last executing test programs: 8m19.977779815s ago: executing program 4 (id=860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x3b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000015c0), r0) setrlimit(0xa, &(0x7f0000000140)={0x1, 0x8}) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x1, 0x70bd2d, 0xa5dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x5b, 0x56, 0x41, 0x40, 0x1385, 0x5f02, 0x971d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0xe, 0x20, 0x80, [{{0x9, 0x4, 0x34, 0x5c, 0x1, 0xec, 0x70, 0x37, 0xfa, [], [{{0x9, 0x5, 0x1, 0x4, 0x40, 0x9, 0x0, 0x4}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 8m17.543894858s ago: executing program 4 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x8000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r1 = fcntl$getown(r0, 0x9) ptrace$peek(0x3, r1, &(0x7f0000000780)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000007c0)={0x2c, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kexec_load(0x0, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000759000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f000048b000/0x400000)=nil, &(0x7f000099c000/0x1000)=nil, &(0x7f0000a0b000/0x4000)=nil, &(0x7f00005c4000/0x3000)=nil, &(0x7f0000173000/0x4000)=nil, &(0x7f0000624000/0x3000)=nil, &(0x7f000013d000/0x4000)=nil, &(0x7f00006d8000/0x1000)=nil, &(0x7f0000164000/0x4000)=nil, &(0x7f0000000680)="0000633ecba638c09d4034898a7ba74caba2ef12da8d11509bf6b23071c7b07adcf42720758628af4550db95323e", 0x2e, r4}, 0x68) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x12, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="d5fe00950000000079985e757e29989ccc81490971220b00000000000000000000000000000000fae79db4df9071f1b4aedf441c010000000094"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x44041, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000540)={0x1e, 0x0, [{0xeeee8000, 0xc8, &(0x7f0000000380)=""/223}, {0x8080000, 0x100f, &(0x7f0000002780)=""/4111}, {0x2, 0x8e, &(0x7f00000000c0)=""/142}, {0x1, 0xff4, &(0x7f0000001780)=""/4084}]}) close(0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r7, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0xfce) execveat(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000a00)={[&(0x7f0000000340)='\xef--\x00', &(0x7f0000000480)='{#-\x00', &(0x7f0000000500)=',-&:[--@\x00', &(0x7f0000000900)='Gn\xf0\x00', &(0x7f0000000940)='-$\'\x00', &(0x7f0000000980)='/dev/cpu/#/msr\x00', &(0x7f00000009c0)='/dev/cpu/#/msr\x00\x81@0\x05\x9c\x19PT\x15\xb4\xbb\xc1\x9fA\xa2 \xdc<\x9a9\xfc\xbc\x8a\xd8\x90\\\xfa_>\x98\x92\xb4U\x8f*\xfa\xb3\x83O']}, &(0x7f0000000600), 0x100) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) 8m16.385744415s ago: executing program 4 (id=867): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x400800) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)) (async) syz_usb_connect(0x2, 0x1020, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xde, 0xee, 0x33, 0x20, 0x471, 0x1230, 0x58aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100e, 0x4, 0x5d, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x7, 0xf, 0x31, 0xec, 0x47, 0xe0, [], [{{0x9, 0x5, 0x6, 0x1, 0x400, 0x56, 0xa6, 0x7f}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x4, 0x6, 0x5, [@generic={0xba, 0x32, "1b520c949d4d0e296dc18b76f73f7f924d89df4865cab0ac93012a7de2663ef63f7d381fe051fd6af5b73f4499725d9648557be6b5d0574e58077a1b323b3a9905a898e0d10404b5c5fa06f655a301122d3c033b0c79fe38051ce9699b3069a2be6d3cd3e827adc6197070ab4c441e37bba5a7f2eaecd09fbd073dd3f7a590cf020b1ba0100f8236c3e5a4739919a40a066a6c3ff4ced5378d9f40ed191a5ee2870a330ced4307a6fe4e379df8d8647ef2c7db1fca626927"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x3, 0x4, 0x81}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x5, 0x9, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xa}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x5f, 0x42, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb}, @generic={0x57, 0xc, "2771922a020c0db17bab55e102e80e97d05038feb4d3e719fb1783ebfcabb8a04b298411798c98014ee2aab49a05eedf943f382ea20bb84bb893f13dfacd2d39f29b1d50feb081dd3c10a21babacd14990508c957a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xe, 0x2, 0x7, [@generic={0xd0, 0x4, "9de5ff69884a781601c77d24480afa2e27496829100fec0e6a7973aaeba8ef4c1182c19d3fdf6be7ea5a890aa5efad8a4a820a31d6e56b59f7726ffb40b7bb025df82392c100aa728eb33aca35275169699f28769f7605eb6818be28af9509e0b828f5f3fc2bcfab468f0ee47c76bb46c60b3d0c1e7c2fbb0b4a0ce17badf9e9ed6b119e73f571125f8e359e8d196fde22d8dfb440845eb8e0c8b515a8c46246edd4a11127ddb229e9dce5d54bc3fc55db868e7b2a7b3e06292a71e9db29382c0379608d1ad8fb2d5ccc5f197f9f"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x1, 0x4, 0xa3, [@generic={0x36, 0x10, "586597b12ebadedcbcdf4fb2bda08f6cc6246588e82d0e914baea68133bca9b9671118a9b735641c5fcfa0dfef1a861a84ba6dde"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x3, 0x81, [@generic={0xfd, 0x1, "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"}, @generic={0x4a, 0x1192b34af41bf7f9, "671b8b4227361f0e05fba050ff1d66e43c8064b88e1b0e26cd75a79508041df9299ea1b069381a47ae1dc916337aa2106d72cf8ccbfd644025e11d7d656973bf367ef2d7cdefd6a2"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x10, 0x41, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x2, 0x6, 0xe}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x5, 0x0, 0x4, [@generic={0x80, 0x21, "1bfc928d8f0e3668321d299c7971f2ad4fbdfb8b135df13cad488bb43954aafce47d526ee251ad1a0e166bda9df4add7ad5278db987004b513980de7720301b87c7b7139dd55f6a8caa831d4fb880618a4e60707aaf7084b9ca7f7320a319badc3e717f92a1d1f9f34b8de03d9c4f4d7a4fce84325bc3423a6f9fae0d3bf"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x68, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x8, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x224, 0x1, 0x8, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x7}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x10, 0x0, 0xaa, [@generic={0xe5, 0x9, "8f7ad68d491691f01436226b3c2a68a004bf553636acf930252ba2bf44e0df0e866a5edaa563a842398effc8e6d32d05df6705db284de9735155beb489a35be7d425d637312a9ea6db5a8b00788d6c28ea40516825d49e5acfb877d3e9ceee495c0d9e00a792a7279aa5e1d4fa05563ddccfa7541a3c30fdae64add26925e1a39688e6de94ec0b74399fce23014320cf4c1537d7886ff58d3da8ee705f467003f11fd244744fbe53d02d0de27742aa632126b29f516a045137537d7147e66e77b806fe3b80e255bb04858033ce6211efb93a659d28054c899754f9e6f9d9ebdb55c195"}]}}]}}, {{0x9, 0x4, 0xe0, 0x7, 0xe, 0x8e, 0x26, 0x8, 0x4, [], [{{0x9, 0x5, 0xd, 0xc, 0x20, 0x6, 0xf3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x2c, 0xaf, 0x80}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x1, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x2, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0xb7, 0x3, 0x3, [@generic={0xe5, 0xf, "c5684287741dd04d86ec850a8d9bb5fcfebcee767c2674ed2cc0fd65a3d3e42d3f3fb035f4c0fdb13fd3e8cbe730adde34779aa3ec181a3cd7e2e405016a137a3f521363eda87ec1e41b34af591634d0727761a970ed8d2049b78688996d853bb5b3638ae33d749989ebd6bd5a17558108e1d6414e0c876496ad380ce8338de77c4222f5013e42b56fc9a937eb76373a16a0b70f0e89fbde8e1972bdf56e64bc916dc3ee252c11f963e03d0091b6d42d6a8f37fd2c5bcd511b9f30b06aa458e808ec683bc04390e585c190edfe9b141669f23197ed59443419cb3fc42ff0008c127186"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x82, 0xc0, 0x86, [@generic={0x2d, 0x1, "8ab32a5cf028650809dbc1c08c542d8fdfd6cc4ad1254d04966a7b6a68ecd5021a5530305f8379680fbb04"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x4, 0xa, 0x40, [@generic={0x7a, 0x23, "b2c64798f3d9aae10b806f934771160b74f9aa5d297fdde61afa3ec8027358e21e902733fe308d0b086141e1861a7deb1e60d7de16d569385abd477e7b5d97ed66732fdd4807bfa67968ebd139f6184071f4ec8b3a31d946bf4bbe4d8e419c874c0a8d242bcd72d0ca6dffef86b7296abe0befe4f792074c"}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x8, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x6, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x91, 0xb5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x7, 0xf, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0xe, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd8, 0x2e71}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa6, 0xbf26}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x0, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe1, 0x30}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0x65, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xd041}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x1, 0x36}}, {{0x9, 0x5, 0x4, 0x19, 0x10, 0x0, 0x8a, 0x8}}]}}, {{0x9, 0x4, 0xb7, 0x6, 0xd, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x0, 0xc, 0x400, 0x15, 0x48, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0x24b4ed26bc5224d7, 0x0, 0x400, 0xd, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xf37}, @generic={0x21, 0xa, "4579e2943114b35af0f33c9bcf1062003b69d2a0481970bea0d6316b37381f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x478, 0x7}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x23, 0xf8, 0x1, [@generic={0xa1, 0xd, "1804287849f9f9345b2ae8eceeff3b5876e03578e96e97579dd12434c2823d93d25d35a4ea20d8c0a361ffc2c4bcbcb6ac9af574314fb9791bf267a593ea3d872e1dc1c534c75b3ad52d889d711a004dac313feb598ade8dd874f0ec13e63e24b58d3d5cf8a1866a424777c2fcfc1204e09e5ed53e1f5af021ce280903d37e9e7ae835a7a36d3e286c0d9ecef20d929c11698e468a140e6157040cbd535eaf"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0xe9, 0x3, 0xa, [@generic={0x63, 0xd, "90b07ab893630a8ca28b614a2c3f44b318a04198ae6987662812e5f80b37dd44e64ac26e2d7e40488e9b1f6f0d553f7823aea50f123b0cc3c4c3976100a0bfeead6ad7f6bb929375d2fcce3b406ebfa8f1ce1fa89edf226a0ba8b3763776f87dd3"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x10, 0x40, 0xd}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xa, 0x0, 0x7, [@generic={0x5b, 0xf, "3435064908e6f89740b14b042148f351d6ca3752db18800ad295c6483511816b27afa6130d212df57eab61ac6b0be7c594ffe47ff4b481e5e14a60fc302663f3a1f82f1a12ce167e697a36fe530858d0ac533e2983d6d44888"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x38, 0x47, 0x7, [@generic={0x51, 0x24, "8683bc1f62a0c6e493f2c55744bf787018bced8a052f928004bb3eb32b36879468b4695a38107967bba4991abfa334b2c5c017d5e841d64cfd8170c9ce38bedde4825f5e716651d0a9cc507bab67fa"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0xd, 0x200, 0xf0, 0x1, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x248, 0x81, 0x2, 0x8}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x2, 0x0, 0x39, [@generic={0xda, 0x1, "4af23c217948b0232fe5c465481cebbe912757e2923c6ee219be3036e774cc175c652175cb6514c55f31287799de056e165acb8c205819c09ecf89be7b2ec12137fd75b3c5aa52871e54108383042c89b9fd86386fb6f8a816a137bf6313cb7bb277d787b651c1f556c3092815e2acd6746627e8234e9911c119d1ca6ff7ac8a4e5a561903fac7a3a69a8cbb1a26a3ee0525d2ad9f09d769338763daf212c86a8136d468d24725974d60a89b3ad9ac8b865642e6693b016f91e8d9898068b0611d049b003b11199544e7e2ab8f577cefee241598d2172f09"}]}}]}}, {{0x9, 0x4, 0x10, 0x4, 0x10, 0xff, 0x8, 0x7f, 0x9, [], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x6, 0x10, [@generic={0x81, 0xd, "b0d4ab9ea82c600d44231464b919c902cc08f1248708f53010da48d84305fef335919364757e2335c0189e5aac4d6e278d0f1cb6faee1572cd34cb370b97a16cf50afac69630f0f9580d3ee76f631d39d3ddf40e3049d979c7a3c9ce483a5992e69368717dd3ae3004a800826fdcb18e74739ae56ad27f2832c65ee7f61000"}, @generic={0x3f, 0x5, "8dba69fdde4c348b3f5fdc902b0140200d93a8e6b39961877a7dd3dc6fe5e13902c93068204ccfed9f6da35c3f83bcb63983e05bb711475d4c33c17b75"}]}}, {{0x9, 0x5, 0xa, 0x2, 0xb9f, 0x7, 0x4, 0xc3, [@generic={0xa, 0x21, "0a3b53e8b3964985"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xa}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x3, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x14}, @generic={0xd, 0x4, "b7e8471b40dee013293dd1"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x6, 0x3, 0x3, [@generic={0x7d, 0x2, "6224d121b52dbb2182a0336fac0f798162506114f85d63c99ab838c82334dfa516ad2d022cf4ab642537a32e598d3990352e7bc313d3ca4462d256c7fb9cb1252609f4e89b8d179579fc1aaf6180727bae70497c95a8edab8405dd99d58b5baacb5e957c8823ab0af6632b17db728e38e89c6cc3deef58c192f44a"}, @generic={0x88, 