: error -19 while querying for an remote control event. [ 621.682191][T11879] usb 5-1: device descriptor read/8, error -71 [ 621.789820][T11879] usb usb5-port1: unable to enumerate USB device [ 621.851634][T11879] m920x_read = error: -19 [ 621.868393][T11879] dvb-usb: error -19 while querying for an remote control event. [ 622.029181][T11872] m920x_read = error: -19 [ 622.059197][T11872] dvb-usb: error -19 while querying for an remote control event. [ 622.223887][T11872] m920x_read = error: -19 [ 622.228244][T11872] dvb-usb: error -19 while querying for an remote control event. [ 622.409278][ T29] audit: type=1400 audit(1739089461.437:825): avc: denied { setattr } for pid=13852 comm="syz.1.2232" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 622.741587][T11872] m920x_read = error: -19 [ 622.745941][T11872] dvb-usb: error -19 while querying for an remote control event. [ 622.930497][T11872] m920x_read = error: -19 [ 622.976087][T13861] syz.4.2234: attempt to access beyond end of device [ 622.976087][T13861] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 623.004174][T11872] dvb-usb: error -19 while querying for an remote control event. [ 623.080498][T13862] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 623.087121][T13862] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 623.199141][T11879] m920x_read = error: -19 [ 623.203493][T11879] dvb-usb: error -19 while querying for an remote control event. [ 623.229989][T13862] vhci_hcd vhci_hcd.0: Device attached [ 623.330558][ T6235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.535133][T11879] m920x_read = error: -19 [ 623.542774][T11879] dvb-usb: error -19 while querying for an remote control event. [ 623.720898][T11879] m920x_read = error: -19 [ 623.721263][T13863] vhci_hcd: connection closed [ 623.721914][T11879] dvb-usb: error -19 while querying for an remote control event. [ 623.746041][T13851] Bluetooth: hci3: command 0x0406 tx timeout [ 623.752982][ T6228] vhci_hcd: stop threads [ 623.753065][ T6228] vhci_hcd: release socket [ 623.753230][ T6228] vhci_hcd: disconnect device [ 623.881399][T11879] m920x_read = error: -19 [ 623.917335][T11879] dvb-usb: error -19 while querying for an remote control event. [ 623.971304][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.091748][T11875] m920x_read = error: -19 [ 624.103582][T11875] dvb-usb: error -19 while querying for an remote control event. [ 624.130452][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 624.136972][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 624.149102][ T5864] vhci_hcd: vhci_device speed not set [ 625.409243][T11879] m920x_read = error: -19 [ 625.413733][T11879] dvb-usb: error -19 while querying for an remote control event. [ 625.809212][T11879] m920x_read = error: -19 [ 625.813691][T11879] dvb-usb: error -19 while querying for an remote control event. [ 625.998393][T11875] m920x_read = error: -19 [ 626.037650][T11875] dvb-usb: error -19 while querying for an remote control event. [ 626.065479][ T29] audit: type=1400 audit(1739089465.157:826): avc: denied { setopt } for pid=13908 comm="syz.2.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 626.319317][T11879] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 626.916562][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.944437][ T972] m920x_read = error: -19 [ 626.966630][ T972] dvb-usb: error -19 while querying for an remote control event. [ 627.100689][T11879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.161279][T11879] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 628.106338][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 628.112556][ T972] m920x_read = error: -19 [ 628.116910][ T972] dvb-usb: error -19 while querying for an remote control event. [ 628.129146][T11879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.137145][T11879] usb 1-1: Product: syz [ 628.570292][ T6235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.677262][T11879] usb 1-1: Manufacturer: syz [ 628.688524][T11872] m920x_read = error: -19 [ 628.693286][T11872] dvb-usb: error -19 while querying for an remote control event. [ 628.701290][T11879] usb 1-1: SerialNumber: syz [ 628.758360][T11879] usb 1-1: config 0 descriptor?? [ 628.809927][T11879] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 628.879217][T11875] m920x_read = error: -19 [ 628.883711][T11875] dvb-usb: error -19 while querying for an remote control event. [ 629.098660][T13937] syz.1.2255: attempt to access beyond end of device [ 629.098660][T13937] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 629.291912][T11879] m920x_read = error: -19 [ 629.296249][T11879] dvb-usb: error -19 while querying for an remote control event. [ 629.344026][ T975] usb 1-1: USB disconnect, device number 65 [ 629.444327][T13942] FAULT_INJECTION: forcing a failure. [ 629.444327][T13942] name failslab, interval 1, probability 0, space 0, times 0 [ 629.464135][T13942] CPU: 1 UID: 0 PID: 13942 Comm: syz.4.2256 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 629.464160][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 629.464171][T13942] Call Trace: [ 629.464177][T13942] [ 629.464184][T13942] dump_stack_lvl+0x16c/0x1f0 [ 629.464208][T13942] should_fail_ex+0x50a/0x650 [ 629.464232][T13942] ? fs_reclaim_acquire+0xae/0x150 [ 629.464258][T13942] should_failslab+0xc2/0x120 [ 629.464278][T13942] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 629.464295][T13942] ? find_held_lock+0x2d/0x110 [ 629.464312][T13942] ? __alloc_skb+0x2b1/0x380 [ 629.464335][T13942] __alloc_skb+0x2b1/0x380 [ 629.464362][T13942] ? __pfx___alloc_skb+0x10/0x10 [ 629.464379][T13942] ? __mutex_lock+0x1cc/0xb10 [ 629.464408][T13942] ip_set_byindex+0x295/0x9c0 [ 629.464436][T13942] ? __pfx_ip_set_byindex+0x10/0x10 [ 629.464467][T13942] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 629.464499][T13942] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 629.464523][T13942] ? __pfx___lock_acquire+0x10/0x10 [ 629.464566][T13942] ? lock_acquire+0x2f/0xb0 [ 629.464587][T13942] ? avc_has_perm_noaudit+0x61/0x3a0 [ 629.464610][T13942] netlink_rcv_skb+0x16b/0x440 [ 629.464630][T13942] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 629.464653][T13942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.464685][T13942] ? bpf_lsm_capable+0x9/0x10 [ 629.464704][T13942] ? security_capable+0x7e/0x260 [ 629.464724][T13942] ? ns_capable+0xd7/0x110 [ 629.464750][T13942] nfnetlink_rcv+0x1b4/0x430 [ 629.464771][T13942] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 629.464792][T13942] ? netlink_deliver_tap+0x1ae/0xd30 [ 629.464816][T13942] netlink_unicast+0x53c/0x7f0 [ 629.464837][T13942] ? __pfx_netlink_unicast+0x10/0x10 [ 629.464860][T13942] netlink_sendmsg+0x8b8/0xd70 [ 629.464880][T13942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.464907][T13942] ____sys_sendmsg+0xaaf/0xc90 [ 629.464932][T13942] ? copy_msghdr_from_user+0x10b/0x160 [ 629.464954][T13942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.464991][T13942] ___sys_sendmsg+0x135/0x1e0 [ 629.465019][T13942] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.465051][T13942] ? __pfx_lock_release+0x10/0x10 [ 629.465073][T13942] ? trace_lock_acquire+0x14e/0x1f0 [ 629.465100][T13942] ? __fget_files+0x206/0x3a0 [ 629.465123][T13942] __sys_sendmsg+0x16e/0x220 [ 629.465146][T13942] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.465183][T13942] do_syscall_64+0xcd/0x250 [ 629.465204][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.465228][T13942] RIP: 0033:0x7f9d3778cde9 [ 629.465242][T13942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.465258][T13942] RSP: 002b:00007f9d355f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.465275][T13942] RAX: ffffffffffffffda RBX: 00007f9d379a5fa0 RCX: 00007f9d3778cde9 [ 629.465286][T13942] RDX: 0000000020008000 RSI: 0000400000000180 RDI: 0000000000000003 [ 629.465296][T13942] RBP: 00007f9d355f6090 R08: 0000000000000000 R09: 0000000000000000 [ 629.465305][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.465314][T13942] R13: 0000000000000000 R14: 00007f9d379a5fa0 R15: 00007ffe04ee8b98 [ 629.465336][T13942] [ 629.479241][ T972] m920x_read = error: -19 [ 629.789221][ T975] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 629.934448][ T972] dvb-usb: error -19 while querying for an remote control event. [ 629.949144][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 629.966318][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.593031][ T972] m920x_read = error: -19 [ 630.607117][ T972] dvb-usb: error -19 while querying for an remote control event. [ 630.619677][T13961] FAULT_INJECTION: forcing a failure. [ 630.619677][T13961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.632866][T13961] CPU: 0 UID: 0 PID: 13961 Comm: syz.1.2263 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 630.632879][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 630.632885][T13961] Call Trace: [ 630.632889][T13961] [ 630.632893][T13961] dump_stack_lvl+0x16c/0x1f0 [ 630.632908][T13961] should_fail_ex+0x50a/0x650 [ 630.632925][T13961] _copy_from_user+0x2e/0xd0 [ 630.632935][T13961] sctp_setsockopt+0x2050/0xb810 [ 630.632949][T13961] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 