last executing test programs: 11.184429343s ago: executing program 0 (id=1218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x4, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x7ff, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0xbfc7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x5, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) getsockopt$inet_buf(r0, 0x0, 0x3b, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) 11.145752355s ago: executing program 0 (id=1219): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b0000000000f30d"], 0x28}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 10.956058494s ago: executing program 3 (id=1221): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002080)={0x6, 0xffff00, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x1a78f5f9}) syz_open_procfs(r4, &(0x7f00000020c0)='net/vlan/config\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002100)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) madvise(&(0x7f0000468000/0x1000)=nil, 0x1000, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002140)='/sys/kernel/kexec_crash_loaded', 0x200480, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0xfffffffffffffe9a) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) 9.939742652s ago: executing program 0 (id=1222): r0 = syz_usb_connect(0x4, 0x24, &(0x7f00000004c0)=ANY=[], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000e40)={0x14, &(0x7f0000000cc0)={0x0, 0x2, 0x7f, {0x7f, 0xd, "2bbfeff8214eede6dfc62180a0ab2e44502385176a24db1c4a0276dd5264714b45d8992140c41593a7af7b1f23d6cdd2dcc9554b8b1e3e20189187e05f6ecb1d486a62ee48791bb056e9f8c82b80a2d8a87fcb827beda0d102e837f69c421dce1030d5ef665f9b4fd3dd00db15972a3584952d39b4cda4fe1cc32d142f"}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x20, 0x9, 0x42, "f45382e3a3781f14b0d2ea12f6a2cebd24fa9c495fc8995349945da40c90d4e06d4c9a6c14a6ceccbd764fb7519bf1c8d71e48b7697c801e9cd42edebb27cf58cb67"}, 0x0, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x4, 0x1, 0xffffff00, 0xadd, 0xfff7, 0xa, 0x8b6, 0x20000, 0x101, 0x0, 0x2, 0xc753}}, 0x0, 0x0, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x100}, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r5, r4}}, 0x18) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000005e40)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x20, r7, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) syz_genetlink_get_family_id$nl80211(0x0, r6) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000044000180060011000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) 8.849373577s ago: executing program 1 (id=1223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) shutdown(r0, 0x1) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000006200)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000380)="bf7f3e766f24b7ce7f6de44477a23eaff7aa8be4b398f0129530567b6f8f32c8389d85d9def6470e2c0d40e4b2add95c2c741cbcb0e6a35e69973427af40a4ec144551590b7ea569d2f8622c1eeaad0595844a72c47277641af0816682251736cbec6da3cb7bb9818d40277e0404a90ed9d37144bea85f678afe1a470b7a6f01a4a73c036cec7d9a93bc9bbd0477dcfb365bcaa1ac5199e9fbe80786fd8ca52c12ea5039124afca5a8c02947f065f02a1b528b88875b9064f7987aafaea6605f42fd8c430e963d588cbc833af9e31b", 0xcf}, {&(0x7f0000000180)="29a721ddb955a87a2878c32d7c7cabcaa9f1a33b2cfbb5f985dfcae2d76767b3f841c4f9a2595ab78322e9ba50284bc166213bd55bffb555322410111839f79fe8ac42993cd2ff9e0a017039581d707a51a2ae7b", 0x54}, {&(0x7f0000000480)="146df54ec4b17ca361c6212b03bda2d2fb6af0b7e70f71f0de224f813f46170c31968169164a5c028189ab12d732c2d2ef5d7a42ce7535b10d7f3d27454b935aa1e17e7ffa71d14cc5fcbe65cf1f6622bf679b6774672ecfd5f3fbc716fe97437f6c1e559e6433446655a1c656024bf55f921dbfbb77c7f29216e5638f5fa6aff1037f6c15d6de2b2f873f4e959ef89275a5aa19c49497f0329a12fc5de98f098518df07ad5e46729341a7372b1bd048488650abb0dac856d159c0e39347bc70a3eb0f4c1421f43842b74254bc8c33527b4169c60c954e8d2139a91174dfce0343cc7ed17e5b603441ff211d49db793277fb37a6ef7ce25a212d0e89", 0xfc}, {&(0x7f0000000580)="bbe4f8d29e97c7276e892baaa828a7f23a84a437930bdd065e064b1eb89083375e1e01f30bf0841a239f0f6cf6225da04fd814421804e50adb41f8f8d0caa5b130b734d51d807d6ddf3cf232d51858e0c4b01d500db2c3a96fd29fdbb5addd4b7462a3194940d093a2ec92a4e16a75682e77a61b5ff98b797895bf601f6cbfd543588bb1086cc10d4c3d04da58daf47a96315885a4834ba1cb99d252ba07172b39b9f3a9aec3d26d6b617659ba5cc5748e24cc235a77af03eeae97ae94b5c6af8ce405", 0xc3}, {&(0x7f0000000100)}, {&(0x7f0000000280)="207305127c7c43a5782ae99cf14133df887bca8d516135f47bc332cfb736b0a019aac004", 0x24}, {&(0x7f0000000680)="677df37a2431dd9d5dc1840db75aa16836b6b2f41ac209b83683c94eeb42acdc3ee35cbbff1b1373f2187bcee5d4235debbf636f196b7244ba56470f175beaddefe240eaae5c19cfdb89c14b42522213f682fc2553313ddca9c4ee3a910c9ca54f3ab9a40f769eeee731dea1ad9b0254f531a56b15bf2e660b35f4cade7250b047de535b0158b2c172c53c13e328828299c4f91031a9568efa0141d238522f92c5a1d2ce7f7da2721bcb7b2b20a46d4e1c77afd88015559767c8583822da6e39eaa1555b1d16f2a1435f5d3e6fb9f309f3fa4321c2be", 0xd6}, {&(0x7f00000002c0)="43505e049700bb0f1f02c4463f4f9ea23a06d69571222c35a9f796fe72d06d6266c8c95f2b4af3aa9926dcf6644f26e23b2ca61dee30e25c7f5dfa27837850319f69bc39d32ae9b0bd065da4f58a5f898f44ace133ff1d7f29f3a9d0200f4bb5a95acf8b720875d82d", 0x69}, {&(0x7f0000000780)="aeb90066f3005883f72aed21bb6012680abd4d11dbabde951ecb558bf2baa315d01397fed7d27791c5d05889480d573cd69d0d7812db87c9558e3cd89a683976f2c58c6d5653ad5b62aaaece48d25f4c8672d5618232323640c8d25aae07121416b432cff3fa119cdd035f49f976f04ffdeb81ae0dfd5144788431", 0x7b}], 0x9, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r5, r4, r4, 0xffffffffffffffff, r0, r0, r5, r0]}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, r4, 0xffffffffffffffff, r1, r4, 0xffffffffffffffff]}}, @rights={{0x48, 0x1, 0x1, [r0, r5, r1, r0, 0xffffffffffffffff, r5, r4, 0xffffffffffffffff, r5, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r5, r5, r5, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r4, r4, r5, r1, r5, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x178, 0x40015}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000c40)="16c7db193cf4d405e2b51d919976aa836ed8c80046c92f8d902c24d3713677f38d7eb21b5b992e286bcd861d8d12", 0x2e}, {&(0x7f0000000dc0)="3da5c95214caf0d5a6c710e68754824ebe213d0e83d12618ec6d6b7c315b802fd16fceac0a4a1393bbb7549b5c4e979a3997b386a07f5d08dc6b13d2882d5fcea3f17d56c008caf09fcadceff68a5e7ec6ab44e28eab9bb479e9734081d8590a46414fc7298615de2adba462ffbaf28bc00461bc8b2265dec31d92fc9bd30f2affa8cc57270f585d22421ad461dca069b946602c35b1582648997eb52253e8e3c6f45ef3e5f1674f7d41b161112d117c46f04831e95e715c47f5d6e56c28fcef824238f6bd42280055d973f57fe4abc1285936f9f7046d118acf7b9900a97830304c68a112ba0d92437580e0e3d6f03df9ad041370aeff5413a93b6e9798b6ca4742545c6acaf97ee78ed8aeb2f439c7dd53d6d28e4746046e0269f243fffd18d6f15a555ed3f6ea35a2da7781c0a304d70cb40fa44f6f6a52e90ff40746e4252e6b5e9598d7cbd0bd2116b0080c1f639743202f3de8a81a7f51dab3f4752a5dc804476a8643f704d42a8e87022454079844b677d594adcdf38fc153e612b8c5db4bd7bfbf722ce22c6d2e61e02ceb5864be68e8aeabebf15795818d1e8e0654e4c145bc8b0745e12cd84b88f0d520b8eccaa18c1dea7b7d65d36cfc3b222f3aff7ab859fc922dafb6da6018918e942bb172dc8d6b55d7ef94cfac60ec83c260864cec19afeb0b61d9b94927a4748d6fd5c7ba4d32e5707c3637985b857e5a037be9b580b699f9fd92bfabb8d53a3314daf5c2683bbe76f029cacc11ca1409299d61b193e688ffca8923593c417216c5f3ef2e4e2a64b6ac07c73b5021042f7bccd8527e3e32e09b8e255b456cfad362d749c6f8c3c0439957daaf282668fc5d08619534fa2dbd4ee19038610876c3e97f0613cb3bac5ce47140a7bfe28354267767f1c1c1e8276884472b1ea17dadf25c8fd1783e1d7b094e3f3fb78f3ffa8f4ae11428f1799b8bbb348577177d0cccff28a4d46827bbbfcba018cc6149e066fa3c92ca1233c9a6590a356cb62dadf03e6136437b6171f1cc48d7fbeba1b893d47eca039dc4b3f932aea30e3d8ded7ca7e77921ca071254fb576f6b7b8d58546333ba9f3f9a34eebde798aa8996fba0f3c41b9fdf27f640f369a518e1d229b55712eb7fab64bfcbca9dbf4bf575d63283d45aa99753aa8a9a05bd5ae6b9a247115b90400937f6f92188a71f2711422828d0ecc22d3d86f344ca94f2de23c51aa42ca630c3bd3f2a283089611d602fd9b1de33237c40322c514b827c61068f99dad95b719e329692874bb7288086872c322c76951130527a51933c326486a2db5dba2469500aed382b64f048c3afa292d26b10511199931bdd96e779ed42dad4d147932a18602b90e959271af1b55178abb0b3675fbf00bc361a5d1c7e6ff2893b1620f5b6a828d6f91c523c6778ae89b50a8fb33cc29d43e1d13eeda304280fe93e2d46e05f419c46441e05bfd88aba1799c12ae3d4ccb9d1fb1aab1d17320dd7ac1b538137a676fddb2733a057d58254539b76fdaccfb8d65c7e6fed0a94a3b58344e32d61cf7429770fcba8c3257ab32d30bae32d9e8114bd12de51a25c263b18b3f082692c11389f0f6794e2ef39ae68f4f44153752689cc3b627119bb7c0bbc4fab88c4ee78cb8289082785d554de9e59c29cd82db001530485aab4c8f1cce19facd9a92c37e97a2523b3e82a93a34513da8d16b0c00caaf368a00b7fcee774ab15f7f0f0b12b59dae412ced774449cd190190a9e45dbc8df9c727550862884036138ff992b614f180d8f5f1231b192dd9eb239f7236644fe676558f14a14713f142b543fa910e1fae2c20c2be4cfb4df461241a921034080b1cfd10b536071a4f7969a027aa90f5c50ef9878a3fea4f4f34f6cd85e0ad159f2373e1b887c86023e853b39bc357d43f890b711a6f7b0dab34fa9ef27c88cabca6be75d59687114c9656dc49a2208822e7d30ca52672e815808643c56c78fb2fbe73f46ae047805b44037c94b580da0950c096d6506a5c10c056f7e90bfdddd1a4931bdcc4d002600e2c3ea70d92a24f048d7f24ee510ac349fb8cdf1518ea6cc5376a66abdcb769d3caa76e09abe89278b1c4bb2fb39bf2e9159f67f4b06323656b0016e07cbe888b99a9125720ef4563283a6a3007a1840939d853c07be0a3d76df69006addf6cde776e89ab539af0fb877f18465f107268e1996197ee2298d0cda6c5674b80e066104f7fa9aaef033192e900b0f968c01131409f503e5267d46a541bd405c9f9eab7743d27b5c0ec06ae5c7d1920b3a3e01227e1b8d736be7fdb9c7fbe525f6bb139145356be7916aa2f5a275f32a9bf89e312695953cb49f45af3da2fe8382038fafda3931efc35252bcc29b029fef03600ff09fa8d77d8d9fa0ac22e84a88ef6ed4e3a708cfa886dd6eab71f97eba0a2d8145ff2dec087593a5fe2d6798012f9dcbca059161f53bae43b055d3b2bfb8f0b2d100acd521fb414798576e4ae448f27fd1c202d40f5abc2c05df0c608e8461e74b927876949f0bfa757285a027f2eac0d46eb62de2bd26a1730d467eb784e49736f544a9a14f1a3846d9f91007ff177fcac27359c73b5ce44fb0f345492811ff49d3c37a4b63a96ab5b99013f8c500ad406a441bf2b5dd59d7f24f1efb52d7a29aaa1679c374195c30dc43d120669240cb8ffd87552df3299d96b0c46b09fcbcb24875eb99613cad4903e697213192a1abd0a5f28da338be533b46f376d16f680ee40b8ae1fa916e443e2104de743e9acc251decd00d45b147a4d3c3fed8985dfcac34b399146e3ac814e20e482077f11b6707b01a85a55ef7665ce8f10a93d9229195435cdd7af5f1b5cdd96600efbafd2a0e4d6b2d04aead9ffc3057eab77010919fe0ee588b79f952df336171484b5724bc9c66dd77fd495a8331d4c6abb7b226fd5df93534cd0b31d8bd1bf42e5b77d0b3ced02d6b66ea4112b93f99580eff15c9a5901dec5d52567cdbce03c3a224bbe1b8d07ee64f0db633a9548b6286e948294e596994465a41cf46ebe2c8bf3c4fe3c6887cec0ae196ce4af8af7f295a4a71261462086080124ebecbcc0df4b74df7661fb290cdb9599a729935469c96afb5cb6fd449797c9498e5922148b33a8a401a4b4cdf5840d7495c43df96bdb6599889d3cdc70cad2dc9c97f1269de936794c61d3b0911b0bb3e7e06e6519e87b0a4bb4f6035e300f6e9deeb81b96e1353815896af993c90f454bcdcc710e05aa6028bdb0bceb0d196ea841fc6bf9a1818604866ccc737ebf2d19a3e8ff28d4b8510c411fa82752bb0f38460729275bd4387f298a779e422dee398750ca6ff5c24a5d4c9117404bd588bf70131182ad001ead9004c4af13c5fb70b602fea0e359c327657dc785bc192575a9c3e4c36f5a0750b0c7f0a0753a1bf87cad07afeb581f88415a2b432e4dba7d54a102e49eccea4386271465711735898e7ddcb57c77ac843c9c81c46864a6c92379ae28607dbcaa8804c2e206ccbb293386ac4e25d5103048f64a8103583a969c2d520624cb3e1eeb6c7f664a25df234d37bce1c2708532d275ae95314965360af9987fd6e2ca2325f871f891e46ea5fb05be9c8521fdd6252281ede7bb2f833311b62dc057892d29920bd1654a45ae85db823bb474ccbf95cd5078f4bce0119bab6810df552352b4ab7587adc8899e58ef44cb4075387e3d0139d6b99f0b74a9865c6a42a6a721101cdc022a3b988e3e2b8a229bb70e1d8318cc643441c93187ca97b4132f1399953ced9c2b644c42b2147f6fe5cf2fe6e41404c16382c5edb7cf92bf1cf6850c9b181099f73f794e66ea31e2d5fb67334564fce99ae8d4f279baa80f013a83299c1af172afcb9f3c11e9a21ccce302a2411159389613c129e760029013241178c807b6f8aa603cea11941ff7bacbedaf650bf277677f11cbd01e06f866a1e6e73e0b827a3acae09ed95f5361eac24f71207a8019b1db72c7c81f80f2452933a28ae32805eb5c40e3b13c7d818359e01669f602d6a431e6ed9fac696b722dc13e93466e6b74b8a4c08000c5508be9a0e848b809a5870c56785664862600788ac1e936a502e5feeac9411a845214a2cf64d1cd07e91b98d3ea8a9a153bb411bb948a5f8c3b13616b6d1a76e37c6c643b64b93d6440573aac9249eb3bcb342e3e49716ba256ff41cc4d3e722f88716753c19db2685c6f8ffef961787cdef2e498f7480a1400af86599b05685b8b58d451f8a753a0bd9bd53148fff6ad0166c433c36a41b1de72a21c4dc6ff0ffdf832bc52d2f35ad53654dd818b2478bec4950f73c67971738ead089039bcc3837013261383bfdfeaded19414087787c3df977cc785f36c86d67d04a64e645db6d755698c98d5743b6e25e2ed111342925cc178db82d96c5cfc735524155c9e3bdbf760a3b431eb9fb4e9eeafca18709c33460cc6d0cab0ab89e5a2417e14f10b57fe5ebfe46b148cbe05821deaf74844b99dcfe8f6ed9e6d23613769b60cd5c9b080d151515ac880f80372f7088287c2c19fb6e0102eb50208d0c8f5819eb67c307cac7b5aab325be5fac665d39adc722f288863ee79b48297f81e2d14ebab089600f22c10046e585268c7e1559d2c7eba7c6df73594efcc21e817f35d6f5692d086bb27d77f032561389fc40d59ae1cf47d3f576ae38d5214bf93347bcd175eaa2bd854e8b3530c6c639f725ae1bbd4bdf34cb22e75328fb67e1da5fdaa8444b6e249bdd8df3bf2aa9796fc06510460eae8de21845fde1e9b9b000471211afd6e4a60ddd78550d3dc0e4f35322c5504ddc2ee9ebf36ac166aa578b80f2d8a6b6e72c73d4150d46286fcad6a510f0746348ba0e9a31c710fe90ef9435a5888cbae99b439ef09b4429f0a4ed7162f7847f771bf64a7c0464d39acc3f2f7ddd303ac72880fa829c44c1e5f492f5a17b4b6f4cb3e85a1ffae284ad0c4078057ecf114fe8d5a20e652d02b6bd298b72a275f2a51957c7b9c4f81c9bdd5d258490998e2e5d1172499d536f6ce7a61ee993a9ab11ed02c9379c602672d85de363ce22f84483ecd09d33fecd203a8f4bcf8ac0a333313105efcc40292b5fe94eab67d04a91ffbe405cf32de54f7b71d9caabbfb18eaa5a3ff9abdbea4b6d56deb065efc93a73ba124ef351463792c9b38f9dfdf927dbe375758f8ef70d4ae88f205afc517f3e6625e8f218ae7feb9813f96e159f2eb3a4d20ade7baef8ba2fbdebec5de9b9e0849bf1747df25dbfc0a669ceae58d176547135b56a0c5f43e6423a45b544f581563a683600b27185c9e1b787a1659b93958da58c55e21b0a0b7345b130cb5437b12f0c67c6c2ddcfeaf0ec8ac968ee4d77437cf43863152c588a58cf3d7dffba2e757442d37953cb4ee64e00bdb38a9d5f145e9abee07cfb3fbf095056b075d8a2ac7d5d5bbfd2d93596912af11480cac2d36ce65d7d4e020bde067f1320b355f2324cd55267b5aa754220725277107072178f59b54b67ceb148cf33d9c71d4127d2302b01ee7348ae2c799234369d2fea684a23149c406bda85840487a0b6ac296eaaa6555531047096aadea5dc854a604e7910ed7f90594a73bc3eb984c3c99132c6ca082427687b94cd31fa0b769bf9c998d35e37a25e06d3b718a592ffdf54ccc642f32bf0539708078b929172de6c4aa5299caa09fd05bbb95d3d88910e68ab9aebb4c5adf2b01b63ba15798562d1e3f61c6656b271048f787945b30432ec67dec01e2990fd67bebcfc1f23f008029dbb81dd4eb598f604ab7ad8156e4693fb000000000000", 0x1000}, {&(0x7f0000001dc0)="a4d50ef1e03b54c0a3635e33c1a75fe108cb13513b14613c40fc566dd03999e8133b778d7e807b72b83a0b1dacf645f1ee4413d0f9d3ba0081d522e2bcb5e3c922320dec9adb79dfeab41f0a5f6e915174c7d12c11fb9b8b79ba89", 0x5b}], 0x3, &(0x7f0000001e80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}], 0x68, 0x10}}, {{&(0x7f0000001f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f80)="0e93cfe803854234933cacbaaf0e90f9730ecb8dd169b9147a7ea5b35b648c41cb3f3a5ccdfcb42e805a0fe6438b2730b147e1d9281d20efaaa1cd5b774e4d1e4b0f3a39d68778c93b64688d583290", 0x4f}, {&(0x7f0000008340)="b188c7f0637c87fdc04c4ad963db1e76dc2d9ee73bdf460501594ed088654e7b68b5047ef644cd26b0896bf641c895a3cdac308bf15366b5ff14fd1eeddb2f4f4b42d52ce6d40970e8da7e5b5b896cecee4ab2a3a78c81126c6ee55b14628bba7058e194a0f40289f6a0eb3b3b821b68ab67cb0a7d6e504c5499963532b01ae67f0ca493a60b56e5889d0ba075a2ce2b3f0d76b2c936cf4d1a8898d7b632bdf877bf5512b56a3902dc477d526d04878a086b89f810dff0d0dec124dc42eccb15c8a2a69149031bc02e081e4c6505cfedc6b40b29785a693965060eec639a438de64f20b555da7702faad1de201d9", 0xee}, {&(0x7f0000008440)="979c1536455aa2058c01e33f6fa7df739b25182b752f7e96ad0460554cbd711a2a9e20c7a6df754493574f312783602f226ec26df9c05edf0dbc1bc8abbaa98da00cb1416f562b851f5bd718728efb216abde95d908e0d99159a9f34e49c9e1fb0e410f8ceefd8500cc6ac479932298e7c5f3a6dfb8690b4db80ed9d575d141b3551170a736a91d7a29885cf8be2d57bdb37eb8777cd0d796fa6940fd77d37ab794682d48392717db747a00a4d32da6ba791dd001d1f9e850e6d91d60409a0e677df331716cbf55a9bbabd3e58200590bbabb9bf367cc70508488e6e351af9f6a6", 0xe1}], 0x3, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x8000}}], 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 8.632478382s ago: executing program 3 (id=1224): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7f}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (async, rerun: 32) syz_usb_connect(0x0, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) (async) r4 = getpid() tgkill(0xffffffffffffffff, r4, 0x1e) (async) ptrace$cont(0x11, r4, 0x2, 0x2) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x56595559, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x4, 0x1}}) 8.55010687s ago: executing program 3 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001200000b0500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0xc812) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) recvmsg(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x3) 7.780244281s ago: executing program 3 (id=1227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x6, @mcast1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x205, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xf, &(0x7f00000004c0)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ldst={0x2, 0x2, 0x2, 0x6, 0xa, 0x8, 0xffffffffffffffff}], &(0x7f0000000540)='GPL\x00', 0x8, 0x9a, &(0x7f0000000580)=""/154, 0x41100, 0x8, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0x9, 0xf}, 0x10, 0x3e42, r5, 0x5, 0x0, &(0x7f0000000700)=[{0x1, 0x4, 0xb}, {0x5, 0x5, 0xe, 0xa}, {0x0, 0x3, 0xa, 0x4}, {0x5, 0x3, 0xb, 0xa}, {0x1, 0x1, 0xf, 0x9}], 0x10, 0x6f4}, 0x94) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x3000000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r10, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) 7.711936468s ago: executing program 1 (id=1228): socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xffffffff82809815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xfffffffffffffff5, 0x0, {0x3, 0x0, 0x9, 0x0, 0x0, 0xff, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@rnullb, 0x0, &(0x7f00000001c0)={0xb1, 0x9, 0x0, 0x4}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) set_mempolicy(0x0, &(0x7f0000000240)=0x2, 0x3) r2 = syz_io_uring_setup(0x998, &(0x7f0000000640)={0x0, 0x4078, 0x1000, 0x3, 0x140}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000280)=""/97, 0x61}], 0x2}) io_uring_enter(r2, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 6.996642039s ago: executing program 1 (id=1234): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xffbfff40, 0x4000403, 0x8, 0x63ba, 0x9, "ffffff7f87680000000000001000007fcb3678", 0x0, 0x40403}) ioctl$TCXONC(r0, 0x540a, 0x3) 6.844957933s ago: executing program 1 (id=1235): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) mount(0x0, 0x0, &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x200, 0x1, 0x6, 0x220, 0xffffffffffffffff, 