0xe, "15b34e207fcbf8647766c98fc20e56244d34e2302bc6a068f7036e689d13bebf966641f2196634644b2eda474fcebbe1257a8d1faeef52ab5b6f78bae210ab0ea7c8bc846c5313fcfb8369d43f7051c7789e6286ef48a1ec25363da18bbdf98e1be4bd1fbdde959dc895dc5f1605b4b13c0282b0295c6018a98c2e917cc589756f2fc0853915"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x2, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x8, 0x7a, [@generic={0x10, 0xb, "aeb93417e2fb888e5983a7362688"}, @generic={0x9, 0xb, "d5195f5ebfb039"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x81, 0x46, 0xa}}, {{0x9, 0x5, 0x5, 0xf, 0x3ff, 0x8, 0xff, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0xd, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x79, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xf5, 0xfd, 0x40}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xf8, 0xf, 0x3, [@generic={0xb1, 0x7c, "863fedb8e6e7e12e604a73a20b2048f7dea7d22bf74f0662bf76d5bff80222c28ade75e6cc08483e51ea2bccafa9d036e492e0c10f114ea906bcee6ea7246d37a4216155a23a550508fbc9b8c88e5ebe8282d4c80983994fad307e91aed411286acb951debcf02a358eec53d1fed8715cad0a10b4ab1187b4f54de4b320e8f17f74a7f141200a14dcf19125d714afe9de9be0571a77cc9f169931649cc40f4e741200e70ca62d8f5a64ec717641dad"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9a, 0x101}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0xff, 0x1, 0x7f, [@generic={0x45, 0x11, "b954e7113710f56dab366214d51c58bb026ad94c1f034f40124ee4a2a19e94c5a1e656f26c9724e3b01174cf0323cad4266f2498b56cbf352344b0ebdb2dba9656c23a"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xfff5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xe, 0x4, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xb9, 0x1, 0x5, [@generic={0xf6, 0x4, "7ed1d3363e8b67eb14f1b262abfe8dd73f46e17b990d47e2562f2b986f9492fa0e0e573801ea8ad22eaf256a709aee18670bc10412c49310b283fe30f18d13f1fc1d4fb476590f8e0fd3fc958d6b584954698884a205487cb85b6790dcb7c9b73f0aaf81874a4d413c2ceb8b44f77a71da1bafa127cfdfce96899e02458b4b4c19b30dd9757d1bacf0dc731ea05e902fbfe56c1593b4ec04e408f5cfa2052ec8778871a0c4f9ef90f01407136eaf626d7d3a3ef6a983a5b9a680e7ba7b6db0c30efd9bb100eff99dee74675a7e50ce139fac181260302aa710af350e112f22d52814dcebbe2291b5283346d3265d98966ce77ef7"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x800}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x5, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa0, 0x100}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x4, 0xfc, 0xf7, [@generic={0x46, 0x21, "812abef252ac2637e37ab2a3a814270d81540b9851dbfb9aff4efc1ff51c79c78576fcc43fe081a01f5bbf90283ccaebba7c6258fbf20c16bd0cb5de8642e8fd4400f02a"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x201, 0x7f, 0x8, 0x50, 0xff, 0x4}, 0x44, &(0x7f0000001100)={0x5, 0xf, 0x44, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "028b532cc2a9b820c09da500a08b5856"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x9, 0x2, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x6, 0x3, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "17a35b6cb45458d11c2c241ba76b691a"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x413}}]}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'netpci0\x00', 0x0}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x15, 0x14, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='GPL\x00', 0x6, 0xa3, &(0x7f0000001440)=""/163, 0x40f00, 0x2, '\x00', r3, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001540)={0x1, 0xe, 0x9, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1b, @void, @value}, 0x94) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001940), 0x210000, 0x0) write$vga_arbiter(r7, &(0x7f0000001980)=@unlock_all, 0xb) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r2, {0x12}}, './file0\x00'}) (rerun: 32) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) (async, rerun: 64) cachestat(r6, &(0x7f0000001a80)={0x8, 0x8}, &(0x7f0000001ac0), 0x0) (async, rerun: 64) r9 = add_key$fscrypt_v1(&(0x7f0000001c40), &(0x7f0000001c80)={'fscrypt:', @desc4}, &(0x7f0000001cc0)={0x0, "a6da94dcb2efc194af2b61f6567bbcfd2a3125b27e3152453c21701d71f9157145bfbc3906c64e2accacfe8a08a487084a3596f115a08904b05d8c1a0b5a78f1", 0x1a}, 0x48, 0xfffffffffffffffc) add_key$user(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x3}, &(0x7f0000001b80)="aad041aca8e7e04058cf5c023568eab3e6cd57fc27926566dd021e6bb8dae79f3cfe94d160d952fa2a07453c7107d1e24a2a73c175f2f29465293189ae1dd29b6d038010b08ce7583c69c4a8af2116fee86a64366fe9f0f4da0f750c1a0dd96037b1513ab79152f7f1401b91c133d0619f96dd322a574f0ff0147dcab1a2915da629e08893", 0x85, r9) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000001d40)) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000001e40)={'sit0\x00', &(0x7f0000001dc0)={@rand_addr=0x64010100, 0x0, 0x0, 0x70, 0x0, [{@loopback}, {@multicast2}, {@private}, {@local}, {@loopback}, {@loopback}, {}]}}) (rerun: 64) ioctl$IOCTL_STOP_ACCEL_DEV(r8, 0x40096101, &(0x7f0000002280)={{&(0x7f0000002200)={'Accelerator0\x00', {&(0x7f0000001f40)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"0bb96a3b99fd788cb0a8e410509ac16766b84da3172772e788d5fe479213f47b566e827889aed8e82319d187a8e3fb8664ecda0845f5f3cb7efe5abccb6f7582"}, {&(0x7f0000001e80)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingEnabled\x00'}, {0xf}}}}}, {&(0x7f0000002180)={'Accelerator1\x00', {&(0x7f00000020c0)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x2}, {&(0x7f0000002000)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x5}}}}}}}}}, 0xc}) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r8) (async) keyctl$negate(0xd, 0x0, 0xff, 0xfffffffffffffff9) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r10, 0xf50f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xec, r11, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x8010) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002640)={&(0x7f0000002540)={0xfc, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa7, 0x4, "9d7fac31d0a50a728a0ff2b777d0075151e2bdf8ff177571721775b2da305007c2d8f2a7e93e8f45c0f798b0d36fdb6d2843b7ec127fac710aa40607d8821be52f635356e8326d4392cf9305b07eb35efb35b9111803f9dfacf99861f1447796b7c5c76c194713397cd9c2c21912a6e619c0836a7bf20f487ed23a3326530f4e4f059d0ad8e003b38390be7cb8d13beea5f527618cd6672f89f1d2bbeba3368362323f"}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "73f242e61eef4846991db0024a06c96622d0cf27c073fbcdfa3b9b8622ab97d44776cf2b7fbb6a8cf995922fcc7138f9f611e7acf9"}]}]}, 0xfc}}, 0x44014) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000002880)={0x2, 0x0, &(0x7f00000026c0)=""/20, &(0x7f0000002700)=""/147, &(0x7f00000027c0)=""/157, 0x1000}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r13 = request_key(&(0x7f00000028c0)='cifs.idmap\x00', &(0x7f0000002900)={'syz', 0x3}, &(0x7f0000002940)='*\x00', r9) keyctl$chown(0x4, r13, 0x0, 0x0) 8m16.166238739s ago: executing program 4 (id=870): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4800003e, r0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000180)) fanotify_mark(r2, 0x61, 0x40001002, r3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)={0x1080fb8196161240, 0x20, 0x1}, 0x18) openat(r5, &(0x7f0000000100)='./bus\x00', 0x4000, 0x100) 8m15.779942085s ago: executing program 4 (id=872): chdir(0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x2400c080) prlimit64(r0, 0x0, &(0x7f0000000000)={0x5, 0x2000000008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 8m15.011990114s ago: executing program 4 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x2dcd80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r5, &(0x7f0000000000)="81", 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r7) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x2c, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, 0xffffffffffffffff) sendfile(r9, r9, 0x0, 0x24002de8) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x5, 0x448eb0f5}, 0x0) 8m13.811601209s ago: executing program 32 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x2dcd80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r5, &(0x7f0000000000)="81", 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r7) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x2c, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, 0xffffffffffffffff) sendfile(r9, r9, 0x0, 0x24002de8) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x5, 0x448eb0f5}, 0x0) 9.857667583s ago: executing program 0 (id=2616): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000600)="ab843648c8008cf986d0590772e33911c78051b30f3ca7c60694945d7b9ad4a36da1656e0f925d312c7b582a7e644cfcffa72ac216d4c543604d1ac5dd6cfeec52bd2291f2a348a76b043a28986ff2367b6025aa70791dd34fd6f7907ef0a560f1cde81dade34bf9a45d0abb67c9f74b185ce52cf0e4777e06", &(0x7f0000000a00)=""/124}, 0x20) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) (async) fcntl$setstatus(r4, 0x4, 0x2000) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000800), 0x100000001, 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x8, 0x0, 0x0, 0xfffd, 0x7fd3, 0x0, 0x0, 0x0, 0x732, 0x0, 0x4000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x0, 0x0, 0x7fffffff}) (async) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000000)=0x10001) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="40004a0000004a027675d96869b3d0334007750b1438a8f0fbde148bb92d98374d37c86d36ed46989bd59332586162d92043338e897acbfdb0cea09314db5b53d6bc40a3174ff3f0fe25f27a5ed33fb7"], &(0x7f0000000480)=ANY=[@ANYBLOB="0003c2000000c2036cd736d0c81c7c0687ad2610345c95b0e6e5d4f1e4047fa8f81e1af5e092e68b66e09ad2b6395164b73f295588a41b625b5e702866d6e7d15169ba57ac0b4922aa39a8d421b4271e148f89de24d454f481f5212a631e952ab2b4f0785c73009fbf3c8bfb56524a2cc5b43d8085343f9ce3d73c5255a7664b6991238dd5047645d4b9120e245f5ea862750000a484ac2ec46ce6ffafb1de1457ad91feff237b37bd71d5842ad97f031723a1875fe0a7c250970f5b010000002eeaa562e8bbc1a70000000000000000"], &(0x7f00000008c0)=ANY=[@ANYBLOB="0022120000000b6070744590030124bd3ea17ca3a4ea6aa7d24a5c73afc9e621bdd3e5b633cce26d1ee69b02fbf1d4d962881eb5bb4f56d064cc8a44ca1b5b1b74a529cc6f0eb319e226fbcda888f2b5af828e59b03b9cdf582344d3c54a7b870cd96bd71e11d150c3a8d42d4ff72669de5e777afc"], &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xf11}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000940)=ANY=[@ANYBLOB="20017900000099cfdb6ab19977059d8bdf2eb66cecdd7b27e23a1552b2130bb848be34a038213c1bba16bb1d6c4890dad8aac4cbe3091296dde51166ea9db90368556acd555bede2588c344d52d0819f08879010511aaa28dbd72086b82928767e9444df04ac7645b917ae8a4618ea71b0c6e8b093d50728a59e19962fdf9b99edbfbd1a68000000000000"], &(0x7f0000000680)={0x20, 0x3, 0x1, 0x2}}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r7, 0x4b62, &(0x7f0000000140)) (async) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000700)) ioctl$HIDIOCSREPORT(r5, 0xc018480b, &(0x7f0000000080)={0x4, 0x100}) socket$isdn(0x22, 0x3, 0x10) 8.146970083s ago: executing program 5 (id=2625): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getpid() writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001", 0x15}], 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000e7ffffff"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000a008"], 0x80}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchdir(r3) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000a40)=ANY=[], 0x0) r4 = add_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f00000007c0)) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r6, r8}, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x164e, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x20000400) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000010000000000000002b4700ec8c6402000100000085100000feffffffa9335a6e8456f0a3000000000900000095000000000000006047d6b1fe99be6d834b9bd54e83895bd377afca0dd3d1fef42af69671336ff7726e742d8022d16e9df8847b4e0111d52f3a9776158d3de6357b8acd92967fb3a692b1d7036a9a8c37f0cf7f6d357ac84be5c8027ed3704b142fe6fa4859f9657e18ab74ae503b1dffb9"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x27, &(0x7f0000000480)=""/39, 