630.632966][T13961] ? __pfx_sctp_setsockopt+0x10/0x10 [ 630.632982][T13961] ? selinux_socket_setsockopt+0x6a/0x80 [ 630.632994][T13961] ? sock_common_setsockopt+0x2e/0xf0 [ 630.633010][T13961] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 630.633026][T13961] do_sock_setsockopt+0x222/0x480 [ 630.633040][T13961] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 630.633056][T13961] ? lock_acquire+0x2f/0xb0 [ 630.633076][T13961] __sys_setsockopt+0x1a0/0x230 [ 630.633090][T13961] __x64_sys_setsockopt+0xbd/0x160 [ 630.633101][T13961] ? do_syscall_64+0x91/0x250 [ 630.633112][T13961] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.633122][T13961] do_syscall_64+0xcd/0x250 [ 630.633134][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.633148][T13961] RIP: 0033:0x7ff76658cde9 [ 630.633157][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.633166][T13961] RSP: 002b:00007ff76737c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 630.633176][T13961] RAX: ffffffffffffffda RBX: 00007ff7667a5fa0 RCX: 00007ff76658cde9 [ 630.633182][T13961] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 630.633188][T13961] RBP: 00007ff76737c090 R08: 000000000000009c R09: 0000000000000000 [ 630.633194][T13961] R10: 0000400000000340 R11: 0000000000000246 R12: 0000000000000001 [ 630.633200][T13961] R13: 0000000000000000 R14: 00007ff7667a5fa0 R15: 00007ffc4d5e4c08 [ 630.633211][T13961] [ 630.706103][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.789144][ T972] m920x_read = error: -19 [ 630.869134][ T972] dvb-usb: error -19 while querying for an remote control event. [ 631.029314][ T972] m920x_read = error: -19 [ 631.033675][ T972] dvb-usb: error -19 while querying for an remote control event. [ 631.049494][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.126353][T13977] FAULT_INJECTION: forcing a failure. [ 631.126353][T13977] name failslab, interval 1, probability 0, space 0, times 0 [ 631.139101][T13977] CPU: 0 UID: 0 PID: 13977 Comm: syz.0.2268 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 631.139121][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 631.139130][T13977] Call Trace: [ 631.139136][T13977] [ 631.139143][T13977] dump_stack_lvl+0x16c/0x1f0 [ 631.139159][T13977] should_fail_ex+0x50a/0x650 [ 631.139174][T13977] ? fs_reclaim_acquire+0xae/0x150 [ 631.139191][T13977] ? tomoyo_realpath_from_path+0xb9/0x720 [ 631.139205][T13977] should_failslab+0xc2/0x120 [ 631.139217][T13977] __kmalloc_noprof+0xcb/0x510 [ 631.139228][T13977] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 631.139245][T13977] tomoyo_realpath_from_path+0xb9/0x720 [ 631.139259][T13977] ? tomoyo_path_number_perm+0x235/0x590 [ 631.139272][T13977] ? tomoyo_path_number_perm+0x235/0x590 [ 631.139285][T13977] tomoyo_path_number_perm+0x248/0x590 [ 631.139297][T13977] ? tomoyo_path_number_perm+0x235/0x590 [ 631.139310][T13977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 631.139333][T13977] ? __pfx_lock_release+0x10/0x10 [ 631.139347][T13977] ? trace_lock_acquire+0x14e/0x1f0 [ 631.139360][T13977] ? lock_acquire+0x2f/0xb0 [ 631.139373][T13977] ? __fget_files+0x40/0x3a0 [ 631.139384][T13977] ? __fget_files+0x206/0x3a0 [ 631.139395][T13977] security_file_ioctl+0x9b/0x240 [ 631.139410][T13977] __x64_sys_ioctl+0xb7/0x200 [ 631.139425][T13977] do_syscall_64+0xcd/0x250 [ 631.139438][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.139453][T13977] RIP: 0033:0x7f9d51d8cde9 [ 631.139461][T13977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.139471][T13977] RSP: 002b:00007f9d52b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.139481][T13977] RAX: ffffffffffffffda RBX: 00007f9d51fa6080 RCX: 00007f9d51d8cde9 [ 631.139487][T13977] RDX: 0000400000000100 RSI: 00000000c004743e RDI: 0000000000000005 [ 631.139493][T13977] RBP: 00007f9d52b85090 R08: 0000000000000000 R09: 0000000000000000 [ 631.139499][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.139504][T13977] R13: 0000000000000000 R14: 00007f9d51fa6080 R15: 00007ffde5325908 [ 631.139516][T13977] [ 631.139535][T13977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 631.499224][ T972] m920x_read = error: -19 [ 631.555483][ T972] dvb-usb: error -19 while querying for an remote control event. [ 631.597137][ T29] audit: type=1400 audit(1739089470.667:827): avc: denied { append } for pid=13973 comm="syz.1.2269" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 631.630371][ T975] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 631.924483][T11875] m920x_read = error: -19 [ 631.928815][T11875] dvb-usb: error -19 while querying for an remote control event. [ 