last executing test programs: 5m45.510512914s ago: executing program 0 (id=2103): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030433030303030617374657220506c61796261636b272030303030303030301a30303030303030303030300a4c494e45330a4c494e453120274d617374657220506061796261636b20d178d153424e47c2ab736a6974636827"], 0xf7) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 5m45.509890509s ago: executing program 0 (id=2104): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 5m45.388839278s ago: executing program 0 (id=2106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x1800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 5m45.236728485s ago: executing program 0 (id=2110): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x40, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38) 5m45.074996612s ago: executing program 0 (id=2112): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 5m44.967639514s ago: executing program 0 (id=2113): r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) r2 = eventfd2(0x7ff, 0x801) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, r0, 0x0, 0x0, 0x62, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000180)="f6", 0x1, 0x7fffffffffffffff}]) 5m30.619915562s ago: executing program 32 (id=2113): r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x6, &(0x7f0000004680)=0x0) r2 = eventfd2(0x7ff, 0x801) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, r0, 0x0, 0x0, 0x62, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000180)="f6", 0x1, 0x7fffffffffffffff}]) 2m27.280580385s ago: executing program 1 (id=5306): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x3}, &(0x7f0000000100)=0x8) 2m27.222897509s ago: executing program 1 (id=5308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r2, 0x103, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) 2m27.115230229s ago: executing program 1 (id=5310): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m24.983603142s ago: executing program 1 (id=5338): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x7f, 0xb5}) 2m24.86710279s ago: executing program 1 (id=5341): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) 2m24.821945132s ago: executing program 1 (id=5343): socket$inet_mptcp(0x2, 0x1, 0x106) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m14.619571952s ago: executing program 2 (id=5493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 2m13.838889339s ago: executing program 2 (id=5500): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m13.530888898s ago: executing program 2 (id=5507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x0, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 2m13.48799385s ago: executing program 2 (id=5508): mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2m13.435288234s ago: executing program 2 (id=5510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0003a09000008009f000d000000080026006c09"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m13.380298597s ago: executing program 2 (id=5511): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m10.313698614s ago: executing program 33 (id=5343): socket$inet_mptcp(0x2, 0x1, 0x106) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1m58.943388219s ago: executing program 34 (id=5511): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.707545666s ago: executing program 6 (id=5884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x1, 0xd, 0x1, 0x0, 0x3, 0x3, 0x9, 0xda, 0x14, 0xb, 0x63, 0x6, 0x0, 0xf6, 0x0, 0x4, 0x2, 0x1, 0x9, '\x00', 0x80, 0x4}) 1m46.562622506s ago: executing program 6 (id=5886): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1m46.434504059s ago: executing program 6 (id=5889): io_uring_setup(0x497c, &(0x7f00000001c0)) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) 1m46.382987609s ago: executing program 6 (id=5891): socket$inet(0x2, 0x3, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m46.148937869s ago: executing program 6 (id=5895): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m46.005343546s ago: executing program 6 (id=5897): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Zb', 0x2}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m31.649574218s ago: executing program 35 (id=5897): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Zb', 0x2}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m9.099578467s ago: executing program 4 (id=6306): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 1m8.964772438s ago: executing program 4 (id=6308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) 1m8.823755407s ago: executing program 4 (id=6311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r0) 1m8.315988153s ago: executing program 4 (id=6318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1m8.1131413s ago: executing program 4 (id=6321): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.497489469s ago: executing program 4 (id=6329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 53.019662843s ago: executing program 36 (id=6329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4.067491448s ago: executing program 3 (id=7032): syz_emit_ethernet(0x82, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4}, {"fbc447e69f4a6424884ac61c75b0a5d0e46b256a8071805ea5229e1e93bb959a02a0692ffac1cdce8e41ba40bb17c574f3ae98db7577"}}}}}}, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000480)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x84) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0) 3.297163569s ago: executing program 7 (id=7045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000008c0)) 2.231994086s ago: executing program 3 (id=7056): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.198333779s ago: executing program 7 (id=7057): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x0, 0x4}) 1.638909114s ago: executing program 3 (id=7063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0x6, 0x4) 1.414450552s ago: executing program 7 (id=7065): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/117, 0x75, 0x41) 1.413592797s ago: executing program 5 (id=7066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x104c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0xc, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x0, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x81, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x964, 0x2, 0x5, 0x0, 0x3, 0x24000000, 0x3, 0x8, 0x307, 0x6, 0x80, 0x3, 0x3, 0x8000, 0x832b, 0x6, 0x10000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x6, 0x93c, 0xf75f, 0x7, 0x7f, 0x0, 0x2800000, 0x6, 0x9, 0x3, 0xa, 0x6, 0x7, 0x3, 0x0, 0xaa3, 0x2, 0x101, 0x3, 0x9, 0x1, 0xe, 0x4, 0xfffffc01, 0x101, 0x8, 0x2, 0x3, 0x4, 0xffff, 0x7fffffff, 0x6, 0x5, 0x4a, 0xbcc, 0xff, 0x8, 0x5, 0xff, 0xff, 0x6, 0x9b4, 0x3, 0x0, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x81, 0x4, 0x8, 0x10000, 0x74f, 0x5, 0x7fffffff, 0x2, 0x4, 0x8, 0xfffffffa, 0x80, 0x1000, 0x400, 0x7, 0xd2a, 0x3, 0x400, 0x1b, 0x400, 0x4, 0x8, 0x10000, 0x1ff, 0x1, 0xad9d, 0xff, 0xb, 0x3, 0x2, 0xa99, 0x4, 0xa, 0x6609, 0x5, 0x3, 0x4, 0x101, 0x7, 0x7, 0x21, 0x8, 0x8, 0x2, 0x1020, 0xc, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x1, 0xff, 0x8, 0x7, 0xc, 0x5, 0x6, 0x8000, 0xc, 0x8, 0x37, 0x55, 0x4, 0x4, 0xefaf, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x1, 0x1, 0x9, 0xd25e, 0xc, 0x5a44, 0xd3, 0x3, 0x8, 0x6, 0x2, 0x4, 0x2d, 0xab, 0x6, 0xffff, 0x5, 0xb, 0x5, 0xffff6e32, 0x4, 0x800, 0xffff, 0x3, 0x1ff, 0x3da9, 0x6, 0x8, 0x2, 0x6, 0xf, 0x5, 0x78, 0x0, 0x7, 0x200000, 0xfff, 0x8001, 0x5, 0x1ff, 0x90000000, 0x7968a3e5, 0x5, 0x9, 0x7fff, 0x2, 0x81, 0x0, 0x100, 0x0, 0xfff, 0x6, 0x4, 0x10, 0x1ff, 0x7f, 0x9, 0x7, 0x10, 0x3, 0x3b, 0x2, 0xfffffff8, 0x9, 0x2, 0xffff7597, 0xc, 0x8, 0xfffffffb, 0x1, 0x2, 0xc, 0x9, 0x65c, 0xd, 0x7, 0x7, 0x5, 0x5, 0x2, 0x5, 0x0, 0x1, 0x0, 0x5, 0x9, 0x4, 0x1, 0x5, 0x8000, 0x1, 0x7, 0x21f, 0x24000000, 0x2, 0x8, 0x9, 0x4, 0x4bf, 0x1, 0x1, 0x6d9, 0x1, 0x3, 0x4, 0x0, 0x9]}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0xc, 0x80, 0x40, 0x7, 0x1, 0x7ed, 0x9, 0x9, 0x34b, 0x5, 0x7ff, 0x400, 0x7a8d, 0x4, 0x74e8b26a, 0x81, 0x2, 0x3, 0x6, 0x3, 0x9, 0x9, 0x7, 0xf, 0x5279, 0x10000, 0x7, 0x4, 0x9, 0x1, 0x25, 0x81f, 0xf, 0x9, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0xe, 0xd37, 0x7, 0x800, 0x4, 0x10, 0x2, 0x2, 0xffffffff, 0x8001, 0x6, 0x3, 0xee99, 0x474, 0x10000, 0x9, 0x9, 0x8cce, 0x100, 0x2, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0xfffffff8, 0x8, 0x2, 0x1, 0x7, 0x1, 0xac, 0x3, 0x9, 0xfffffffc, 0x80, 0x10, 0x7fff, 0x7, 0x4, 0x2, 0x101, 0x78b, 0x7ff, 0x8, 0x78000000, 0x101, 0xc, 0x5, 0x3, 0xf534, 0x4, 0x2, 0x4000, 0x14ac, 0x64ebc947, 0x10001, 0xacd, 0x6, 0x6, 0xfffffffd, 0x0, 0x4, 0x2c, 0x0, 0x5, 0x7, 0x13a6, 0xb9, 0x1, 0x8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x0, 0x80000000, 0xf73, 0x10001, 0x5, 0x10001, 0x9, 0x7, 0x8fcf, 0x63165378, 0x9, 0x8, 0x6, 0x6, 0x3, 0xf33, 0x3, 0x9, 0x498, 0x6, 0x9, 0xffff41fd, 0x2, 0x8, 0x4, 0x6, 0x6, 0x4, 0x7, 0x200, 0x0, 0x1, 0xff, 0x9, 0x5, 0xfffffff8, 0x7, 0x5, 0x6, 0x4, 0x0, 0x9, 0x1, 0x6, 0x3, 0x14f4, 0x8, 0x6, 0x9, 0x954, 0xc, 0x7fffffff, 0xffffffff, 0x480000, 0x8, 0x7, 0x8, 0x4401, 0x6, 0xe6, 0x4, 0x9, 0x0, 0xffffffff, 0xe9, 0x32, 0xf1, 0x800, 0x20080, 0x9, 0x1, 0x976, 0x0, 0x7, 0x8, 0x9, 0xffffc69c, 0xbb2, 0x4, 0x3, 0x9, 0x7fff, 0x16, 0xd, 0x3, 0x6, 0x1, 0x1ff, 0x80000001, 0x7, 0xb, 0x3c0b, 0xffffffff, 0x4, 0x3caa, 0x100, 0x2, 0x1, 0xfffffff9, 0x4, 0xd6c7, 0xffffe53f, 0x99, 0x0, 0x3, 0x7, 0xf, 0x7701, 0x7, 0x7, 0xfff, 0x280, 0x2, 0xc12, 0x7, 0x9, 0x1, 0x3, 0x3, 0x40000000, 0xff, 0x4, 0x3ff, 0x8, 0xe2e4, 0xf, 0x5, 0x200, 0x9, 0x0, 0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x401, 0x9, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x100, 0xffffffff, 0x407, 0x8, 0xb8, 0x0, 0x80000000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xffffff6a, 0xd09, 0x4, 0x3, 0x3, 0x6a, 0x6, 0x4, 0x9, 0x1, 0xfffffff8, 0x4, 0xde39, 0x2, 0x7f, 0x4837, 0x0, 0x92, 0x1, 0x8000000, 0x5, 0x9, 0x5, 0x9, 0x3, 0xffff, 0x81, 0x4, 0xc, 0x3ff, 0x3, 0xdac, 0x8, 0x7ff, 0x5, 0x634, 0x10001, 0x9, 0x4, 0x0, 0x1, 0x3, 0x5, 0x9, 0x400, 0x1, 0x86b0, 0x9, 0x4, 0x2, 0x6, 0x3, 0x101, 0xff, 0xc, 0x9, 0xfff, 0x2, 0x7, 0x4f0, 0x9, 0x80000001, 0x4, 0x0, 0x0, 0x4, 0xcab5, 0xed, 0x6, 0x7f, 0x40, 0x6, 0x9, 0x2, 0xb4, 0x7, 0x4, 0x7ff, 0xb2, 0x0, 0x5, 0x1, 0x7, 0xebe, 0x9, 0x2, 0x9, 0x0, 0x7, 0x6a, 0x680, 0x34a, 0x200, 0x4, 0x4d, 0x2, 0x1, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0x7fff, 0xf, 0xfe, 0x3, 0x9, 0x3, 0x6, 0x4, 0x800, 0xd9, 0xe, 0x1, 0xde2, 0x5, 0x1, 0x5d, 0xf17, 0x5, 0x6, 0x7, 0x8, 0x9, 0x2, 0x59, 0x1010, 0xd, 0x100, 0x680acdce, 0x9, 0x8, 0x2, 0x0, 0x7, 0xa41d, 0xb3, 0x40, 0x7, 0xffffff4a, 0x6, 0x0, 0x8, 0x6, 0x8, 0xa4, 0xd, 0x101, 0xfff, 0x78, 0x7, 0xb, 0x80000000, 0x8, 0x7f, 0xa, 0x7, 0x7, 0x8, 0x8b, 0x4, 0x1, 0x558, 0xc6f2, 0x7, 0x8, 0x3, 0x639, 0x6, 0x400, 0x10000, 0x9, 0xa05, 0x2, 0x4d58, 0x4, 0x6, 0x1, 0x9, 0x8, 0x5, 0x8000, 0xfffffff7, 0x3ff, 0x2, 0xb, 0x3, 0x9, 0x4a, 0x9, 0x7fff, 0x8, 0x1000, 0x6, 0x3, 0x9, 0x7c25, 0x6, 0x68, 0x9a0, 0x9, 0xfffffffe, 0x800a, 0xa60, 0x10001, 0xd76c, 0x9, 0x1, 0x3, 0xffff, 0x6e7, 0xad2, 0x1000, 0x40, 0x7, 0x65301570, 0x4, 0x7ff, 0xb676, 0x5, 0xe, 0x8, 0x3, 0x6340, 0x5, 0xa0f7, 0x6, 0x0, 0x1, 0x4, 0x8000, 0x40, 0x2, 0xefa2, 0x0, 0xf2c, 0xb, 0x8, 0x100, 0x8f3776d, 0x8]}]}]}}]}, 0x104c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) 1.261814025s ago: executing program 8 (id=7067): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.261246097s ago: executing program 5 (id=7068): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000568000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a01"]) 1.120936542s ago: executing program 8 (id=7069): syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500005800000000002f9078ac1414bb"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000"], 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 1.117929871s ago: executing program 5 (id=7070): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) 1.010436715s ago: executing program 8 (id=7071): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1008}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x1, 0x0, 0x0) 912.701337ms ago: executing program 5 (id=7072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 824.980192ms ago: executing program 9 (id=7073): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 823.648224ms ago: executing program 8 (id=7074): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000600)="009154dc71fd2930d9662f12ea153a2d331fda5b62cee3598779e9", 0x1b, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000680)='gW', 0x2, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee", 0x12, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, 0x0) 697.104892ms ago: executing program 3 (id=7075): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ptrace(0x11, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x11, r0) 696.312438ms ago: executing program 8 (id=7076): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) 691.967696ms ago: executing program 9 (id=7077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x5d9, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000007a00200dad6e911b51818462b440b77571284f7767739a7c95", 0x2a}], 0x1}, 0x4c8c0) 594.267213ms ago: executing program 9 (id=7078): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x0, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x2b}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x1, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 484.467212ms ago: executing program 8 (id=7079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x56) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x835) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1a", 0x2}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) 483.25047ms ago: executing program 7 (id=7080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) 458.815412ms ago: executing program 3 (id=7081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x1480, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) io_submit(r1, 0x1, &(0x7f0000002c40)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0}]) 418.33042ms ago: executing program 9 (id=7082): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 344.463445ms ago: executing program 7 (id=7083): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 254.203778ms ago: executing program 3 (id=7084): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 231.239105ms ago: executing program 9 (id=7085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 107.074965ms ago: executing program 5 (id=7086): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfb998b673fdec582) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) 103.729514ms ago: executing program 9 (id=7087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0xfd4, 0x2c, 0x804, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xfff3, 0xe}, {0x10, 0x8}}, [@f_rsvp={{0x9}, {0xfa4, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9fb, 0x4, 0xfffffffe}, {0x6, 0x7, 0x8}, 0x89, 0xeb, 0x6}}, @TCA_RSVP_ACT={0xf80, 0x6, [@m_mirred={0x16c, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x9, 0x20000000, 0xfffff45d, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc292, 0xfffffff8, 0x20000000}, 0x1}}]}, {0xfd, 0x6, "fc8a4433ba7d454f9b32a7c9fa0553f734d43697463065103a14a26254c809257b96e27763b13e0d07cde285a750bb2bb51c427e88367b1d35ff4e2dd89ac7abde0d05d22bfc1c50966895fff54bf15885dce88950d35a9f0ec99669b7e258c350f3b9da2271ff62064052672d180bcd73dace3baf5c3ccd5536ab510fda8420c0639a4d85bf5d540e1db6cc700b5bc462c729edebdf46a29a014134236bc4101334fb2ae6855a421fd1eba3fd6bf3e8366c6e5aac1890457fef677ca8bc87027d6878492345cbbab805dc24b011b80a2fe74c6b0994cbd72929d09d523c2cfc645c2830415e6e3dcbcfae4e8b6d3282ac02b96fd822621bec"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xb4, 0x12, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x79, 0x6, "6cfa454fd8b69ae1dcd0e4ffba3b1e88b8d8c756ff98cf1818a4e18d1ea964142465e7ba1c523f6c83d3d90dff2d2251162e2775f11b909532a19ea30558d07b1875ad8c1869a070b8c77dfde7afd86d233fe5ec291f5b32483ac74088e6917b0ed3ed9e3410d8b15acea110d554a9b03816d9d2b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x104, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xbd, 0x6, "b692836763240c7e443cb1d4f21fd8438b8a1f1d4889156e23d703d60229e60e1803b8d7a956764e3a9a03cffde3f9d045df18a1e7f8f7769a6908ff2453ca8608f0cac4b1e5ebfadce0af4650d4b324260f8b614409d7502f81d2cda9f6cca34fafeb11f32fe379b687baafc341ced54ffa378b4b0c35ef349bd677311dd0add7b02ad41f238ed0ca464e4753c348ad768af27a1938464002233430de81a4371ad28a9a9a28f45a12778bcff7f861cc6a35f11310385ae903"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x12, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x0, 0x3ff, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffeffff, 0xfffffff6, 0x10000000, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x7, 0x6, 0xd0, 0xf3b1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x6, 0x1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7, 0x10000000, 0xd6, 0xc37}}]}, {0xf5, 0x6, "75a7a8aac2e3577e45e02cc5e3d48c702a28aaa199facb0f9527feeea5247e5a8aacb638c0ff19ca7a33c8ad9abddbfc5fa843ff3c19bff932a7223665e4a04443f140328a71182a15350d6e16f4d70a983026f40e9a2398464c89c8d3b1413e3c2b64429d64f0e65510d9a5026ed9fe28fa9fcac514ff72bad454e4249ff75fe58323730a4502653b07b92b4b1273be06df2eb67c375484748201efc5c20f270d91fbc66879880957f78665094a4769ea3b1f13639abb17078d72f8c0370a7fb95b046188e79cfb65ed928d5e55697363af8b43d839a6ec759fbbb883d759e6d5e49e0d0762843d94df1d4ee71394eddd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x6c, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x621}]}, {0x35, 0x6, "0abbceb68d89f081eb97232a9551ea6cc60e52d82778f2a079a9f6e8f00cb4dfd7cf8efd7622bf0deea14752dd1beea501"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x4c, 0x19, 0x0, 0x0, {{0xa}, {0x4}, {0x1d, 0x6, "887b62b7079d8c2a72b06467f188a49be6fa6a860153dc78c1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x68, 0x1f, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x19, 0x6, "8fe4f376e23339ad6113c680de9c1ef123d1e0bbe7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x99c, 0x20, 0x0, 0x0, {{0xc}, {0x4}, {0x96d, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xfd4}, 0x1, 0x0, 0x0, 0x539b1cfd2cf5b5e5}, 0x40000) sendto$l2tp6(r1, &(0x7f0000003200)="7eefc281dedbc0ef78a07c312f731cbcc3eea9ab6867e5be8a2639f322876db18f6d639b65fe61061b002cfcdce8b943c1674fcccb2436db2839fe2e8fd4df23d7aed37958db317040aba6d385bdf0d73d1b45305bfaf77c27cbdc592b1c1eaf41144263d7f532b11958ce535a0c94516a3255c777b992c8a5345f6ceb61f99535a2d0a792464d3fa6e7810afa24820bd9270748269561a70952c43371995d1903437c5368d499f617", 0xa9, 0x4004000, 0x0, 0x0) 55.979705ms ago: executing program 5 (id=7088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x6e, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x1d}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 0s ago: executing program 7 (id=7089): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001040200"/20, @ANYRES32=r4, @ANYBLOB="100000000000000008000300", @ANYRES32=r2], 0x28}}, 0x0) kernel console output (not intermixed with test programs): oduct=0000, bcdDevice= 0.00 [ 490.231455][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.240331][ T5913] usb 9-1: SerialNumber: syz [ 490.322876][T16936] m920x_read = error: -19 [ 490.327315][T16936] dvb-usb: error while querying for an remote control event. [ 490.382529][ T30] audit: type=1326 audit(2000000478.351:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21428 comm="syz.5.6446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e4338eba9 code=0x0 [ 490.437196][T16936] m920x_read = error: -19 [ 490.441640][T16936] dvb-usb: error while querying for an remote control event. [ 490.452082][ T5913] usb 9-1: 0:2 : does not exist [ 490.466275][ T5913] usb 9-1: USB disconnect, device number 5 [ 490.561157][T16936] m920x_read = error: -19 [ 490.565551][T16936] dvb-usb: error while querying for an remote control event. [ 490.684887][ T5913] m920x_read = error: -19 [ 490.689385][ T5913] dvb-usb: error while querying for an remote control event. [ 490.799886][T16936] m920x_read = error: -19 [ 490.804274][T16936] dvb-usb: error while querying for an remote control event. [ 490.913551][T16936] m920x_read = error: -19 [ 490.917915][T16936] dvb-usb: error while querying for an remote control event. [ 491.029128][T16936] m920x_read = error: -19 [ 491.033769][T16936] dvb-usb: error while querying for an remote control event. [ 491.152254][T16936] m920x_read = error: -19 [ 491.156631][T16936] dvb-usb: error while querying for an remote control event. [ 491.231472][ T30] audit: type=1400 audit(2000000479.244:1374): avc: denied { accept } for pid=21444 comm="syz.8.6451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.278789][T16936] m920x_read = error: -19 [ 491.283220][T16936] dvb-usb: error while querying for an remote control event. [ 491.290860][ T30] audit: type=1400 audit(2000000479.307:1375): avc: denied { listen } for pid=21444 comm="syz.8.6451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.430042][T16936] m920x_read = error: -19 [ 491.434551][T16936] dvb-usb: error while querying for an remote control event. [ 491.552117][T16936] m920x_read = error: -19 [ 491.556487][T16936] dvb-usb: error while querying for an remote control event. [ 491.685610][T16936] m920x_read = error: -19 [ 491.689987][T16936] dvb-usb: error while querying for an remote control event. [ 491.809134][ T5913] m920x_read = error: -19 [ 491.813506][ T5913] dvb-usb: error while querying for an remote control event. [ 491.861014][ T30] audit: type=1400 audit(2000000479.905:1376): avc: denied { create } for pid=21459 comm="syz.8.6458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 491.904764][ T30] audit: type=1400 audit(2000000479.926:1377): avc: denied { sys_admin } for pid=21459 comm="syz.8.6458" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 491.942404][T16936] m920x_read = error: -19 [ 491.946798][T16936] dvb-usb: error while querying for an remote control event. [ 492.022048][ T30] audit: type=1400 audit(2000000480.073:1378): avc: denied { map } for pid=21466 comm="syz.3.6461" path="socket:[81989]" dev="sockfs" ino=81989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 492.064262][T16936] m920x_read = error: -19 [ 492.068664][T16936] dvb-usb: error while querying for an remote control event. [ 492.187654][T16936] m920x_read = error: -19 [ 492.298256][T16936] dvb-usb: error while querying for an remote control event. [ 492.310399][ T1068] block nbd1: Possible stuck request ffff888026937000: control (read@0,1024B). Runtime 270 seconds [ 492.321242][ T1068] block nbd1: Possible stuck request ffff8880269371c0: control (read@1024,1024B). Runtime 270 seconds [ 492.332490][ T1068] block nbd1: Possible stuck request ffff888026937380: control (read@2048,1024B). Runtime 270 seconds [ 492.343549][ T1068] block nbd1: Possible stuck request ffff888026937540: control (read@3072,1024B). Runtime 270 seconds [ 492.409182][T16936] m920x_read = error: -19 [ 492.413553][T16936] dvb-usb: error while querying for an remote control event. [ 492.532838][T16936] m920x_read = error: -19 [ 492.537219][T16936] dvb-usb: error while querying for an remote control event. [ 492.656650][T16936] m920x_read = error: -19 [ 492.661033][T16936] dvb-usb: error while querying for an remote control event. [ 492.809058][T16940] m920x_read = error: -19 [ 492.813425][T16940] dvb-usb: error while querying for an remote control event. [ 492.943444][T16940] m920x_read = error: -19 [ 492.947823][T16940] dvb-usb: error while querying for an remote control event. [ 493.117101][T16940] m920x_read = error: -19 [ 493.121475][T16940] dvb-usb: error while querying for an remote control event. [ 493.174335][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 493.247158][T16936] m920x_read = error: -19 [ 493.251553][T16936] dvb-usb: error while querying for an remote control event. [ 493.272521][ T30] audit: type=1400 audit(2000000481.385:1379): avc: denied { write } for pid=21495 comm="syz.7.6473" path="socket:[82096]" dev="sockfs" ino=82096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 493.317707][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 493.370911][ T30] audit: type=1400 audit(2000000481.438:1380): avc: denied { map } for pid=21497 comm="syz.8.6474" path="socket:[81757]" dev="sockfs" ino=81757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 493.394858][T16936] m920x_read = error: -19 [ 493.411294][T16936] dvb-usb: error while querying for an remote control event. [ 493.469651][ T30] audit: type=1400 audit(2000000481.438:1381): avc: denied { read } for pid=21497 comm="syz.8.6474" path="socket:[81757]" dev="sockfs" ino=81757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 493.528816][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 493.542401][T16936] m920x_read = error: -19 [ 493.548951][T16936] dvb-usb: error while querying for an remote control event. [ 493.613657][T21500] netlink: 'syz.8.6476': attribute type 1 has an invalid length. [ 493.669454][T16936] m920x_read = error: -19 [ 493.675924][T21500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.683142][T16936] dvb-usb: error while querying for an remote control event. [ 493.709517][T21504] bond1: (slave ip6erspan0): making interface the new active one [ 493.718848][T21504] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 493.832269][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 493.857020][T16936] m920x_read = error: -19 [ 493.861387][T16936] dvb-usb: error while querying for an remote control event. [ 493.991009][ T5913] m920x_read = error: -19 [ 493.995376][ T5913] dvb-usb: error while querying for an remote control event. [ 494.007127][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 494.161842][ T5913] m920x_read = error: -19 [ 494.166220][ T5913] dvb-usb: error while querying for an remote control event. [ 494.242192][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 494.314352][ T5913] m920x_read = error: -19 [ 494.318782][ T5913] dvb-usb: error while querying for an remote control event. [ 494.348819][T21524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.355706][ T5836] udevd[5836]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 494.450172][ T5913] m920x_read = error: -19 [ 494.454551][ T5913] dvb-usb: error while querying for an remote control event. [ 494.572994][ T5913] m920x_read = error: -19 [ 494.577417][ T5913] dvb-usb: error while querying for an remote control event. [ 