0x41000, 0x32, '\x00', r10, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x200, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r2, r0, r2, r0, r2], &(0x7f0000000680)=[{0x2, 0x5, 0x9, 0x9}, {0x5, 0x2, 0x4, 0x8}, {0x0, 0x2, 0x1, 0xb}, {0x0, 0x4, 0x6, 0x4}, {0x3, 0x5, 0x9, 0x7}, {0x2, 0x2, 0xd, 0xb}], 0x10, 0x8001, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r9, 0x5000, 0x0) keyctl$read(0xb, r4, &(0x7f0000003140)=""/4083, 0xff3) 7.887550093s ago: executing program 0 (id=2629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000003900)={&(0x7f0000003400)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x4048814) r4 = epoll_create1(0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffff3de3ad04b64dc813aa328864462bfa5caacfd3fc66"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r7, &(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000004145b"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc084) r8 = syz_open_dev$vim2m(&(0x7f0000000280), 0x400000007b, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsetxattr$security_selinux(r9, &(0x7f0000000280), &(0x7f0000000000)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x9, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32315659}}) r10 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r10, &(0x7f00000000c0)=[{0x3, 0xfff4, 0x1800}], 0x1, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x24) read$char_usb(r11, &(0x7f00000002c0)=""/127, 0x7f) close_range(r4, 0xffffffffffffffff, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r12, 0x0, 0x22, &(0x7f0000000400), 0x4) 6.761908684s ago: executing program 0 (id=2632): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000daf22db2367a6db29337f179a34b46519386aaa6814569cd2c20a7f9de3f326cfc6d71dc8557c2ca863431d957b8e09ca296d6312a138c91358d5f47ef3d89c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f000001f400)={0x0, 0x0, 0x20000000000003}) (async) fcntl$lock(r3, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x6, 0xfffffffffffffffe}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc002000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0100000003000000000000008b357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172700000000000000000000000000000000000000000000000000000000000380000000000000000000000000000000000000000000b00007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000"]}, 0x3a8) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_stats={0x1d, 0x1, [0x1000]}}) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000f8ffffffffffffff000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @void}, 0x10) 6.6615008s ago: executing program 3 (id=2634): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xd, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) syz_extract_tcp_res(0x0, 0xfffffe4e, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000200), 0x35) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000006404100025bd7000fddb257a0b55bbdf25359b714a946824fdbea5dc5ae9052465a80f0ceaa467ca7078e912b31118804e0329ab6a9e4204616ae0a79235d4658fffd22370f1615749fb74342980d0d517", @ANYRES32=r7], 0x44}}, 0x20008010) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xcc, 0x60, 0x9f, '\x00', 0xfffffffffffffffc}) socket$inet6_icmp_raw(0xa, 0x3, 0x87) 6.52134575s ago: executing program 1 (id=2635): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000100)=[0x7], 0x0, 0x100000000000000, 0x1, 0x0, r1}}, 0x40) 6.438229542s ago: executing program 2 (id=2636): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000540)={0x0, 0xfad2, 0x8000, 0xfffffffd, 0x8000005}, &(0x7f0000000280), &(0x7f0000000040)) (async) syz_io_uring_setup(0x110, &(0x7f0000000540)={0x0, 0xfad2, 0x8000, 0xfffffffd, 0x8000005}, &(0x7f0000000280)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r4, &(0x7f00000003c0)=""/191, 0xbf, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket(0x15, 0x0, 0xffffe13d) (async) socket(0x15, 0x0, 0xffffe13d) 6.360863605s ago: executing program 0 (id=2637): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000020000100ffffffff000000000a0000020000000512000000982f3ec514f28f54a93a11ab18e07ee9f9185da66c62aefbdf3ead00e0d7419f01817c9504a1fe6a95f23761c6117ba6d25d30938581564cfd67b8eb40514c86eda1d7d9fac590812eb34eb4ac6baf5477018c14516edd5f831cfa86574359b25698a741e4973f3e96f7b345fa9ad6d4072f14bc950407b1857be5dc22ed0a73799fecf5b84d"], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socket$kcm(0x11, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="b8b282e50ff54e9999fd435b1adb2f22623e78a9b84249c8142addd70dd5de9243dc2ab72f7c7b28916f42fba53c923c1a095a00"/62, 0x12}], 0x45}, 0x28040085) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8000000, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xffffffff, 0xff], 'veth1_to_hsr\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0xc, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x100b, 0x3, 'snmp_trap\x00', {0x9}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0xffffff00, 0x0, 0xffffff00], 'veth1\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r7 = accept$alg(r5, 0x0, 0x0) r8 = dup(r7) open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r0, 0xc4e) read$FUSE(r8, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) syz_clone(0x400, &(0x7f0000000280)="a13d30166cb0be883cb4d92b4db0513f006c0890d655f551416c9e4ce89d912e4c57d12aa5864e25fe0a1077dd6a57152ab41c3944a954662e697e77d2eb18e788e2eac51b78653adaed6b7782cad762e171badbb1cbd89a7fd01c6917de04f8e7d1c0", 0x63, &(0x7f00000001c0), &(0x7f0000000300), 0x0) 6.360067755s ago: executing program 1 (id=2638): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1}, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r6) r7 = epoll_create1(0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (rerun: 32) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x9, 0x8, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) 4.25419488s ago: executing program 0 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xd8, 0xbe, 0x50, 0x20, 0xb48, 0x1009, 0x2bd9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x90, 0x3, [{{0x9, 0x4, 0x57, 0x41, 0x0, 0x68, 0x83, 0x34, 0x40}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b130000c82000001c001202800500290001000000"], 0x3c}}, 0x20000844) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xd8, 0xbe, 0x50, 0x20, 0xb48, 0x1009, 0x2bd9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x90, 0x3, [{{0x9, 0x4, 0x57, 0x41, 0x0, 0x68, 0x83, 0x34, 0x40}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresuid(r2, r2, r2) (async) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b130000c82000001c001202800500290001000000"], 0x3c}}, 0x20000844) (async) 4.053766396s ago: executing program 3 (id=2640): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.954409323s ago: executing program 5 (id=2641): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000006004000850000008600000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x2, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000280)) capget(&(0x7f0000000180)={0x20080522}, &(0x7f0000000300)={0xf57, 0x1, 0xfffffffb, 0xfffffffa, 0x100, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x20008040) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a208"], 0x10}}, 0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x240}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a80)=ANY=[@ANYBLOB="11c63664782e9dd245df4f54b4d7f74ea4b6ed1d9a5c5380c4a0680b0356820f23a06899530d1d2bfe31cae9ddbfe9cb6625f13de03f5a5f1a3cf45d1f7f8066c6e6cd335c18d0937973c4e638614eea7ef917628447464b1fcb9268e4dfac9233ba4aafcde13e738b53631436c209f5f15082b0bb3f1044a40001a5bee3278353ce053ab783b0f3da3d781e9e5a465ce07f387800afb94cf24906dfada8dc62736ee2f1fe8a7959290547b6affcc1c4a0b7146dc45edd0a863e6f5837641ff36adacd4b7a2fb23dec1145815e8dfc8aabf1c5719f2befd156ff15dda11153646a0d75543a3e959dd512e4f66396bbdf2fd573646d33ba5e93dcf57283ea6e242b7ff0d48cd7712de32093e928080a7e5a3dad8f0025cb631e47c2ee27484dba3e19d957224c7273e3713c5100bd48622c97ad0007ee444fbc8ae1f05829c7def10f662702707e3445bf375245ed4cf951a3cebf89f1a2f3b5223dbf3167535789cc592d75005aefbc8166294b79d57cac0862fe89fc97d147d00fff8b6672b9b0a69b8f403a20ed406f22b053f417a61f70328c57fc73c050c9512b423d0ae18f061eacc8d5a660721e317f84b12707f816d7b2f1f4c8a0c23f9fc965906dba97576752e53464f9725d89cbe1e65a6006ff3d4a1d98aa3f2f7266415b11c586528afd45f0ccaa096a4cbf465b742eca56d74a8ef8e44e5373d5dc1c971d256da84e815a96df3c063c2285e14cd20c87a979b3a4602940445ed0392f74213d4eb3d9e683834dc113bc55eb3e9135f506220f124a92785b3562894be139d288f200cd32f4085c9c836c68a44db1917fd6858501dfef74694c57a88ffac285735dbf880846ee27c3e7d20476f29729b6f80e76eaf38ac8801f8f248d697fce88f81c15a2b60ca727950212baedbf7432d8dea2e47ccf9a993b2934cc4130d45add8ceda48ea5278fed3314af898d912788daa769a2f40f20c62b0487165e31445ac142c5a493306853f42554d68b6f865e0a1a082291f57808f9740347ae096aae2f0b3af5cdcd8b857ca890049ba26da6068b02fef5a9189d53702b6def37d7a13839c84919713e7858bb8b8b1958e2c525bcbc45b973e9c344ab7bbc466cc5776177c42dd312662c56a45297bc71abe840794b85af721e1713d2328d4fe59a5f1398644d88281630474780af77f5b1b7c77332a028c2bb306061da27381fb6ab56765a8eb760a24c6cea91b802cc04cd9b6d18096cb98be12f95f29e3ae5e4f511e7cd0c40fd3c6390cb768e27c730b590ca15a9a550f6e31fe3021317875223e844c9e6ed4dcedffb6186122e7ccdac815aad2e7f481b450f71d4e1f1e1e9b05534d5dea34ffedc47912ed38f33adf06324414fa12a01b0240324e03cfe283605a6aa485db2e2b8771b24573cc6af8a1f619891f2408ddc4ecdd3d241a683fcad2438cbd49b098abc84efb01f163fcfb810ebba3ee11200b8f885f11c8613791c8d0fa1791d6c5c21ce775da3a1cdcc769ec1e1c57e51969ebce5ada982f7fe723ebe3b515a7c8864d2198e017eaff1365e265c32d67b8905236417cc9d635a0648cec87f64c8f853e64327f944a66024091bbab7f8a5001da51905da3f1ab8a782f19b572dcd47371bd384d42feb0604243160859c329feddcadb060afba3083c3be1e0642d4634cc431b4a4975ed8a9ea24b95b569925878b5b4898a2da8d358aa19b564330ee4986646b0ba8d9f7273f285fa7236e8e01d4faada1172cca0505db4df6c9c004c2def1e4546fd607d8ea2379e2f7ed0ced445d542b97a43b77c4f03eb9822dc1f0fe576164692e5ea416c72cdaf562358f449b4ee1637000117eb47feaa63406250dce1161a2e51e9324afa097f22665d0241626660e4ffcd8b0938eaf5103ce3e2fc1814f1628fd89743db4e56af8d0f8904008c5d81fe82affa73fce704ed44591af7d70ae628816c28e883c69280da3cfa28a93bfbc08d7e836eecd1e24fca46f3dd67785285a31f207a10e7545e01a69a8236a6e8fff9e6971b9889bcd7ae66d8b24a5126682a4b563e6e0c27234c527eb69d35b42b44e0378dc1afda3061018435e149c6f75fb4d940d55e1255f833c249f51ef9debdff54c685ce487fe5a78622175d2ccbd941bae809eedace0e7c5f1086ba793bf4ca2d011c7b0d7e86d73578cd0f843259625f27086d5c73c33c5e049434d1a839279f56a7bd9d2a9c6bd172a828e53d32553cd55aaec5759094aed0b0f8ad8ebc53d6d0d537aab9e81f57b52ec16986f5e704286ce3d2d529c12020227d212d622c13f1150eff5b454e8405f1e04a8d8f816bae520e07107cccb82cb0484277f15256408a5a8c549db1b2c462b608b32a698cafc6d1fb4c3b88a1de6596f849b98f02e59fc8bfea9b333f8a9a1195fc65dc5c5a3900425d39e4a8557c1096c6dcb737ee34ba9bac61a084ee5ae7abb66bd6abe2fd4bffec0ab2a1e1d9e2f5417f7ece9eb3a22295c7a57c1f8ce3cf6a2101056d1058f8375da0728c3d130034f805339b5c27251f9a41979969fc97f3ca9715b2c6861d65e73c9bcef2eaa8679af38c048b3b6c311c29831ebf11d4542c3bad99d8ee968d37ec16bb941ae5959d900a0c41e6af01a37fa2e417ae691b1d5e9b74f05408698e3de49a6e9905210334eaefc08fcff1e51f373666c5530b7ece9ee1a06b22484f9ef3621c28f05ba56ad96a48c55e696149bdce36deaa2bba4c5c6fbfbcb0e966ef14193547b5d63e33a27794d71edf2f37a0c6cfc826c0e10d6a413c4f45bf739f33bbd82c1018ac504059314dfd86b644dc8f6062491822f5afbba4d74b65e95bd93e1a56a82924ef4588b4df9bba330e90096a3c68a8609ff8ef8607f0343c6237a2b665d3b950b81cade6dd20a6ae2662ccdd538b2a705e43a1a7735a6162090824df1e17dce40214d752a0b67e777b727d18c9d2081c74345162ad816464de73782db8f0824370f23358116e7c24be1e3e18b0e6cee7487803eb2cb4bd8e029029ae90ea5de54a6fa7f00dc29f40c3a6a1a9f2db6e83525be34d1cf3833e3323cb7b486d9c330e15369f4d85cea42101ab9b015622a0d24024090e4aef0e101a6ec6d46d568f911d31975a66a8f8be9442ea9edebbbd426c0f5b67bc48904f57d333f0f588ed050e7f402b9a9b0df79525ac22b9afaa17fea267385e6a536e618cc7a2ea4a7a89362a06313be9279c203bf42319d292b18f1c6aa01bc742d4dd05a052862237637598b835e29b677becd1c44c623985ad1255ae392a5a8b468beedd641a57d1b84c886c331fcc01f6f7531c7ac473b38fe51223528cc131196d4c600e1b4186eb02f80395335909d0edf05bed13218358de128c5058bc2c973a4b4118e5eed41ae3d43b003c5eff159bfa263694b4f50afd262e0d73b9dbdc82a98c525a66621f66e72eb95e0fbcb141d2ed4fac89c7d097fe1525cacdaacadc95b68096f3b2baee921ab80fee6ea104321d2fff8ab51b161d95afc3f4d6ed5902ebffbfe1e0a8323c9f1b699157d785ce98970c64478be6beda7263ea29f169b14e9c8e5f0a73724777b591cfa4012ca86b61de9486c6e8f5d6c71a92c83bb56583a9f95816452923f3797f4b0ee3ab9cddc723672f91b4b1e7fde5563aab27c4fde4651e99d60643a39bbfd09f57d5ec41268c4d4d7163e15fa7a8f927db2511b9b4a3f963091899e1bf1cbfcfd122c788d8a68be18fca98f003c97fbb418394663fa663e9aff6c4efbcf706d29f5417aecc43663d27cc9b479571ae67f74a7b183e1388b709e25fc6e47beb354e599b736e6a76daa660c984b01db2ee20297f9bedc1f00aca03f00f83a1ff8bc8f8f556ad4f7e4c3aced9cedf658de0fedaa2c2f78de4c514c3061b583f04b87d8f0305b75e43344c9b8f5982ae97d47ba2f10706333f726cb275fc6031181b3bacf4b2a4cf3f315aa77b45b2a49fefbe6ff37cd8c86e35a40880504d6013516c8e9ff46255b69a7244849bafb21f9a56b6df9dc340106c2e0104dd8298f35ddfc0d3f7a7840f2698886d8c01f6134f00e49d9f2b60f6c683ab7a128b90c09548171934c39736baf215733a0d865f949cd6c31a0efaedef672872cee2af30eb981347e0d8793c10fc0594fe1a07825d6e7e318bb914251", @ANYRESDEC, @ANYRES8=r7, @ANYBLOB="358551c79cec5c1e7c221031f40e829f3ee3de3e", @ANYRES16=r5, @ANYRES8=r3, @ANYRES64, @ANYRESOCT=r4], 