632.027695][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.047681][ T53] Bluetooth: hci3: unexpected event 0x03 length: 17 > 11 [ 632.423904][T11875] m920x_read = error: -19 [ 632.696052][T11875] dvb-usb: error -19 while querying for an remote control event. [ 632.981939][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.061136][T11875] m920x_read = error: -19 [ 633.065472][T11875] dvb-usb: error -19 while querying for an remote control event. [ 633.089441][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 633.143468][ T975] usb 5-1: config 0 descriptor?? [ 633.240693][T11875] m920x_read = error: -19 [ 633.245188][T11875] dvb-usb: error -19 while querying for an remote control event. [ 633.277197][ T975] usb 5-1: can't set config #0, error -71 [ 633.453328][ T975] usb 5-1: USB disconnect, device number 96 [ 633.462650][T11875] m920x_read = error: -19 [ 633.467002][T11875] dvb-usb: error -19 while querying for an remote control event. [ 634.120882][ T29] audit: type=1400 audit(1739089473.217:828): avc: denied { recv } for pid=14019 comm="syz.1.2278" saddr=172.20.20.57 src=20001 daddr=172.20.20.57 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 634.146285][ T972] m920x_read = error: -19 [ 634.150921][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.160604][ T972] dvb-usb: error -19 while querying for an remote control event. [ 634.171844][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.178918][T14014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.210246][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.259374][T11875] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 634.349193][ T972] m920x_read = error: -19 [ 634.358644][ T972] dvb-usb: error -19 while querying for an remote control event. [ 634.420504][T11875] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 634.438196][T11875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.448590][T11875] usb 5-1: config 0 descriptor?? [ 634.468733][T11875] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 634.482357][T11875] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 634.605455][T11875] m920x_read = error: -19 [ 634.622681][T11875] dvb-usb: error -19 while querying for an remote control event. [ 634.650388][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2282'. [ 634.799489][T11875] m920x_read = error: -19 [ 634.815048][T11875] dvb-usb: error -19 while querying for an remote control event. [ 634.835288][ T972] usb 5-1: USB disconnect, device number 97 [ 635.109320][T11875] m920x_read = error: -19 [ 635.151440][T11875] dvb-usb: error -19 while querying for an remote control event. [ 635.512194][T11875] m920x_read = error: -19 [ 635.519873][T11875] dvb-usb: error -19 while querying for an remote control event. [ 635.679250][T11875] m920x_read = error: -19 [ 635.685408][T11875] dvb-usb: error -19 while querying for an remote control event. [ 636.849194][ T29] audit: type=1400 audit(1739089475.657:829): avc: denied { ioctl } for pid=14043 comm="syz.0.2285" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 636.881702][T11875] m920x_read = error: -19 [ 636.897720][T11875] dvb-usb: error -19 while querying for an remote control event. [ 637.964362][ T972] m920x_read = error: -19 [ 637.973823][ T972] dvb-usb: error -19 while querying for an remote control event. [ 638.002521][ T29] audit: type=1326 audit(2000000000.520:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 638.051043][T14056] [ 638.053375][T14056] ====================================================== [ 638.060363][T14056] WARNING: possible circular locking dependency detected [ 638.067347][T14056] 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 Not tainted [ 638.074425][T14056] ------------------------------------------------------ [ 638.081417][T14056] syz.1.2288/14056 is trying to acquire lock: [ 638.087450][T14056] ffff88802913b468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_write+0x166/0x1b30 [ 638.096036][T14056] [ 638.096036][T14056] but task is already holding lock: [ 638.103371][T14056] ffff88807b93b140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x499/0xd50 [ 638.113076][T14056] [ 638.113076][T14056] which lock already depends on the new lock. [ 638.113076][T14056] [ 638.123459][T14056] [ 638.123459][T14056] the existing dependency chain (in reverse order) is: [ 638.132442][T14056] [ 638.132442][T14056] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 638.140137][T14056] __mutex_lock+0x19b/0xb10 [ 638.145135][T14056] autofs_notify_daemon+0x499/0xd50 [ 638.150828][T14056] autofs_wait+0x10b5/0x1a30 [ 638.155909][T14056] autofs_mount_wait+0x132/0x380 [ 