0x3a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffff0000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xebfc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x1900, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r8, 0x14}, 0x38) 6.416365562s ago: executing program 0 (id=1237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000074d564b"]) pipe2$9p(&(0x7f0000001900), 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x8000}, &(0x7f0000000100), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, r6, 0xf2ff}}, 0x18) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYBLOB="adcb90c828851c51786acf0329c6e5be930f91acf8c05574c2fdeb8199a985d6a0f0c853ff78ded8c65ef368a890aa6f4fdbcd1d105830e8cf148f310c98c4eb05215342962c21e689c7defd5bf3dfab1ad51db7ca171af43bec86784a237f56393caaeba02b229dbd20b1b40bb316819d3dc1004c3895e58506f459fe634cd0be3f39d1de596dff8ebac66b4bf9d648ed7d10eda0de9d610377cd6d94e78e0d48f63e975f2d1829a38f0e0cf278d72009541288ffec200c17ea9c406d14675c7bb7163de5eb9720132dd94c3086cbbd6308afa45df1b1614e513a4693473f35de79647b43cad7d38581d91217d4b2b3639c", @ANYRES64=r3], 0x0) 6.282611353s ago: executing program 3 (id=1238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8010) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x108) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x2f) socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000180000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008b28101d4457ae2656cce607da355000a40fffffffc4c0000000c0a010100000000000000000affff050900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023e0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/64, 0x40, 0x1, &(0x7f0000000380)=""/96, 0x60}, &(0x7f0000000400)=0x40) 4.917293396s ago: executing program 4 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00'}) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r3], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r4 = getpid() (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) (async) ioctl$VIDIOC_DQEVENT(r3, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) (async, rerun: 64) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) (rerun: 64) 4.572205507s ago: executing program 0 (id=1246): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) ioprio_set$pid(0x3, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0xfc, 0xe2, 0x40, 0x1004, 0x61aa, 0x82e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe7, 0x77, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 3.976538528s ago: executing program 2 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 3.968468214s ago: executing program 2 (id=1249): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4c) 3.796747125s ago: executing program 2 (id=1250): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() (async) r2 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r2, 0x40, &(0x7f0000000100)={0xc, 0xb92, 0x81}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000dab000/0x2000)=nil, 0x2000, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) (async) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000080)={0x8, 0x3700, "0dfe3546089e9390d2ad73dedbecbd9f606c507ff5d25725", {0x5}, 0xd}) 3.69622694s ago: executing program 1 (id=1251): r0 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x1000007) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syncfs(0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$FIOCLEX(r0, 0x5451) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040100011402002000128008000100736974001400028008000100ac1414aa050005000100"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) 3.515990163s ago: executing program 4 (id=1252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x350f96aef3271010, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfffffffb) 3.353360739s ago: executing program 2 (id=1253): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04000700800009f0", 0x33a) 3.17252686s ago: executing program 4 (id=1254): recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000041000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a"], 0x184}}, 0x0) 2.986604326s ago: executing program 4 (id=1255): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@setneightbl={0xc0, 0x43, 0x101, 0x70bd29, 0x25dfdbfb, {0xa}, [@NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8, 0xb, 0x80000001}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0xb}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x4}, @NDTPA_APP_PROBES={0x8, 0x9, 0x1000}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0xb21}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x7}]}, @NDTA_NAME={0x8, 0x1, 'GPL\x00'}, @NDTA_PARMS={0x24, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0xc, 0x6, 0x1}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0xb}, @NDTPA_IFINDEX={0x8}]}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x7}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x7e}, @NDTPA_IFINDEX={0x8}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x7fffffff}]}, @NDTA_THRESH2={0x8, 0x3, 0x9}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xe011}, @NDTA_THRESH2={0x8, 0x3, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 2.930522221s ago: executing program 2 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82482, 0x0) (async) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) (async) unshare(0x24060400) (async) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000200)=0x48, 0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) 2.804454492s ago: executing program 3 (id=1257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000060000000000", 0x39}], 0x1) 2.222863177s ago: executing program 2 (id=1258): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x64000, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000001f000000000000007e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7110000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000006f5d797b5fa0609820101133414c"], &(0x7f0000000580)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='afs_edit_dir\x00', r0, 0x0, 0x2}, 0x18) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000780)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffff4d89, 0x3, 0x2, 0x80000001, 0x6, 0xffff]}, &(0x7f00000004c0)=0x78) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x2, 0x3, 0x0, 0x2, 0x1a, 0x0, 0xfffffffe, 0x1901, [@sadb_x_nat_t_port={0x1, 0x0, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x89, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x816}}, @sadb_key={0xd, 0x8, 0x2e8, 0x0, "9c23aeefe9eb8bb7c4aa88699ed41d9edcfba47d4fac25eb98e05b908a6c3c6d6c37f4a9656760c43c1361564bae3eaea9cf449abf32643483cabf76a33a343695ec659ca926c3ebea268d79ee49edfa606b20878030650a53609cc866"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}]}, 0xd0}, 0x1, 0x7}, 0x40800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={0x0, 0x44}, 0x5}, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 2.00153657s ago: executing program 4 (id=1259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007862cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x77}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x24004400) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 687.912596ms ago: executing program 4 (id=1260): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000010001007911b00000000000851000000200001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70897f8ff00000000bfa200000200000007020000f8ffffffb703000008000000b704e4ffffffffff840000008200000095000007000000009500a5f500"/81], &(0x7f00000000c0)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@private0}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r5}, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x6) migrate_pages(0x0, 0x1000005, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x272) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 504.346144ms ago: executing program 0 (id=1261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x88}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbb6076b5cad4f686dd6075e50000323a0020010000000000000000000000000000ff02000000000000000000000000000104009078fc00000060a3577f00002b00ff010000000000000000000000000001fe8000000000000000000000000000bb6be2"], 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 0s ago: executing program 1 (id=1262): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@setneightbl={0xc0, 0x43, 0x101, 0x70bd29, 0x25dfdbfb, {0xa}, [@NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8, 0xb, 0x80000001}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0xb}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x4}, @NDTPA_APP_PROBES={0x8, 0x9, 0x1000}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0xb21}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x7}]}, @NDTA_NAME={0x8, 0x1, 'GPL\x00'}, @NDTA_PARMS={0x24, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0xc, 0x6, 0x1}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0xb}, @NDTPA_IFINDEX={0x8}]}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x7}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x7e}, @NDTPA_IFINDEX={0x8}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x7fffffff}]}, @NDTA_THRESH2={0x8, 0x3, 0x9}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xe011}, @NDTA_THRESH2={0x8, 0x3, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r6 = socket(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) kernel console output (not intermixed with test programs): 13.412:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9323 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f678f6c9 code=0x7ffc0000 [ 352.765016][ T5870] m920x_read = error: -19 [ 352.769380][ T5870] dvb-usb: error while querying for an remote control event. [ 352.945110][ T5870] m920x_read = error: -19 [ 352.956013][ T5870] dvb-usb: error while querying for an remote control event. [ 353.075089][ T5870] m920x_read = error: -19 [ 353.085261][ T5870] dvb-usb: error while querying for an remote control event. [ 353.222056][ T9350] netlink: 'syz.1.906': attribute type 4 has an invalid length. [ 353.230251][ T5870] m920x_read = error: -19 [ 353.234666][ T5870] dvb-usb: error while querying for an remote control event. [ 353.285098][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 353.535384][ T5870] m920x_read = error: -19 [ 353.539843][ T5870] dvb-usb: error while querying for an remote control event. [ 353.665088][ T5870] m920x_read = error: -19 [ 353.668206][ T9355] netlink: 'syz.4.908': attribute type 72 has an invalid length. [ 353.669518][ T5870] dvb-usb: error while querying for an remote control event. [ 353.955011][ T5870] m920x_read = error: -19 [ 353.959413][ T5870] dvb-usb: error while querying for an remote control event. [ 354.077241][ T5870] m920x_read = error: -19 [ 354.095831][ T5870] dvb-usb: error while querying for an remote control event. [ 354.255086][ T5870] m920x_read = error: -19 [ 354.262694][ T5870] dvb-usb: error while querying for an remote control event. [ 354.415037][ T5870] m920x_read = error: -19 [ 354.459835][ T5870] dvb-usb: error while querying for an remote control event. [ 354.605033][ T5870] m920x_read = error: -19 [ 354.607472][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 354.622290][ T5870] dvb-usb: error while querying for an remote control event. [ 354.767804][ T9372] FAT-fs (loop9): unable to read boot sector [ 354.801658][ T5870] m920x_read = error: -19 [ 354.860959][ T5870] dvb-usb: error while querying for an remote control event. [ 355.015208][ T5870] m920x_read = error: -19 [ 355.020167][ T5870] dvb-usb: error while querying for an remote control event. [ 355.023302][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 355.205205][ T5870] m920x_read = error: -19 [ 355.215007][ T5870] dvb-usb: error while querying for an remote control event. [ 355.378913][ T5870] m920x_read = error: -19 [ 355.386628][ T5870] dvb-usb: error while querying for an remote control event. [ 355.525039][ T5870] m920x_read = error: -19 [ 355.529524][ T5870] dvb-usb: error while querying for an remote control event. [ 355.655087][ T5870] m920x_read = error: -19 [ 355.683775][ T5870] dvb-usb: error while querying for an remote control event. [ 355.825112][ T5870] m920x_read = error: -19 [ 355.829554][ T5870] dvb-usb: error while querying for an remote control event. [ 355.965124][ T5870] m920x_read = error: -19 [ 355.969508][ T5870] dvb-usb: error while querying for an remote control event. [ 356.146307][ T5870] m920x_read = error: -19 [ 356.150673][ T5870] dvb-usb: error while querying for an remote control event. [ 356.272458][ T9390] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.920'. [ 356.293074][ T9395] netlink: 'syz.4.922': attribute type 4 has an invalid length. [ 356.326884][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 356.355736][ T5870] m920x_read = error: -19 [ 356.360123][ T5870] dvb-usb: error while querying for an remote control event. [ 356.377215][ T9396] /dev/nullb0: Can't open blockdev [ 356.583901][ T5870] m920x_read = error: -19 [ 356.590251][ T5870] dvb-usb: error while querying for an remote control event. [ 356.679810][ T9396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.692805][ T9396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.705092][ T5832] m920x_read = error: -19 [ 356.709807][ T5832] dvb-usb: error while querying for an remote control event. [ 356.937222][ T5832] m920x_read = error: -19 [ 356.943526][ T5832] dvb-usb: error while querying for an remote control event. [ 356.955161][ T5870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 356.980351][ T9396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.153385][ T9396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.436014][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.951759][ T5870] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 357.975042][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.155036][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 358.165120][ T5832] m920x_read = error: -19 [ 358.169490][ T5832] dvb-usb: error while querying for an remote control event. [ 358.224261][ T9396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.236363][ T5870] usb 2-1: config 0 descriptor?? [ 358.265041][ T9396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.300386][ T5870] ttusbir 2-1:0.0: cannot find expected altsetting [ 358.345048][ T5870] m920x_read = error: -19 [ 358.355019][ T5870] dvb-usb: error while querying for an remote control event. [ 358.406966][ T9419] bridge_slave_1: left allmulticast mode [ 358.448860][ T9419] bridge_slave_1: left promiscuous mode [ 358.467858][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.497417][ T5832] m920x_read = error: -19 [ 358.614974][ T5832] dvb-usb: error while querying for an remote control event. [ 358.755680][ T5832] m920x_read = error: -19 [ 358.834559][ T5832] dvb-usb: error while querying for an remote control event. [ 358.862847][ T9419] bridge_slave_0: left allmulticast mode [ 358.869135][ T9419] bridge_slave_0: left promiscuous mode [ 358.877150][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.965222][ T5832] m920x_read = error: -19 [ 358.969593][ T5832] dvb-usb: error while querying for an remote control event. [ 359.150866][ T9396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.165108][ T5832] m920x_read = error: -19 [ 359.169484][ T5832] dvb-usb: error while querying for an remote control event. [ 359.181156][ T9396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.734007][ T5832] m920x_read = error: -19 [ 359.814998][ T5832] dvb-usb: error while querying for an remote control event. [ 359.910750][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 359.936346][ T9434] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 360.025147][ T5832] m920x_read = error: -19 [ 360.029567][ T5832] dvb-usb: error while querying for an remote control event. [ 360.164997][ T5832] m920x_read = error: -19 [ 360.169669][ T6178] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.178547][ T9449] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.933'. [ 360.217105][ T5832] dvb-usb: error while querying for an remote control event. [ 360.228040][ T6178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.256181][ T6178] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.362625][ T5832] m920x_read = error: -19 [ 360.367577][ T5832] dvb-usb: error while querying for an remote control event. [ 360.415637][ T6178] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.905837][ T5832] m920x_read = error: -19 [ 360.915605][ T5832] dvb-usb: error while querying for an remote control event. [ 360.953641][ T1156] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.962849][ T1156] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.046962][ T5832] m920x_read = error: -19 [ 361.051402][ T5832] dvb-usb: error while querying for an remote control event. [ 361.059893][ T1156] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.068862][ T1156] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.090433][ T5832] usb 2-1: USB disconnect, device number 25 [ 361.175354][ T5928] m920x_read = error: -19 [ 361.179721][ T5928] dvb-usb: error while querying for an remote control event. [ 361.315022][ T5832] m920x_read = error: -19 [ 361.319490][ T5832] dvb-usb: error while querying for an remote control event. [ 361.445031][ T5832] m920x_read = error: -19 [ 361.452739][ T5832] dvb-usb: error while querying for an remote control event. [ 361.491404][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 361.491421][ T30] audit: type=1400 audit(1762508322.872:731): avc: denied { ioctl } for pid=9466 comm="syz.4.939" path="socket:[23069]" dev="sockfs" ino=23069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.522274][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.585890][ T5832] m920x_read = error: -19 [ 361.592791][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 361.681112][ T5832] dvb-usb: error while querying for an remote control event. [ 361.867011][ T5832] m920x_read = error: -19 [ 361.871544][ T5832] dvb-usb: error while querying for an remote control event. [ 361.882612][ T30] audit: type=1400 audit(1762508323.142:732): avc: denied { write } for pid=9468 comm="syz.1.940" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 361.995656][ T5928] m920x_read = error: -19 [ 362.000197][ T5928] dvb-usb: error while querying for an remote control event. [ 362.135373][ T5832] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 362.153598][ T5928] m920x_read = error: -19 [ 362.179339][ T5928] dvb-usb: error while querying for an remote control event. [ 362.585111][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 362.591335][ T5832] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 