0x14}}, 0x4000000) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xc}, 0x58a, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) dup(0xffffffffffffffff) 3.954122102s ago: executing program 2 (id=2642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote, 0x2}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) listen(r0, 0x1a103e43) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 3.181039395s ago: executing program 2 (id=2643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="000000feffffffffffffff00fcffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r5, &(0x7f0000000040)=[{0x2, 0x1}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{}, {}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='rpc_stats_latency\x00', r0, 0x0, 0x8000}, 0x18) semop(r5, &(0x7f0000000180)=[{}, {}], 0x2) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x78, r10, 0x8, 0x70bd23, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x48}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000010}, 0x15) semctl$GETZCNT(r5, 0x0, 0xf, 0x0) r11 = fcntl$getown(r1, 0x9) fsopen(&(0x7f00000003c0)='jffs2\x00', 0x1) capset(&(0x7f0000000200)={0x20080522, r11}, &(0x7f0000000240)={0x238, 0x3, 0x2, 0x2, 0xfffffff8, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x24, 0x0, 0x501, 0x70bd28, 0x2, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x57c}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) read$FUSE(r12, &(0x7f0000002240)={0x2020}, 0x2020) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_udp_int(r12, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000100)=0x4) 3.15567622s ago: executing program 1 (id=2644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000feffffeac1efff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000087bfa100000000000007010000f8ffffffb702000008000000b7060000000000008500000017008a080c97eee4053c55ea7303044ee09c0b1ff723d803c240cbc026f890db5acd794168db572d5f942f7f8d5f38ab7a800c9f629a4638eaad71703e69f2fff072cac3c9464d2f04c25727a9fd2e2b2a17df843763bbbebfe260faadb3cc5f47777fa8037e80740d31151d42daea98ea6f78a5d168f6a3389929134c8c6f3d9c32549f566fac0c6c7ae1839b"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000feffffeac1efff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000087bfa100000000000007010000f8ffffffb702000008000000b7060000000000008500000017008a080c97eee4053c55ea7303044ee09c0b1ff723d803c240cbc026f890db5acd794168db572d5f942f7f8d5f38ab7a800c9f629a4638eaad71703e69f2fff072cac3c9464d2f04c25727a9fd2e2b2a17df843763bbbebfe260faadb3cc5f47777fa8037e80740d31151d42daea98ea6f78a5d168f6a3389929134c8c6f3d9c32549f566fac0c6c7ae1839b"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @remote, 0x0}, &(0x7f0000000240)=0xc) iopl(0x3) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f00000010c0)={[{@grpquota}]}) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f00000010c0)={[{@grpquota}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) (async) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x3, 0x5, 0x7, 0x50, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x67, 0xf4, &(0x7f0000000100)=""/244, 0x40f00, 0x44, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0x1c3e7f6b, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r4], &(0x7f0000000480)=[{0x5, 0x3, 0x7, 0x4}, {0x2, 0x4, 0x6, 0x9}, {0x5, 0x1, 0x5, 0x9}, {0x5, 0x5, 0xd, 0x3}], 0x10, 0x101, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(r4) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.023757191s ago: executing program 3 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.858534194s ago: executing program 3 (id=2646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x210, 0x9e46, &(0x7f00000006c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x98031, r0, 0xffffe000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000001040)=""/4111) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x7) 2.858246497s ago: executing program 1 (id=2647): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x5, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x5, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x6, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x4, 0xd, 0x7, 0x6, 0xe, 0x5, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xfffd, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x3, 0x7, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000800, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x400001, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0xfffffffe, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 2.811952979s ago: executing program 3 (id=2648): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000100)=[0x7], 0x0, 0x100000000000000, 0x1, 0x0, r1}}, 0x40) 2.763768189s ago: executing program 5 (id=2649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="4000000000f8ffffffffffffff00000a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chdir(&(0x7f0000000040)='./bus\x00') connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.586288797s ago: executing program 2 (id=2650): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xd, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) syz_extract_tcp_res(0x0, 0xfffffe4e, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000200), 0x35) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000006404100025bd7000fddb257a0b55bbdf25359b714a946824fdbea5dc5ae9052465a80f0ceaa467ca7078e912b31118804e0329ab6a9e4204616ae0a79235d4658fffd22370f1615749fb74342980d0d517", @ANYRES32=r7], 0x44}}, 0x20008010) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xcc, 0x60, 0x9f, '\x00', 0xfffffffffffffffc}) socket$inet6_icmp_raw(0xa, 0x3, 0x87) 2.521231195s ago: executing program 3 (id=2651): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x64000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$sequencer(r4, &(0x7f0000000080)=ANY=[], 0x9) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_create(0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0xd34, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1.959956716s ago: executing program 1 (id=2652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="85f100"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000000000030000009500"/72], 0x0, 0x7, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) lsetxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x143042, 0xfe) ftruncate(r8, 0x2008002) sendfile(r7, r8, 0x0, 0x80000001) listen(r3, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000008000000010000000000000000d01"], 0x20}}], 0x2, 0x0) 1.702061176s ago: executing program 5 (id=2653): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99eeef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580392e8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cda3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 866.332184ms ago: executing program 1 (id=2654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)={r6, r7+60000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100f70000fedbdf252b00000008000300", @ANYRES32=r10, @ANYBLOB="08009f000600000006003400d3a80000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x8884}, 0x14) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r11, 0xc008551c, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0x6, 0x0) 429.985083ms ago: executing program 5 (id=2655): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000002c0)={0x78, 0x49}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r0, 0x0) 352.891708ms ago: executing program 2 (id=2656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 222.441433ms ago: executing program 5 (id=2657): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x63, &(0x7f00000003c0)=""/99}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x1000800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x30, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff18010000f1a520e5612500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000850000000600000085100000faffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa1001271997e04900000000000070100", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000500000000000000010000002349fefff0ffffff8543080001000000bf91000000000000b7020000020000008500000084000000b70000000000"], 0x0, 0xffff, 0xa8, &(0x7f0000000600)=""/168, 0x41000, 0x53, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x3, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002"], 0x28}}, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x3, 0x1}) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000054000000040000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 221.454544ms ago: executing program 0 (id=2658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/bnep\x00') writev(r5, &(0x7f00000002c0), 0x0) 0s ago: executing program 2 (id=2659): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="042f"], 0x3fc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x41, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0x3, 0x7, 0x80000000, 0x0, 0xffffffffffffffff, 0x6, 0x9, 0x100, 0x4, 0x2, 0x1, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000000)={0x6, 0xe, 0xe, 0x5, 0xf, 0xa, 0x0, 0xa4d, 0x9, 0x2, 0x7fffffffffffffff, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x101, 0xfffffffffffffffa, 0x0, 0x5, 0x208, 0x7, 0x3, 0x7ff}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x6, 0xe, 0xe, 0x5, 0xf, 0xa, 0x0, 0xa4d, 0x9, 0x2, 0x7fffffffffffffff, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x101, 0xfffffffffffffffa, 0x0, 0x5, 0x208, 0x7, 0x3, 0x7ff}) kernel console output (not intermixed with test programs): 1 limit=0 [ 712.380226][ T29] audit: type=1400 audit(1738865851.425:1933): avc: denied { name_bind 0x1000000 } for pid=15132 comm="syz.2.2314" path="socket:[39991]" dev="sockfs" ino=39991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.499579][T15156] syz.3.2319: attempt to access beyond end of device [ 712.499579][T15156] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 712.512916][ T5929] m920x_read = error: -19 [ 712.517283][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 712.538330][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 712.541804][T15157] lo speed is unknown, defaulting to 1000 [ 712.561161][ T5929] usb 3-1: USB disconnect, device number 78 [ 712.656359][T15156] syz.3.2319: attempt to access beyond end of device [ 712.656359][T15156] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 712.679911][T15169] netlink: 948 bytes leftover after parsing attributes in process `syz.1.2322'. [ 712.694700][ T9] m920x_read = error: -19 [ 712.699097][ T9] dvb-usb: error -19 while querying for an remote control event. [ 712.908470][ T5929] m920x_read = error: -19 [ 712.913007][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 713.496723][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 713.507162][T15156] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 713.514952][T15156] UDF-fs: Scanning with blocksize 512 failed [ 713.533400][T15156] syz.3.2319: attempt to access beyond end of device [ 713.533400][T15156] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 713.555417][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 713.587554][T15156] syz.3.2319: attempt to access beyond end of device [ 713.587554][T15156] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 713.601583][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 713.692123][ T5929] m920x_read = error: -19 [ 713.699166][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 713.714577][T15156] syz.3.2319: attempt to access beyond end of device [ 713.714577][T15156] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 713.728136][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 713.738130][T15156] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 713.746149][T15156] UDF-fs: Scanning with blocksize 1024 failed [ 713.753115][T15156] syz.3.2319: attempt to access beyond end of device [ 713.753115][T15156] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 713.767197][T15156] syz.3.2319: attempt to access beyond end of device [ 713.767197][T15156] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 713.780673][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 713.790596][T15156] syz.3.2319: attempt to access beyond end of device [ 713.790596][T15156] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 713.803835][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 713.813576][T15156] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 713.821351][T15156] UDF-fs: Scanning with blocksize 2048 failed [ 713.828032][T15156] syz.3.2319: attempt to access beyond end of device [ 713.828032][T15156] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 713.841375][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 713.859905][T15156] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 713.870636][ T5929] m920x_read = error: -19 [ 713.878276][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 713.879841][T15177] lo speed is unknown, defaulting to 1000 [ 713.886784][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 713.903535][ T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 713.924118][T15156] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 713.967170][T15184] overlayfs: failed to clone upperpath [ 713.976798][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.985759][T15156] UDF-fs: Scanning with blocksize 4096 failed [ 713.996490][T15156] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 714.006882][ T9] usb 6-1: config 0 descriptor?? [ 714.024028][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 714.064069][ T5929] m920x_read = error: -19 [ 714.068606][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 714.255517][ T5929] m920x_read = error: -19 [ 714.260028][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 714.438671][ T5929] m920x_read = error: -19 [ 714.443124][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 714.629686][ T5924] m920x_read = error: -19 [ 714.634661][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 714.673499][T15193] team0: Port device gtp1 added [ 715.315214][ T5924] m920x_read = error: -19 [ 715.319606][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 715.519483][ T5924] m920x_read = error: -19 [ 715.524171][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 715.744543][ T5924] m920x_read = error: -19 [ 715.748944][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 716.500844][ T5924] m920x_read = error: -19 [ 717.217546][ T9] gspca_vc032x: reg_w err -110 [ 717.222642][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.232172][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 717.259566][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.269641][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.278571][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.291586][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.297771][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.316497][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.327983][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.339033][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.353476][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.365603][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.378875][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.384235][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.402131][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.432236][ T5924] m920x_read = error: -19 [ 717.436638][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 717.445327][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.450644][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.556707][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.573748][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 717.585877][ T9] gspca_vc032x: Unknown sensor... [ 717.606138][ T9] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 717.703406][ T25] usb 6-1: USB disconnect, device number 35 [ 717.723198][ T9] m920x_read = error: -19 [ 717.727644][ T9] dvb-usb: error -19 while querying for an remote control event. [ 717.861991][T15218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15218 comm=syz.5.2337 [ 717.944977][ T9] m920x_read = error: -19 [ 717.952703][ T9] dvb-usb: error -19 while querying for an remote control event. [ 718.004657][T15223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2337'. [ 718.041202][T15222] overlayfs: missing 'lowerdir' [ 718.147151][ T9] m920x_read = error: -19 [ 718.153976][ T9] dvb-usb: error -19 while querying for an remote control event. [ 718.168620][T15228] overlay: ./file0 is not a directory [ 718.329137][ T9] m920x_read = error: -19 [ 718.334830][ T9] dvb-usb: error -19 while querying for an remote control event. [ 718.521319][ T9] m920x_read = error: -19 [ 718.526866][ T9] dvb-usb: error -19 while querying for an remote control event. [ 718.542156][ T25] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 718.550768][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.557253][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 718.702853][ T9] m920x_read = error: -19 [ 718.709522][ T9] dvb-usb: error -19 while querying for an remote control event. [ 718.726092][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 718.753800][ T25] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 718.770722][ T25] usb 4-1: config 5 has no interface number 0 [ 718.777550][ T25] usb 4-1: config 5 interface 52 has no altsetting 0 [ 718.795906][ T25] usb 4-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=97.1d [ 718.806032][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.823234][ T25] usb 4-1: Product: syz [ 718.828111][ T25] usb 4-1: Manufacturer: syz [ 718.836200][ T25] usb 4-1: SerialNumber: syz [ 718.836233][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2344'. [ 718.907191][ T9] m920x_read = error: -19 [ 718.918849][ T9] dvb-usb: error -19 while querying for an remote control event. [ 719.057883][T15244] overlayfs: failed to clone upperpath [ 719.069385][ T25] usb 4-1: Could not find all expected endpoints [ 719.105561][ T25] usb 4-1: USB disconnect, device number 97 [ 719.109048][ T9] m920x_read = error: -19 [ 719.126942][ T9] dvb-usb: error -19 while querying for an remote control event. [ 719.225727][ T29] audit: type=1326 audit(1738865857.851:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 719.302655][ T29] audit: type=1326 audit(1738865857.851:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 719.326207][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.456762][ T5924] m920x_read = error: -19 [ 719.483367][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 719.820196][T15258] netlink: 900 bytes leftover after parsing attributes in process `syz.1.2350'. [ 719.861327][ T9] m920x_read = error: -19 [ 719.866341][ T9] dvb-usb: error -19 while querying for an remote control event. [ 719.876067][ T29] audit: type=1326 audit(1738865857.880:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 719.900217][ T29] audit: type=1326 audit(1738865857.880:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 719.924494][ T29] audit: type=1326 audit(1738865857.880:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 719.948023][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.039601][ T9] m920x_read = error: -19 [ 720.086454][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2349'. [ 720.185871][ T9] dvb-usb: error -19 while querying for an remote control event. [ 720.216901][ T29] audit: type=1326 audit(1738865857.880:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 720.523689][T15264] bridge0: entered promiscuous mode [ 720.696754][ T9] m920x_read = error: -19 [ 720.701167][ T9] dvb-usb: error -19 while querying for an remote control event. [ 720.784170][ T29] audit: type=1326 audit(1738865857.880:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 720.825695][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 720.948056][ T5924] m920x_read = error: -19 [ 720.953786][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 720.984894][ T29] audit: type=1326 audit(1738865857.880:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 721.203993][ T9] m920x_read = error: -19 [ 721.208408][ T9] dvb-usb: error -19 while querying for an remote control event. [ 721.253682][T15272] input: syz0 as /devices/virtual/input/input34 [ 721.316028][ T29] audit: type=1326 audit(1738865857.880:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 721.339564][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.461171][ T9] m920x_read = error: -19 [ 721.465594][ T9] dvb-usb: error -19 while querying for an remote control event. [ 721.662035][ T29] audit: type=1326 audit(1738865857.880:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e86f8cde9 code=0x7ffc0000 [ 722.253422][ T9] m920x_read = error: -19 [ 722.257807][ T9] dvb-usb: error -19 while querying for an remote control event. [ 722.325482][T15287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2357'. [ 722.466078][ T9] m920x_read = error: -19 [ 722.470502][ T9] dvb-usb: error -19 while querying for an remote control event. [ 722.733572][ T9] m920x_read = error: -19 [ 722.738003][ T9] dvb-usb: error -19 while querying for an remote control event. [ 723.608852][ T9] m920x_read = error: -19 [ 723.767775][ T9] dvb-usb: error -19 while querying for an remote control event. [ 723.844921][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 723.876684][ T75] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 723.883745][ T75] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 723.973481][ T9] m920x_read = error: -19 [ 723.977940][ T9] dvb-usb: error -19 while querying for an remote control event. [ 724.411012][ T5861] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 724.973475][ T5929] m920x_read = error: -19 [ 724.980776][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 725.571281][T15319] overlayfs: failed to clone upperpath [ 725.577982][T15322] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 725.590817][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.642513][ T5861] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 725.674041][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.703539][ T5861] usb 4-1: Product: syz [ 725.731899][ T5861] usb 4-1: Manufacturer: syz [ 725.759069][ T5861] usb 4-1: SerialNumber: syz [ 725.779986][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 725.887284][ T5861] usb 4-1: config 0 descriptor?? [ 725.913036][ T5861] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 725.951243][ T9] m920x_read = error: -19 [ 725.955664][ T9] dvb-usb: error -19 while querying for an remote control