638.161338][T14056] autofs_d_automount+0x390/0x7f0 [ 638.166856][T14056] __traverse_mounts+0x192/0x760 [ 638.172286][T14056] step_into+0x593/0x2220 [ 638.177108][T14056] walk_component+0xfc/0x5b0 [ 638.182193][T14056] path_lookupat+0x17f/0x770 [ 638.187280][T14056] filename_lookup+0x221/0x5f0 [ 638.192541][T14056] kern_path+0x35/0x50 [ 638.197105][T14056] lookup_bdev+0xd9/0x280 [ 638.201928][T14056] resume_store+0x1d8/0x460 [ 638.206924][T14056] kobj_attr_store+0x55/0x80 [ 638.212007][T14056] sysfs_kf_write+0x117/0x170 [ 638.217179][T14056] kernfs_fop_write_iter+0x33d/0x500 [ 638.222958][T14056] vfs_write+0x5ae/0x1150 [ 638.227785][T14056] ksys_write+0x12b/0x250 [ 638.232608][T14056] do_syscall_64+0xcd/0x250 [ 638.237603][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.243989][T14056] [ 638.243989][T14056] -> #1 (&of->mutex){+.+.}-{4:4}: [ 638.251164][T14056] __mutex_lock+0x19b/0xb10 [ 638.256158][T14056] kernfs_fop_write_iter+0x27b/0x500 [ 638.261932][T14056] iter_file_splice_write+0x90f/0x10b0 [ 638.267884][T14056] do_splice+0x146a/0x1f70 [ 638.272794][T14056] __do_splice+0x327/0x360 [ 638.277710][T14056] __x64_sys_splice+0x187/0x250 [ 638.283056][T14056] do_syscall_64+0xcd/0x250 [ 638.288050][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.294436][T14056] [ 638.294436][T14056] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 638.301785][T14056] __lock_acquire+0x249e/0x3c40 [ 638.307128][T14056] lock_acquire.part.0+0x11b/0x380 [ 638.312732][T14056] __mutex_lock+0x19b/0xb10 [ 638.317723][T14056] pipe_write+0x166/0x1b30 [ 638.322632][T14056] __kernel_write_iter+0x71f/0xa90 [ 638.328239][T14056] __kernel_write+0xf6/0x140 [ 638.333334][T14056] autofs_notify_daemon+0x4ce/0xd50 [ 638.339036][T14056] autofs_wait+0x10b5/0x1a30 [ 638.344128][T14056] autofs_mount_wait+0x132/0x380 [ 638.349556][T14056] autofs_d_automount+0x390/0x7f0 [ 638.355068][T14056] __traverse_mounts+0x192/0x760 [ 638.360504][T14056] step_into+0x593/0x2220 [ 638.365344][T14056] walk_component+0xfc/0x5b0 [ 638.370452][T14056] path_lookupat+0x17f/0x770 [ 638.375541][T14056] filename_lookup+0x221/0x5f0 [ 638.380807][T14056] kern_path+0x35/0x50 [ 638.385374][T14056] lookup_bdev+0xd9/0x280 [ 638.390194][T14056] resume_store+0x1d8/0x460 [ 638.395196][T14056] kobj_attr_store+0x55/0x80 [ 638.400292][T14056] sysfs_kf_write+0x117/0x170 [ 638.405472][T14056] kernfs_fop_write_iter+0x33d/0x500 [ 638.411254][T14056] vfs_write+0x5ae/0x1150 [ 638.416081][T14056] ksys_write+0x12b/0x250 [ 638.420903][T14056] do_syscall_64+0xcd/0x250 [ 638.425900][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.432293][T14056] [ 638.432293][T14056] other info that might help us debug this: [ 638.432293][T14056] [ 638.442492][T14056] Chain exists of: [ 638.442492][T14056] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 638.442492][T14056] [ 638.454886][T14056] Possible unsafe locking scenario: [ 638.454886][T14056] [ 638.462304][T14056] CPU0 CPU1 [ 638.467636][T14056] ---- ---- [ 638.472967][T14056] lock(&sbi->pipe_mutex); [ 638.477442][T14056] lock(&of->mutex); [ 638.483912][T14056] lock(&sbi->pipe_mutex); [ 638.490902][T14056] lock(&pipe->mutex); [ 638.495026][T14056] [ 638.495026][T14056] *** DEADLOCK *** [ 638.495026][T14056] [ 638.503136][T14056] 5 locks held by syz.1.2288/14056: [ 638.508299][T14056] #0: ffff88801ce92d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 638.517319][T14056] #1: ffff888024966420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 638.526251][T14056] #2: ffff88802887e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 638.535962][T14056] #3: ffff888140aca788 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 638.545931][T14056] #4: ffff88807b93b140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x499/0xd50 [ 638.556071][T14056] [ 638.556071][T14056] stack backtrace: [ 638.561927][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.1.2288 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 638.561940][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 638.561946][T14056] Call Trace: [ 638.561950][T14056] [ 638.561954][T14056] dump_stack_lvl+0x116/0x1f0 [ 638.561968][T14056] print_circular_bug+0x490/0x760 [ 638.561983][T14056] check_noncircular+0x31a/0x400 [ 638.561997][T14056] ? __pfx_check_noncircular+0x10/0x10 [ 638.562010][T14056] ? __pfx_lock_release+0x10/0x10 [ 638.562024][T14056] ? lockdep_lock+0xc6/0x200 [ 638.562034][T14056] ? __pfx_lockdep_lock+0x10/0x10 [ 638.562046][T14056] __lock_acquire+0x249e/0x3c40 [ 638.562061][T14056] ? __pfx___lock_acquire+0x10/0x10 [ 638.562075][T14056] ? is_bpf_text_address+0x30/0x1a0 [ 