362.623872][ T5832] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 362.671314][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 362.710770][ T5928] m920x_read = error: -19 [ 362.716759][ T5928] dvb-usb: error while querying for an remote control event. [ 362.725064][ T5832] usb 5-1: Product: syz [ 362.729314][ T5832] usb 5-1: Manufacturer: syz [ 362.748349][ T5832] usb 5-1: SerialNumber: syz [ 362.773703][ T5832] usb 5-1: config 0 descriptor?? [ 362.793699][ T5832] pwc: Philips SPC 880NC USB webcam detected. [ 362.856441][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 362.925095][ T5928] m920x_read = error: -19 [ 362.929671][ T5928] dvb-usb: error while querying for an remote control event. [ 363.047551][ T5832] pwc: Warning: more than 1 configuration available. [ 363.080122][ T9491] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.945'. [ 363.100345][ T5832] pwc: Failed to set LED on/off time (-71) [ 363.108754][ T5832] pwc: send_video_command error -71 [ 363.114062][ T5832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 363.122190][ T5832] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 363.155348][ T5928] m920x_read = error: -19 [ 363.159815][ T5928] dvb-usb: error while querying for an remote control event. [ 363.225266][ T5832] usb 5-1: USB disconnect, device number 21 [ 363.295737][ T43] m920x_read = error: -19 [ 363.300302][ T43] dvb-usb: error while querying for an remote control event. [ 363.415025][ T43] m920x_read = error: -19 [ 363.429470][ T43] dvb-usb: error while querying for an remote control event. [ 363.566387][ T43] m920x_read = error: -19 [ 363.571091][ T43] dvb-usb: error while querying for an remote control event. [ 363.968832][ T43] m920x_read = error: -19 [ 363.978868][ T43] dvb-usb: error while querying for an remote control event. [ 364.021792][ T5942] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 364.070938][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 364.135077][ T43] m920x_read = error: -19 [ 364.139524][ T43] dvb-usb: error while querying for an remote control event. [ 364.226663][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.255300][ T43] m920x_read = error: -19 [ 364.265062][ T43] dvb-usb: error while querying for an remote control event. [ 364.276598][ T5942] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 364.287548][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.753641][ T5942] usb 1-1: config 0 descriptor?? [ 364.762291][ T30] audit: type=1400 audit(1762508325.732:733): avc: denied { read write } for pid=9500 comm="syz.1.949" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 365.145535][ T30] audit: type=1400 audit(1762508325.732:734): avc: denied { open } for pid=9500 comm="syz.1.949" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 365.187817][ T43] m920x_read = error: -19 [ 365.195812][ T43] dvb-usb: error while querying for an remote control event. [ 365.316059][ T43] m920x_read = error: -19 [ 365.320661][ T43] dvb-usb: error while querying for an remote control event. [ 365.328536][ T30] audit: type=1400 audit(1762508326.612:735): avc: denied { create } for pid=9508 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.378527][ T30] audit: type=1400 audit(1762508326.612:736): avc: denied { write } for pid=9508 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.435892][ T43] m920x_read = error: -19 [ 365.440611][ T43] dvb-usb: error while querying for an remote control event. [ 365.445010][ T30] audit: type=1400 audit(1762508326.802:737): avc: denied { map } for pid=9511 comm="syz.4.953" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 365.502704][ T5942] hid-led 0003:1294:1320.0007: unbalanced collection at end of report description [ 365.836800][ T5942] hid-led 0003:1294:1320.0007: probe with driver hid-led failed with error -22 [ 365.846143][ T43] m920x_read = error: -19 [ 365.850505][ T43] dvb-usb: error while querying for an remote control event. [ 366.205177][ T9493] binder: BC_ATTEMPT_ACQUIRE not supported [ 366.211924][ T9493] binder: 9492:9493 ioctl c0306201 2000000003c0 returned -22 [ 366.220545][ T9493] binder: 9492:9493 ioctl 5406 200000000000 returned -22 [ 366.251960][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.952'. [ 366.388418][ T5870] usb 1-1: USB disconnect, device number 23 [ 366.525155][ T43] m920x_read = error: -19 [ 366.556232][ T43] dvb-usb: error while querying for an remote control event. [ 366.680729][ T5870] m920x_read = error: -19 [ 366.688385][ T5870] dvb-usb: error while querying for an remote control event. [ 366.805035][ T5870] m920x_read = error: -19 [ 366.809676][ T5870] dvb-usb: error while querying for an remote control event. [ 366.893947][ T30] audit: type=1400 audit(1762508328.272:738): avc: denied { create } for pid=9530 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 367.025356][ T5870] m920x_read = error: -19 [ 367.561329][ T5870] dvb-usb: error while querying for an remote control event. [ 367.705069][ T5870] m920x_read = error: -19 [ 367.720108][ T5870] dvb-usb: error while querying for an remote control event. [ 367.893817][ T30] audit: type=1400 audit(1762508329.262:739): avc: denied { ioctl } for pid=9546 comm="syz.3.963" path="socket:[23913]" dev="sockfs" ino=23913 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 367.931331][ T30] audit: type=1400 audit(1762508329.272:740): avc: denied { ioctl } for pid=9546 comm="syz.3.963" path="socket:[23914]" dev="sockfs" ino=23914 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 367.964223][ T30] audit: type=1400 audit(1762508329.272:741): avc: denied { read } for pid=9546 comm="syz.3.963" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 367.975014][ T5870] m920x_read = error: -19 [ 367.989892][ T30] audit: type=1400 audit(1762508329.272:742): avc: denied { open } for pid=9546 comm="syz.3.963" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 369.051186][ T5870] dvb-usb: error while querying for an remote control event. [ 369.084261][ T9548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.153662][ T9548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.188481][ T5870] m920x_read = error: -19 [ 369.201874][ T9550] vlan3: entered promiscuous mode [ 369.207470][ T9550] bridge0: entered promiscuous mode [ 369.213840][ T5870] dvb-usb: error while querying for an remote control event. [ 369.243712][ T9548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 369.313734][ T9548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.359492][ T5870] m920x_read = error: -19 [ 369.368498][ T5870] dvb-usb: error while querying for an remote control event. [ 369.374454][ T9548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 369.424164][ T9548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.495017][ T5870] m920x_read = error: -19 [ 369.509823][ T5870] dvb-usb: error while querying for an remote control event. [ 370.080137][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 370.155194][ T5870] m920x_read = error: -19 [ 370.159565][ T5870] dvb-usb: error while querying for an remote control event. [ 370.765168][ T5832] m920x_read = error: -19 [ 370.769606][ T5832] dvb-usb: error while querying for an remote control event. [ 370.884995][ T5832] m920x_read = error: -19 [ 370.889374][ T5832] dvb-usb: error while querying for an remote control event. [ 371.035282][ T5832] m920x_read = error: -19 [ 371.039654][ T5832] dvb-usb: error while querying for an remote control event. [ 371.195110][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 371.205714][ T5832] m920x_read = error: -19 [ 371.210467][ T5832] dvb-usb: error while querying for an remote control event. [ 371.345072][ T5832] m920x_read = error: -19 [ 371.349445][ T5832] dvb-usb: error while querying for an remote control event. [ 371.356876][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 371.435293][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 371.611308][ T9604] netlink: 755 bytes leftover after parsing attributes in process `syz.2.978'. [ 371.732531][ T5832] m920x_read = error: -19 [ 371.737463][ T5832] dvb-usb: error while querying for an remote control event. [ 371.855017][ T5832] m920x_read = error: -19 [ 371.859398][ T5832] dvb-usb: error while querying for an remote control event. [ 371.975140][ T5832] m920x_read = error: -19 [ 371.979561][ T5832] dvb-usb: error while querying for an remote control event. [ 372.147928][ T5832] m920x_read = error: -19 [ 372.152697][ T5832] dvb-usb: error while querying for an remote control event. [ 372.200516][ T30] audit: type=1400 audit(1762508333.582:743): avc: denied { create } for pid=9619 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 372.275137][ T5832] m920x_read = error: -19 [ 372.284565][ T5832] dvb-usb: error while querying for an remote control event. [ 372.405144][ T5832] m920x_read = error: -19 [ 372.411057][ T5832] dvb-usb: error while querying for an remote control event. [ 372.463181][ T9626] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[9626] [ 372.551588][ T5832] m920x_read = error: -19 [ 372.559009][ T5832] dvb-usb: error while querying for an remote control event. [ 372.645290][ T30] audit: type=1400 audit(1762508334.022:744): avc: denied { create } for pid=9623 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.686780][ T5832] m920x_read = error: -19 [ 372.691346][ T5832] dvb-usb: error while querying for an remote control event. [ 372.942633][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 373.275106][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 373.415065][ T5832] m920x_read = error: -19 [ 373.419447][ T5832] dvb-usb: error while querying for an remote control event. [ 373.436143][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 373.615061][ T5832] m920x_read = error: -19 [ 373.627777][ T5832] dvb-usb: error while querying for an remote control event. [ 373.726740][ T30] audit: type=1400 audit(1762508335.102:745): avc: denied { connect } for pid=9639 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.755224][ T5832] m920x_read = error: -19 [ 373.808843][ T5832] dvb-usb: error while querying for an remote control event. [ 374.009794][ T5832] m920x_read = error: -19 [ 374.014195][ T5832] dvb-usb: error while querying for an remote control event. [ 374.137520][ T5832] m920x_read = error: -19 [ 374.158602][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'. [ 374.169549][ T5832] dvb-usb: error while querying for an remote control event. [ 374.336280][ T5832] m920x_read = error: -19 [ 374.348539][ T5832] dvb-usb: error while querying for an remote control event. [ 374.495017][ T5870] m920x_read = error: -19 [ 374.505016][ T5870] dvb-usb: error while querying for an remote control event. [ 374.624976][ T5870] m920x_read = error: -19 [ 374.629330][ T5870] dvb-usb: error while querying for an remote control event. [ 374.685322][ T5832] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 375.085111][ T5870] m920x_read = error: -19 [ 375.089546][ T5870] dvb-usb: error while querying for an remote control event. [ 375.164960][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 375.171604][ T5832] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 375.180649][ T5832] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.206621][ T5870] m920x_read = error: -19 [ 375.214081][ T5870] dvb-usb: error while querying for an remote control event. [ 375.225361][ T5832] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.227683][ T30] audit: type=1400 audit(1762508336.592:746): avc: denied { append } for pid=9665 comm="syz.1.997" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 375.276913][ T5832] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.276949][ T5832] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.276994][ T5832] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 375.277018][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.375011][ T5870] m920x_read = error: -19 [ 375.375035][ T5870] dvb-usb: error while querying for an remote control event. [ 375.485091][ T5870] m920x_read = error: -19 [ 375.485110][ T5870] dvb-usb: error while querying for an remote control event. [ 375.495093][ T5832] usb 3-1: usb_control_msg returned -32 [ 375.495129][ T5832] usbtmc 3-1:16.0: can't read capabilities [ 375.595058][ T5832] m920x_read = error: -19 [ 375.599550][ T5832] dvb-usb: error while querying for an remote control event. [ 375.639140][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 375.804999][ T5832] m920x_read = error: -19 [ 376.116930][ T9679] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 376.124835][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1000'. [ 376.550978][ T5832] dvb-usb: error while querying for an remote control event. [ 376.766594][ T5832] m920x_read = error: -19 [ 376.770984][ T5832] dvb-usb: error while querying for an remote control event. [ 376.947937][ T9689] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 377.023166][ T5942] lo speed is unknown, defaulting to 1000 [ 377.108119][ T30] audit: type=1400 audit(1762508338.432:747): avc: denied { ioctl } for pid=9684 comm="syz.4.1002" path="socket:[24635]" dev="sockfs" ino=24635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.230733][ T5832] m920x_read = error: -19 [ 377.261894][ T5832] dvb-usb: error while querying for an remote control event. [ 377.391837][ T5832] m920x_read = error: -19 [ 377.396685][ T5832] dvb-usb: error while querying for an remote control event. [ 377.464219][ T9683] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 377.551941][ T5832] m920x_read = error: -19 [ 377.559292][ T5832] dvb-usb: error while querying for an remote control event. [ 377.775192][ T5832] m920x_read = error: -19 [ 377.780796][ T5832] dvb-usb: error while querying for an remote control event. [ 377.905832][ T5942] usb 3-1: USB disconnect, device number 20 [ 377.965054][ T5832] m920x_read = error: -19 [ 377.969492][ T5832] dvb-usb: error while querying for an remote control event. [ 378.085058][ T5832] m920x_read = error: -19 [ 378.089420][ T5832] dvb-usb: error while querying for an remote control event. [ 378.215044][ T5832] m920x_read = error: -19 [ 378.224924][ T5832] dvb-usb: error while querying for an remote control event. [ 378.355123][ T5832] m920x_read = error: -19 [ 378.359717][ T5832] dvb-usb: error while querying for an remote control event. [ 378.481767][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488311][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.514550][ T5832] m920x_read = error: -19 [ 378.520818][ T5832] dvb-usb: error while querying for an remote control event. [ 379.711946][ T30] audit: type=1400 audit(1762508340.852:748): avc: denied { mount } for pid=9704 comm="syz.0.1009" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 379.734168][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.799612][ T5832] m920x_read = error: -19 [ 379.825253][ T5832] dvb-usb: error while querying for an remote control event. [ 379.941969][ T30] audit: type=1400 audit(1762508340.852:749): avc: denied { mounton } for pid=9704 comm="syz.0.1009" path="/211/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 379.973132][ T5832] m920x_read = error: -19 [ 380.069869][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'. [ 380.084170][ T5832] dvb-usb: error while querying for an remote control event. [ 380.201502][ T5832] m920x_read = error: -19 [ 380.206318][ T30] audit: type=1400 audit(1762508341.572:750): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 380.226490][ T5832] dvb-usb: error while querying for an remote control event. [ 380.343913][ T5832] m920x_read = error: -19 [ 380.348721][ T5832] dvb-usb: error while querying for an remote control event. [ 380.853354][ T9727] tmpfs: Unknown parameter 'mpon' [ 380.863244][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1015'. [ 380.885481][ T5832] m920x_read = error: -19 [ 380.889862][ T5832] dvb-usb: error while querying for an remote control event. [ 380.897773][ T9731] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1015'. [ 380.906876][ T30] audit: type=1400 audit(1762508342.262:751): avc: denied { remount } for pid=9725 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 380.941473][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1015'. [ 381.037156][ T5832] m920x_read = error: -19 [ 381.041640][ T5832] dvb-usb: error while querying for an remote control event. [ 381.046236][ T9731] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1015'. [ 381.508152][ T43] m920x_read = error: -19 [ 381.534586][ T43] dvb-usb: error while querying for an remote control event. [ 381.655908][ T43] m920x_read = error: -19 [ 381.660289][ T43] dvb-usb: error while querying for an remote control event. [ 381.734999][ T5832] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 381.845115][ T43] m920x_read = error: -19 [ 381.878902][ T43] dvb-usb: error while querying for an remote control event. [ 381.905113][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 381.979812][ T5832] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 381.992665][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.022700][ T5832] usb 2-1: Product: syz [ 382.027568][ T30] audit: type=1400 audit(1762508343.412:752): avc: denied { write } for pid=9757 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 382.071981][ T5832] usb 2-1: Manufacturer: syz [ 382.123509][ T43] m920x_read = error: -19 [ 382.128525][ T5832] usb 2-1: SerialNumber: syz [ 382.133395][ T43] dvb-usb: error while querying for an remote control event. [ 382.160145][ T30] audit: type=1400 audit(1762508343.412:753): avc: denied { map } for pid=9757 comm="syz.4.1020" path="socket:[24913]" dev="sockfs" ino=24913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.191941][ T30] audit: type=1400 audit(1762508343.412:754): avc: denied { read } for pid=9757 comm="syz.4.1020" path="socket:[24913]" dev="sockfs" ino=24913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.265068][ T43] m920x_read = error: -19 [ 382.269645][ T43] dvb-usb: error while querying for an remote control event. [ 382.385137][ T43] m920x_read = error: -19 [ 382.402055][ T43] dvb-usb: error while querying for an remote control event. [ 382.515051][ T43] m920x_read = error: -19 [ 382.519454][ T43] dvb-usb: error while querying for an remote control event. [ 382.599583][ T5832] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 382.620369][ T5832] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 382.665616][ T43] m920x_read = error: -19 [ 382.674274][ T43] dvb-usb: error while querying for an remote control event. [ 382.868835][ T43] m920x_read = error: -19 [ 382.873537][ T43] dvb-usb: error while querying for an remote control event. [ 382.987339][ T9777] FAULT_INJECTION: forcing a