event. [ 726.164860][ T5929] m920x_read = error: -19 [ 726.184837][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 726.194864][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 726.201389][ T75] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 726.207602][ T75] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 726.720960][T15337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2368'. [ 726.873976][ T9] m920x_read = error: -19 [ 726.984813][ T9] dvb-usb: error -19 while querying for an remote control event. [ 727.383779][ T9] m920x_read = error: -19 [ 727.403045][ T9] dvb-usb: error -19 while querying for an remote control event. [ 727.629136][ T9] m920x_read = error: -19 [ 727.633798][ T9] dvb-usb: error -19 while querying for an remote control event. [ 727.832672][ T5929] m920x_read = error: -19 [ 727.837395][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 727.949803][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 728.222810][ T5929] m920x_read = error: -19 [ 728.227262][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 728.492908][ T5924] m920x_read = error: -19 [ 728.498210][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 728.503471][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 728.513749][ T9] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 728.534603][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.343817][ T5861] gspca_stk1135: reg_w 0x200 err -110 [ 729.362680][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 729.381535][ T5861] gspca_stk1135: Sensor write failed [ 729.397318][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 729.560756][ T5924] m920x_read = error: -19 [ 729.565328][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 729.582570][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 729.696271][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.957236][ T5861] gspca_stk1135: Sensor write failed [ 729.965525][ T5924] m920x_read = error: -19 [ 729.980015][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 730.020149][ T5861] gspca_stk1135: Sensor read failed [ 730.026366][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 730.032732][ T5861] gspca_stk1135: Sensor read failed [ 730.037011][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 730.056183][ T9] usb 6-1: Product: syz [ 730.060415][ T9] usb 6-1: Manufacturer: syz [ 730.065043][ T9] usb 6-1: SerialNumber: syz [ 730.092845][ T9] usb 6-1: config 0 descriptor?? [ 730.109842][ T5861] gspca_stk1135: Detected sensor type unknown (0x0) [ 730.141256][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 730.238121][ T9] m920x_read = error: -19 [ 730.242547][ T9] dvb-usb: error -19 while querying for an remote control event. [ 730.311323][ T5861] gspca_stk1135: Sensor read failed [ 730.316934][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 730.323381][ T5861] gspca_stk1135: Sensor read failed [ 730.328643][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 730.335234][ T5861] gspca_stk1135: Sensor write failed [ 730.341012][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 730.356053][ T25] usb 6-1: USB disconnect, device number 36 [ 730.375099][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 730.375121][ T29] audit: type=1400 audit(1738865868.281:1973): avc: denied { bind } for pid=15373 comm="syz.2.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 730.418727][ T5861] gspca_stk1135: Sensor write failed [ 730.485930][T15376] macvlan0: entered allmulticast mode [ 730.491465][T15376] veth1_vlan: entered allmulticast mode [ 730.504901][T15376] macvlan0: left allmulticast mode [ 730.510100][T15376] veth1_vlan: left allmulticast mode [ 730.951007][ T9] m920x_read = error: -19 [ 730.970882][ T9] dvb-usb: error -19 while querying for an remote control event. [ 730.975978][ T5861] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 731.000446][T15374] dlm: no locking on control device [ 731.012402][ T5861] usb 4-1: USB disconnect, device number 98 [ 731.167571][ T9] m920x_read = error: -19 [ 731.171975][ T9] dvb-usb: error -19 while querying for an remote control event. [ 731.360598][ T9] m920x_read = error: -19 [ 731.365020][ T9] dvb-usb: error -19 while querying for an remote control event. [ 731.639142][ T9] m920x_read = error: -19 [ 731.644077][ T9] dvb-usb: error -19 while querying for an remote control event. [ 731.682637][T15401] SELinux: Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped). [ 731.702002][ T29] audit: type=1400 audit(1738865869.507:1974): avc: denied { relabelfrom } for pid=15393 comm="syz.1.2386" name="ALG" dev="sockfs" ino=40333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 731.841777][ T29] audit: type=1400 audit(1738865869.553:1975): avc: denied { relabelto } for pid=15393 comm="syz.1.2386" name="ALG" dev="sockfs" ino=40333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=alg_socket permissive=1 trawcon="system_u:object_r:ifconfig_exec_t:s0" [ 732.213844][ T9] m920x_read = error: -19 [ 732.218882][ T9] dvb-usb: error -19 while querying for an remote control event. [ 732.472624][ T9] m920x_read = error: -19 [ 732.477062][ T9] dvb-usb: error -19 while querying for an remote control event. [ 732.685061][ T29] audit: type=1400 audit(1738865870.433:1976): avc: denied { read } for pid=15406 comm="syz.5.2389" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 732.686127][ T9] m920x_read = error: -19 [ 732.749201][ T9] dvb-usb: error -19 while querying for an remote control event. [ 732.974911][ T5929] m920x_read = error: -19 [ 732.979459][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 733.167413][ T5929] m920x_read = error: -19 [ 733.172129][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 733.182988][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 733.370474][ T5929] m920x_read = error: -19 [ 733.375065][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 733.380263][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 733.423313][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 733.432444][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.533340][ T9] usb 3-1: config 0 descriptor?? [ 733.822276][ T5929] m920x_read = error: -19 [ 733.829625][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 733.842648][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 734.042613][ T5929] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 734.183230][ T8] m920x_read = error: -19 [ 734.188498][ T8] dvb-usb: error -19 while querying for an remote control event. [ 734.363105][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short [ 734.401539][ T8] m920x_read = error: -19 [ 734.406227][ T9] gspca_sunplus: reg_w_riv err -110 [ 734.421020][ T5929] usb 6-1: config 5 has an invalid interface number: 52 but max is 0 [ 734.430199][ T8] dvb-usb: error -19 while querying for an remote control event. [ 734.439980][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 734.463728][ T5929] usb 6-1: config 5 has no interface number 0 [ 734.469929][ T5929] usb 6-1: config 5 interface 52 has no altsetting 0 [ 734.610476][ T9] m920x_read = error: -19 [ 734.624432][ T9] dvb-usb: error -19 while querying for an remote control event. [ 734.645936][ T5929] usb 6-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=97.1d [ 734.679465][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.697695][ T5929] usb 6-1: Product: syz [ 734.701983][ T5929] usb 6-1: Manufacturer: syz [ 734.717466][ T5929] usb 6-1: SerialNumber: syz [ 734.744492][ T25] usb 3-1: USB disconnect, device number 79 [ 734.800359][T15450] overlayfs: failed to clone upperpath [ 734.828931][ T9] m920x_read = error: -19 [ 734.833795][ T9] dvb-usb: error -19 while querying for an remote control event. [ 734.875366][T15323] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 734.976229][ T5929] usb 6-1: Could not find all expected endpoints [ 735.006468][ T5929] usb 6-1: USB disconnect, device number 37 [ 735.027921][ T9] m920x_read = error: -19 [ 735.032392][ T9] dvb-usb: error -19 while querying for an remote control event. [ 735.168586][T15323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.183850][T15323] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 735.195749][T15323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.209754][ T9] m920x_read = error: -19 [ 735.214652][ T9] dvb-usb: error -19 while querying for an remote control event. [ 735.728709][ T5929] m920x_read = error: -19 [ 735.728952][T15323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.743460][T15323] usb 4-1: Product: syz [ 735.743467][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 735.755767][T15323] usb 4-1: Manufacturer: syz [ 735.760394][T15323] usb 4-1: SerialNumber: syz [ 735.914777][ T5929] m920x_read = error: -19 [ 735.919314][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 735.939921][ T29] audit: type=1400 audit(1738865873.491:1977): avc: denied { name_connect } for pid=15459 comm="syz.2.2401" dest=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 736.017639][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 736.107632][ T9] m920x_read = error: -19 [ 736.112103][ T9] dvb-usb: error -19 while querying for an remote control event. [ 736.282491][ T29] audit: type=1400 audit(1738865873.809:1978): avc: denied { create } for pid=15468 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 736.311206][ T9] m920x_read = error: -19 [ 736.315840][ T9] dvb-usb: error -19 while querying for an remote control event. [ 736.326371][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2403'. [ 736.376155][ T29] audit: type=1400 audit(1738865873.866:1979): avc: denied { connect } for pid=15468 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 736.403323][ T29] audit: type=1400 audit(1738865873.922:1980): avc: denied { bind } for pid=15468 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 736.503034][ T8] m920x_read = error: -19 [ 736.509693][ T8] dvb-usb: error -19 while querying for an remote control event. [ 736.695967][ T8] m920x_read = error: -19 [ 736.701901][ T8] dvb-usb: error -19 while querying for an remote control event. [ 736.710058][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 736.878297][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.901843][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.920647][ T8] m920x_read = error: -19 [ 736.931589][ T8] dvb-usb: error -19 while querying for an remote control event. [ 736.946056][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 736.956796][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 736.966324][ T9] usb 6-1: SerialNumber: syz [ 737.112066][ T5929] m920x_read = error: -19 [ 737.120856][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 737.220503][ T9] usb 6-1: 0:2 : does not exist [ 737.252784][ T9] usb 6-1: USB disconnect, device number 38 [ 737.305017][ T5929] m920x_read = error: -19 [ 737.319818][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 737.456048][T12662] udevd[12662]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.497057][ T9] m920x_read = error: -19 [ 737.501534][ T9] dvb-usb: error -19 while querying for an remote control event. [ 737.683848][T15445] ceph: No mds server is up or the cluster is laggy [ 737.688917][ T9] m920x_read = error: -19 [ 737.709782][ T9] dvb-usb: error -19 while querying for an remote control event. [ 737.822872][T15323] usb 4-1: USB disconnect, device number 99 [ 737.924863][ T9] m920x_read = error: -19 [ 737.938480][ T9] dvb-usb: error -19 while querying for an remote control event. [ 738.270541][ T9] m920x_read = error: -19 [ 738.289425][ T9] dvb-usb: error -19 while querying for an remote control event. [ 738.533679][ T9] m920x_read = error: -19 [ 738.538067][ T9] dvb-usb: error -19 while querying for an remote control event. [ 738.616537][T15501] afs: Bad value for 'source' [ 738.626055][T15501] kAFS: No cell specified [ 738.779635][ T9] m920x_read = error: -19 [ 738.784023][ T9] dvb-usb: error -19 while querying for an remote control event. [ 738.883008][ T29] audit: type=1800 