638.562091][T14056] lock_acquire.part.0+0x11b/0x380 [ 638.562105][T14056] ? pipe_write+0x166/0x1b30 [ 638.562116][T14056] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 638.562130][T14056] ? rcu_is_watching+0x12/0xc0 [ 638.562140][T14056] ? trace_lock_acquire+0x14e/0x1f0 [ 638.562151][T14056] ? __pfx_hlock_conflict+0x10/0x10 [ 638.562162][T14056] ? pipe_write+0x166/0x1b30 [ 638.562171][T14056] ? lock_acquire+0x2f/0xb0 [ 638.562184][T14056] ? pipe_write+0x166/0x1b30 [ 638.562193][T14056] __mutex_lock+0x19b/0xb10 [ 638.562204][T14056] ? pipe_write+0x166/0x1b30 [ 638.562213][T14056] ? pipe_write+0x166/0x1b30 [ 638.562223][T14056] ? __pfx___mutex_lock+0x10/0x10 [ 638.562235][T14056] ? lockdep_unlock+0x11a/0x290 [ 638.562245][T14056] ? __lock_acquire+0x2077/0x3c40 [ 638.562259][T14056] ? pipe_write+0x166/0x1b30 [ 638.562268][T14056] pipe_write+0x166/0x1b30 [ 638.562282][T14056] ? __pfx___lock_acquire+0x10/0x10 [ 638.562296][T14056] ? __pfx_pipe_write+0x10/0x10 [ 638.562306][T14056] ? lock_acquire.part.0+0x11b/0x380 [ 638.562322][T14056] ? __pfx_pipe_write+0x10/0x10 [ 638.562331][T14056] __kernel_write_iter+0x71f/0xa90 [ 638.562347][T14056] ? __pfx___kernel_write_iter+0x10/0x10 [ 638.562362][T14056] ? rcu_is_watching+0x12/0xc0 [ 638.562372][T14056] ? __mutex_lock+0x1cc/0xb10 [ 638.562382][T14056] ? __pfx_lock_release+0x10/0x10 [ 638.562396][T14056] __kernel_write+0xf6/0x140 [ 638.562411][T14056] ? __pfx___kernel_write+0x10/0x10 [ 638.562426][T14056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.562440][T14056] autofs_notify_daemon+0x4ce/0xd50 [ 638.562452][T14056] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 638.562463][T14056] ? sysfs_kf_write+0x117/0x170 [ 638.562475][T14056] ? kernfs_fop_write_iter+0x33d/0x500 [ 638.562486][T14056] ? vfs_write+0x5ae/0x1150 [ 638.562505][T14056] ? lockdep_init_map_type+0x16d/0x7d0 [ 638.562520][T14056] autofs_wait+0x10b5/0x1a30 [ 638.562532][T14056] ? __pfx_autofs_wait+0x10/0x10 [ 638.562543][T14056] ? __pfx_lock_release+0x10/0x10 [ 638.562556][T14056] ? find_held_lock+0x2d/0x110 [ 638.562567][T14056] ? autofs_d_automount+0x386/0x7f0 [ 638.562577][T14056] ? __pfx_lock_release+0x10/0x10 [ 638.562592][T14056] autofs_mount_wait+0x132/0x380 [ 638.562603][T14056] autofs_d_automount+0x390/0x7f0 [ 638.562614][T14056] __traverse_mounts+0x192/0x760 [ 638.562627][T14056] step_into+0x593/0x2220 [ 638.562642][T14056] ? __pfx_step_into+0x10/0x10 [ 638.562656][T14056] ? __pfx___up_read+0x10/0x10 [ 638.562671][T14056] ? lookup_fast+0x153/0x5f0 [ 638.562686][T14056] walk_component+0xfc/0x5b0 [ 638.562700][T14056] path_lookupat+0x17f/0x770 [ 638.562716][T14056] filename_lookup+0x221/0x5f0 [ 638.562731][T14056] ? __pfx_filename_lookup+0x10/0x10 [ 638.562751][T14056] ? getname_kernel+0x52/0x370 [ 638.562762][T14056] ? __asan_memcpy+0x3c/0x60 [ 638.562777][T14056] kern_path+0x35/0x50 [ 638.562792][T14056] lookup_bdev+0xd9/0x280 [ 638.562802][T14056] ? __pfx_lookup_bdev+0x10/0x10 [ 638.562811][T14056] ? __asan_memcpy+0x3c/0x60 [ 638.562826][T14056] resume_store+0x1d8/0x460 [ 638.562835][T14056] ? __pfx_resume_store+0x10/0x10 [ 638.562845][T14056] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 638.562859][T14056] ? rcu_is_watching+0x12/0xc0 [ 638.562870][T14056] ? __pfx_resume_store+0x10/0x10 [ 638.562879][T14056] kobj_attr_store+0x55/0x80 [ 638.562890][T14056] ? __pfx_kobj_attr_store+0x10/0x10 [ 638.562902][T14056] sysfs_kf_write+0x117/0x170 [ 638.562914][T14056] kernfs_fop_write_iter+0x33d/0x500 [ 638.562925][T14056] ? __pfx_sysfs_kf_write+0x10/0x10 [ 638.562938][T14056] vfs_write+0x5ae/0x1150 [ 638.562953][T14056] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 638.562978][T14056] ? __pfx___mutex_lock+0x10/0x10 [ 638.562988][T14056] ? __pfx_vfs_write+0x10/0x10 [ 638.563006][T14056] ksys_write+0x12b/0x250 [ 638.563021][T14056] ? __pfx_ksys_write+0x10/0x10 [ 638.563037][T14056] ? __secure_computing+0x273/0x3f0 [ 638.563049][T14056] do_syscall_64+0xcd/0x250 [ 638.563062][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.563076][T14056] RIP: 0033:0x7ff76658cde9 [ 638.563085][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.563095][T14056] RSP: 002b:00007ff76737c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.563104][T14056] RAX: ffffffffffffffda RBX: 00007ff7667a5fa0 RCX: 00007ff76658cde9 [ 638.563111][T14056] RDX: 0000000000000012 RSI: 0000400000000040 RDI: 0000000000000003 [ 638.563117][T14056] RBP: 00007ff76660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 638.563122][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.563128][T14056] R13: 0000000000000000 R14: 00007ff7667a5fa0 