failure. [ 382.987339][ T9777] name failslab, interval 1, probability 0, space 0, times 0 [ 383.001168][ T9777] CPU: 0 UID: 0 PID: 9777 Comm: syz.0.1023 Not tainted syzkaller #0 PREEMPT(full) [ 383.001196][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.001208][ T9777] Call Trace: [ 383.001218][ T9777] [ 383.001226][ T9777] dump_stack_lvl+0x16c/0x1f0 [ 383.001262][ T9777] should_fail_ex+0x512/0x640 [ 383.001285][ T9777] ? fs_reclaim_acquire+0xae/0x150 [ 383.001310][ T9777] should_failslab+0xc2/0x120 [ 383.001333][ T9777] __kmalloc_noprof+0xdd/0x880 [ 383.001361][ T9777] ? tomoyo_encode2+0x100/0x3e0 [ 383.001394][ T9777] ? tomoyo_encode2+0x100/0x3e0 [ 383.001413][ T9777] tomoyo_encode2+0x100/0x3e0 [ 383.001440][ T9777] tomoyo_encode+0x29/0x50 [ 383.001461][ T9777] tomoyo_realpath_from_path+0x18f/0x6e0 [ 383.001493][ T9777] tomoyo_mount_acl+0x1ae/0x850 [ 383.001513][ T9777] ? rcu_is_watching+0x12/0xc0 [ 383.001538][ T9777] ? finish_task_switch.isra.0+0x221/0xc10 [ 383.001563][ T9777] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.001593][ T9777] ? finish_task_switch.isra.0+0x221/0xc10 [ 383.001620][ T9777] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 383.001640][ T9777] ? trace_sched_exit_tp+0xd1/0x120 [ 383.001696][ T9777] ? tomoyo_domain+0xbb/0x150 [ 383.001720][ T9777] ? tomoyo_profile+0x47/0x60 [ 383.001748][ T9777] tomoyo_mount_permission+0x16d/0x420 [ 383.001768][ T9777] ? tomoyo_mount_permission+0x14f/0x420 [ 383.001790][ T9777] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 383.001823][ T9777] ? hook_sb_mount+0x10/0x320 [ 383.001856][ T9777] security_sb_mount+0x9b/0x260 [ 383.001878][ T9777] path_mount+0x158/0x23a0 [ 383.001907][ T9777] ? __pfx_path_mount+0x10/0x10 [ 383.001932][ T9777] ? kmem_cache_free+0x2d4/0x6c0 [ 383.001948][ T9777] ? putname+0x154/0x1a0 [ 383.001976][ T9777] ? putname+0x154/0x1a0 [ 383.001996][ T9777] ? putname+0x154/0x1a0 [ 383.002022][ T9777] ? __x64_sys_mount+0x293/0x310 [ 383.002043][ T9777] __x64_sys_mount+0x293/0x310 [ 383.002067][ T9777] ? __pfx___x64_sys_mount+0x10/0x10 [ 383.002100][ T9777] do_syscall_64+0xcd/0xfa0 [ 383.002121][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.002141][ T9777] RIP: 0033:0x7f8c5238f6c9 [ 383.002157][ T9777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.002176][ T9777] RSP: 002b:00007f8c53293038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.002196][ T9777] RAX: ffffffffffffffda RBX: 00007f8c525e6180 RCX: 00007f8c5238f6c9 [ 383.002209][ T9777] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000000000000000 [ 383.002221][ T9777] RBP: 00007f8c53293090 R08: 0000200000000440 R09: 0000000000000000 [ 383.002233][ T9777] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000002 [ 383.002245][ T9777] R13: 00007f8c525e6218 R14: 00007f8c525e6180 R15: 00007ffc77fdfeb8 [ 383.002276][ T9777] [ 383.002409][ T9777] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.390338][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 383.449775][ T43] m920x_read = error: -19 [ 383.454153][ T43] dvb-usb: error while querying for an remote control event. [ 383.489427][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 383.595247][ T43] m920x_read = error: -19 [ 383.599628][ T43] dvb-usb: error while querying for an remote control event. [ 383.725924][ T43] m920x_read = error: -19 [ 383.730361][ T43] dvb-usb: error while querying for an remote control event. [ 383.875075][ T43] m920x_read = error: -19 [ 383.879446][ T43] dvb-usb: error while querying for an remote control event. [ 384.015178][ T43] m920x_read = error: -19 [ 384.019607][ T43] dvb-usb: error while querying for an remote control event. [ 384.096407][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 384.135140][ T43] m920x_read = error: -19 [ 384.139548][ T43] dvb-usb: error while querying for an remote control event. [ 384.276294][ T43] m920x_read = error: -19 [ 384.294844][ T43] dvb-usb: error while querying for an remote control event. [ 384.522727][ T5942] usb 2-1: USB disconnect, device number 26 [ 384.542982][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 384.554629][ T10] usb 1-1: config 0 has no interfaces? [ 384.578809][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 384.613416][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.644642][ T10] usb 1-1: Product: syz [ 384.655187][ T43] m920x_read = error: -19 [ 384.669782][ T10] usb 1-1: Manufacturer: syz [ 384.674405][ T10] usb 1-1: SerialNumber: syz [ 384.674948][ T43] dvb-usb: error while querying for an remote control event. [ 384.697880][ T10] usb 1-1: config 0 descriptor?? [ 384.845566][ T43] m920x_read = error: -19 [ 384.849942][ T43] dvb-usb: error while querying for an remote control event. [ 384.915604][ T10] usb 1-1: USB disconnect, device number 24 [ 384.962943][ T9804] netlink: 'syz.3.1029': attribute type 29 has an invalid length. [ 385.009222][ T9803] netlink: 'syz.3.1029': attribute type 29 has an invalid length. [ 385.058501][ T9803] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1029'. [ 385.095473][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 385.108070][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 385.125718][ T43] m920x_read = error: -19 [ 385.134525][ T43] dvb-usb: error while querying for an remote control event. [ 385.205273][ T30] audit: type=1400 audit(1762508346.592:755): avc: denied { mount } for pid=9796 comm="syz.1.1027" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 385.255005][ T43] m920x_read = error: -19 [ 385.265343][ T43] dvb-usb: error while querying for an remote control event. [ 385.385535][ T43] m920x_read = error: -19 [ 385.391610][ T43] dvb-usb: error while querying for an remote control event. [ 385.505778][ T43] m920x_read = error: -19 [ 385.511816][ T43] dvb-usb: error while querying for an remote control event. [ 385.765002][ T43] m920x_read = error: -19 [ 385.769395][ T43] dvb-usb: error while querying for an remote control event. [ 385.905031][ T43] m920x_read = error: -19 [ 385.914921][ T43] dvb-usb: error while querying for an remote control event. [ 386.171030][ T9830] netlink: 'syz.2.1033': attribute type 27 has an invalid length. [ 386.177526][ T43] m920x_read = error: -19 [ 386.177557][ T43] dvb-usb: error while querying for an remote control event. [ 386.407428][ T43] m920x_read = error: -19 [ 386.411799][ T43] dvb-usb: error while querying for an remote control event. [ 386.476326][ T30] audit: type=1400 audit(1762508347.852:756): avc: denied { mounton } for pid=9817 comm="syz.2.1033" path="/203/file0" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 386.561524][ T43] m920x_read = error: -19 [ 386.566124][ T43] dvb-usb: error while querying for an remote control event. [ 386.761637][ T9830] bridge0: port 3(team0) entered disabled state [ 386.768206][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.775524][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.825124][ T43] m920x_read = error: -19 [ 386.829466][ T43] dvb-usb: error while querying for an remote control event. [ 387.058195][ T43] m920x_read = error: -19 [ 387.062574][ T43] dvb-usb: error while querying for an remote control event. [ 387.587702][ T43] m920x_read = error: -19 [ 387.592096][ T43] dvb-usb: error while querying for an remote control event. [ 387.616416][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 387.639432][ T9830] bond_slave_0: left promiscuous mode [ 387.650269][ T9830] bond_slave_1: left promiscuous mode [ 387.715128][ T5928] m920x_read = error: -19 [ 387.735042][ T30] audit: type=1400 audit(1762508349.102:757): avc: denied { getopt } for pid=9850 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.895796][ T5928] dvb-usb: error while querying for an remote control event. [ 387.992522][ T30] audit: type=1400 audit(1762508349.372:758): avc: denied { write } for pid=9850 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.015329][ T43] m920x_read = error: -19 [ 388.027424][ T43] dvb-usb: error while querying for an remote control event. [ 388.328417][ T43] m920x_read = error: -19 [ 388.341796][ T43] dvb-usb: error while querying for an remote control event. [ 388.506648][ T43] m920x_read = error: -19 [ 388.524265][ T43] dvb-usb: error while querying for an remote control event. [ 388.873378][ T9830] 0·: left allmulticast mode [ 388.878107][ T9830] hsr_slave_0: left allmulticast mode [ 388.990347][ T9830] vlan2: left allmulticast mode [ 389.024391][ T9830] dummy0: left allmulticast mode [ 389.066838][ T847] m920x_read = error: -19 [ 389.071197][ T847] dvb-usb: error while querying for an remote control event. [ 389.081522][ T9861] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 389.135358][ T9830] vlan3: left promiscuous mode [ 389.150480][ T9830] bridge0: left promiscuous mode [ 389.228475][ T8097] m920x_read = error: -19 [ 389.246577][ T8097] dvb-usb: error while querying for an remote control event. [ 389.262809][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.287935][ T9836] bridge0: port 3(team0) entered blocking state [ 389.294282][ T9836] bridge0: port 3(team0) entered forwarding state [ 389.323270][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.346209][ T9836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.363814][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 389.372884][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 389.382110][ T9862] netlink: 'syz.4.1038': attribute type 18 has an invalid length. [ 389.390210][ T8097] m920x_read = error: -19 [ 389.390234][ T8097] dvb-usb: error while querying for an remote control event. [ 389.407748][ T3446] bridge0: port 3(team0) entered disabled state [ 389.417217][ T1156] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.442937][ T1156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.503434][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 389.524309][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 389.533272][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 389.542270][ T9862] netlink: 'syz.4.1038': attribute type 18 has an invalid length. [ 389.643913][ T1156] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.653124][ T8097] m920x_read = error: -19 [ 389.657840][ T8097] dvb-usb: error while querying for an remote control event. [ 389.710774][ T1156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.729199][ T9868] FAULT_INJECTION: forcing a failure. [ 389.729199][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 389.745230][ T1156] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.754120][ T1156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.795153][ T9868] CPU: 0 UID: 0 PID: 9868 Comm: syz.3.1044 Not tainted syzkaller #0 PREEMPT(full) [ 389.795182][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.795193][ T9868] Call Trace: [ 389.795199][ T9868] [ 389.795207][ T9868] dump_stack_lvl+0x16c/0x1f0 [ 389.795243][ T9868] should_fail_ex+0x512/0x640 [ 389.795267][ T9868] ? fs_reclaim_acquire+0xae/0x150 [ 389.795292][ T9868] should_failslab+0xc2/0x120 [ 389.795315][ T9868] __kmalloc_noprof+0xdd/0x880 [ 389.795342][ T9868] ? tomoyo_encode2+0x100/0x3e0 [ 389.795370][ T9868] ? tomoyo_encode2+0x100/0x3e0 [ 389.795391][ T9868] tomoyo_encode2+0x100/0x3e0 [ 389.795417][ T9868] tomoyo_encode+0x29/0x50 [ 389.795439][ T9868] tomoyo_realpath_from_path+0x18f/0x6e0 [ 389.795464][ T9868] ? tomoyo_profile+0x47/0x60 [ 389.795492][ T9868] tomoyo_path_number_perm+0x245/0x580 [ 389.795521][ T9868] ? tomoyo_path_number_perm+0x237/0x580 [ 389.795554][ T9868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.795593][ T9868] ? find_held_lock+0x2b/0x80 [ 389.795645][ T9868] ? find_held_lock+0x2b/0x80 [ 389.795669][ T9868] ? hook_file_ioctl_common+0x145/0x410 [ 389.795701][ T9868] ? __fget_files+0x20e/0x3c0 [ 389.795726][ T9868] security_file_ioctl+0x9b/0x240 [ 389.795751][ T9868] __x64_sys_ioctl+0xb7/0x210 [ 389.795779][ T9868] do_syscall_64+0xcd/0xfa0 [ 389.795801][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.795820][ T9868] RIP: 0033:0x7f12f678f6c9 [ 389.795836][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.795854][ T9868] RSP: 002b:00007f12f7629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.795873][ T9868] RAX: ffffffffffffffda RBX: 00007f12f69e5fa0 RCX: 00007f12f678f6c9 [ 389.795887][ T9868] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000004 [ 389.795898][ T9868] RBP: 00007f12f7629090 R08: 0000000000000000 R09: 0000000000000000 [ 389.795910][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.795922][ T9868] R13: 00007f12f69e6038 R14: 00007f12f69e5fa0 R15: 00007ffcb0213368 [ 389.795952][ T9868] [ 389.795972][ T9868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 389.888192][ T847] m920x_read = error: -19 [ 389.946108][ T1156] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.110832][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 390.198975][ T9877] delete_channel: no stack [ 390.203592][ T1156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.219457][ T847] dvb-usb: error while querying for an remote control event. [ 390.346052][ T8097] m920x_read = error: -19 [ 390.356998][ T8097] dvb-usb: error while querying for an remote control event. [ 390.733249][ T30] audit: type=1400 audit(1762508351.582:759): avc: denied { create } for pid=9876 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 390.964378][ T8097] m920x_read = error: -19 [ 390.968862][ T8097] dvb-usb: error while querying for an remote control event. [ 391.186870][ T8097] m920x_read = error: -19 [ 391.191377][ T8097] dvb-usb: error while querying for an remote control event. [ 391.464287][ T9900] delete_channel: no stack [ 391.505241][ T8097] m920x_read = error: -19 [ 391.528240][ T8097] dvb-usb: error while querying for an remote control event. [ 391.550042][ T30] audit: type=1400 audit(1762508352.862:760): avc: denied { setopt } for pid=9892 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 392.055446][ T30] audit: type=1326 audit(1762508353.432:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 392.095051][ T8097] m920x_read = error: -19 [ 392.099470][ T8097] dvb-usb: error while querying for an remote control event. [ 392.164072][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 392.210408][ T9914] Failed to initialize the IGMP autojoin socket (err -2) [ 392.322350][ T8097] m920x_read = error: -19 [ 392.327795][ T8097] dvb-usb: error while querying for an remote control event. [ 392.341747][ T30] audit: type=1326 audit(1762508353.432:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 392.365261][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.901513][ T30] audit: type=1326 audit(1762508353.432:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 392.925738][ T8097] m920x_read = error: -19 [ 392.930105][ T8097] dvb-usb: error while querying for an remote control event. [ 392.942203][ T30] audit: type=1326 audit(1762508353.432:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 392.965418][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.047915][ T30] audit: type=1326 audit(1762508353.432:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 393.081469][ T30] audit: type=1326 audit(1762508353.432:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f534038df10 code=0x7ffc0000 [ 393.092395][ T8097] m920x_read = error: -19 [ 393.161658][ T8097] dvb-usb: error while querying for an remote control event. [ 393.221494][ T30] audit: type=1326 audit(1762508353.432:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 393.247001][ T30] audit: type=1326 audit(1762508353.432:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9904 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 393.383013][ T8097] m920x_read = error: -19 [ 393.448281][ T8097] dvb-usb: error while querying for an remote control event. [ 393.647348][ T8097] m920x_read = error: -19 [ 393.651713][ T8097] dvb-usb: error while querying for an remote control event. [ 393.763974][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 393.772982][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 393.782010][ T9928] netlink: 'syz.0.1052': attribute type 18 has an invalid length. [ 393.790299][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 393.799165][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 393.808135][ T9928] netlink: 'syz.0.1052': attribute type 18 has an invalid length. [ 393.818817][ T8097] m920x_read = error: -19 [ 393.823526][ T8097] dvb-usb: error while querying for an remote control event. [ 393.945020][ T8097] m920x_read = error: -19 [ 393.949886][ T8097] dvb-usb: error while querying for an remote control event. [ 394.068220][ T8097] m920x_read = error: -19 [ 394.080059][ T8097] dvb-usb: error while querying for an remote control event. [ 394.205159][ T8097] m920x_read = error: -19 [ 394.251572][ T8097] dvb-usb: error while querying for an remote control event. [ 394.312030][ T9933] vlan2: entered allmulticast mode [ 394.415263][ T8097] m920x_read = error: -19 [ 394.415874][ T9939] 9pnet_fd: p9_fd_create_tcp (9939): problem creating socket [ 394.419723][ T8097] dvb-usb: error while querying for an remote control event. [ 394.434693][ T9933] hsr_slave_1: entered allmulticast mode [ 394.456813][ T9931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.479673][ T9939] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 394.539518][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 394.575038][ T8097] m920x_read = error: -19 [ 394.579539][ T8097] dvb-usb: error while querying for an remote control event. [ 394.617145][ T9940] syzkaller1: entered promiscuous mode [ 394.623129][ T9940] syzkaller1: entered allmulticast mode [ 394.695008][ T8097] m920x_read = error: -19 [ 394.699489][ T8097] dvb-usb: error while querying for an remote control event. [ 394.816409][ T8097] m920x_read = error: -19 [ 394.820790][ T8097] dvb-usb: error while querying for an remote control event. [ 394.965361][ T8097] m920x_read = error: -19 [ 394.970831][ T8097] dvb-usb: error while querying for an remote control event. [ 395.115114][ T8097] m920x_read = error: -19 [ 395.262954][ T8097] dvb-usb: error while querying for an remote control event. [ 395.772101][ T9959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1063'. [ 395.983919][ T8097] m920x_read = error: -19 [ 395.988504][ T8097] dvb-usb: error while querying for an remote control event. [ 396.254585][ T8097] m920x_read = error: -19 [ 396.275105][ T8097] dvb-usb: error while querying for an remote control event. [ 396.385170][ T8097] m920x_read = error: -19 [ 396.389550][ T8097] dvb-usb: error while querying for an remote control event. [ 396.585983][ T8097] m920x_read = error: -19 [ 396.595901][ T8097] dvb-usb: error while querying for an remote control event. [ 396.700309][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 