audit(1738865876.241:1981): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2409" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 738.917512][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 738.929178][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 739.004185][ T9] m920x_read = error: -19 [ 739.008851][ T9] dvb-usb: error -19 while querying for an remote control event. [ 739.370727][ T9] m920x_read = error: -19 [ 739.407897][ T9] dvb-usb: error -19 while querying for an remote control event. [ 739.754293][ T9] m920x_read = error: -19 [ 739.758683][ T9] dvb-usb: error -19 while querying for an remote control event. [ 739.933858][ T9] m920x_read = error: -19 [ 739.938299][ T9] dvb-usb: error -19 while querying for an remote control event. [ 740.040726][T15323] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 740.190980][ T9] m920x_read = error: -19 [ 740.195413][ T9] dvb-usb: error -19 while querying for an remote control event. [ 740.233209][T15323] usb 4-1: Using ep0 maxpacket: 16 [ 740.241034][T15323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.255455][T15323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.273618][T15323] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 740.295352][ T29] audit: type=1400 audit(1738865877.560:1982): avc: denied { accept } for pid=15522 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 740.372777][ T9] m920x_read = error: -19 [ 740.377197][ T9] dvb-usb: error -19 while querying for an remote control event. [ 740.443531][T15323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.468969][T15323] usb 4-1: config 0 descriptor?? [ 740.629490][ T9] m920x_read = error: -19 [ 740.641091][ T9] dvb-usb: error -19 while querying for an remote control event. [ 740.853896][ T8] m920x_read = error: -19 [ 740.858480][ T8] dvb-usb: error -19 while querying for an remote control event. [ 740.962377][T15511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.046247][ T8] m920x_read = error: -19 [ 741.055218][ T8] dvb-usb: error -19 while querying for an remote control event. [ 741.078101][T15511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.213523][T15323] usbhid 4-1:0.0: can't add hid device: -71 [ 741.227621][T15323] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 741.278442][T15323] usb 4-1: USB disconnect, device number 100 [ 741.292234][ T8] m920x_read = error: -19 [ 741.305205][ T8] dvb-usb: error -19 while querying for an remote control event. [ 741.527810][ T8] m920x_read = error: -19 [ 741.535650][ T8] dvb-usb: error -19 while querying for an remote control event. [ 741.730555][T15323] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 742.111384][ T8] m920x_read = error: -19 [ 742.141535][ T8] dvb-usb: error -19 while querying for an remote control event. [ 742.309044][T15323] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 742.338981][T15323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.374779][T15323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 742.421140][T15323] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 742.450661][T15323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.499734][ T8] m920x_read = error: -19 [ 742.515497][T15323] usb 4-1: config 0 descriptor?? [ 742.623840][ T8] dvb-usb: error -19 while querying for an remote control event. [ 742.759773][T15323] wacom 0003:056A:0317.001E: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 742.773561][T15323] wacom 0003:056A:0317.001E: hidraw0: USB HID vff.ff Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 742.792816][T15323] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.001E/input/input35 [ 742.969063][T15323] usb 4-1: USB disconnect, device number 101 [ 743.004803][ T29] audit: type=1326 audit(1738865880.020:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15547 comm="syz.5.2423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e86f8cde9 code=0x0 [ 743.027748][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.142481][ T8] m920x_read = error: -19 [ 743.146967][ T8] dvb-usb: error -19 while querying for an remote control event. [ 743.334010][ T8] m920x_read = error: -19 [ 743.346921][ T8] dvb-usb: error -19 while querying for an remote control event. [ 743.708217][ T8] m920x_read = error: -19 [ 743.718818][ T8] dvb-usb: error -19 while querying for an remote control event. [ 743.902133][ T8] m920x_read = error: -19 [ 743.906901][ T8] dvb-usb: error -19 while querying for an remote control event. [ 744.093244][ T8] m920x_read = error: -19 [ 744.097737][ T8] dvb-usb: error -19 while querying for an remote control event. [ 744.107741][T15563] netlink: 'syz.1.2429': attribute type 4 has an invalid length. [ 744.170105][T15565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2427'. [ 744.285802][ T9] m920x_read = error: -19 [ 744.290305][ T9] dvb-usb: error -19 while querying for an remote control event. [ 744.387063][T15563] netlink: 'syz.1.2429': attribute type 4 has an invalid length. [ 744.499333][ T8] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 744.520607][ T9] m920x_read = error: -19 [ 744.525305][ T9] dvb-usb: error -19 while querying for an remote control event. [ 744.627402][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 744.636024][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 744.724001][ T9] m920x_read = error: -19 [ 744.730250][ T9] dvb-usb: error -19 while querying for an remote control event. [ 744.809393][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 744.896333][ T8] usb 3-1: config 0 has an invalid interface number: 15 but max is 1 [ 744.916080][ T8] usb 3-1: config 0 has an invalid interface number: 10 but max is 1 [ 744.924248][ T8] usb 3-1: config 0 has no interface number 0 [ 744.931362][ T9] m920x_read = error: -19 [ 744.935725][ T9] dvb-usb: error -19 while querying for an remote control event. [ 744.949383][ T8] usb 3-1: config 0 has no interface number 1 [ 744.955542][ T8] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 744.967626][ T8] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 744.995799][ T8] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 745.168196][ T9] m920x_read = error: -19 [ 745.173761][ T9] dvb-usb: error -19 while querying for an remote control event. [ 745.185190][ T8] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10a4, bcdDevice=1e.d2 [ 745.195041][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.204033][ T8] usb 3-1: Product: syz [ 745.209083][ T8] usb 3-1: Manufacturer: syz [ 745.213701][ T8] usb 3-1: SerialNumber: syz [ 745.222882][ T8] usb 3-1: config 0 descriptor?? [ 745.231714][ T8] option 3-1:0.15: GSM modem (1-port) converter detected [ 745.749750][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 745.757008][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 745.794732][ T9] m920x_read = error: -19 [ 745.811712][ T9] dvb-usb: error -19 while querying for an remote control event. [ 745.988187][ T8] usb 3-1: USB disconnect, device number 80 [ 746.076930][ T9] m920x_read = error: -19 [ 746.085664][ T8] option 3-1:0.15: device disconnected [ 746.102828][ T9] dvb-usb: error -19 while querying for an remote control event. [ 746.146074][ T25] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 746.311673][ T9] m920x_read = error: -19 [ 746.329420][ T9] dvb-usb: error -19 while querying for an remote control event. [ 746.471399][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.680304][ T9] m920x_read = error: -19 [ 746.684702][ T9] dvb-usb: error -19 while querying for an remote control event. [ 746.750307][ T9] libceph: connect (1)[c::]:6789 error -101 [ 746.844355][ T25] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 746.853718][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.853963][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.906320][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 746.912836][ T9] libceph: connect (1)[c::]:6789 error -101 [ 746.919690][ T8] m920x_read = error: -19 [ 746.924054][ T8] dvb-usb: error -19 while querying for an remote control event. [ 746.933877][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 746.967868][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.000908][ T25] usb 6-1: Product: syz [ 747.014193][ T25] usb 6-1: Manufacturer: syz [ 747.018736][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 747.028404][ T25] usb 6-1: SerialNumber: syz [ 747.039847][T15607] lo speed is unknown, defaulting to 1000 [ 747.046035][ T25] usb 6-1: config 0 descriptor?? [ 747.050419][ T25] option 6-1:0.0: GSM modem (1-port) converter detected [ 747.107761][ T9] m920x_read = error: -19 [ 747.112171][ T9] dvb-usb: error -19 while querying for an remote control event. [ 747.204586][ T9] libceph: connect (1)[c::]:6789 error -101 [ 747.219767][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 747.227346][ T8] libceph: connect (1)[c::]:6789 error -101 [ 747.233432][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 747.265119][T15598] ceph: No mds server is up or the cluster is laggy [ 747.265119][T15599] ceph: No mds server is up or the cluster is laggy [ 747.300919][ T5929] m920x_read = error: -19 [ 747.305333][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 747.322146][ T8] usb 6-1: USB disconnect, device number 39 [ 747.340661][ T8] option 6-1:0.0: device disconnected [ 747.404174][T15614] netlink: 'syz.0.2440': attribute type 1 has an invalid length. [ 747.450585][T15614] netlink: 'syz.0.2440': attribute type 9 has an invalid length. [ 747.514577][ T5929] m920x_read = error: -19 [ 747.518990][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 747.527987][T15614] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2440'. [ 747.716697][ T8] m920x_read = error: -19 [ 747.721180][ T8] dvb-usb: error -19 while querying for an remote control event. [ 747.909478][ T5929] m920x_read = error: -19 [ 747.913922][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 747.972786][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 747.980050][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 748.066047][ T29] audit: type=1400 audit(1738865884.819:1984): avc: denied { name_bind } for pid=15628 comm="syz.2.2445" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 748.099830][ T5929] m920x_read = error: -19 [ 748.118825][ T8] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 748.128042][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 748.394571][ T5929] m920x_read = error: -19 [ 748.399539][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 748.424156][ T8] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 748.435292][ T8] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.450522][ T8] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 748.733196][ T29] audit: type=1400 audit(1738865885.399:1985): avc: denied { cmd } for pid=15632 comm="syz.5.2446" path="socket:[40668]" dev="sockfs" ino=40668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 749.045195][ T5929] m920x_read = error: -19 [ 749.049924][ T8] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 749.060031][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 749.076352][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 749.083675][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 749.217255][ T8] usb 4-1: Manufacturer: syz [ 749.226703][ T8] usb 4-1: SerialNumber: syz [ 749.372348][T15643] lo speed is unknown, defaulting to 1000 [ 749.384857][ T5929] m920x_read = error: -19 [ 749.389270][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 749.444247][T15647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2449'. [ 749.550382][ T8] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 749.566556][ T5929] m920x_read = error: -19 [ 749.570940][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 749.585739][ T8] usb 4-1: USB disconnect, device number 102 [ 749.780773][ T9] m920x_read = error: -19 [ 749.785198][ T9] dvb-usb: error -19 while querying for an remote control event. [ 749.972857][ T5929] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 