494.616370][T21539] GUP no longer grows the stack in syz.5.6492 (21539): 200000004000-20000000a000 (200000002000) [ 494.630230][T21539] CPU: 1 UID: 0 PID: 21539 Comm: syz.5.6492 Not tainted syzkaller #0 PREEMPT(full) [ 494.630257][T21539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.630269][T21539] Call Trace: [ 494.630276][T21539] [ 494.630284][T21539] dump_stack_lvl+0x16c/0x1f0 [ 494.630314][T21539] gup_vma_lookup+0x1d2/0x220 [ 494.630341][T21539] __get_user_pages+0x243/0x34a0 [ 494.630376][T21539] ? find_held_lock+0x2b/0x80 [ 494.630402][T21539] ? __pfx___get_user_pages+0x10/0x10 [ 494.630434][T21539] get_user_pages_remote+0x243/0xab0 [ 494.630459][T21539] ? mas_parent_gap+0x6f0/0x7b0 [ 494.630484][T21539] ? __pfx_get_user_pages_remote+0x10/0x10 [ 494.630513][T21539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.630539][T21539] __access_remote_vm+0x24d/0x850 [ 494.630567][T21539] ? do_raw_spin_lock+0x12c/0x2b0 [ 494.630587][T21539] ? __pfx___access_remote_vm+0x10/0x10 [ 494.630617][T21539] proc_pid_cmdline_read+0x4de/0x8e0 [ 494.630641][T21539] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 494.630664][T21539] ? rw_verify_area+0xcf/0x6c0 [ 494.630692][T21539] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 494.630712][T21539] vfs_readv+0x5c1/0x8b0 [ 494.630734][T21539] ? __pfx_vfs_readv+0x10/0x10 [ 494.630753][T21539] ? kmem_cache_free+0x2d1/0x4d0 [ 494.630784][T21539] ? __fget_files+0x20e/0x3c0 [ 494.630810][T21539] ? do_preadv+0x1a6/0x270 [ 494.630826][T21539] do_preadv+0x1a6/0x270 [ 494.630843][T21539] ? __pfx_do_preadv+0x10/0x10 [ 494.630867][T21539] do_syscall_64+0xcd/0x4e0 [ 494.630891][T21539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.630910][T21539] RIP: 0033:0x7f1e4338eba9 [ 494.630924][T21539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.630942][T21539] RSP: 002b:00007f1e44159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 494.630960][T21539] RAX: ffffffffffffffda RBX: 00007f1e435d5fa0 RCX: 00007f1e4338eba9 [ 494.630972][T21539] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 494.630982][T21539] RBP: 00007f1e43411e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.630992][T21539] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 494.631003][T21539] R13: 00007f1e435d6038 R14: 00007f1e435d5fa0 R15: 00007ffe89714328 [ 494.631027][T21539] [ 494.865670][ T5913] m920x_read = error: -19 [ 494.870139][ T5913] dvb-usb: error while querying for an remote control event. [ 494.916450][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 495.023348][T16940] m920x_read = error: -19 [ 495.028079][T16940] dvb-usb: error while querying for an remote control event. [ 495.137632][ T5913] m920x_read = error: -19 [ 495.142005][ T5913] dvb-usb: error while querying for an remote control event. [ 495.165821][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 495.176232][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 495.187651][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 495.196189][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 495.229879][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 495.248730][ T5913] m920x_read = error: -19 [ 495.253416][ T5913] dvb-usb: error while querying for an remote control event. [ 495.286236][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 495.361958][ T5913] m920x_read = error: -19 [ 495.376116][ T5913] dvb-usb: error while querying for an remote control event. [ 495.449260][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 495.474355][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 495.505187][T16940] m920x_read = error: -19 [ 495.511520][T16940] dvb-usb: error while querying for an remote control event. [ 495.628699][T16940] m920x_read = error: -19 [ 495.633960][T16940] dvb-usb: error while querying for an remote control event. [ 495.772996][T16940] m920x_read = error: -19 [ 495.785135][T16940] dvb-usb: error while querying for an remote control event. [ 495.887818][T21550] ceph: No mds server is up or the cluster is laggy [ 495.927084][T16940] m920x_read = error: -19 [ 495.931461][T16940] dvb-usb: error while querying for an remote control event. [ 496.004268][T16940] libceph: connect (1)[c::]:6789 error -101 [ 496.054005][T16940] libceph: mon0 (1)[c::]:6789 connect error [ 496.086304][ T5913] m920x_read = error: -19 [ 496.101269][ T5913] dvb-usb: error while querying for an remote control event. [ 496.248250][ T5913] m920x_read = error: -19 [ 496.252734][ T5913] dvb-usb: error while querying for an remote control event. [ 496.371334][T21575] SELinux: failed to load policy [ 496.382099][ T5913] m920x_read = error: -19 [ 496.386471][ T5913] dvb-usb: error while querying for an remote control event. [ 496.534732][ T5913] m920x_read = error: -19 [ 496.542440][ T5913] dvb-usb: error while querying for an remote control event. [ 496.647151][ T5169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.663676][ T5169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.676207][ T5169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.683901][ T5913] m920x_read = error: -19 [ 496.688800][ T5913] dvb-usb: error while querying for an remote control event. [ 496.697026][ T5169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.704707][ T5169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.810306][ T5913] m920x_read = error: -19 [ 496.814795][ T5913] dvb-usb: error while querying for an remote control event. [ 496.828515][T21583] lo speed is unknown, defaulting to 1000 [ 496.924050][T16936] m920x_read = error: -19 [ 496.928467][T16936] dvb-usb: error while querying for an remote control event. [ 497.057659][T16940] m920x_read = error: -19 [ 497.062037][T16940] dvb-usb: error while querying for an remote control event. [ 497.191220][ T5913] m920x_read = error: -19 [ 497.195613][ T5913] dvb-usb: error while querying for an remote control event. [ 497.310202][T21583] chnl_net:caif_netlink_parms(): no params data found [ 497.353840][T16940] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 497.375631][ T5913] m920x_read = error: -19 [ 497.380001][ T5913] dvb-usb: error while querying for an remote control event. [ 497.505437][ T5913] m920x_read = error: -19 [ 497.509915][ T5913] dvb-usb: error while querying for an remote control event. [ 497.519729][T21583] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.544660][T16940] usb 4-1: config 0 has no interfaces? [ 497.550353][T16940] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 497.571541][T21607] input: syz1 as /devices/virtual/input/input100 [ 497.572932][T21583] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.585198][T16940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.623818][ T5913] m920x_read = error: -19 [ 497.628338][T21583] bridge_slave_0: entered allmulticast mode [ 497.638465][ T5913] dvb-usb: error while querying for an remote control event. [ 497.647800][T16940] usb 4-1: config 0 descriptor?? [ 497.656718][T21583] bridge_slave_0: entered promiscuous mode [ 497.706375][T21583] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.735287][T21583] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.755271][T21583] bridge_slave_1: entered allmulticast mode [ 497.777987][T21583] bridge_slave_1: entered promiscuous mode [ 497.781398][ T5913] m920x_read = error: -19 [ 497.791284][ T5913] dvb-usb: error while querying for an remote control event. [ 497.904902][T21583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.915642][T16940] m920x_read = error: -19 [ 497.920139][T16940] dvb-usb: error while querying for an remote control event. [ 497.932144][T21583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.989710][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 498.011310][T21583] team0: Port device team_slave_0 added [ 498.032396][T21583] team0: Port device team_slave_1 added [ 498.038889][T16940] m920x_read = error: -19 [ 498.048009][T16940] dvb-usb: error while querying for an remote control event. [ 498.096157][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 498.121260][T21620] cgroup: fork rejected by pids controller in /syz8 [ 498.134828][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 498.155094][T21583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.175293][T21583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.204273][ T5913] m920x_read = error: -19 [ 498.208629][ T5913] dvb-usb: error while querying for an remote control event. [ 498.241837][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 498.248886][T21583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.281188][ T5913] usb 4-1: USB disconnect, device number 98 [ 498.301423][T21583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.316439][T21583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.342749][T16940] m920x_read = error: -19 [ 498.347843][T16940] dvb-usb: error while querying for an remote control event. [ 498.373624][T21583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.393409][ T7764] udevd[7764]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 498.477115][T16935] m920x_read = error: -19 [ 498.481543][T16935] dvb-usb: error while querying for an remote control event. [ 498.499545][T21583] hsr_slave_0: entered promiscuous mode [ 498.506380][T21583] hsr_slave_1: entered promiscuous mode [ 498.512508][T21583] debugfs: 'hsr0' already exists in 'hsr' [ 498.518965][T21583] Cannot create hsr debugfs directory [ 498.591342][T16935] m920x_read = error: -19 [ 498.595722][T16935] dvb-usb: error while querying for an remote control event. [ 498.658744][ T5852] Bluetooth: hci5: command tx timeout [ 498.702665][T20128] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.715017][T16935] m920x_read = error: -19 [ 498.719378][T16935] dvb-usb: error while querying for an remote control event. [ 498.792367][T20128] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.848297][ T5913] m920x_read = error: -19 [ 498.852805][ T5913] dvb-usb: error while querying for an remote control event. [ 498.926787][T20128] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.963270][ T5913] m920x_read = error: -19 [ 498.972003][ T5913] dvb-usb: error while querying for an remote control event. [ 499.048038][T20128] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.069670][T21583] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 499.087592][T21583] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 499.096494][T16935] m920x_read = error: -19 [ 499.101008][T16935] dvb-usb: error while querying for an remote control event. [ 499.125802][ T5169] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 499.138974][ T5169] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 499.148073][ T5169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 499.157342][ T5169] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 499.164959][ T5169] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 499.195395][T21583] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 499.210226][T16935] m920x_read = error: -19 [ 499.214693][T16935] dvb-usb: error while querying for an remote control event. [ 499.255444][T21583] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 499.311086][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 499.326835][T16935] m920x_read = error: -19 [ 499.340465][T16935] dvb-usb: error while querying for an remote control event. [ 499.411656][T21642] lo speed is unknown, defaulting to 1000 [ 499.458010][T16935] m920x_read = error: -19 [ 499.462408][T16935] dvb-usb: error while querying for an remote control event. [ 499.463497][T16927] libceph: connect (1)[c::]:6789 error -101 [ 499.488204][T16927] libceph: mon0 (1)[c::]:6789 connect error [ 499.510965][T16927] libceph: connect (1)[c::]:6789 error -101 [ 499.548952][T16927] libceph: mon0 (1)[c::]:6789 connect error [ 499.619847][ T5913] m920x_read = error: -19 [ 499.626783][ T5913] dvb-usb: error while querying for an remote control event. [ 499.746294][T16927] libceph: connect (1)[c::]:6789 error -101 [ 499.756873][T21662] IPv4: Oversized IP packet from 127.202.26.0 [ 499.766831][T16927] libceph: mon0 (1)[c::]:6789 connect error [ 499.802051][T16927] libceph: connect (1)[c::]:6789 error -101 [ 499.824794][T20128] bridge_slave_1: left allmulticast mode [ 499.832641][T16927] libceph: mon0 (1)[c::]:6789 connect error [ 499.839186][ T5913] m920x_read = error: -19 [ 499.842759][T20128] bridge_slave_1: left promiscuous mode [ 499.843524][ T5913] dvb-usb: error while querying for an remote control event. [ 499.926304][T20128] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.936008][T20128] bridge_slave_0: left allmulticast mode [ 499.941671][T20128] bridge_slave_0: left promiscuous mode [ 499.947648][T20128] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.956142][T16935] m920x_read = error: -19 [ 499.960988][T16935] dvb-usb: error while querying for an remote control event. [ 500.078549][ T5913] m920x_read = error: -19 [ 500.089086][ T5913] dvb-usb: error while querying for an remote control event. [ 500.132758][T20128] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 500.153879][T21648] ceph: No mds server is up or the cluster is laggy [ 500.161915][T21655] ceph: No mds server is up or the cluster is laggy [ 500.201781][ T5913] m920x_read = error: -19 [ 500.215492][ T5913] dvb-usb: error while querying for an remote control event. [ 500.333500][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 500.344876][ T5913] m920x_read = error: -19 [ 500.349236][ T5913] dvb-usb: error while querying for an remote control event. [ 500.458172][ T5913] m920x_read = error: -19 [ 500.462733][ T5913] dvb-usb: error while querying for an remote control event. [ 500.572600][ T5913] m920x_read = error: -19 [ 500.577246][ T5913] dvb-usb: error while querying for an remote control event. [ 500.607381][T20128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.619610][T20128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.631878][T20128] bond0 (unregistering): (slave team0): Releasing backup interface [ 500.640063][ T5852] Bluetooth: hci5: command tx timeout [ 500.650931][T20128] bond0 (unregistering): Released all slaves [ 500.706477][ T5913] m920x_read = error: -19 [ 500.713471][ T5913] dvb-usb: error while querying for an remote control event. [ 500.790920][T20128] bond1 (unregistering): Released all slaves [ 500.821379][T21675] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6538'. [ 500.821535][ T5913] m920x_read = error: -19 [ 500.847212][ T5913] dvb-usb: error while querying for an remote control event. [ 500.977940][T21583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.989640][T21642] chnl_net:caif_netlink_parms(): no params data found [ 501.011284][T16940] m920x_read = error: -19 [ 501.015676][T16940] dvb-usb: error while querying for an remote control event. [ 501.035603][T21583] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.099535][ T5852] Bluetooth: hci7: command tx timeout [ 501.105154][T21681] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 501.127513][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 501.147205][T21681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 501.163045][T16940] m920x_read = error: -19 [ 501.167409][T16940] dvb-usb: error while querying for an remote control event. [ 501.206672][T20092] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.213857][T20092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.276324][T21685] kvm: kvm [21680]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 501.288483][T16940] m920x_read = error: -19 [ 501.292840][T16940] dvb-usb: error while querying for an remote control event. [ 501.351858][T20092] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.359021][T20092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.417710][T16940] m920x_read = error: -19 [ 501.432531][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 501.443628][T16940] dvb-usb: error while querying for an remote control event. [ 501.557773][T21642] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.565437][ T5913] m920x_read = error: -19 [ 501.569798][ T5913] dvb-usb: error while querying for an remote control event. [ 501.597049][T21642] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.615682][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 501.629594][T21642] bridge_slave_0: entered allmulticast mode [ 501.673640][T21642] bridge_slave_0: entered promiscuous mode [ 501.697092][ T5913] m920x_read = error: -19 [ 501.701536][ T5913] dvb-usb: error while querying for an remote control event. [ 501.724779][T21642] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.764397][T21642] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.792428][T21642] bridge_slave_1: entered allmulticast mode [ 501.822542][T21642] bridge_slave_1: entered promiscuous mode [ 501.840554][T16936] m920x_read = error: -19 [ 501.845026][T16936] dvb-usb: error while querying for an remote control event. [ 502.010831][T16940] m920x_read = error: -19 [ 502.015221][T16940] dvb-usb: error while querying for an remote control event. [ 502.126642][T21642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.154152][T16940] m920x_read = error: -19 [ 502.162045][T16940] dvb-usb: error while querying for an remote control event. [ 502.214150][T20128] hsr_slave_0: left promiscuous mode [ 502.235076][T20128] hsr_slave_1: left promiscuous mode [ 502.245484][T20128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.254609][T20128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.268860][T20128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.286166][T20128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.287100][T16940] m920x_read = error: -19 [ 502.306108][T16940] dvb-usb: error while querying for an remote control event. [ 502.356693][T20128] veth1_macvtap: left promiscuous mode [ 502.362253][T20128] veth0_macvtap: left promiscuous mode [ 502.368446][T20128] veth1_vlan: left promiscuous mode [ 502.374046][T20128] veth0_vlan: left promiscuous mode [ 502.420582][T16940] m920x_read = error: -19 [ 502.424946][T16940] dvb-usb: error while querying for an remote control event. [ 502.553992][T16940] m920x_read = error: -19 [ 502.558393][T16940] dvb-usb: error while querying for an remote control event. [ 502.620386][ T5852] Bluetooth: hci5: command tx timeout [ 502.677718][T16940] m920x_read = error: -19 [ 502.682108][T16940] dvb-usb: error while querying for an remote control event. [ 502.715869][T16927] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 502.806330][T16940] m920x_read = error: -19 [ 502.810743][T16940] dvb-usb: error while querying for an remote control event. [ 502.867464][T20128] team0 (unregistering): Port device team_slave_1 removed [ 502.875653][T16927] usb 4-1: Using ep0 maxpacket: 32 [ 502.883985][T16927] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 502.893366][T16927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.904401][T16927] usb 4-1: config 0 descriptor?? [ 502.921838][T16940] m920x_read = error: -19 [ 502.931946][T16940] dvb-usb: error while querying for an remote control event. [ 502.940950][T20128] team0 (unregistering): Port device team_slave_0 removed [ 503.049566][T16940] m920x_read = error: -19 [ 503.053937][T16940] dvb-usb: error while querying for an remote control event. [ 503.079273][ T5169] Bluetooth: hci7: command tx timeout [ 503.110901][T16927] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 503.122778][T16927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.134406][T16927] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 503.143800][T16927] usb 4-1: media controller created [ 503.167918][T16927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.188770][T16940] m920x_read = error: -19 [ 503.198377][T16940] dvb-usb: error while querying for an remote control event. [ 503.310130][T16940] m920x_read = error: -19 [ 503.314516][T16940] dvb-usb: error while querying for an remote control event. [ 503.408700][T21642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.420716][T16940] m920x_read = error: -19 [ 503.425071][T16940] dvb-usb: error while querying for an remote control event. [ 503.534135][T21642] team0: Port device team_slave_0 added [ 503.554679][T16940] m920x_read = error: -19 [ 503.559053][T16940] dvb-usb: error while querying for an remote control event. [ 503.588253][T21642] team0: Port device team_slave_1 added [ 503.678121][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 503.690110][T16940] m920x_read = error: -19 [ 503.707100][T21642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.714062][T21642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.740480][T16940] dvb-usb: error while querying for an remote control event. [ 503.801700][T21642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.833499][T21642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.852440][T21642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.878913][T16935] m920x_read = error: -19 [ 503.883264][T16935] dvb-usb: error while querying for an remote control event. [ 503.891448][T21642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.011703][T16935] m920x_read = error: -19 [ 504.016076][T16935] dvb-usb: error while querying for an remote control event. [ 504.111929][T16927] stb0899_attach: Driver disabled by Kconfig [ 504.139431][T16927] az6027: no front-end attached [ 504.139431][T16927] [ 504.145000][T16935] m920x_read = error: -19 [ 504.151300][T16935] dvb-usb: error while querying for an remote control event. [ 504.181354][T16927] az6027: usb out operation failed. (-71) [ 504.200470][T21642] hsr_slave_0: entered promiscuous mode [ 504.214507][T16927] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 504.249722][T16927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101 [ 504.256025][T21642] hsr_slave_1: entered promiscuous mode [ 504.302876][T21642] debugfs: 'hsr0' already exists in 'hsr' [ 504.330725][T16927] dvb-usb: schedule remote query interval to 400 msecs. [ 504.338879][T21642] Cannot create hsr debugfs directory [ 504.352223][T21583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.354383][T16940] m920x_read = error: -19 [ 504.363322][T16940] dvb-usb: error while querying for an remote control event. [ 504.377404][T16927] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 504.426399][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 504.473590][T16927] usb 4-1: USB disconnect, device number 99 [ 504.526665][T16935] m920x_read = error: -19 [ 504.531337][T16935] dvb-usb: error while querying for an remote control event. [ 504.602126][ T5169] Bluetooth: hci5: command tx timeout [ 504.682357][T16935] m920x_read = error: -19 [ 504.686819][T16935] dvb-usb: error while querying for an remote control event. [ 504.772109][T16927] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 504.821049][T16940] m920x_read = error: -19 [ 504.825410][T16940] dvb-usb: error while querying for an remote control event. [ 504.891561][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6567'. [ 504.982406][T16940] m920x_read = error: -19 [ 504.987959][T16940] dvb-usb: error while querying for an remote control event. [ 505.059504][ T5169] Bluetooth: hci7: command tx timeout [ 505.107092][T16940] m920x_read = error: -19 [ 505.111464][T16940] dvb-usb: error while querying for an remote control event. [ 505.241603][T16940] m920x_read = error: -19 [ 505.245971][T16940] dvb-usb: error while querying for an remote control event. [ 505.323136][T21583] veth0_vlan: entered promiscuous mode [ 505.352964][T21583] veth1_vlan: entered promiscuous mode [ 505.367203][T16940] m920x_read = error: -19 [ 505.371569][T16940] dvb-usb: error while querying for an remote control event. [ 505.462993][T21800] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6569'. [ 505.497304][T16940] m920x_read = error: -19 [ 505.501850][T16940] dvb-usb: error while querying for an remote control event. [ 505.621309][T16935] m920x_read = error: -19 [ 505.626585][T16935] dvb-usb: error while querying for an remote control event. [ 505.664740][T21583] veth0_macvtap: entered promiscuous mode [ 505.713287][T21583] veth1_macvtap: entered promiscuous mode [ 505.764456][T16940] m920x_read = error: -19 [ 505.772262][T21583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.774994][T16940] dvb-usb: error while querying for an remote control event. [ 505.816695][T21583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.929212][T20120] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.944885][T16935] m920x_read = error: -19 [ 505.949246][T16935] dvb-usb: error while querying for an remote control event. [ 505.961586][T20120] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.017241][T20120] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.064077][T21642] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 506.084807][T20120] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.097352][ T5913] m920x_read = error: -19 [ 506.101712][ T5913] dvb-usb: error while querying for an remote control event. [ 506.110930][T16940] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 506.124523][T21642] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 506.150598][T21642] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 506.194737][T21824] loop2: detected capacity change from 0 to 7 [ 506.201852][T21642] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 506.214433][T21824] Dev loop2: unable to read RDB block 7 [ 506.220012][T21824] loop2: AHDI p1 p2 p3 [ 506.224771][T21824] loop2: partition table partially beyond EOD, truncated [ 506.238650][T21824] loop2: p1 start 1601398130 is beyond EOD, truncated [ 506.255332][T21824] loop2: p2 start 1702059890 is beyond EOD, truncated [ 506.265525][ T5913] m920x_read = error: -19 [ 506.273622][ T5913] dvb-usb: error while querying for an remote control event. [ 506.292807][T20092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.297339][T16940] usb 6-1: Using ep0 maxpacket: 32 [ 506.323392][T16940] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 506.323680][T20092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.334191][ T7758] udevd[7758]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 506.363052][T16940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.381619][T16940] usb 6-1: Product: syz [ 506.393353][T16940] usb 6-1: Manufacturer: syz [ 506.397974][T16940] usb 6-1: SerialNumber: syz [ 506.402865][ T5913] m920x_read = error: -19 [ 506.407196][ T5913] dvb-usb: error while querying for an remote control event. [ 506.424712][ T7758] udevd[7758]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 506.446160][T16940] usb 6-1: config 0 descriptor?? [ 506.456296][T16940] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 506.483402][ T7758] udevd[7758]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 506.496147][T20128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.517315][T20128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.530408][ T5913] m920x_read = error: -19 [ 506.534794][ T5913] dvb-usb: error while querying for an remote control event. [ 506.575464][ T7758] udevd[7758]: symlink '../../loop2' '/dev/disk/by-diskseq/119.tmp-b7:2' failed: Read-only file system [ 506.617986][T21642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.655277][T21642] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.697419][ T5913] m920x_read = error: -19 [ 506.717039][ T5913] dvb-usb: error while querying for an remote control event. [ 506.774587][T20120] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.781726][T20120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.805853][T20120] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.813037][T20120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.888131][T16935] m920x_read = error: -19 [ 506.892480][T16935] dvb-usb: error while querying for an remote control event. [ 507.012626][ T5913] m920x_read = error: -19 [ 507.033939][ T5913] dvb-usb: error while querying for an remote control event. [ 507.042738][ T5169] Bluetooth: hci7: command tx timeout [ 507.147992][ T30] audit: type=1400 audit(2000000495.946:1382): avc: denied { name_bind 0x1000000 } for pid=21846 comm="syz.9.6577" path="socket:[84406]" dev="sockfs" ino=84406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 507.148347][T21847] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 507.191594][ T5913] m920x_read = error: -19 [ 507.200702][ T5913] dvb-usb: error while querying for an remote control event. [ 507.335068][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 507.348593][ T5913] m920x_read = error: -19 [ 507.352973][ T5913] dvb-usb: error while querying for an remote control event. [ 507.526023][T16935] m920x_read = error: -19 [ 507.530639][T16935] dvb-usb: error while querying for an remote control event. [ 507.588822][T21642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.642195][ T5913] m920x_read = error: -19 [ 507.653890][ T5913] dvb-usb: error while querying for an remote control event. [ 507.669930][T16940] gspca_stk1135: reg_w 0xd err -71 [ 507.689450][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 507.729219][T16940] gspca_stk1135: Sensor write failed [ 507.734575][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 507.805652][T16940] gspca_stk1135: Sensor write failed [ 507.810998][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 507.841675][T16939] m920x_read = error: -19 [ 507.851924][T16939] dvb-usb: error while querying for an remote control event. [ 507.872049][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 507.873537][T16940] gspca_stk1135: Sensor read failed [ 507.925000][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 507.935736][T16940] gspca_stk1135: Sensor read failed [ 507.947705][T16940] gspca_stk1135: Detected sensor type unknown (0x0) [ 507.954340][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 508.004512][T16940] gspca_stk1135: Sensor read failed [ 508.014246][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 508.030950][T16939] m920x_read = error: -19 [ 508.055196][T16939] dvb-usb: error while querying for an remote control event. [ 508.068152][T16940] gspca_stk1135: Sensor read failed [ 508.088240][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 508.094646][T16940] gspca_stk1135: Sensor write failed [ 508.103390][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 508.107342][T16940] gspca_stk1135: serial bus timeout: status=0x00 [ 508.176311][T16940] gspca_stk1135: Sensor write failed [ 508.181683][T16940] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 508.204119][T16936] m920x_read = error: -19 [ 508.208480][T16936] dvb-usb: error while querying for an remote control event. [ 508.248922][T16940] usb 6-1: USB disconnect, device number 41 [ 508.275379][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 508.357971][T16939] m920x_read = error: -19 [ 508.362660][T16939] dvb-usb: error while querying for an remote control event. [ 508.440110][T21642] veth0_vlan: entered promiscuous mode [ 508.468538][T21642] veth1_vlan: entered promiscuous mode [ 508.498575][T16940] m920x_read = error: -19 [ 508.510300][T16940] dvb-usb: error while querying for an remote control event. [ 508.602172][T21642] veth0_macvtap: entered promiscuous mode [ 508.644788][T16940] m920x_read = error: -19 [ 508.649161][T16940] dvb-usb: error while querying for an remote control event. [ 508.674038][T21642] veth1_macvtap: entered promiscuous mode [ 508.739620][T21642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.783412][T21642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.812930][T16940] m920x_read = error: -19 [ 508.820658][T16940] dvb-usb: error while querying for an remote control event. [ 508.836626][T20100] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.897316][T20100] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.936357][T20100] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.955452][T16940] m920x_read = error: -19 [ 508.966104][T16940] dvb-usb: error while querying for an remote control event. [ 509.050051][T20100] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.098669][T16935] m920x_read = error: -19 [ 509.103106][T16935] dvb-usb: error while querying for an remote control event. [ 509.157065][T20092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.189358][T20092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.231317][T16940] m920x_read = error: -19 [ 509.235686][T16940] dvb-usb: error while querying for an remote control event. [ 509.262043][T20120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.288795][T20120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.368210][T16940] m920x_read = error: -19 [ 509.372588][T16940] dvb-usb: error while querying for an remote control event. [ 509.449014][ T5836] udevd[5836]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 509.517309][T16940] m920x_read = error: -19 [ 509.521690][T16940] dvb-usb: error while querying for an remote control event. [ 509.640123][T21921] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6595'. [ 509.650451][T16940] m920x_read = error: -19 [ 509.655162][T16940] dvb-usb: error while querying for an remote control event. [ 509.664849][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 509.780844][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 509.793260][T16936] m920x_read = error: -19 [ 509.797609][T16936] dvb-usb: error while querying for an remote control event. [ 509.918525][T16936] m920x_read = error: -19 [ 509.922902][T16936] dvb-usb: error while querying for an remote control event. [ 510.031489][T16935] m920x_read = error: -19 [ 510.035910][T16935] dvb-usb: error while querying for an remote control event. [ 510.193239][T16935] m920x_read = error: -19 [ 510.201167][T16935] dvb-usb: error while querying for an remote control event. [ 510.374440][T16936] m920x_read = error: -19 [ 510.379903][T16936] dvb-usb: error while querying for an remote control event. [ 510.387467][T21951] hsr0: entered allmulticast mode [ 510.393184][T21951] hsr_slave_0: entered allmulticast mode [ 510.400161][T21951] hsr_slave_1: entered allmulticast mode [ 510.424957][T21951] hsr_slave_0: left promiscuous mode [ 510.484189][T21951] hsr_slave_1: left promiscuous mode [ 510.503784][T16936] m920x_read = error: -19 [ 510.521234][T16936] dvb-usb: error while querying for an remote control event. [ 510.529838][T21951] hsr0 (unregistering): left allmulticast mode [ 510.679431][T16936] m920x_read = error: -19 [ 510.683813][T16936] dvb-usb: error while querying for an remote control event. [ 510.831719][T16935] m920x_read = error: -19 [ 510.855675][T16935] dvb-usb: error while querying for an remote control event. [ 511.000692][T16936] m920x_read = error: -19 [ 511.012026][T16936] dvb-usb: error while querying for an remote control event. [ 511.113172][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'. [ 511.136798][T16936] m920x_read = error: -19 [ 511.149288][T16936] dvb-usb: error while querying for an remote control event. [ 511.192699][ T7758] udevd[7758]: symlink '../../loop6' '/dev/disk/by-diskseq/116.tmp-b7:6' failed: Read-only file system [ 511.279160][T16929] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 511.279578][T16936] m920x_read = error: -19 [ 511.322935][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 511.345906][T16936] dvb-usb: error while querying for an remote control event. [ 511.448416][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 511.460840][T16936] m920x_read = error: -19 [ 511.470738][T16936] dvb-usb: error while querying for an remote control event. [ 511.477413][ T5836] udevd[5836]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 511.494697][T16929] usb 6-1: config 255 has an invalid interface number: 215 but max is 0 [ 511.513190][T16929] usb 6-1: config 255 has no interface number 0 [ 511.540791][T16929] usb 6-1: config 255 interface 215 has no altsetting 0 [ 511.558081][T16929] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7d.01 [ 511.587805][T16929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.599888][T16929] usb 6-1: Product: syz [ 511.613927][T16936] m920x_read = error: -19 [ 511.618440][T16936] dvb-usb: error while querying for an remote control event. [ 511.627330][T16929] usb 6-1: Manufacturer: syz [ 511.651449][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 511.666848][T16929] usb 6-1: SerialNumber: syz [ 511.746131][T16936] m920x_read = error: -19 [ 511.750642][T16936] dvb-usb: error while querying for an remote control event. [ 511.771782][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 511.861216][T16935] m920x_read = error: -19 [ 511.865727][T16935] dvb-usb: error while querying for an remote control event. [ 511.907180][T16929] usb 6-1: NFC: intf ffff888031f44000 id ffffffff8f56a500 [ 511.928021][T16929] usb 6-1: USB disconnect, device number 42 [ 511.991599][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 511.993537][T16935] m920x_read = error: -19 [ 512.036820][T16935] dvb-usb: error while querying for an remote control event. [ 512.187367][T16940] m920x_read = error: -19 [ 512.191962][T16940] dvb-usb: error while querying for an remote control event. [ 512.318611][T16940] m920x_read = error: -19 [ 512.324676][T16940] dvb-usb: error while querying for an remote control event. [ 512.345944][T16935] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 512.442095][T16940] m920x_read = error: -19 [ 512.446579][T16940] dvb-usb: error while querying for an remote control event. [ 512.526998][T16935] usb 4-1: Using ep0 maxpacket: 16 [ 512.548666][T16935] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.559906][T16940] m920x_read = error: -19 [ 512.564250][T16940] dvb-usb: error while querying for an remote control event. [ 512.580797][T16935] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.596755][T16935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.603396][T16935] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 512.613429][T16935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.668568][T16935] usb 4-1: config 0 descriptor?? [ 512.698119][ T30] audit: type=1400 audit(2000000501.772:1383): avc: denied { open } for pid=22015 comm="syz.8.6623" path="/dev/ptyr5" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 512.727413][T16940] m920x_read = error: -19 [ 512.732576][T16940] dvb-usb: error while querying for an remote control event. [ 512.783972][ T30] audit: type=1800 audit(2000000501.814:1384): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.6623" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 512.850854][T16939] m920x_read = error: -19 [ 512.855241][T16939] dvb-usb: error while querying for an remote control event. [ 512.872896][T22020] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 512.888946][T22020] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.898707][T22020] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.974877][T16940] m920x_read = error: -19 [ 512.979736][T16940] dvb-usb: error while querying for an remote control event. [ 513.098923][T16940] m920x_read = error: -19 [ 513.104389][T16940] dvb-usb: error while querying for an remote control event. [ 513.175307][T16925] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 513.231895][T16940] m920x_read = error: -19 [ 513.240411][T16940] dvb-usb: error while querying for an remote control event. [ 513.323508][T16925] usb 10-1: Using ep0 maxpacket: 8 [ 513.330398][T16925] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.365645][T16940] m920x_read = error: -19 [ 513.370193][T16940] dvb-usb: error while querying for an remote control event. [ 513.379003][T16925] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 513.403247][T16925] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 513.441407][T16925] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.452231][T16935] hid (null): nested delimiters [ 513.459601][T16925] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.467909][T16935] hid (null): nested delimiters [ 513.480712][T16935] hid (null): nested delimiters [ 513.491361][T16935] hid (null): report_id 24797 is invalid [ 513.492847][T16925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.499472][T16940] m920x_read = error: -19 [ 513.520407][T16940] dvb-usb: error while querying for an remote control event. [ 513.632476][T16940] m920x_read = error: -19 [ 513.636851][T16940] dvb-usb: error while querying for an remote control event. [ 513.736308][T16940] usb 4-1: USB disconnect, device number 100 [ 513.745223][T16925] usb 10-1: usb_control_msg returned -32 [ 513.772998][T16925] usbtmc 10-1:16.0: can't read capabilities [ 513.775213][T16935] m920x_read = error: -19 [ 513.775234][T16935] dvb-usb: error while querying for an remote control event. [ 513.779186][T16925] usb 10-1: USB disconnect, device number 2 [ 513.820521][T22038] netlink: 'syz.5.6632': attribute type 1 has an invalid length. [ 513.837465][T22038] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6632'. [ 513.889712][T16936] m920x_read = error: -19 [ 513.894067][T16936] dvb-usb: error while querying for an remote control event. [ 514.012593][T22044] netlink: 'syz.5.6634': attribute type 5 has an invalid length. [ 514.013875][T16940] m920x_read = error: -19 [ 514.025972][T16940] dvb-usb: error while querying for an remote control event. [ 514.137099][T16940] m920x_read = error: -19 [ 514.141474][T16940] dvb-usb: error while querying for an remote control event. [ 514.251230][T16940] m920x_read = error: -19 [ 514.255602][T16940] dvb-usb: error while querying for an remote control event. [ 514.375242][T16940] m920x_read = error: -19 [ 514.379707][T16940] dvb-usb: error while querying for an remote control event. [ 514.444304][ T30] audit: type=1400 audit(2000000503.610:1385): avc: denied { name_bind } for pid=22054 comm="syz.9.6639" path="socket:[85580]" dev="sockfs" ino=85580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 514.509423][T16940] m920x_read = error: -19 [ 514.517358][T16940] dvb-usb: error while querying for an remote control event. [ 514.651647][T16940] m920x_read = error: -19 [ 514.657191][T16940] dvb-usb: error while querying for an remote control event. [ 514.660439][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 514.775688][T16940] m920x_read = error: -19 [ 514.780266][T16940] dvb-usb: error while querying for an remote control event. [ 514.899268][T16939] m920x_read = error: -19 [ 514.903632][T16939] dvb-usb: error while querying for an remote control event. [ 514.911288][T16936] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 515.066214][T16939] m920x_read = error: -19 [ 515.080623][T16939] dvb-usb: error while querying for an remote control event. [ 515.108875][T16936] usb 9-1: Using ep0 maxpacket: 16 [ 515.134514][T16936] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 515.149968][T16936] usb 9-1: config 0 has no interface number 0 [ 515.161562][T16936] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 515.199112][T16936] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 515.221783][T16936] usb 9-1: config 0 interface 41 has no altsetting 0 [ 515.232591][T16939] m920x_read = error: -19 [ 515.237046][T16939] dvb-usb: error while querying for an remote control event. [ 515.259134][T16936] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 515.284963][T16936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.308730][T16936] usb 9-1: Product: syz [ 515.309200][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 515.312913][T16936] usb 9-1: Manufacturer: syz [ 515.351493][T16936] usb 9-1: SerialNumber: syz [ 515.376554][T16936] usb 9-1: config 0 descriptor?? [ 515.384939][T16939] m920x_read = error: -19 [ 515.390793][T16939] dvb-usb: error while querying for an remote control event. [ 515.404586][T22064] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 515.413462][T22064] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 515.452687][T22093] input: syz1 as /devices/virtual/input/input102 [ 515.459066][T22093] input: failed to attach handler leds to device input102, error: -6 [ 515.523485][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 515.535216][T16935] m920x_read = error: -19 [ 515.541140][T16935] dvb-usb: error while querying for an remote control event. [ 515.698086][T22064] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 515.718556][T22064] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 515.824415][T16935] m920x_read = error: -19 [ 515.828808][T16935] dvb-usb: error while querying for an remote control event. [ 515.966077][T16935] m920x_read = error: -19 [ 515.973556][T16935] dvb-usb: error while querying for an remote control event. [ 516.063190][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.094367][T16935] m920x_read = error: -19 [ 516.098851][T16935] dvb-usb: error while querying for an remote control event. [ 516.169660][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.213528][T16935] m920x_read = error: -19 [ 516.222107][T16935] dvb-usb: error while querying for an remote control event. [ 516.295238][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.325249][T16936] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 516.356294][T16935] m920x_read = error: -19 [ 516.360861][T16935] dvb-usb: error while querying for an remote control event. [ 516.404557][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.485508][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.486600][T16935] m920x_read = error: -19 [ 516.512837][T16935] dvb-usb: error while querying for an remote control event. [ 516.544627][T16936] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 516.569788][T16936] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 516.581952][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.595137][T16936] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 516.619913][T16936] usb 9-1: USB disconnect, device number 6 [ 516.647787][T16939] m920x_read = error: -19 [ 516.652473][T16939] dvb-usb: error while querying for an remote control event. [ 516.756767][T16935] m920x_read = error: -19 [ 516.761140][T16935] dvb-usb: error while querying for an remote control event. [ 516.778582][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 516.870913][T16936] m920x_read = error: -19 [ 516.875292][T16936] dvb-usb: error while querying for an remote control event. [ 516.976705][T22128] netlink: 'syz.9.6670': attribute type 1 has an invalid length. [ 517.004433][T16936] m920x_read = error: -19 [ 517.008802][T16936] dvb-usb: error while querying for an remote control event. [ 517.154337][T16936] m920x_read = error: -19 [ 517.159237][T16936] dvb-usb: error while querying for an remote control event. [ 517.235870][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6671'. [ 517.280629][T16936] m920x_read = error: -19 [ 517.285005][T16936] dvb-usb: error while querying for an remote control event. [ 517.404492][T16939] m920x_read = error: -19 [ 517.410154][T16939] dvb-usb: error while querying for an remote control event. [ 517.543754][T16939] m920x_read = error: -19 [ 517.556514][T16939] dvb-usb: error while querying for an remote control event. [ 517.689957][T16939] m920x_read = error: -19 [ 517.699610][T16939] dvb-usb: error while querying for an remote control event. [ 517.814424][T16939] m920x_read = error: -19 [ 517.825480][T16939] dvb-usb: error while querying for an remote control event. [ 517.917469][T22161] netlink: 'syz.8.6685': attribute type 1 has an invalid length. [ 517.960795][T16936] m920x_read = error: -19 [ 517.967608][T16936] dvb-usb: error while querying for an remote control event. [ 518.082632][T16939] m920x_read = error: -19 [ 518.087719][T16939] dvb-usb: error while querying for an remote control event. [ 518.195214][T16939] m920x_read = error: -19 [ 518.200281][T16939] dvb-usb: error while querying for an remote control event. [ 518.290020][T16936] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 518.309348][T16939] m920x_read = error: -19 [ 518.314635][T16939] dvb-usb: error while querying for an remote control event. [ 518.328954][T16926] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 518.452426][T16936] usb 10-1: Using ep0 maxpacket: 16 [ 518.463354][T16936] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 518.480839][T16935] m920x_read = error: -19 [ 518.485602][T16935] dvb-usb: error while querying for an remote control event. [ 518.495884][T16936] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 518.505991][T16936] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 518.520644][T16936] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 518.533925][T16936] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 518.544391][T16936] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 518.558120][T16926] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.567379][T16936] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.582165][T16936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 518.622051][T16935] m920x_read = error: -19 [ 518.633592][T16935] dvb-usb: error while querying for an remote control event. [ 518.644187][T16936] usb 10-1: SerialNumber: syz [ 518.661863][T16926] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.708859][T22168] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 518.730434][T16926] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 518.732606][T16936] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 518.739692][T16926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.748078][T16935] m920x_read = error: -19 [ 518.764668][T16935] dvb-usb: error while querying for an remote control event. [ 518.775623][T16926] usb 9-1: SerialNumber: syz [ 518.777294][T16936] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -12 [ 518.791875][T16925] hid-generic 0000:0003:0001.0050: unknown main item tag 0x0 [ 518.834437][T16925] hid-generic 0000:0003:0001.0050: unknown main item tag 0x0 [ 518.851117][T16925] hid-generic 0000:0003:0001.0050: hidraw0: HID v0.03 Device [syz0] on syz1 [ 518.910148][T16936] m920x_read = error: -19 [ 518.915422][T16936] dvb-usb: error while querying for an remote control event. [ 519.024041][ T30] audit: type=1326 audit(2000000508.407:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.050728][T16926] usb 9-1: 0:2 : does not exist [ 519.057070][T16926] usb 9-1: usbmixer: too many channels (61) in unit 5 [ 519.073974][T22179] fido_id[22179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 519.091127][T16936] m920x_read = error: -19 [ 519.095486][T16936] dvb-usb: error while querying for an remote control event. [ 519.105610][T16925] usb 10-1: USB disconnect, device number 3 [ 519.128153][ T30] audit: type=1326 audit(2000000508.418:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.155610][ T30] audit: type=1326 audit(2000000508.418:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.164457][T16926] usb 9-1: USB disconnect, device number 7 [ 519.217462][ T30] audit: type=1326 audit(2000000508.418:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.241568][T16936] m920x_read = error: -19 [ 519.246170][T16936] dvb-usb: error while querying for an remote control event. [ 519.247751][ T30] audit: type=1326 audit(2000000508.418:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.277284][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.283822][T16929] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 519.284316][ T30] audit: type=1326 audit(2000000508.418:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.316473][ T30] audit: type=1326 audit(2000000508.418:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.342309][ T30] audit: type=1326 audit(2000000508.418:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4338eba9 code=0x7ffc0000 [ 519.366317][ T30] audit: type=1326 audit(2000000508.418:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e4338d510 code=0x7ffc0000 [ 519.371080][T16936] m920x_read = error: -19 [ 519.389745][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.397918][ T30] audit: type=1326 audit(2000000508.418:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e4338e7ab code=0x7ffc0000 [ 519.402189][T16936] dvb-usb: error while querying for an remote control event. [ 519.453746][T16929] usb 6-1: not running at top speed; connect to a high speed hub [ 519.463079][T16929] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 519.471875][T16929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.482130][T16929] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 519.491224][T16927] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 519.499308][T16929] usb 6-1: config 1 has no interface number 1 [ 519.505844][T16929] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 519.517567][T16929] usb 6-1: config 1 interface 2 has no altsetting 0 [ 519.526463][T16929] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.535585][T16929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.537874][T16936] m920x_read = error: -19 [ 519.543717][T16929] usb 6-1: Product: syz [ 519.552263][T16929] usb 6-1: Manufacturer: syz [ 519.554976][T16936] dvb-usb: error while querying for an