396.914506][ T8097] m920x_read = error: -19 [ 396.919080][ T8097] dvb-usb: error while querying for an remote control event. [ 397.035163][ T8097] m920x_read = error: -19 [ 397.045487][ T8097] dvb-usb: error while querying for an remote control event. [ 397.079163][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 397.236068][ T8097] m920x_read = error: -19 [ 397.240415][ T8097] dvb-usb: error while querying for an remote control event. [ 397.495012][ T8097] m920x_read = error: -19 [ 397.499382][ T8097] dvb-usb: error while querying for an remote control event. [ 397.625541][ T24] m920x_read = error: -19 [ 397.629949][ T24] dvb-usb: error while querying for an remote control event. [ 397.693096][ T9989] FAULT_INJECTION: forcing a failure. [ 397.693096][ T9989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.706517][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.2.1072 Not tainted syzkaller #0 PREEMPT(full) [ 397.706545][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 397.706556][ T9989] Call Trace: [ 397.706563][ T9989] [ 397.706571][ T9989] dump_stack_lvl+0x16c/0x1f0 [ 397.706608][ T9989] should_fail_ex+0x512/0x640 [ 397.706636][ T9989] _copy_from_user+0x2e/0xd0 [ 397.706661][ T9989] generic_map_update_batch+0x38a/0x610 [ 397.706700][ T9989] ? __pfx_generic_map_update_batch+0x10/0x10 [ 397.706734][ T9989] ? __pfx_generic_map_update_batch+0x10/0x10 [ 397.706763][ T9989] bpf_map_do_batch+0x5be/0x680 [ 397.706789][ T9989] __sys_bpf+0x482c/0x4980 [ 397.706823][ T9989] ? __pfx___sys_bpf+0x10/0x10 [ 397.706850][ T9989] ? find_held_lock+0x2b/0x80 [ 397.706881][ T9989] ? find_held_lock+0x2b/0x80 [ 397.706913][ T9989] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 397.706950][ T9989] ? fput+0x9b/0xd0 [ 397.706974][ T9989] ? ksys_write+0x1ac/0x250 [ 397.706992][ T9989] ? __pfx_ksys_write+0x10/0x10 [ 397.707016][ T9989] __x64_sys_bpf+0x78/0xc0 [ 397.707044][ T9989] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.707073][ T9989] do_syscall_64+0xcd/0xfa0 [ 397.707094][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.707113][ T9989] RIP: 0033:0x7f534038f6c9 [ 397.707129][ T9989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.707147][ T9989] RSP: 002b:00007f534128d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.707165][ T9989] RAX: ffffffffffffffda RBX: 00007f53405e6180 RCX: 00007f534038f6c9 [ 397.707185][ T9989] RDX: 0000000000000038 RSI: 0000200000000680 RDI: 000000000000001a [ 397.707197][ T9989] RBP: 00007f534128d090 R08: 0000000000000000 R09: 0000000000000000 [ 397.707208][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.707220][ T9989] R13: 00007f53405e6218 R14: 00007f53405e6180 R15: 00007fff94f9bae8 [ 397.707248][ T9989] [ 397.909342][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.136680][ T24] m920x_read = error: -19 [ 398.151620][ T24] dvb-usb: error while querying for an remote control event. [ 398.275347][ T24] m920x_read = error: -19 [ 398.279829][ T24] dvb-usb: error while querying for an remote control event. [ 398.611132][ T24] m920x_read = error: -19 [ 398.627031][ T24] dvb-usb: error while querying for an remote control event. [ 399.116910][ T8097] m920x_read = error: -19 [ 399.121280][ T8097] dvb-usb: error while querying for an remote control event. [ 399.246139][ T8097] m920x_read = error: -19 [ 399.266258][ T8097] dvb-usb: error while querying for an remote control event. [ 399.524016][ T8097] m920x_read = error: -19 [ 399.548816][ T8097] dvb-usb: error while querying for an remote control event. [ 399.609178][T10002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 399.615721][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 399.666559][T10002] vhci_hcd vhci_hcd.0: Device attached [ 399.684391][T10003] vhci_hcd: connection closed [ 399.698071][ T3446] vhci_hcd: stop threads [ 399.707444][ T8097] m920x_read = error: -19 [ 399.712106][ T8097] dvb-usb: error while querying for an remote control event. [ 399.744122][ T3446] vhci_hcd: release socket [ 399.748725][ T3446] vhci_hcd: disconnect device [ 399.836150][ T8097] m920x_read = error: -19 [ 399.840778][ T8097] dvb-usb: error while querying for an remote control event. [ 399.899730][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 399.899747][ T30] audit: type=1400 audit(1762508361.282:774): avc: denied { write } for pid=9988 comm="syz.0.1071" name="file0" dev="tmpfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 399.948060][ T30] audit: type=1400 audit(1762508361.282:775): avc: denied { open } for pid=9988 comm="syz.0.1071" path="/223/file0" dev="tmpfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 399.985995][ T8097] m920x_read = error: -19 [ 399.990463][ T8097] dvb-usb: error while querying for an remote control event. [ 400.013740][ T30] audit: type=1400 audit(1762508361.312:776): avc: denied { ioctl } for pid=9988 comm="syz.0.1071" path="/223/file0" dev="tmpfs" ino=1205 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.105179][ T8097] m920x_read = error: -19 [ 400.112233][ T8097] dvb-usb: error while querying for an remote control event. [ 400.125739][T10018] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1081'. [ 400.245125][ T8097] m920x_read = error: -19 [ 400.249536][ T8097] dvb-usb: error while querying for an remote control event. [ 400.276807][T10022] trusted_key: syz.4.1082 sent an empty control message without MSG_MORE. [ 400.419519][ T8097] m920x_read = error: -19 [ 400.424288][ T8097] dvb-usb: error while querying for an remote control event. [ 400.556065][ T8097] m920x_read = error: -19 [ 400.560741][ T8097] dvb-usb: error while querying for an remote control event. [ 400.985074][ T8097] m920x_read = error: -19 [ 400.990517][ T8097] dvb-usb: error while querying for an remote control event. [ 401.109414][ T8097] m920x_read = error: -19 [ 401.246326][T10047] syzkaller0: entered promiscuous mode [ 401.252054][T10047] syzkaller0: entered allmulticast mode [ 401.315666][T10047] tipc: Enabled bearer , priority 0 [ 401.325034][ T30] audit: type=1400 audit(1762508362.682:777): avc: denied { write } for pid=10046 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.369072][T10046] tipc: Resetting bearer [ 401.381628][ T8097] dvb-usb: error while querying for an remote control event. [ 401.505126][ T8097] m920x_read = error: -19 [ 401.509561][ T8097] dvb-usb: error while querying for an remote control event. [ 401.557564][T10046] tipc: Disabling bearer [ 401.625522][ T8097] m920x_read = error: -19 [ 401.858829][ T8097] dvb-usb: error while querying for an remote control event. [ 401.983224][ T30] audit: type=1400 audit(1762508363.342:778): avc: denied { connect } for pid=10053 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.185105][ T8097] m920x_read = error: -19 [ 402.189582][ T8097] dvb-usb: error while querying for an remote control event. [ 402.355007][ T847] m920x_read = error: -19 [ 402.359441][ T847] dvb-usb: error while querying for an remote control event. [ 402.445007][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 402.475031][ T847] m920x_read = error: -19 [ 402.479520][ T847] dvb-usb: error while querying for an remote control event. [ 402.480073][T10062] IPv6: sit1: Disabled Multicast RS [ 402.525859][T10062] sit1: entered allmulticast mode [ 402.555068][ T8097] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 402.595024][ T847] m920x_read = error: -19 [ 402.599433][ T847] dvb-usb: error while querying for an remote control event. [ 402.606944][ T24] usb 4-1: device descriptor read/64, error -71 [ 402.715142][ T847] m920x_read = error: -19 [ 402.719558][ T847] dvb-usb: error while querying for an remote control event. [ 402.745226][ T8097] usb 3-1: Using ep0 maxpacket: 8 [ 402.761922][ T8097] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 402.770319][ T8097] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.817385][ T8097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.851361][ T847] m920x_read = error: -19 [ 402.855858][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 402.879642][ T847] dvb-usb: error while querying for an remote control event. [ 402.888400][ T8097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.900486][ T8097] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.914099][ T8097] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.923764][ T8097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.011671][T10077] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 403.015492][ T847] m920x_read = error: -19 [ 403.023890][ T847] dvb-usb: error while querying for an remote control event. [ 403.027008][T10077] bond0: (slave wlan1): Opening slave failed [ 403.031597][ T24] usb 4-1: device descriptor read/64, error -71 [ 403.053611][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.144269][ T8097] usb 3-1: usb_control_msg returned -32 [ 403.150604][ T8097] usbtmc 3-1:16.0: can't read capabilities [ 403.156718][ T847] m920x_read = error: -19 [ 403.161542][ T24] usb usb4-port1: attempt power cycle [ 403.167525][ T847] dvb-usb: error while querying for an remote control event. [ 403.285002][ T8097] m920x_read = error: -19 [ 403.289404][ T8097] dvb-usb: error while querying for an remote control event. [ 403.426145][ T8097] m920x_read = error: -19 [ 403.431139][ T8097] dvb-usb: error while querying for an remote control event. [ 403.524975][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 403.692923][ T8097] m920x_read = error: -19 [ 403.698216][ T8097] dvb-usb: error while querying for an remote control event. [ 403.706583][ T24] usb 4-1: device descriptor read/8, error -71 [ 403.854259][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.865193][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.281743][ T8097] m920x_read = error: -19 [ 404.307433][ T8097] dvb-usb: error while querying for an remote control event. [ 404.415121][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 404.466119][ T8097] m920x_read = error: -19 [ 404.488520][ T8097] dvb-usb: error while querying for an remote control event. [ 404.489206][ T24] usb 4-1: device descriptor read/8, error -71 [ 404.605589][ T8097] m920x_read = error: -19 [ 404.610137][ T8097] dvb-usb: error while querying for an remote control event. [ 404.670615][ T24] usb usb4-port1: unable to enumerate USB device [ 404.735013][ T24] m920x_read = error: -19 [ 404.739390][ T24] dvb-usb: error while querying for an remote control event. [ 404.915209][ T24] m920x_read = error: -19 [ 404.920178][ T24] dvb-usb: error while querying for an remote control event. [ 404.984945][ T8097] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 405.063419][T10102] FAT-fs (loop3): unable to read boot sector [ 405.502982][ T24] m920x_read = error: -19 [ 405.563719][ T24] dvb-usb: error while querying for an remote control event. [ 405.594477][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 405.675188][ T847] m920x_read = error: -19 [ 405.679569][ T847] dvb-usb: error while querying for an remote control event. [ 405.698339][ T8097] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 405.708108][ T8097] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.714938][ T10] usb 3-1: USB disconnect, device number 21 [ 405.723938][ T8097] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.744593][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 405.757310][ T8097] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 405.769569][ T8097] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 405.777929][ T8097] usb 5-1: Product: syz [ 405.787191][ T8097] usb 5-1: Manufacturer: syz [ 405.802062][ T8097] usb 5-1: SerialNumber: syz [ 405.825070][ T847] m920x_read = error: -19 [ 405.829589][ T847] dvb-usb: error while querying for an remote control event. [ 405.856558][ T8097] usb 5-1: config 0 descriptor?? [ 405.878336][ T8097] hub 5-1:0.0: bad descriptor, ignoring hub [ 405.896896][T10107] evm: overlay not supported [ 405.906890][ T8097] hub 5-1:0.0: probe with driver hub failed with error -5 [ 405.931030][ T8097] usb 5-1: selecting invalid altsetting 0 [ 405.975288][ T847] m920x_read = error: -19 [ 405.979733][ T847] dvb-usb: error while querying for an remote control event. [ 406.123454][ T8097] m920x_read = error: -19 [ 406.142083][ T8097] dvb-usb: error while querying for an remote control event. [ 406.285321][ T8097] m920x_read = error: -19 [ 406.295800][ T8097] dvb-usb: error while querying for an remote control event. [ 406.848639][ T8097] m920x_read = error: -19 [ 406.853258][ T8097] dvb-usb: error while querying for an remote control event. [ 407.156924][ T8097] m920x_read = error: -19 [ 407.227474][ T8097] dvb-usb: error while querying for an remote control event. [ 407.395234][ T847] m920x_read = error: -19 [ 407.409830][ T847] dvb-usb: error while querying for an remote control event. [ 407.531634][ T10] usb 5-1: USB disconnect, device number 22 [ 407.555032][ T847] m920x_read = error: -19 [ 407.564975][ T847] dvb-usb: error while querying for an remote control event. [ 407.635327][ T8097] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 407.695122][ T847] m920x_read = error: -19 [ 407.703755][ T847] dvb-usb: error while querying for an remote control event. [ 407.825160][ T8097] usb 3-1: Using ep0 maxpacket: 32 [ 407.832128][ T8097] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 407.851253][ T8097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.868268][ T8097] usb 3-1: config 0 has no interface number 0 [ 407.879029][ T24] m920x_read = error: -19 [ 407.883749][ T24] dvb-usb: error while querying for an remote control event. [ 407.911589][ T8097] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 407.951731][ T8097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.003957][ T8097] usb 3-1: config 0 descriptor?? [ 408.114907][ T24] m920x_read = error: -19 [ 408.119289][ T24] dvb-usb: error while querying for an remote control event. [ 408.265095][ T24] m920x_read = error: -19 [ 408.269587][ T24] dvb-usb: error while querying for an remote control event. [ 408.585738][ T24] m920x_read = error: -19 [ 408.590257][ T24] dvb-usb: error while querying for an remote control event. [ 408.735457][ T24] m920x_read = error: -19 [ 408.740917][ T24] dvb-usb: error while querying for an remote control event. [ 408.886331][ T24] m920x_read = error: -19 [ 408.891235][ T24] dvb-usb: error while querying for an remote control event. [ 409.023619][ T24] m920x_read = error: -19 [ 409.136274][ T24] dvb-usb: error while querying for an remote control event. [ 409.247540][ T24] m920x_read = error: -19 [ 409.332149][ T24] dvb-usb: error while querying for an remote control event. [ 409.544273][ T24] m920x_read = error: -19 [ 409.559066][ T24] dvb-usb: error while querying for an remote control event. [ 409.675100][ T24] m920x_read = error: -19 [ 409.692723][ T24] dvb-usb: error while querying for an remote control event. [ 409.825793][ T24] m920x_read = error: -19 [ 409.833482][ T24] dvb-usb: error while querying for an remote control event. [ 409.991526][ T24] m920x_read = error: -19 [ 410.047061][ T24] dvb-usb: error while querying for an remote control event. [ 410.047889][T10158] netlink: 197820 bytes leftover after parsing attributes in process `syz.4.1123'. [ 410.166180][ T30] audit: type=1400 audit(1762508371.552:779): avc: denied { ioctl } for pid=10162 comm="syz.3.1124" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 411.182722][ T24] m920x_read = error: -19 [ 411.213019][ T24] dvb-usb: error while querying for an remote control event. [ 411.230499][ T10] usb 3-1: USB disconnect, device number 22 [ 411.239978][ T30] audit: type=1400 audit(1762508371.702:780): avc: denied { getopt } for pid=10162 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 411.396141][ T8097] m920x_read = error: -19 [ 411.400708][ T8097] dvb-usb: error while querying for an remote control event. [ 411.539028][ T8097] m920x_read = error: -19 [ 411.543979][ T8097] dvb-usb: error while querying for an remote control event. [ 411.596220][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 411.749271][ T8097] m920x_read = error: -19 [ 411.753856][ T8097] dvb-usb: error while querying for an remote control event. [ 411.754169][T10174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=10174 comm=syz.0.1130 [ 411.841294][T10183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1127'. [ 411.968482][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 411.980940][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.112908][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.113023][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.113092][ T24] usb 4-1: Product: syz [ 412.113174][ T24] usb 4-1: Manufacturer: syz [ 412.113257][ T24] usb 4-1: SerialNumber: syz [ 412.186144][ T24] usb 4-1: config 0 descriptor?? [ 412.186868][T10172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.215101][ T8097] m920x_read = error: -19 [ 412.215124][ T8097] dvb-usb: error while querying for an remote control event. [ 412.255713][T10184] bond3: Unable to set up delay as MII monitoring is disabled [ 412.339174][T10184] bond3 (unregistering): Released all slaves [ 412.388492][ T24] m920x_read = error: -19 [ 412.416121][ T24] dvb-usb: error while querying for an remote control event. [ 412.568705][ T24] m920x_read = error: -19 [ 412.573074][ T24] dvb-usb: error while querying for an remote control event. [ 413.025093][ T24] m920x_read = error: -19 [ 413.075556][ T24] dvb-usb: error while querying for an remote control event. [ 413.199908][ T24] m920x_read = error: -19 [ 413.204292][ T24] dvb-usb: error while querying for an remote control event. [ 413.525104][ T24] m920x_read = error: -19 [ 413.605001][ T24] dvb-usb: error while querying for an remote control event. [ 413.629074][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 413.773096][ T24] m920x_read = error: -19 [ 413.777686][ T24] dvb-usb: error while querying for an remote control event. [ 413.837462][ T24] usb 4-1: USB disconnect, device number 26 [ 413.856516][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 413.867362][ T10] usb 5-1: config 179 has no interface number 0 [ 413.873917][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 413.895487][ T8097] m920x_read = error: -19 [ 413.900116][ T8097] dvb-usb: error while querying for an remote control event. [ 413.995135][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 414.019022][ T8097] m920x_read = error: -19 [ 414.029776][ T8097] dvb-usb: error while querying for an remote control event. [ 414.035506][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 414.149041][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 414.175713][ T8097] m920x_read = error: -19 [ 414.180348][ T8097] dvb-usb: error while querying for an remote control event. [ 