R15: 00007ffc4d5e4c08 [ 638.563137][T14056] [ 639.090217][ T29] audit: type=1326 audit(2000000000.550:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.114088][ T29] audit: type=1326 audit(2000000000.550:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff76658b750 code=0x7ffc0000 [ 639.137477][ T29] audit: type=1326 audit(2000000000.550:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.161075][ T29] audit: type=1326 audit(2000000000.550:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.161687][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.184452][ T29] audit: type=1326 audit(2000000000.550:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.206035][T14058] sg_write: data in/out 318767872/1 bytes for SCSI command 0xb4-- guessing data in; [ 639.206035][T14058] program syz.1.2288 not setting count and/or reply_len properly [ 639.218287][ T29] audit: type=1326 audit(2000000000.550:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.258956][ T29] audit: type=1326 audit(2000000000.550:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.282636][ T29] audit: type=1326 audit(2000000000.550:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff76658cde9 code=0x7ffc0000 [ 639.306459][ T972] m920x_read = error: -19 [ 639.310805][ T972] dvb-usb: error -19 while querying for an remote control event. [ 639.313857][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 639.379502][T11872] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 639.425220][T14056] block device autoloading is deprecated and will be removed. [ 639.436012][T14056] PM: Image not found (code -22) [ 639.469096][T11875] m920x_read = error: -19 [ 639.473436][T11875] dvb-usb: error -19 while querying for an remote control event. [ 639.530648][T11872] usb 1-1: config 0 has no interfaces? [ 639.536130][T11872] usb 1-1: New USB device found, idVendor=d6ff, idProduct=00cf, bcdDevice=d8.b0 [ 639.545175][T11872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.554250][T11872] usb 1-1: config 0 descriptor?? [ 639.640120][T11872] m920x_read = error: -19 [ 639.644450][T11872] dvb-usb: error -19 while querying for an remote control event. [ 639.762032][ T51] usb 1-1: USB disconnect, device number 66 [ 639.809124][T11872] m920x_read = error: -19 [ 639.813498][T11872] dvb-usb: error -19 while querying for an remote control event. [ 639.969583][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.980372][T11872] m920x_read = error: -19 [ 639.984709][T11872] dvb-usb: error -19 while querying for an remote control event. [ 640.149138][T11872] m920x_read = error: -19 [ 640.153485][T11872] dvb-usb: error -19 while querying for an remote control event. [ 640.319433][T11872] m920x_read = error: -19 [ 640.324242][T11872] dvb-usb: error -19 while querying for an remote control event. [ 640.490028][T11872] m920x_read = error: -19 [ 640.494374][T11872] dvb-usb: error -19 while querying for an remote control event. [ 640.659933][T11872] m920x_read = error: -19 [ 640.664264][T11872] dvb-usb: error -19 while querying for an remote control event. [ 640.829180][T11872] m920x_read = error: -19 [ 640.833543][T11872] dvb-usb: error -19 while querying for an remote control event. [ 640.999572][T11872] m920x_read = error: -19 [ 641.003922][T11872] dvb-usb: error -19 while querying for an remote control event. [ 641.169555][T11872] m920x_read = error: -19 [ 641.173889][T11872] dvb-usb: error -19 while querying for an remote control event. [ 641.339513][T11872] m920x_read = error: -19 [ 641.343842][T11872] dvb-usb: error -19 while querying for an remote control event. [ 641.519440][T11872] m920x_read = error: -19 [ 641.523791][T11872] dvb-usb: error -19 while querying for an remote control event. [ 641.689157][T11872] m920x_read = error: -19 [ 641.693488][T11872] dvb-usb: error -19 while querying for an remote control event. [ 641.860513][T11872] m920x_read = error: -19 [ 641.864848][T11872] dvb-usb: error -19 while querying for an remote control event. [ 642.029131][T11872] m920x_read = error: -19 [ 642.033479][T11872] dvb-usb: error -19 while querying for an remote control event. [ 642.200320][T11872] m920x_read = error: -19 [ 642.204675][T11872] dvb-usb: error -19 while querying for an remote control event. [ 642.371279][T11875] m920x_read = error: -19 [ 642.375608][T11875] dvb-usb: error -19 while querying for an remote control event. [ 642.540003][T11875] m920x_read = error: -19 [ 642.544358][T11875] dvb-usb: error -19 while querying for an remote control event. [ 642.709163][T11875] m920x_read = error: -19 [ 642.713500][T11875] dvb-usb: error -19 while querying for an