remote control event. [ 519.556847][T16929] usb 6-1: SerialNumber: syz [ 519.657927][T16927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.671485][T16935] m920x_read = error: -19 [ 519.675847][T16935] dvb-usb: error while querying for an remote control event. [ 519.679724][T16927] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 519.718934][T16927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.720607][ T5836] udevd[5836]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 519.741726][T16927] usb 4-1: config 0 descriptor?? [ 519.752402][T16927] gspca_main: spca561-2.14.0 probing abcd:cdee [ 519.777896][T16929] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 519.786803][T16929] usb 6-1: 2:1 : format type 9 is not supported yet [ 519.794066][T16929] usb 6-1: selecting invalid altsetting 0 [ 519.795358][T16935] m920x_read = error: -19 [ 519.804123][T16935] dvb-usb: error while querying for an remote control event. [ 519.814632][T16929] usb 6-1: USB disconnect, device number 43 [ 519.855792][ T7764] udevd[7764]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 519.881181][ T7758] udevd[7758]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.904493][T16936] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 519.928652][T16935] m920x_read = error: -19 [ 519.933217][T16935] dvb-usb: error while querying for an remote control event. [ 519.971219][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 519.994891][T16927] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 520.010572][T16927] usb 4-1: USB disconnect, device number 101 [ 520.047977][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 520.054919][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6699'. [ 520.061499][T16935] m920x_read = error: -19 [ 520.072811][T16935] dvb-usb: error while querying for an remote control event. [ 520.092334][T16936] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.103672][T16936] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.113808][T16936] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.141397][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 520.153108][T16936] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.165664][T16936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.176416][T16935] m920x_read = error: -19 [ 520.180764][T16935] dvb-usb: error while querying for an remote control event. [ 520.195873][T16936] usb 10-1: config 0 descriptor?? [ 520.290785][T16935] m920x_read = error: -19 [ 520.295143][T16935] dvb-usb: error while querying for an remote control event. [ 520.317802][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 520.452334][T16935] m920x_read = error: -19 [ 520.456699][T16935] dvb-usb: error while querying for an remote control event. [ 520.467957][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 520.504703][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 520.573664][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 520.595565][T16935] m920x_read = error: -19 [ 520.600623][T16935] dvb-usb: error while querying for an remote control event. [ 520.610871][T16936] plantronics 0003:047F:FFFF.0051: ignoring exceeding usage max [ 520.633550][T16927] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 520.646192][T16936] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 520.732684][T16936] m920x_read = error: -19 [ 520.737059][T16936] dvb-usb: error while querying for an remote control event. [ 520.757787][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6708'. [ 520.767970][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6708'. [ 520.777490][T22213] netlink: 'syz.8.6708': attribute type 12 has an invalid length. [ 520.790413][T16927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.798488][T20120] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.809635][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6708'. [ 520.830785][T16927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.840172][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6708'. [ 520.842348][T16927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.860950][T20100] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.871160][T16927] usb 6-1: Product: syz [ 520.877202][T16927] usb 6-1: Manufacturer: syz [ 520.879018][T20100] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.891139][T16936] m920x_read = error: -19 [ 520.898985][T16927] usb 6-1: SerialNumber: syz [ 520.899146][T16936] dvb-usb: error while querying for an remote control event. [ 520.917415][ T1068] block nbd1: Possible stuck request ffff888026937000: control (read@0,1024B). Runtime 300 seconds [ 520.928772][ T1068] block nbd1: Possible stuck request ffff8880269371c0: control (read@1024,1024B). Runtime 300 seconds [ 520.941208][T22213] netlink: 'syz.8.6708': attribute type 12 has an invalid length. [ 520.951381][ T1068] block nbd1: Possible stuck request ffff888026937380: control (read@2048,1024B). Runtime 300 seconds [ 520.953716][T20100] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.962898][ T1068] block nbd1: Possible stuck request ffff888026937540: control (read@3072,1024B). Runtime 300 seconds [ 521.067527][T16936] m920x_read = error: -19 [ 521.071939][T16936] dvb-usb: error while querying for an remote control event. [ 521.199520][T16936] m920x_read = error: -19 [ 521.210453][T16936] dvb-usb: error while querying for an remote control event. [ 521.398802][T16936] m920x_read = error: -19 [ 521.409036][T16936] dvb-usb: error while querying for an remote control event. [ 521.530002][T16936] m920x_read = error: -19 [ 521.544391][T16936] dvb-usb: error while querying for an remote control event. [ 521.662243][T16936] m920x_read = error: -19 [ 521.670006][T16936] dvb-usb: error while querying for an remote control event. [ 521.692603][T22232] netlink: 'syz.7.6716': attribute type 11 has an invalid length. [ 521.701670][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6716'. [ 521.715653][T22232] netlink: 'syz.7.6716': attribute type 11 has an invalid length. [ 521.724020][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6716'. [ 521.786760][T16936] m920x_read = error: -19 [ 521.791298][T16936] dvb-usb: error while querying for an remote control event. [ 521.900836][T16936] m920x_read = error: -19 [ 521.909653][T16936] dvb-usb: error while querying for an remote control event. [ 521.998949][T16927] cdc_ncm 6-1:1.0: bind() failure [ 522.010837][T16927] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 522.031340][T16927] cdc_ncm 6-1:1.1: bind() failure [ 522.047401][T16935] m920x_read = error: -19 [ 522.051860][T16935] dvb-usb: error while querying for an remote control event. [ 522.188515][T16936] m920x_read = error: -19 [ 522.215288][T16936] dvb-usb: error while querying for an remote control event. [ 522.249335][T22243] netlink: 'syz.8.6722': attribute type 4 has an invalid length. [ 522.270207][T22243] netlink: 'syz.8.6722': attribute type 4 has an invalid length. [ 522.273868][T16927] usb 6-1: USB disconnect, device number 44 [ 522.342310][T16935] m920x_read = error: -19 [ 522.346675][T16935] dvb-usb: error while querying for an remote control event. [ 522.471833][T16935] m920x_read = error: -19 [ 522.476290][T16935] dvb-usb: error while querying for an remote control event. [ 522.562331][T16927] usb 10-1: USB disconnect, device number 4 [ 522.596877][T16935] m920x_read = error: -19 [ 522.608083][T16935] dvb-usb: error while querying for an remote control event. [ 522.663669][T22263] input: syz0 as /devices/virtual/input/input103 [ 522.754393][T16935] m920x_read = error: -19 [ 522.759155][T16935] dvb-usb: error while querying for an remote control event. [ 522.848990][T22273] dvmrp0: entered allmulticast mode [ 522.876777][T16935] m920x_read = error: -19 [ 522.883875][T16935] dvb-usb: error while querying for an remote control event. [ 523.005255][T16936] m920x_read = error: -19 [ 523.015019][T16936] dvb-usb: error while querying for an remote control event. [ 523.138821][T16936] m920x_read = error: -19 [ 523.146504][T16936] dvb-usb: error while querying for an remote control event. [ 523.262452][T16936] m920x_read = error: -19 [ 523.266960][T16936] dvb-usb: error while querying for an remote control event. [ 523.377265][T16936] m920x_read = error: -19 [ 523.381654][T16936] dvb-usb: error while querying for an remote control event. [ 523.502552][T16936] m920x_read = error: -19 [ 523.507291][T16936] dvb-usb: error while querying for an remote control event. [ 523.616853][T16936] m920x_read = error: -19 [ 523.621227][T16936] dvb-usb: error while querying for an remote control event. [ 523.767564][T16936] m920x_read = error: -19 [ 523.771934][T16936] dvb-usb: error while querying for an remote control event. [ 523.881850][T16940] m920x_read = error: -19 [ 523.886243][T16940] dvb-usb: error while querying for an remote control event. [ 523.996556][T16940] m920x_read = error: -19 [ 524.000933][T16940] dvb-usb: error while querying for an remote control event. [ 524.121242][T16940] m920x_read = error: -19 [ 524.125754][T16940] dvb-usb: error while querying for an remote control event. [ 524.234039][T16940] m920x_read = error: -19 [ 524.238484][T16940] dvb-usb: error while querying for an remote control event. [ 524.359094][T16940] m920x_read = error: -19 [ 524.363592][T16940] dvb-usb: error while querying for an remote control event. [ 524.453009][ T5906] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 524.472368][T16940] m920x_read = error: -19 [ 524.477152][T16940] dvb-usb: error while querying for an remote control event. [ 524.568124][ T5169] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 524.587323][T16940] m920x_read = error: -19 [ 524.591685][T16940] dvb-usb: error while querying for an remote control event. [ 524.615160][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 524.669091][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 524.681399][ T5906] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 524.701689][T16940] m920x_read = error: -19 [ 524.706388][ T5906] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 524.715474][T16940] dvb-usb: error while querying for an remote control event. [ 524.746097][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 524.757225][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 524.769290][ T5906] usb 6-1: config 1 has no interface number 0 [ 524.775452][ T5906] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.790966][ T5906] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 524.804886][ T5906] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 524.814920][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.832346][ T5906] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 524.842730][T22350] SELinux: failed to load policy [ 524.844650][T16940] m920x_read = error: -19 [ 524.852797][T16940] dvb-usb: error while querying for an remote control event. [ 524.895537][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 524.948465][T16935] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 524.961442][T16940] m920x_read = error: -19 [ 524.965803][T16940] dvb-usb: error while querying for an remote control event. [ 525.025112][ T5906] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 525.059845][ T5836] udevd[5836]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 525.072744][T16940] m920x_read = error: -19 [ 525.077094][T16940] dvb-usb: error while querying for an remote control event. [ 525.115972][T16935] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 525.128984][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 525.150667][T16935] usb 10-1: config 0 has no interface number 0 [ 525.176228][T16935] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 525.189377][T16935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.198493][T16940] m920x_read = error: -19 [ 525.202838][T16940] dvb-usb: error while querying for an remote control event. [ 525.211459][T16935] usb 10-1: Product: syz [ 525.216261][T16935] usb 10-1: Manufacturer: syz [ 525.221081][T16935] usb 10-1: SerialNumber: syz [ 525.235224][T16935] usb 10-1: config 0 descriptor?? [ 525.320085][T16940] m920x_read = error: -19 [ 525.324479][T16940] dvb-usb: error while querying for an remote control event. [ 525.434385][T16940] m920x_read = error: -19 [ 525.438779][T16940] dvb-usb: error while querying for an remote control event. [ 525.444830][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 525.470610][ T5906] usb 6-1: USB disconnect, device number 45 [ 525.486801][ T5906] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 525.548549][T16936] m920x_read = error: -19 [ 525.552965][T16936] dvb-usb: error while querying for an remote control event. [ 525.565871][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 525.603987][ T5836] udevd[5836]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 525.642759][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 525.701343][T16936] m920x_read = error: -19 [ 525.705734][T16936] dvb-usb: error while querying for an remote control event. [ 525.726295][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 525.853371][T16940] m920x_read = error: -19 [ 525.857760][T16940] dvb-usb: error while querying for an remote control event. [ 525.909731][T22378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6783'. [ 