414.190406][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 414.199865][ T10] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 414.212512][ T10] usb 5-1: Product: syz [ 414.494448][ T8097] m920x_read = error: -19 [ 415.072108][ T8097] dvb-usb: error while querying for an remote control event. [ 415.130780][T10204] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 415.185112][ T8097] m920x_read = error: -19 [ 415.190296][ T8097] dvb-usb: error while querying for an remote control event. [ 415.306543][ T847] m920x_read = error: -19 [ 415.310919][ T847] dvb-usb: error while querying for an remote control event. [ 415.384276][ T30] audit: type=1400 audit(1762508376.762:781): avc: denied { read } for pid=10218 comm="syz.3.1139" path="socket:[26158]" dev="sockfs" ino=26158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 415.396379][ T7123] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19 [ 415.435566][ T847] m920x_read = error: -19 [ 415.450550][ T847] dvb-usb: error while querying for an remote control event. [ 415.500895][ T30] audit: type=1400 audit(1762508376.802:782): avc: denied { getopt } for pid=10218 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 415.527344][ T8097] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 415.585354][T10204] sit0: entered promiscuous mode [ 415.590451][T10204] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 415.598439][ T847] m920x_read = error: -19 [ 415.602786][ T847] dvb-usb: error while querying for an remote control event. [ 415.621725][ T30] audit: type=1400 audit(1762508376.962:783): avc: denied { read } for pid=10202 comm="syz.4.1134" name="event4" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.646949][T10223] FAULT_INJECTION: forcing a failure. [ 415.646949][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 415.661061][ T30] audit: type=1400 audit(1762508376.962:784): avc: denied { ioctl } for pid=10202 comm="syz.4.1134" path="/dev/input/event4" dev="devtmpfs" ino=2874 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.687404][T10223] CPU: 1 UID: 0 PID: 10223 Comm: syz.0.1140 Not tainted syzkaller #0 PREEMPT(full) [ 415.687429][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 415.687438][T10223] Call Trace: [ 415.687444][T10223] [ 415.687452][T10223] dump_stack_lvl+0x16c/0x1f0 [ 415.687487][T10223] should_fail_ex+0x512/0x640 [ 415.687510][T10223] ? __kmalloc_cache_noprof+0x5f/0x780 [ 415.687535][T10223] should_failslab+0xc2/0x120 [ 415.687556][T10223] __kmalloc_cache_noprof+0x72/0x780 [ 415.687582][T10223] ? genl_start+0x1e8/0x980 [ 415.687604][T10223] ? genl_start+0x1e8/0x980 [ 415.687618][T10223] genl_start+0x1e8/0x980 [ 415.687639][T10223] __netlink_dump_start+0x60e/0x990 [ 415.687680][T10223] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 415.687701][T10223] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 415.687718][T10223] ? genl_op_from_small+0x25/0x440 [ 415.687751][T10223] ? __pfx_genl_get_cmd+0x10/0x10 [ 415.687775][T10223] ? __pfx_genl_start+0x10/0x10 [ 415.687791][T10223] ? __pfx_genl_dumpit+0x10/0x10 [ 415.687807][T10223] ? __pfx_genl_done+0x10/0x10 [ 415.687828][T10223] ? ____sys_sendmsg+0xa98/0xc70 [ 415.687845][T10223] ? ___sys_sendmsg+0x134/0x1d0 [ 415.687868][T10223] ? __radix_tree_lookup+0x21f/0x2c0 [ 415.687901][T10223] genl_rcv_msg+0x46e/0x800 [ 415.687923][T10223] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.687944][T10223] ? __pfx_netlbl_cipsov4_listall+0x10/0x10 [ 415.687971][T10223] ? __lock_acquire+0x622/0x1c90 [ 415.688004][T10223] netlink_rcv_skb+0x158/0x420 [ 415.688031][T10223] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.688051][T10223] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.688087][T10223] ? netlink_deliver_tap+0x1ae/0xd30 [ 415.688114][T10223] genl_rcv+0x28/0x40 [ 415.688137][T10223] netlink_unicast+0x5aa/0x870 [ 415.688168][T10223] ? __pfx_netlink_unicast+0x10/0x10 [ 415.688207][T10223] netlink_sendmsg+0x8c8/0xdd0 [ 415.688239][T10223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.688274][T10223] ____sys_sendmsg+0xa98/0xc70 [ 415.688295][T10223] ? copy_msghdr_from_user+0x10a/0x160 [ 415.688318][T10223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.688353][T10223] ___sys_sendmsg+0x134/0x1d0 [ 415.688380][T10223] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.688402][T10223] ? __lock_acquire+0x622/0x1c90 [ 415.688471][T10223] __sys_sendmsg+0x16d/0x220 [ 415.688497][T10223] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.688544][T10223] do_syscall_64+0xcd/0xfa0 [ 415.688566][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.688586][T10223] RIP: 0033:0x7f8c5238f6c9 [ 415.688601][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.688617][T10223] RSP: 002b:00007f8c532d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.688637][T10223] RAX: ffffffffffffffda RBX: 00007f8c525e5fa0 RCX: 00007f8c5238f6c9 [ 415.688647][T10223] RDX: 00000000040440d0 RSI: 0000200000001240 RDI: 0000000000000004 [ 415.688664][T10223] RBP: 00007f8c532d5090 R08: 0000000000000000 R09: 0000000000000000 [ 415.688673][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.688684][T10223] R13: 00007f8c525e6038 R14: 00007f8c525e5fa0 R15: 00007ffc77fdfeb8 [ 415.688713][T10223] [ 415.695079][T10204] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1134'. [ 415.725007][ T8097] usb 3-1: Using ep0 maxpacket: 8 [ 416.031609][ T847] m920x_read = error: -19 [ 416.038734][ T847] dvb-usb: error while querying for an remote control event. [ 416.089696][ T30] audit: type=1400 audit(1762508377.272:785): avc: denied { connect } for pid=10221 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 416.107835][T10225] team0: Port device bridge4 added [ 416.165225][T10226] bridge0: port 3(team0) entered blocking state [ 416.172224][T10226] bridge0: port 3(team0) entered disabled state [ 416.181319][T10226] team0: entered allmulticast mode [ 416.186832][T10226] team_slave_0: entered allmulticast mode [ 416.193019][T10226] team_slave_1: entered allmulticast mode [ 416.199073][T10226] bridge4: entered allmulticast mode [ 416.246632][T10226] team0: entered promiscuous mode [ 416.252115][T10226] team_slave_0: entered promiscuous mode [ 416.260549][T10226] team_slave_1: entered promiscuous mode [ 416.269419][T10226] bridge4: entered promiscuous mode [ 416.508163][ T24] m920x_read = error: -19 [ 416.512684][ T24] dvb-usb: error while querying for an remote control event. [ 416.855461][ T24] m920x_read = error: -19 [ 416.859871][ T24] dvb-usb: error while querying for an remote control event. [ 416.873150][ T24] usb 5-1: USB disconnect, device number 23 [ 416.873270][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 416.887655][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 416.937031][T10233] trusted_key: encrypted_key: hex blob is missing [ 416.976465][ T847] m920x_read = error: -19 [ 416.980836][ T847] dvb-usb: error while querying for an remote control event. [ 417.023638][ T8097] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 417.035452][ T8097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 417.045675][ T8097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 417.057539][ T8097] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 417.066852][ T8097] usb 3-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 417.075506][ T8097] usb 3-1: Product: syz [ 417.079732][ T8097] usb 3-1: Manufacturer: syz [ 417.087249][ T8097] usb 3-1: SerialNumber: syz [ 417.099290][ T8097] usb 3-1: config 0 descriptor?? [ 417.104999][ T847] m920x_read = error: -19 [ 417.109353][ T847] dvb-usb: error while querying for an remote control event. [ 417.122305][ T8097] smsusb:smsusb_probe: board id=2, interface number 0 [ 417.138300][ T8097] smsusb:smsusb_probe: Device initialized with return code -19 [ 417.225333][ T847] m920x_read = error: -19 [ 417.229879][ T847] dvb-usb: error while querying for an remote control event. [ 417.347914][ T847] m920x_read = error: -19 [ 417.369096][ T847] dvb-usb: error while querying for an remote control event. [ 417.502946][ T847] m920x_read = error: -19 [ 417.695874][ T847] dvb-usb: error while querying for an remote control event. [ 417.835147][ T847] m920x_read = error: -19 [ 417.839737][ T847] dvb-usb: error while querying for an remote control event. [ 417.956436][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.966707][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.023541][T10247] netlink: 'syz.4.1147': attribute type 4 has an invalid length. [ 418.031748][ T847] m920x_read = error: -19 [ 418.055058][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 418.064091][ T847] dvb-usb: error while querying for an remote control event. [ 418.075834][T10243] nfs4: Unknown parameter 'H++&-!{-){@' [ 418.096924][T10243] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 418.187168][ T30] audit: type=1326 audit(1762508379.572:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 418.215788][ T30] audit: type=1326 audit(1762508379.572:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 418.240506][ T847] m920x_read = error: -19 [ 418.245372][ T847] dvb-usb: error while querying for an remote control event. [ 418.289863][ T30] audit: type=1326 audit(1762508379.592:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 418.367160][ T847] m920x_read = error: -19 [ 418.382195][ T847] dvb-usb: error while querying for an remote control event. [ 418.553273][ T847] m920x_read = error: -19 [ 418.557696][ T847] dvb-usb: error while querying for an remote control event. [ 418.674429][T10261] FAT-fs (loop9): unable to read boot sector [ 419.103627][ T30] audit: type=1326 audit(1762508379.592:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 419.149880][ T30] audit: type=1326 audit(1762508379.592:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 419.385022][ T847] m920x_read = error: -19 [ 419.389391][ T847] dvb-usb: error while querying for an remote control event. [ 419.545060][ T847] m920x_read = error: -19 [ 419.549441][ T847] dvb-usb: error while querying for an remote control event. [ 419.695011][ T847] m920x_read = error: -19 [ 419.699495][ T847] dvb-usb: error while querying for an remote control event. [ 419.825037][ T8097] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 419.832870][ T847] m920x_read = error: -19 [ 419.837548][ T847] dvb-usb: error while querying for an remote control event. [ 419.879487][ T7123] usb 3-1: USB disconnect, device number 23 [ 419.975124][ T847] m920x_read = error: -19 [ 419.985019][ T847] dvb-usb: error while querying for an remote control event. [ 419.995017][ T8097] usb 5-1: Using ep0 maxpacket: 32 [ 420.002167][ T8097] usb 5-1: config 0 has no interfaces? [ 420.014148][ T8097] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 420.074266][ T8097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.111068][ T8097] usb 5-1: Product: syz [ 420.131349][ T8097] usb 5-1: Manufacturer: syz [ 420.141462][ T8097] usb 5-1: SerialNumber: syz [ 420.185433][ T847] m920x_read = error: -19 [ 420.189916][ T847] dvb-usb: error while querying for an remote control event. [ 420.202448][ T8097] usb 5-1: config 0 descriptor?? [ 420.341848][ T8097] m920x_read = error: -19 [ 420.356453][ T8097] dvb-usb: error while querying for an remote control event. [ 420.457565][T10276] netlink: 'syz.0.1156': attribute type 12 has an invalid length. [ 420.457598][ T8097] usb 5-1: USB disconnect, device number 24 [ 420.506341][ T847] m920x_read = error: -19 [ 420.513499][ T847] dvb-usb: error while querying for an remote control event. [ 420.645684][ T847] m920x_read = error: -19 [ 420.650362][ T847] dvb-usb: error while querying for an remote control event. [ 420.785950][ T847] m920x_read = error: -19 [ 420.792430][ T847] dvb-usb: error while querying for an remote control event. [ 421.007617][ T847] m920x_read = error: -19 [ 421.023645][ T847] dvb-usb: error while querying for an remote control event. [ 421.195240][ T847] m920x_read = error: -19 [ 421.199629][ T847] dvb-usb: error while querying for an remote control event. [ 421.355121][ T847] m920x_read = error: -19 [ 421.359494][ T847] dvb-usb: error while querying for an remote control event. [ 421.665066][ T847] m920x_read = error: -19 [ 421.669452][ T847] dvb-usb: error while querying for an remote control event. [ 421.885041][ T847] m920x_read = error: -19 [ 421.890815][ T847] dvb-usb: error while querying for an remote control event. [ 422.025786][ T847] m920x_read = error: -19 [ 422.264933][ T847] dvb-usb: error while querying for an remote control event. [ 422.435069][ T847] m920x_read = error: -19 [ 422.439442][ T847] dvb-usb: error while querying for an remote control event. [ 422.685059][ T847] m920x_read = error: -19 [ 422.689455][ T847] dvb-usb: error while querying for an remote control event. [ 422.845030][ T847] m920x_read = error: -19 [ 422.849427][ T847] dvb-usb: error while querying for an remote control event. [ 422.926002][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 423.011411][ T847] m920x_read = error: -19 [ 423.016374][ T847] dvb-usb: error while querying for an remote control event. [ 423.125089][ T847] m920x_read = error: -19 [ 423.126299][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 423.129473][ T847] dvb-usb: error while querying for an remote control event. [ 423.182328][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.210230][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.243853][ T10] usb 4-1: config 0 has no interface number 0 [ 423.274221][ T10] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.295939][ T847] m920x_read = error: -19 [ 423.308455][ T847] dvb-usb: error while querying for an remote control event. [ 423.310612][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 423.342656][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.377929][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 423.391627][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 423.391645][ T30] audit: type=1326 audit(1762508384.752:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 423.421000][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.475079][ T847] m920x_read = error: -19 [ 423.491729][ T847] dvb-usb: error while querying for an remote control event. [ 423.506053][ T10] usb 4-1: config 0 descriptor?? [ 423.545293][ T10] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 423.578642][ T30] audit: type=1326 audit(1762508384.752:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 423.602046][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.638961][ T847] m920x_read = error: -19 [ 423.647306][ T847] dvb-usb: error while querying for an remote control event. [ 423.812654][ T30] audit: type=1326 audit(1762508384.752:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 423.836380][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.842673][ T7123] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 423.926099][T10326] FAT-fs (loop1): unable to read boot sector [ 424.327371][ T847] m920x_read = error: -19 [ 424.331761][ T847] dvb-usb: error while querying for an remote control event. [ 424.369217][ T30] audit: type=1326 audit(1762508384.752:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.405230][ T30] audit: type=1326 audit(1762508384.752:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.440467][ T30] audit: type=1326 audit(1762508384.752:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.464695][ T847] m920x_read = error: -19 [ 424.472317][ T847] dvb-usb: error while querying for an remote control event. [ 424.535070][ T30] audit: type=1326 audit(1762508384.752:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.580864][ T30] audit: type=1326 audit(1762508384.762:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.649219][ T7123] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 424.658437][ T7123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.684308][ T7123] usb 2-1: Product: syz [ 424.688626][ T7123] usb 2-1: Manufacturer: syz [ 424.693227][ T7123] usb 2-1: SerialNumber: syz [ 424.698104][ T847] m920x_read = error: -19 [ 424.698127][ T847] dvb-usb: error while querying for an remote control event. [ 424.763302][ T7123] usb 2-1: config 0 descriptor?? [ 424.805140][ T847] m920x_read = error: -19 [ 424.810018][ T847] dvb-usb: error while querying for an remote control event. [ 424.861216][ T30] audit: type=1326 audit(1762508384.762:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.884552][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.965056][ T847] m920x_read = error: -19 [ 424.965202][ T30] audit: type=1326 audit(1762508384.762:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.2.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534038f6c9 code=0x7ffc0000 [ 424.969538][ T847] dvb-usb: error while querying for an remote control event. [ 425.310729][T10335] FAULT_INJECTION: forcing a failure. [ 425.310729][T10335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.345880][ T847] m920x_read = error: -19 [ 425.350460][ T847] dvb-usb: error while querying for an remote control event. [ 425.476439][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.0.1172 Not tainted syzkaller #0 PREEMPT(full) [ 425.476449][ T847] m920x_read = error: -19 [ 425.476465][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.476476][T10335] Call Trace: [ 425.476482][T10335] [ 425.476488][T10335] dump_stack_lvl+0x16c/0x1f0 [ 425.476520][T10335] should_fail_ex+0x512/0x640 [ 425.476546][T10335] _copy_to_user+0x32/0xd0 [ 425.476573][T10335] bpf_test_finish.isra.0+0x570/0x6e0 [ 425.476603][T10335] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 425.476634][T10335] ? __asan_memset+0x23/0x50 [ 425.476664][T10335] bpf_prog_test_run_skb+0x1384/0x2290 [ 425.476700][T10335] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 425.476729][T10335] ? fput+0x9b/0xd0 [ 425.476754][T10335] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 425.476779][T10335] __sys_bpf+0x1035/0x4980 [ 425.476812][T10335] ? __pfx___sys_bpf+0x10/0x10 [ 425.476838][T10335] ? find_held_lock+0x2b/0x80 [ 425.476868][T10335] ? find_held_lock+0x2b/0x80 [ 425.476898][T10335] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 425.476938][T10335] ? fput+0x9b/0xd0 [ 425.476961][T10335] ? ksys_write+0x1ac/0x250 [ 425.476979][T10335] ? __pfx_ksys_write+0x10/0x10 [ 425.477001][T10335] __x64_sys_bpf+0x78/0xc0 [ 425.477028][T10335] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.477056][T10335] do_syscall_64+0xcd/0xfa0 [ 425.477076][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.477095][T10335] RIP: 0033:0x7f8c5238f6c9 [ 425.477110][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.477128][T10335] RSP: 002b:00007f8c532d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.477146][T10335] RAX: ffffffffffffffda RBX: 00007f8c525e5fa0 RCX: 00007f8c5238f6c9 [ 425.477158][T10335] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 425.477170][T10335] RBP: 00007f8c532d5090 R08: 0000000000000000 R09: 0000000000000000 [ 425.477181][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.477192][T10335] R13: 00007f8c525e6038 R14: 00007f8c525e5fa0 R15: 00007ffc77fdfeb8 [ 425.477221][T10335] [ 425.731044][ T847] dvb-usb: error while querying for an remote control event. [ 426.005878][ T847] m920x_read = error: -19 [ 426.012246][ T847] dvb-usb: error while querying for an remote control event. [ 426.340993][ T847] m920x_read = error: -19 [ 426.345723][ T847] dvb-usb: error while querying for an remote control event. [ 426.527466][ T847] m920x_read = error: -19 [ 426.539115][ T847] dvb-usb: error while querying for an remote control event. [ 426.716019][ T847] m920x_read = error: -19 [ 426.720541][ T847] dvb-usb: error while querying for an remote control event. [ 426.752588][ T7123] usb 4-1: USB disconnect, device number 27 [ 427.380277][ T847] m920x_read = error: -19 [ 427.398266][ T847] dvb-usb: error while querying for an remote control event. [ 427.507637][ T10] usb 2-1: USB disconnect, device number 27 [ 427.525057][ T847] m920x_read = error: -19 [ 427.529759][ T847] dvb-usb: error while querying for an remote control event. [ 427.675815][ T847] m920x_read = error: -19 [ 427.680669][ T847] dvb-usb: error while querying for an remote control event. [ 427.835746][ T847] m920x_read = error: -19 [ 427.840312][ T847] dvb-usb: error while querying for an remote control event. [ 427.995673][ T847] m920x_read = error: -19 [ 428.027020][ T847] dvb-usb: error while querying for an remote control event. [ 428.161446][ T847] m920x_read = error: -19 [ 428.449001][ T847] dvb-usb: error while querying for an remote control event. [ 428.575013][ T847] m920x_read = error: -19 [ 428.579438][ T847] dvb-usb: error while querying for an remote control event. [ 428.688924][T10378] program syz.1.