remote control event. [ 642.879775][T11875] m920x_read = error: -19 [ 642.884123][T11875] dvb-usb: error -19 while querying for an remote control event. [ 643.059137][T11875] m920x_read = error: -19 [ 643.063501][T11875] dvb-usb: error -19 while querying for an remote control event. [ 643.229490][T11875] m920x_read = error: -19 [ 643.233829][T11875] dvb-usb: error -19 while querying for an remote control event. [ 643.399772][T11875] m920x_read = error: -19 [ 643.404102][T11875] dvb-usb: error -19 while querying for an remote control event. [ 643.579881][T11875] m920x_read = error: -19 [ 643.584242][T11875] dvb-usb: error -19 while querying for an remote control event. [ 643.750174][T11875] m920x_read = error: -19 [ 643.754511][T11875] dvb-usb: error -19 while querying for an remote control event. [ 643.929509][T11875] m920x_read = error: -19 [ 643.933912][T11875] dvb-usb: error -19 while querying for an remote control event. [ 644.099131][T11875] m920x_read = error: -19 [ 644.103492][T11875] dvb-usb: error -19 while querying for an remote control event. [ 644.269456][T11875] m920x_read = error: -19 [ 644.273811][T11875] dvb-usb: error -19 while querying for an remote control event. [ 644.379352][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.439497][T11875] m920x_read = error: -19 [ 644.443824][T11875] dvb-usb: error -19 while querying for an remote control event. [ 644.452213][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 644.452226][ T29] audit: type=1400 audit(2000000006.970:873): avc: denied { egress } for pid=11872 comm="kworker/0:9" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 644.482056][ T29] audit: type=1400 audit(2000000006.970:874): avc: denied { sendto } for pid=11872 comm="kworker/0:9" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 644.609200][T11875] m920x_read = error: -19 [ 644.613570][T11875] dvb-usb: error -19 while querying for an remote control event. [ 644.789643][T11875] m920x_read = error: -19 [ 644.793989][T11875] dvb-usb: error -19 while querying for an remote control event. [ 644.959521][T11875] m920x_read = error: -19 [ 644.963888][T11875] dvb-usb: error -19 while querying for an remote control event. [ 645.129393][T11875] m920x_read = error: -19 [ 645.133738][T11875] dvb-usb: error -19 while querying for an remote control event. [ 645.299099][T11875] m920x_read = error: -19 [ 645.303432][T11875] dvb-usb: error -19 while querying for an remote control event. [ 645.469528][T11875] m920x_read = error: -19 [ 645.473898][T11875] dvb-usb: error -19 while querying for an remote control event. [ 645.639617][T11875] m920x_read = error: -19 [ 645.643952][T11875] dvb-usb: error -19 while querying for an remote control event. [ 645.739472][ T4245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.809599][T11875] m920x_read = error: -19 [ 645.813960][T11875] dvb-usb: error -19 while querying for an remote control event. [ 645.989459][T11875] m920x_read = error: -19 [ 645.993819][T11875] dvb-usb: error -19 while querying for an remote control event. [ 646.159119][T11875] m920x_read = error: -19 [ 646.163466][T11875] dvb-usb: error -19 while querying for an remote control event. [ 646.329516][T11875] m920x_read = error: -19 [ 646.333841][T11875] dvb-usb: error -19 while querying for an remote control event. [ 646.499960][T11875] m920x_read = error: -19 [ 646.504291][T11875] dvb-usb: error -19 while querying for an remote control event. [ 646.669119][T11875] m920x_read = error: -19 [ 646.673452][T11875] dvb-usb: error -19 while querying for an remote control event. [ 646.840299][T11875] m920x_read = error: -19 [ 646.844649][T11875] dvb-usb: error -19 while querying for an remote control event. [ 647.009583][T11875] m920x_read = error: -19 [ 647.013919][T11875] dvb-usb: error -19 while querying for an remote control event. [ 647.179793][T11875] m920x_read = error: -19 [ 647.184141][T11875] dvb-usb: error -19 while querying for an remote control event. [ 647.349309][T11875] m920x_read = error: -19 [ 647.353647][T11875] dvb-usb: error -19 while querying for an remote control event. [ 647.519759][T11875] m920x_read = error: -19 [ 647.524095][T11875] dvb-usb: error -19 while querying for an remote control event. [ 647.690220][T11875] m920x_read = error: -19 [ 647.694578][T11875] dvb-usb: error -19 while querying for an remote control event. [ 647.859145][T11875] m920x_read = error: -19 [ 647.863493][T11875] dvb-usb: error -19 while querying for an remote control event. [ 648.029349][T11875] m920x_read = error: -19 [ 648.033676][T11875] dvb-usb: error -19 while querying for an remote control event.