525.977451][T16940] m920x_read = error: -19 [ 525.994361][T16940] dvb-usb: error while querying for an remote control event. [ 526.129590][T16940] m920x_read = error: -19 [ 526.139239][T16940] dvb-usb: error while querying for an remote control event. [ 526.223115][T22393] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 526.223115][T22393] Q&|xXX /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.996115][ T31] task:syz.1.5343 state:D stack:28392 pid:18513 tgid:18512 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 549.017793][ T31] Call Trace: [ 549.021312][T16936] m920x_read = error: -19 [ 549.026334][T16936] dvb-usb: error while querying for an remote control event. [ 549.038591][ T31] [ 549.045138][ T31] __schedule+0x1190/0x5de0 [ 549.055623][ T31] ? register_lock_class+0x41/0x4c0 [ 549.067212][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 549.077842][ T31] ? __pfx___schedule+0x10/0x10 [ 549.092532][ T31] ? find_held_lock+0x2b/0x80 [ 549.104861][ T31] ? schedule+0x2d7/0x3a0 [ 549.110069][ T31] ? bdev_open+0x41a/0xe40 [ 549.114642][ T31] schedule+0xe7/0x3a0 [ 549.122848][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.129104][ T31] __mutex_lock+0x81b/0x1060 [ 549.135784][ T31] ? bdev_open+0x41a/0xe40 [ 549.140387][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.146003][T16936] m920x_read = error: -19 [ 549.150768][T16936] dvb-usb: error while querying for an remote control event. [ 549.158748][ T31] ? __pfx_ilookup+0x10/0x10 [ 549.163987][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 549.169361][ T31] ? bdev_open+0x41a/0xe40 [ 549.174211][ T31] bdev_open+0x41a/0xe40 [ 549.178528][ T31] blkdev_open+0x34e/0x4f0 [ 549.183603][ T31] do_dentry_open+0x97f/0x1530 [ 549.188474][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 549.193826][ T31] vfs_open+0x82/0x3f0 [ 549.197964][ T31] path_openat+0x1de4/0x2cb0 [ 549.202933][ T31] ? __pfx_path_openat+0x10/0x10 [ 549.207946][ T31] do_filp_open+0x20b/0x470 [ 549.212817][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 549.217930][ T31] ? alloc_fd+0x471/0x7d0 [ 549.222499][ T31] do_sys_openat2+0x11b/0x1d0 [ 549.227218][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.232772][ T31] ? find_held_lock+0x2b/0x80 [ 549.237488][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 549.242852][ T31] __x64_sys_openat+0x174/0x210 [ 549.247749][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 549.254540][ T31] ? do_user_addr_fault+0x843/0x1370 [ 549.261347][ T31] do_syscall_64+0xcd/0x4e0 [ 549.265976][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.272059][T16936] m920x_read = error: -19 [ 549.276820][T16936] dvb-usb: error while querying for an remote control event. [ 549.284254][ T31] RIP: 0033:0x7ff58eb8d510 [ 549.292990][ T31] RSP: 002b:00007ff58f9a0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 549.309514][ T31] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007ff58eb8d510 [ 549.319766][ T31] RDX: 0000000000080000 RSI: 00007ff58f9a0c10 RDI: 00000000ffffff9c [ 549.328184][ T31] RBP: 00007ff58f9a0c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 549.331001][ T7758] udevd[7758]: symlink '../../loop8' '/dev/disk/by-diskseq/114.tmp-b7:8' failed: Read-only file system [ 549.338853][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 549.357367][ T31] R13: 00007ff58edd6038 R14: 00007ff58edd5fa0 R15: 00007ffd92133458 [ 549.367963][ T31] [ 549.371009][ T31] INFO: task syz.1.5343:18518 blocked for more than 143 seconds. [ 549.383864][ T31] Not tainted syzkaller #0 [ 549.391736][T16936] m920x_read = error: -19 [ 549.396079][T16936] dvb-usb: error while querying for an remote control event. [ 549.419423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.428322][ T31] task:syz.1.5343 state:D stack:28376 pid:18518 tgid:18512 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 549.440503][ T31] Call Trace: [ 549.443819][ T31] [ 549.447291][ T31] __schedule+0x1190/0x5de0 [ 549.452577][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 549.457554][ T31] ? __pfx___schedule+0x10/0x10 [ 549.462462][ T31] ? find_held_lock+0x2b/0x80 [ 549.467141][ T31] ? schedule+0x2d7/0x3a0 [ 549.473086][ T31] ? bdev_open+0xa2/0xe40 [ 549.477462][ T31] schedule+0xe7/0x3a0 [ 549.481528][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.487038][ T31] __mutex_lock+0x81b/0x1060 [ 549.491629][ T31] ? bdev_open+0xa2/0xe40 [ 549.495965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.501752][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 549.509621][ T31] ? bdev_open+0xa2/0xe40 [ 549.513976][ T31] bdev_open+0xa2/0xe40 [ 549.518278][T16936] m920x_read = error: -19 [ 549.522599][T16936] dvb-usb: error while querying for an remote control event. [ 549.533583][ T31] bdev_file_open_by_dev+0x182/0x210 [ 549.538949][ T31] setup_bdev_super+0x78/0x730 [ 549.548096][ T31] get_tree_bdev_flags+0x363/0x620 [ 549.554636][ T31] ? __pfx_udf_fill_super+0x10/0x10 [ 549.559850][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 549.569354][ T1068] block nbd1: Possible stuck request ffff888026937000: control (read@0,1024B). Runtime 330 seconds [ 549.572480][ T31] ? bpf_lsm_capable+0x9/0x10 [ 549.580144][ T1068] block nbd1: Possible stuck request ffff8880269371c0: control (read@1024,1024B). Runtime 330 seconds [ 549.585756][ T31] ? security_capable+0x7e/0x260 [ 549.596056][ T1068] block nbd1: Possible stuck request ffff888026937380: control (read@2048,1024B). Runtime 330 seconds [ 549.604528][ T31] vfs_get_tree+0x8e/0x340 [ 549.611835][ T1068] block nbd1: Possible stuck request ffff888026937540: control (read@3072,1024B). Runtime 330 seconds [ 549.627493][ T31] path_mount+0x1513/0x2000 [ 549.632083][ T31] ? __pfx_path_mount+0x10/0x10 [ 549.636939][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 549.642833][ T31] ? putname+0x154/0x1a0 [ 549.647076][ T31] ? putname+0x154/0x1a0 [ 549.648442][T16936] m920x_read = error: -19 [ 549.651365][ T31] ? __x64_sys_mount+0x28d/0x310 [ 549.655627][T16936] dvb-usb: error while querying for an remote control event. [ 549.668190][ T31] __x64_sys_mount+0x28d/0x310 [ 549.672977][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 549.679103][ T31] do_syscall_64+0xcd/0x4e0 [ 549.683733][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.689814][ T31] RIP: 0033:0x7ff58eb8eba9 [ 549.694244][ T31] RSP: 002b:00007ff58f980038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 549.702828][ T31] RAX: ffffffffffffffda RBX: 00007ff58edd6090 RCX: 00007ff58eb8eba9 [ 549.710898][ T31] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 549.718936][ T31] RBP: 00007ff58ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 549.727032][ T31] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 549.735026][ T31] R13: 00007ff58edd6128 R14: 00007ff58edd6090 R15: 00007ffd92133458 [ 549.743316][ T31] [ 549.746673][ T31] [ 549.746673][ T31] Showing all locks held in the system: [ 549.755103][T16936] m920x_read = error: -19 [ 549.760220][ T31] 1 lock held by khungtaskd/31: [ 549.778780][T16936] dvb-usb: error while querying for an remote control event. [ 549.788028][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 549.794330][ T7758] udevd[7758]: symlink '../../loop7' '/dev/disk/by-diskseq/124.tmp-b7:7' failed: Read-only file system [ 549.798658][ T31] 2 locks held by getty/5610: [ 549.813709][ T31] #0: ffff8880323a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 549.823645][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 549.833833][ T31] 1 lock held by udevd/7850: [ 549.838719][ T31] #0: ffff88802687a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 549.848046][ T31] 1 lock held by syz.1.5343/18513: [ 549.853285][ T31] #0: ffff88802687a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 549.862643][ T31] 2 locks held by syz.1.5343/18518: [ 549.868386][ T31] #0: ffff8880534f20e0 (&type->s_umount_key#89/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 549.878616][ T31] #1: ffff88802687a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 549.888032][ T31] 5 locks held by kworker/u8:20/20080: [ 549.893542][ T31] [ 549.895868][ T31] ============================================= [ 549.895868][ T31] [ 549.905878][T16936] m920x_read = error: -19 [ 549.910224][T16936] dvb-usb: error while querying for an remote control event. [ 549.910258][ T31] NMI backtrace for cpu 0 [ 549.910269][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 549.910287][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.910296][ T31] Call Trace: [ 549.910301][ T31] [ 549.910307][ T31] dump_stack_lvl+0x116/0x1f0 [ 549.910331][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 549.910354][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 549.910380][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 549.910396][ T31] watchdog+0xf0e/0x1260 [ 549.910417][ T31] ? __pfx_watchdog+0x10/0x10 [ 549.910432][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 549.910451][ T31] ? __kthread_parkme+0x19e/0x250 [ 549.910477][ T31] ? __pfx_watchdog+0x10/0x10 [ 549.910493][ T31] kthread+0x3c2/0x780 [ 549.910509][ T31] ? __pfx_kthread+0x10/0x10 [ 549.910525][ T31] ? rcu_is_watching+0x12/0xc0 [ 549.910543][ T31] ? __pfx_kthread+0x10/0x10 [ 549.910559][ T31] ret_from_fork+0x56a/0x730 [ 549.910573][ T31] ? __pfx_kthread+0x10/0x10 [ 549.910588][ T31] ret_from_fork_asm+0x1a/0x30 [ 549.910616][ T31] [ 549.910636][ T31] Sending NMI from CPU 0 to CPUs 1: [ 550.034136][ C1] NMI backtrace for cpu 1 [ 550.034151][ C1] CPU: 1 UID: 0 PID: 20080 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 550.034168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.034177][ C1] Workqueue: bat_events batadv_nc_worker [ 550.034195][ C1] RIP: 0010:__lock_acquire+0x1f3/0x1ce0 [ 550.034217][ C1] Code: 0d 44 09 f0 c1 e2 12 09 c8 81 e2 00 00 04 00 09 d0 8b 94 24 c8 00 00 00 44 09 c0 c1 e2 14 09 d0 8b 94 24 b8 00 00 00 c1 e2 15 <09> d0 41 8b 54 24 20 81 e2 ff 1f 00 00 09 d0 41 89 44 24 20 8b 84 [ 550.034229][ C1] RSP: 0018:ffffc9000470f9e0 EFLAGS: 00000046 [ 550.034239][ C1] RAX: 0000000000020000 RBX: ffff88803586d370 RCX: 0000000000020000 [ 550.034248][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803586d3c0 [ 550.034256][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.034264][ C1] R10: 0000000000000050 R11: 0000000000000001 R12: ffff88803586d3c0 [ 550.034273][ C1] R13: ffff88803586c880 R14: 0000000000000000 R15: ffffffff8e5c15a0 [ 550.034281][ C1] FS: 0000000000000000(0000) GS:ffff8881247b4000(0000) knlGS:0000000000000000 [ 550.034296][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.034304][ C1] CR2: 00007ffe89712e08 CR3: 000000005b379000 CR4: 00000000003526f0 [ 550.034313][ C1] Call Trace: [ 550.034317][ C1] [ 550.034326][ C1] ? update_curr+0x71/0x550 [ 550.034339][ C1] ? enqueue_task+0x20e/0x4e0 [ 550.034358][ C1] lock_acquire+0x179/0x350 [ 550.034368][ C1] ? batadv_nc_worker+0x159/0x1030 [ 550.034382][ C1] ? batadv_nc_worker+0x895/0x1030 [ 550.034396][ C1] batadv_nc_worker+0x16a/0x1030 [ 550.034408][ C1] ? batadv_nc_worker+0x159/0x1030 [ 550.034421][ C1] ? try_to_wake_up+0x160/0x1870 [ 550.034437][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 550.034452][ C1] ? rcu_is_watching+0x12/0xc0 [ 550.034469][ C1] process_one_work+0x9cc/0x1b70 [ 550.034487][ C1] ? __pfx_process_one_work+0x10/0x10 [ 550.034503][ C1] ? assign_work+0x1a0/0x250 [ 550.034516][ C1] worker_thread+0x6c8/0xf10 [ 550.034533][ C1] ? __pfx_worker_thread+0x10/0x10 [ 550.034547][ C1] kthread+0x3c2/0x780 [ 550.034560][ C1] ? __pfx_kthread+0x10/0x10 [ 550.034573][ C1] ? rcu_is_watching+0x12/0xc0 [ 550.034588][ C1] ? __pfx_kthread+0x10/0x10 [ 550.034600][ C1] ret_from_fork+0x56a/0x730 [ 550.034612][ C1] ? __pfx_kthread+0x10/0x10 [ 550.034624][ C1] ret_from_fork_asm+0x1a/0x30 [ 550.034644][ C1] [ 550.036245][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 550.280716][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.289808][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.299843][ T31] Call Trace: [ 550.303101][ T31] [ 550.306013][ T31] dump_stack_lvl+0x3d/0x1f0 [ 550.310591][ T31] vpanic+0x6e8/0x7a0 [ 550.314561][ T31] ? __pfx_vpanic+0x10/0x10 [ 550.319049][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.325023][ T31] panic+0xca/0xd0 [ 550.328721][ T31] ? __pfx_panic+0x10/0x10 [ 550.333117][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 550.338474][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 550.344606][ T31] ? watchdog+0xd78/0x1260 [ 550.349002][ T31] ? watchdog+0xd6b/0x1260 [ 550.353397][ T31] watchdog+0xd89/0x1260 [ 550.357624][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.362280][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.367459][ T31] ? __kthread_parkme+0x19e/0x250 [ 550.372469][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.377124][ T31] kthread+0x3c2/0x780 [ 550.381173][ T31] ? __pfx_kthread+0x10/0x10 [ 550.385744][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.390492][ T31] ? __pfx_kthread+0x10/0x10 [ 550.395061][ T31] ret_from_fork+0x56a/0x730 [ 550.399632][ T31] ? __pfx_kthread+0x10/0x10 [ 550.404201][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.408957][ T31] [ 550.412149][ T31] Kernel Offset: disabled [ 550.416449][ T31] Rebooting in 86400 seconds..