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.717369][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 428.745030][ T847] m920x_read = error: -19 [ 428.749595][ T847] dvb-usb: error while querying for an remote control event. [ 428.803281][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 428.875106][ T30] audit: type=1400 audit(1762508390.182:836): avc: denied { bind } for pid=10377 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 429.149733][ T847] m920x_read = error: -19 [ 429.154310][ T847] dvb-usb: error while querying for an remote control event. [ 429.494111][ T30] audit: type=1400 audit(1762508390.462:837): avc: denied { mount } for pid=10374 comm="syz.3.1183" name="/" dev="ramfs" ino=26348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 429.517780][ T30] audit: type=1400 audit(1762508390.462:838): avc: denied { create } for pid=10374 comm="syz.3.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 429.595545][ T847] m920x_read = error: -19 [ 429.600524][ T847] dvb-usb: error while querying for an remote control event. [ 429.706907][ T30] audit: type=1400 audit(1762508390.472:839): avc: denied { sys_admin } for pid=10374 comm="syz.3.1183" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 429.765772][ T847] m920x_read = error: -19 [ 429.775079][ T847] dvb-usb: error while querying for an remote control event. [ 429.872178][T10397] loop2: detected capacity change from 0 to 7 [ 429.973155][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 429.985074][T10397] Dev loop2: unable to read RDB block 7 [ 429.990680][T10397] loop2: unable to read partition table [ 430.016800][ T847] m920x_read = error: -19 [ 430.021140][ T847] dvb-usb: error while querying for an remote control event. [ 430.033580][T10397] loop2: partition table beyond EOD, truncated [ 430.126564][ T30] audit: type=1400 audit(1762508391.212:840): avc: denied { connect } for pid=10393 comm="syz.4.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.218621][T10397] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.390042][ T847] m920x_read = error: -19 [ 430.426846][ T847] dvb-usb: error while querying for an remote control event. [ 430.483784][ T5186] Dev loop2: unable to read RDB block 7 [ 430.617726][T10406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=10406 comm=syz.4.1188 [ 430.755015][ T847] m920x_read = error: -19 [ 430.759355][ T847] dvb-usb: error while querying for an remote control event. [ 430.907246][ T5186] loop2: unable to read partition table [ 431.060834][ T847] m920x_read = error: -19 [ 431.071804][ T847] dvb-usb: error while querying for an remote control event. [ 431.085158][ T5186] loop2: partition table beyond EOD, truncated [ 431.272230][ T847] m920x_read = error: -19 [ 431.374994][ T847] dvb-usb: error while querying for an remote control event. [ 431.485421][ T847] m920x_read = error: -19 [ 431.489987][ T847] dvb-usb: error while querying for an remote control event. [ 431.705081][ T847] m920x_read = error: -19 [ 431.709495][ T847] dvb-usb: error while querying for an remote control event. [ 432.585005][ T847] m920x_read = error: -19 [ 432.589605][ T847] dvb-usb: error while querying for an remote control event. [ 432.705080][ T847] m920x_read = error: -19 [ 432.714511][ T847] dvb-usb: error while querying for an remote control event. [ 432.930696][ T8097] m920x_read = error: -19 [ 432.991300][ T8097] dvb-usb: error while querying for an remote control event. [ 433.184977][ T8097] m920x_read = error: -19 [ 433.197804][ T8097] dvb-usb: error while querying for an remote control event. [ 433.335092][ T8097] m920x_read = error: -19 [ 433.344978][ T8097] dvb-usb: error while querying for an remote control event. [ 433.485008][ T8097] m920x_read = error: -19 [ 433.489385][ T8097] dvb-usb: error while querying for an remote control event. [ 433.636696][ T8097] m920x_read = error: -19 [ 433.887522][ T8097] dvb-usb: error while querying for an remote control event. [ 434.067396][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 434.142889][ T30] audit: type=1400 audit(1762508395.512:841): avc: denied { mount } for pid=10435 comm="syz.3.1196" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 434.145099][ T8097] m920x_read = error: -19 [ 434.186448][ T8097] dvb-usb: error while querying for an remote control event. [ 434.815720][ T8097] m920x_read = error: -19 [ 434.820151][ T8097] dvb-usb: error while querying for an remote control event. [ 434.842978][ T847] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 434.945256][ T8097] m920x_read = error: -19 [ 434.958090][ T8097] dvb-usb: error while querying for an remote control event. [ 435.095472][ T8097] m920x_read = error: -19 [ 435.104953][ T8097] dvb-usb: error while querying for an remote control event. [ 435.114999][ T847] usb 3-1: Using ep0 maxpacket: 32 [ 435.131690][ T847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 435.144207][ T847] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 435.163565][ T847] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 435.199546][ T847] usb 3-1: Product: syz [ 435.210659][ T30] audit: type=1400 audit(1762508396.582:842): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 435.224171][ T847] usb 3-1: Manufacturer: syz [ 435.235242][ T8097] m920x_read = error: -19 [ 435.239566][ T8097] dvb-usb: error while querying for an remote control event. [ 435.257134][ T847] usb 3-1: SerialNumber: syz [ 435.288221][ T847] usb 3-1: config 0 descriptor?? [ 435.294808][T10442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.375058][ T8097] m920x_read = error: -19 [ 435.384534][ T8097] dvb-usb: error while querying for an remote control event. [ 435.524974][ T847] m920x_read = error: -19 [ 435.536697][ T847] dvb-usb: error while querying for an remote control event. [ 435.643873][ T30] audit: type=1400 audit(1762508397.022:843): avc: denied { create } for pid=10438 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 435.703539][ T30] audit: type=1400 audit(1762508397.052:844): avc: denied { setopt } for pid=10438 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 435.706142][ T847] m920x_read = error: -19 [ 435.785119][ T8097] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 435.905976][ T847] dvb-usb: error while querying for an remote control event. [ 435.987303][T10459] FAT-fs (loop1): unable to read boot sector [ 436.450057][ T847] usb 3-1: USB disconnect, device number 24 [ 436.480950][ T8097] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 436.490407][ T8097] usb 4-1: config 0 has no interface number 0 [ 436.498592][ T24] m920x_read = error: -19 [ 436.503016][ T24] dvb-usb: error while querying for an remote control event. [ 436.546228][ T8097] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 436.637391][ T24] m920x_read = error: -19 [ 436.671116][ T24] dvb-usb: error while querying for an remote control event. [ 436.687632][ T8097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.707131][ T8097] usb 4-1: Product: syz [ 436.711328][ T8097] usb 4-1: Manufacturer: syz [ 436.729900][ T8097] usb 4-1: SerialNumber: syz [ 436.745627][ T8097] usb 4-1: config 0 descriptor?? [ 436.794687][ T8097] yurex 4-1:0.50: Could not find endpoints [ 436.815652][ T24] m920x_read = error: -19 [ 436.825194][ T24] dvb-usb: error while querying for an remote control event. [ 436.975123][ T24] m920x_read = error: -19 [ 436.975149][ T24] dvb-usb: error while querying for an remote control event. [ 437.051082][T10469] tty tty3: ldisc open failed (-12), clearing slot 2 [ 437.085224][ T24] m920x_read = error: -19 [ 437.110032][ T24] dvb-usb: error while querying for an remote control event. [ 438.567967][ T24] m920x_read = error: -19 [ 438.572701][ T24] dvb-usb: error while querying for an remote control event. [ 438.685608][ T24] m920x_read = error: -19 [ 438.691136][ T24] dvb-usb: error while querying for an remote control event. [ 438.800834][T10466] IPv6: sit1: Disabled Multicast RS [ 438.811761][T10486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1211'. [ 438.834095][T10466] sit1: entered allmulticast mode [ 438.839663][ T24] m920x_read = error: -19 [ 438.853997][ T24] dvb-usb: error while querying for an remote control event. [ 438.918463][T10484] Failed to initialize the IGMP autojoin socket (err -2) [ 438.936467][T10486] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1211'. [ 438.976035][T10486] bond_slave_0: entered promiscuous mode [ 438.981752][T10486] bond_slave_1: entered promiscuous mode [ 439.069669][T10491] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 439.083491][T10486] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1211'. [ 439.098431][T10491] bond0: (slave wlan1): Opening slave failed [ 439.116654][T10490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.132720][ T24] m920x_read = error: -19 [ 439.141520][ T24] dvb-usb: error while querying for an remote control event. [ 439.265151][ T24] m920x_read = error: -19 [ 439.271748][ T24] dvb-usb: error while querying for an remote control event. [ 439.395537][ T24] m920x_read = error: -19 [ 439.399981][ T24] dvb-usb: error while querying for an remote control event. [ 439.515188][ T24] m920x_read = error: -19 [ 439.520726][ T24] dvb-usb: error while querying for an remote control event. [ 439.567985][ T7123] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 439.703992][ T8097] m920x_read = error: -19 [ 439.715374][ T8097] dvb-usb: error while querying for an remote control event. [ 439.723317][ T24] usb 4-1: USB disconnect, device number 28 [ 439.740305][ T7123] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 439.773275][ T7123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.799463][ T7123] usb 5-1: Product: syz [ 439.809589][ T7123] usb 5-1: Manufacturer: syz [ 439.835147][ T8097] m920x_read = error: -19 [ 439.836270][ T7123] usb 5-1: SerialNumber: syz [ 439.839864][ T8097] dvb-usb: error while querying for an remote control event. [ 439.861437][ T7123] usb 5-1: config 0 descriptor?? [ 439.875658][ T7123] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 439.945990][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 439.948364][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.964379][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.005109][ T8097] m920x_read = error: -19 [ 440.009773][ T8097] dvb-usb: error while querying for an remote control event. [ 440.109288][ T10] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 440.135023][ T10] usb 3-1: config 0 has no interface number 0 [ 440.141272][ T8097] m920x_read = error: -19 [ 440.142248][ T10] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 440.145890][ T8097] dvb-usb: error while querying for an remote control event. [ 440.155725][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 440.172321][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.208452][ T10] usb 3-1: config 0 descriptor?? [ 440.217166][ T10] ttusbir 3-1:0.83: cannot find expected altsetting [ 440.279343][T10520] SELinux: Context system_u:object is not valid (left unmapped). [ 440.285076][ T30] audit: type=1400 audit(1762508401.562:845): avc: denied { read } for pid=10514 comm="syz.3.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 440.325314][ T30] audit: type=1400 audit(1762508401.702:846): avc: denied { relabelto } for pid=10514 comm="syz.3.1221" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 440.420350][ T30] audit: type=1400 audit(1762508401.702:847): avc: denied { associate } for pid=10514 comm="syz.3.1221" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 440.480744][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 440.535020][ T8097] m920x_read = error: -19 [ 440.539543][ T8097] dvb-usb: error while querying for an remote control event. [ 440.669773][ T8097] m920x_read = error: -19 [ 440.765029][ T8097] dvb-usb: error while querying for an remote control event. [ 441.101212][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.112911][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.224360][ T8097] m920x_read = error: -19 [ 441.286758][ T8097] dvb-usb: error while querying for an remote control event. [ 441.424991][ T8097] m920x_read = error: -19 [ 441.429448][ T8097] dvb-usb: error while querying for an remote control event. [ 441.545016][ T8097] m920x_read = error: -19 [ 441.550248][ T8097] dvb-usb: error while querying for an remote control event. [ 441.680067][ T8097] m920x_read = error: -19 [ 441.689563][ T8097] dvb-usb: error while querying for an remote control event. [ 441.804994][ T8097] m920x_read = error: -19 [ 441.957819][ T8097] dvb-usb: error while querying for an remote control event. [ 442.105110][ T8097] m920x_read = error: -19 [ 442.111083][ T8097] dvb-usb: error while querying for an remote control event. [ 442.272494][ T8097] m920x_read = error: -19 [ 442.277012][ T8097] dvb-usb: error while querying for an remote control event. [ 442.327000][ T8097] usb 5-1: USB disconnect, device number 25 [ 442.338242][ T30] audit: type=1400 audit(1762508403.722:848): avc: denied { write } for pid=10532 comm="syz.1.1223" path="socket:[26533]" dev="sockfs" ino=26533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.338295][T10534] Bluetooth: MGMT ver 1.23 [ 442.479213][T10542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1225'. [ 442.608281][ T24] m920x_read = error: -19 [ 442.612649][ T24] dvb-usb: error while querying for an remote control event. [ 442.727917][ T24] m920x_read = error: -19 [ 442.844744][ T24] dvb-usb: error while querying for an remote control event. [ 443.036033][ T7123] usb 3-1: USB disconnect, device number 25 [ 443.241816][T10548] netlink: 'syz.2.1226': attribute type 9 has an invalid length. [ 443.256021][ T24] m920x_read = error: -19 [ 443.260697][ T24] dvb-usb: error while querying for an remote control event. [ 443.334766][ T30] audit: type=1400 audit(1762508404.712:849): avc: denied { create } for pid=10550 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 443.375542][ T24] m920x_read = error: -19 [ 443.385523][ T24] dvb-usb: error while querying for an remote control event. [ 443.393439][ T30] audit: type=1400 audit(1762508404.742:850): avc: denied { ioctl } for pid=10550 comm="syz.3.1227" path="socket:[27565]" dev="sockfs" ino=27565 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 443.445939][T10558] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1229'. [ 443.495121][ T24] m920x_read = error: -19 [ 443.499594][ T24] dvb-usb: error while querying for an remote control event. [ 443.520981][ T30] audit: type=1400 audit(1762508404.892:851): avc: denied { connect } for pid=10550 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 443.655132][ T24] m920x_read = error: -19 [ 443.659711][ T24] dvb-usb: error while querying for an remote control event. [ 443.785108][ T8097] m920x_read = error: -19 [ 443.789602][ T8097] dvb-usb: error while querying for an remote control event. [ 443.892687][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 444.049700][ T30] audit: type=1400 audit(1762508405.432:852): avc: denied { ioctl } for pid=10573 comm="syz.1.1234" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 444.161814][ T8097] m920x_read = error: -19 [ 444.167203][ T8097] dvb-usb: error while querying for an remote control event. [ 444.375484][ T8097] m920x_read = error: -19 [ 444.394901][ T8097] dvb-usb: error while querying for an remote control event. [ 444.585032][ T24] m920x_read = error: -19 [ 444.589430][ T24] dvb-usb: error while querying for an remote control event. [ 444.604998][ T8097] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 444.785911][ T24] m920x_read = error: -19 [ 444.791001][ T24] dvb-usb: error while querying for an remote control event. [ 444.896801][ T8097] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 444.906839][ T8097] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.945149][ T7123] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 444.953259][ T8097] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.962613][ T8097] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.985951][ T24] m920x_read = error: -19 [ 444.990342][ T24] dvb-usb: error while querying for an remote control event. [ 445.003566][ T8097] usb 2-1: Product: syz [ 445.008640][ T8097] usb 2-1: Manufacturer: syz [ 445.018850][ T8097] usb 2-1: SerialNumber: syz [ 445.033199][ T8097] usb 2-1: config 0 descriptor?? [ 445.095047][ T7123] usb 1-1: Using ep0 maxpacket: 16 [ 445.101737][ T7123] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 445.110531][ T7123] usb 1-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 445.121040][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 445.123556][ T8097] usb 2-1: selecting invalid altsetting 0 [ 445.136077][ T24] m920x_read = error: -19 [ 445.150103][ T7123] usb 1-1: config 0 has no interface number 0 [ 445.157432][ T24] dvb-usb: error while querying for an remote control event. [ 445.167128][ T7123] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 445.176879][ T7123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.205519][ T7123] usb 1-1: Product: syz [ 445.217964][ T7123] usb 1-1: Manufacturer: syz [ 445.226746][ T7123] usb 1-1: SerialNumber: syz [ 445.237444][ T7123] usb 1-1: config 0 descriptor?? [ 445.250959][ T7123] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 445.298231][T10589] input: syz1 as /devices/virtual/input/input21 [ 445.326169][ T8097] m920x_read = error: -19 [ 445.330551][ T8097] dvb-usb: error while querying for an remote control event. [ 445.354330][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.367538][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.396413][ T7123] uvcvideo 1-1:0.105: No valid video chain found. [ 445.404669][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 445.423408][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.432888][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.445615][ T10] usb 4-1: Product: syz [ 445.449802][ T10] usb 4-1: Manufacturer: syz [ 445.481746][ T10] usb 4-1: SerialNumber: syz [ 445.502512][ T10] usb 4-1: config 0 descriptor?? [ 445.591040][ T8097] m920x_read = error: -19 [ 445.595888][ T8097] dvb-usb: error while querying for an remote control event. [ 445.625331][ T8097] usb 1-1: USB disconnect, device number 25 [ 445.674216][ T10] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 445.715636][ T24] m920x_read = error: -19 [ 445.724918][ T24] dvb-usb: error while querying for an remote control event. [ 445.856718][ T24] m920x_read = error: -19 [ 445.861192][ T24] dvb-usb: error while querying for an remote control event. [ 446.052513][ T24] m920x_read = error: -19 [ 446.056993][ T24] dvb-usb: error while querying for an remote control event. [ 446.098614][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 446.168168][ T30] audit: type=1326 audit(1762508407.542:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f678f6c9 code=0x7ffc0000 [ 446.191874][ T24] m920x_read = error: -19 [ 446.196565][ T24] dvb-usb: error while querying for an remote control event. [ 446.213449][ T30] audit: type=1326 audit(1762508407.542:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f678f6c9 code=0x7ffc0000 [ 446.325073][ T24] m920x_read = error: -19 [ 446.329645][ T24] dvb-usb: error while querying for an remote control event. [ 446.525057][ T24] m920x_read = error: -19 [ 446.529447][ T24] dvb-usb: error while querying for an remote control event. [ 446.920887][ T24] m920x_read = error: -19 [ 446.934715][ T24] dvb-usb: error while querying for an remote control event. [ 446.950282][T10614] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1247'. [ 447.080808][ T24] m920x_read = error: -19 [ 447.089502][ T24] dvb-usb: error while querying for an remote control event. [ 447.174946][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 447.267602][ T24] m920x_read = error: -19 [ 447.271977][ T24] dvb-usb: error while querying for an remote control event. [ 447.279889][ T8097] usb 2-1: USB disconnect, device number 28 [ 447.348353][ T10] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 447.356725][ T10] usb 1-1: config 4 has no interface number 0 [ 447.362997][ T10] usb 1-1: config 4 interface 231 has no altsetting 0 [ 447.391695][ T10] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=82.e7 [ 447.401333][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.415122][ T24] m920x_read = error: -19 [ 447.419491][ T24] dvb-usb: error while querying for an remote control event. [ 447.419963][ T10] usb 1-1: Product: syz [ 447.456952][ T10] usb 1-1: Manufacturer: syz [ 447.466218][ T10] usb 1-1: SerialNumber: syz [ 447.523961][ T10] usb 1-1: bad CDC descriptors [ 447.540131][T10625] trusted_key: encrypted_key: hex blob is missing [ 447.553919][ T30] audit: type=1326 audit(1762508408.932:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.578592][ T30] audit: type=1326 audit(1762508408.932:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.612752][ T30] audit: type=1326 audit(1762508408.992:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.678068][ T30] audit: type=1326 audit(1762508408.992:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.706140][ T24] m920x_read = error: -19 [ 447.710481][ T24] dvb-usb: error while querying for an remote control event. [ 447.834382][ T30] audit: type=1326 audit(1762508408.992:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.865878][ T30] audit: type=1326 audit(1762508409.032:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.866165][ T24] m920x_read = error: -19 [ 447.894239][T10632] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1254'. [ 447.904034][ T847] usb 4-1: USB disconnect, device number 29 [ 447.906637][T10632] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1254'. [ 447.922281][ T30] audit: type=1326 audit(1762508409.032:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 447.980051][ T30] audit: type=1326 audit(1762508409.032:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa2578f6c9 code=0x7ffc0000 [ 448.030126][ T24] dvb-usb: error while querying for an remote control event. [ 448.218486][ T847] m920x_read = error: -19 [ 448.223239][ T847] dvb-usb: error while querying for an remote control event. [ 448.365184][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 448.377413][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 448.766095][ T24] m920x_read = error: -19 [ 448.770595][ T24] dvb-usb: error while querying for an remote control event. [ 448.895323][ T24] m920x_read = error: -19 [ 448.901174][ T24] dvb-usb: error while querying for an remote control event. [ 449.105002][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 449.112878][ T847] m920x_read = error: -19 [ 449.117844][ T847] dvb-usb: error while querying for an remote control event. [ 449.176655][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 449.185615][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 449.194539][T10650] netlink: 'syz.4.1259': attribute type 18 has an invalid length. [ 449.202789][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 449.211656][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 449.220614][T10650] netlink: 'syz.4.1259': attribute type 18 has an invalid length. [ 449.235071][ T847] m920x_read = error: -19 [ 449.239416][ T847] dvb-usb: error while querying for an remote control event. [ 449.266566][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 449.320529][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 449.336612][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 449.355077][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.355591][ T847] m920x_read = error: -19 [ 449.367699][ T10] usb 3-1: Product: syz [ 449.373744][ T10] usb 3-1: Manufacturer: syz [ 449.386774][ T10] usb 3-1: SerialNumber: syz [ 449.419069][ T10] usb 3-1: config 0 descriptor?? [ 449.439787][ T847] dvb-usb: error while querying for an remote control event. [ 449.440427][ T10] usb 3-1: selecting invalid altsetting 0 [ 449.576723][ T847] m920x_read = error: -19 [ 449.608552][ T847] dvb-usb: error while querying for an remote control event. [ 450.260032][ T847] m920x_read = error: -19 [ 450.311375][ T847] dvb-usb: error while querying for an remote control event. [ 450.425470][ T10] usb 1-1: USB disconnect, device number 26 [ 450.649280][ T24] m920x_read = error: -19 [ 450.653648][ T24] dvb-usb: error while querying for an remote control event. [ 450.970478][ T847] m920x_read = error: -19 [ 450.974950][ T847] dvb-usb: error while querying for an remote control event. [ 451.082301][T10661] ================================================================== [ 451.090395][T10661] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 451.098385][T10661] Read of size 8 at addr ffff88803467ce30 by task syz.0.1261/10661 [ 451.106270][T10661] [ 451.108589][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.0.1261 Not tainted syzkaller #0 PREEMPT(full) [ 451.108618][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.108632][T10661] Call Trace: [ 451.108642][T10661] [ 451.108653][T10661] dump_stack_lvl+0x116/0x1f0 [ 451.108693][T10661] print_report+0xcd/0x630 [ 451.108717][T10661] ? __virt_addr_valid+0x81/0x610 [ 451.108747][T10661] ? __phys_addr+0xe8/0x180 [ 451.108782][T10661] ? sysfs_remove_file_ns+0x63/0x70 [ 451.108805][T10661] kasan_report+0xe0/0x110 [ 451.108829][T10661] ? sysfs_remove_file_ns+0x63/0x70 [ 451.108856][T10661] sysfs_remove_file_ns+0x63/0x70 [ 451.108880][T10661] driver_remove_file+0x4a/0x60 [ 451.108905][T10661] bus_remove_driver+0x224/0x2c0 [ 451.108937][T10661] driver_unregister+0x76/0xb0 [ 451.108961][T10661] comedi_device_detach_locked+0x12f/0xa50 [ 451.108992][T10661] do_devconfig_ioctl+0x555/0x710 [ 451.109023][T10661] ? __mutex_lock+0x344/0x1060 [ 451.109045][T10661] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 451.109075][T10661] ? irqentry_exit+0x3b/0x90 [ 451.109103][T10661] ? finish_task_switch.isra.0+0x22a/0xc10 [ 451.109131][T10661] ? finish_task_switch.isra.0+0x221/0xc10 [ 451.109161][T10661] comedi_unlocked_ioctl+0x165d/0x2f00 [ 451.109188][T10661] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 451.109213][T10661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.109242][T10661] ? do_vfs_ioctl+0x128/0x14f0 [ 451.109270][T10661] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 451.109300][T10661] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 451.109329][T10661] ? rcu_is_watching+0x12/0xc0 [ 451.109355][T10661] ? irqentry_exit+0x3b/0x90 [ 451.109373][T10661] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.109410][T10661] ? security_file_ioctl+0x6f/0x240 [ 451.109434][T10661] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 451.109461][T10661] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 451.109484][T10661] __x64_sys_ioctl+0x18e/0x210 [ 451.109515][T10661] do_syscall_64+0xcd/0xfa0 [ 451.109535][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.109557][T10661] RIP: 0033:0x7f8c5238f6c9 [ 451.109575][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.109598][T10661] RSP: 002b:00007f8c53293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.109622][T10661] RAX: ffffffffffffffda RBX: 00007f8c525e6180 RCX: 00007f8c5238f6c9 [ 451.109638][T10661] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 451.109652][T10661] RBP: 00007f8c52411f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.109667][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.109681][T10661] R13: 00007f8c525e6218 R14: 00007f8c525e6180 R15: 00007ffc77fdfeb8 [ 451.109705][T10661] [ 451.109714][T10661] [ 451.382553][T10661] Allocated by task 9646: [ 451.386860][T10661] kasan_save_stack+0x33/0x60 [ 451.391531][T10661] kasan_save_track+0x14/0x30 [ 451.396283][T10661] __kasan_kmalloc+0xaa/0xb0 [ 451.400863][T10661] __kmalloc_noprof+0x32f/0x880 [ 451.405700][T10661] security_inode_init_security+0x13f/0x390 [ 451.411581][T10661] shmem_mknod+0x22e/0x450 [ 451.415984][T10661] lookup_open.isra.0+0x11d3/0x1580 [ 451.421170][T10661] path_openat+0x893/0x2cb0 [ 451.425652][T10661] do_filp_open+0x20b/0x470 [ 451.430141][T10661] do_sys_openat2+0x11b/0x1d0 [ 451.434802][T10661] __x64_sys_openat+0x174/0x210 [ 451.439641][T10661] do_syscall_64+0xcd/0xfa0 [ 451.444134][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.450010][T10661] [ 451.452343][T10661] Freed by task 9646: [ 451.456312][T10661] kasan_save_stack+0x33/0x60 [ 451.460983][T10661] kasan_save_track+0x14/0x30 [ 451.465642][T10661] __kasan_save_free_info+0x3b/0x60 [ 451.470829][T10661] __kasan_slab_free+0x5f/0x80 [ 451.475574][T10661] kfree+0x2b8/0x6d0 [ 451.479453][T10661] security_inode_init_security+0x2eb/0x390 [ 451.485376][T10661] shmem_mknod+0x22e/0x450 [ 451.489775][T10661] lookup_open.isra.0+0x11d3/0x1580 [ 451.494960][T10661] path_openat+0x893/0x2cb0 [ 451.499451][T10661] do_filp_open+0x20b/0x470 [ 451.503938][T10661] do_sys_openat2+0x11b/0x1d0 [ 451.508598][T10661] __x64_sys_openat+0x174/0x210 [ 451.513433][T10661] do_syscall_64+0xcd/0xfa0 [ 451.517923][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.523795][T10661] [ 451.526095][T10661] The buggy address belongs to the object at ffff88803467ce00 [ 451.526095][T10661] which belongs to the cache kmalloc-256 of size 256 [ 451.540125][T10661] The buggy address is located 48 bytes inside of [ 451.540125][T10661] freed 256-byte region [ffff88803467ce00, ffff88803467cf00) [ 451.553812][T10661] [ 451.556115][T10661] The buggy address belongs to the physical page: [ 451.562513][T10661] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3467c [ 451.571338][T10661] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 451.579815][T10661] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 451.587351][T10661] page_type: f5(slab) [ 451.591312][T10661] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000aa6780 dead000000000004 [ 451.599876][T10661] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 451.608438][T10661] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000aa6780 dead000000000004 [ 451.617093][T10661] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 451.625744][T10661] head: 00fff00000000001 ffffea0000d19f01 00000000ffffffff 00000000ffffffff [ 451.634395][T10661] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 451.643042][T10661] page dumped because: kasan: bad access detected [ 451.649439][T10661] page_owner tracks the page as allocated [ 451.655137][T10661] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5195, tgid 5195 (udevd), ts 42336595376, free_ts 42287914495 [ 451.675099][T10661] post_alloc_hook+0x1c0/0x230 [ 451.679855][T10661] get_page_from_freelist+0x10a3/0x3a30 [ 451.685387][T10661] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 451.691268][T10661] alloc_pages_mpol+0x1fb/0x550 [ 451.696098][T10661] new_slab+0x24a/0x360 [ 451.700239][T10661] ___slab_alloc+0xdae/0x1a60 [ 451.704903][T10661] __slab_alloc.constprop.0+0x63/0x110 [ 451.710345][T10661] __kmalloc_noprof+0x501/0x880 [ 451.715182][T10661] security_inode_init_security+0x13f/0x390 [ 451.721068][T10661] shmem_mknod+0x22e/0x450 [ 451.725469][T10661] lookup_open.isra.0+0x11d3/0x1580 [ 451.730658][T10661] path_openat+0x893/0x2cb0 [ 451.735152][T10661] do_filp_open+0x20b/0x470 [ 451.739636][T10661] do_sys_openat2+0x11b/0x1d0 [ 451.744296][T10661] __x64_sys_openat+0x174/0x210 [ 451.749128][T10661] do_syscall_64+0xcd/0xfa0 [ 451.753967][T10661] page last free pid 23 tgid 23 stack trace: [ 451.759919][T10661] __free_frozen_pages+0x7df/0x1160 [ 451.765102][T10661] rcu_core+0x79c/0x1530 [ 451.769327][T10661] handle_softirqs+0x219/0x8e0 [ 451.774072][T10661] run_ksoftirqd+0x3a/0x60 [ 451.778471][T10661] smpboot_thread_fn+0x3f7/0xae0 [ 451.783396][T10661] kthread+0x3c5/0x780 [ 451.787447][T10661] ret_from_fork+0x675/0x7d0 [ 451.792023][T10661] ret_from_fork_asm+0x1a/0x30 [ 451.796786][T10661] [ 451.799095][T10661] Memory state around the buggy address: [ 451.804711][T10661] ffff88803467cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.812762][T10661] ffff88803467cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.820808][T10661] >ffff88803467ce00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.829327][T10661] ^ [ 451.834947][T10661] ffff88803467ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 451.842993][T10661] ffff88803467cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 451.851032][T10661] ================================================================== [ 451.859458][T10661] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 451.866668][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.0.1261 Not tainted syzkaller #0 PREEMPT(full) [ 451.876040][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 451.886085][T10661] Call Trace: [ 451.889348][T10661] [ 451.892263][T10661] dump_stack_lvl+0x3d/0x1f0 [ 451.896859][T10661] vpanic+0x640/0x6f0 [ 451.900844][T10661] panic+0xca/0xd0 [ 451.904557][T10661] ? __pfx_panic+0x10/0x10 [ 451.908963][T10661] ? sysfs_remove_file_ns+0x63/0x70 [ 451.914146][T10661] ? preempt_schedule_common+0x44/0xc0 [ 451.919605][T10661] ? preempt_schedule_thunk+0x16/0x30 [ 451.924973][T10661] check_panic_on_warn+0xab/0xb0 [ 451.930343][T10661] end_report+0x107/0x170 [ 451.934742][T10661] kasan_report+0xee/0x110 [ 451.939145][T10661] ? sysfs_remove_file_ns+0x63/0x70 [ 451.944330][T10661] sysfs_remove_file_ns+0x63/0x70 [ 451.949338][T10661] driver_remove_file+0x4a/0x60 [ 451.954173][T10661] bus_remove_driver+0x224/0x2c0 [ 451.959104][T10661] driver_unregister+0x76/0xb0 [ 451.963862][T10661] comedi_device_detach_locked+0x12f/0xa50 [ 451.969655][T10661] do_devconfig_ioctl+0x555/0x710 [ 451.974668][T10661] ? __mutex_lock+0x344/0x1060 [ 451.979414][T10661] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 451.984983][T10661] ? irqentry_exit+0x3b/0x90 [ 451.989565][T10661] ? finish_task_switch.isra.0+0x22a/0xc10 [ 451.995362][T10661] ? finish_task_switch.isra.0+0x221/0xc10 [ 452.001681][T10661] comedi_unlocked_ioctl+0x165d/0x2f00 [ 452.007126][T10661] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 452.012925][T10661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.018806][T10661] ? do_vfs_ioctl+0x128/0x14f0 [ 452.023558][T10661] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 452.028568][T10661] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 452.035401][T10661] ? rcu_is_watching+0x12/0xc0 [ 452.040154][T10661] ? irqentry_exit+0x3b/0x90 [ 452.044810][T10661] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.050004][T10661] ? security_file_ioctl+0x6f/0x240 [ 452.055196][T10661] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 452.060741][T10661] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 452.066550][T10661] __x64_sys_ioctl+0x18e/0x210 [ 452.071314][T10661] do_syscall_64+0xcd/0xfa0 [ 452.075804][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.081681][T10661] RIP: 0033:0x7f8c5238f6c9 [ 452.086083][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.105674][T10661] RSP: 002b:00007f8c53293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.114072][T10661] RAX: ffffffffffffffda RBX: 00007f8c525e6180 RCX: 00007f8c5238f6c9 [ 452.122025][T10661] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 452.129978][T10661] RBP: 00007f8c52411f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.137929][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.145883][T10661] R13: 00007f8c525e6218 R14: 00007f8c525e6180 R15: 00007ffc77fdfeb8 [ 452.153846][T10661] [ 452.157071][T10661] Kernel Offset: disabled [ 452.161370][T10661] Rebooting in 86400 seconds..