749.994276][ T9] m920x_read = error: -19 [ 749.998701][ T9] dvb-usb: error -19 while querying for an remote control event. [ 750.112111][ T5929] usb 6-1: device descriptor read/64, error -71 [ 750.196882][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 750.197405][ T9] m920x_read = error: -19 [ 750.204018][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 750.218784][ T8] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 750.278721][ T9] dvb-usb: error -19 while querying for an remote control event. [ 750.378613][ T5929] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 750.423580][ T8] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 750.443165][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.463111][ T8] usb 3-1: config 0 descriptor?? [ 750.486175][ T5924] m920x_read = error: -19 [ 750.490565][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 750.522573][ T5929] usb 6-1: device descriptor read/64, error -71 [ 750.648004][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 750.657374][ T5929] usb usb6-port1: attempt power cycle [ 750.678301][ T5924] m920x_read = error: -19 [ 750.682723][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 750.749958][T15673] team0: No ports can be present during mode change [ 750.829571][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.841096][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 750.850735][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.860424][ T5924] m920x_read = error: -19 [ 750.864786][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 750.876997][ T9] usb 4-1: config 0 descriptor?? [ 751.030825][ T5929] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 751.052592][ T5924] m920x_read = error: -19 [ 751.057060][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 751.066157][ T5929] usb 6-1: device descriptor read/8, error -71 [ 751.234321][ T5924] m920x_read = error: -19 [ 751.242997][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 751.297977][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.305182][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.440053][ T5929] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 751.459936][ T9] elecom 0003:056E:00E6.001F: item fetching failed at offset 0/69 [ 751.589187][ T5873] m920x_read = error: -19 [ 751.596374][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 751.616555][ T9] elecom 0003:056E:00E6.001F: probe with driver elecom failed with error -22 [ 751.636541][ T5929] usb 6-1: device descriptor read/8, error -71 [ 751.661459][ T8] usb 3-1: Cannot set autoneg [ 751.672290][ T8] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 751.689366][T15671] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2455'. [ 751.829680][ T9] m920x_read = error: -19 [ 751.837853][ T5929] usb usb6-port1: unable to enumerate USB device [ 751.846438][ T9] dvb-usb: error -19 while querying for an remote control event. [ 752.401404][T15691] macvlan0: entered allmulticast mode [ 752.407985][T15691] veth1_vlan: entered allmulticast mode [ 752.420542][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 752.421312][T15691] macvlan0: left allmulticast mode [ 752.427752][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 752.433361][T15691] veth1_vlan: left allmulticast mode [ 752.676403][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.892241][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.902489][ T8] usb 3-1: USB disconnect, device number 81 [ 752.994912][T15323] usb 4-1: USB disconnect, device number 103 [ 753.034434][T15698] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2461'. [ 753.126574][ T5929] m920x_read = error: -19 [ 753.131130][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 753.230882][T15706] tmpfs: Unknown parameter 'usrqlimit' [ 753.308296][ T5929] m920x_read = error: -19 [ 753.312709][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 753.351162][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 753.495120][ T5929] m920x_read = error: -19 [ 753.499518][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 753.522094][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 753.532322][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 753.533142][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 753.539569][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 753.556851][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.584989][ T9] usb 6-1: Product: syz [ 753.593226][ T9] usb 6-1: Manufacturer: syz [ 753.610250][ T9] usb 6-1: SerialNumber: syz [ 753.621935][ T9] usb 6-1: config 0 descriptor?? [ 753.644941][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 753.672010][ T5929] m920x_read = error: -19 [ 753.676806][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 753.728360][T15715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.753314][T15715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.895143][T15720] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 753.979721][ T5929] m920x_read = error: -19 [ 753.985441][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 754.261496][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2471'. [ 754.302660][ T5929] m920x_read = error: -19 [ 754.309934][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 754.633462][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 754.640735][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 755.068361][ T9] gspca_sonixj: reg_w1 err -110 [ 755.074142][ T5929] m920x_read = error: -19 [ 755.078490][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 755.087080][ T5873] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 755.095508][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 755.745341][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 755.752612][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 756.134547][ T9] m920x_read = error: -19 [ 756.139701][ T9] dvb-usb: error -19 while querying for an remote control event. [ 756.216239][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 756.223232][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.234091][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 756.867864][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 756.875025][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 756.983249][T15728] macvlan0: entered allmulticast mode [ 756.989339][T15728] veth1_vlan: entered allmulticast mode [ 756.995423][T15728] macvlan0: left allmulticast mode [ 757.001267][T15728] veth1_vlan: left allmulticast mode [ 757.265395][ T9] m920x_read = error: -19 [ 757.269818][ T9] dvb-usb: error -19 while querying for an remote control event. [ 757.278176][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 757.338536][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 757.357149][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 757.378161][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 757.390471][ T9] usb 6-1: USB disconnect, device number 44 [ 757.505040][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 757.521892][ T8] m920x_read = error: -19 [ 757.531080][ T8] dvb-usb: error -19 while querying for an remote control event. [ 757.567628][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 757.622128][ T5873] usb 4-1: string descriptor 0 read error: -71 [ 757.650541][ T5873] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 757.691461][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.734146][ T9] m920x_read = error: -19 [ 757.738615][ T9] dvb-usb: error -19 while querying for an remote control event. [ 757.751135][ T5873] usb 4-1: config 0 descriptor?? [ 757.780010][ T5873] usb 4-1: can't set config #0, error -71 [ 757.818893][ T5873] usb 4-1: USB disconnect, device number 104 [ 757.937319][ T9] m920x_read = error: -19 [ 757.941723][ T9] dvb-usb: error -19 while querying for an remote control event. [ 757.968971][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 757.976106][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 758.205724][ T9] m920x_read = error: -19 [ 758.210118][ T9] dvb-usb: error -19 while querying for an remote control event. [ 758.591647][ T5873] m920x_read = error: -19 [ 758.596054][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 758.825028][ T5873] m920x_read = error: -19 [ 758.829440][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 759.038303][ T5873] m920x_read = error: -19 [ 759.042808][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 759.073408][T15769] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2481'. [ 759.083415][T15769] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2481'. [ 759.091434][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 759.099499][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 759.633596][ T5873] m920x_read = error: -19 [ 759.643103][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 759.834849][ T5873] m920x_read = error: -19 [ 759.839294][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 760.064972][ T5873] m920x_read = error: -19 [ 760.086234][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 760.203299][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 760.210568][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 760.235388][ T25] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 760.257935][ T5873] m920x_read = error: -19 [ 760.265351][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 760.389037][T15786] macvlan0: entered allmulticast mode [ 760.394597][T15786] veth1_vlan: entered allmulticast mode [ 760.403627][T15786] macvlan0: left allmulticast mode [ 760.409148][T15786] veth1_vlan: left allmulticast mode [ 761.188523][ T5873] m920x_read = error: -19 [ 761.192956][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 761.212120][T15785] 9pnet_fd: Insufficient options for proto=fd [ 761.222404][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 761.247098][T15788] sctp: [Deprecated]: syz.5.2488 (pid 15788) Use of int in max_burst socket option deprecated. [ 761.247098][T15788] Use struct sctp_assoc_value instead [ 761.298235][ T25] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 761.306629][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 761.306750][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 761.348576][ T25] usb 3-1: config 5 has no interface number 0 [ 761.354228][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.379696][ T5873] m920x_read = error: -19 [ 761.382390][T15793] lo speed is unknown, defaulting to 1000 [ 761.384074][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 761.398066][ T25] usb 3-1: config 5 interface 52 has no altsetting 0 [ 761.402958][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.422755][ T25] usb 3-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=97.1d [ 761.433161][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.454878][ T29] audit: type=1400 audit(1738865897.344:1986): avc: denied { connect } for pid=15787 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 761.496174][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.505603][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.525007][ T25] usb 3-1: Product: syz [ 761.530649][ T25] usb 3-1: Manufacturer: syz [ 761.535288][ T25] usb 3-1: SerialNumber: syz [ 761.540714][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.550454][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.561302][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.604282][ T5873] m920x_read = error: -19 [ 761.608785][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 761.617207][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 761.796792][ T5873] m920x_read = error: -19 [ 761.807988][ T25] usb 3-1: Could not find all expected endpoints [ 761.810465][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 761.829749][ T25] usb 3-1: USB disconnect, device number 82 [ 761.900443][T15798] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 761.996610][T15802] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 762.010467][ T5873] m920x_read = error: -19 [ 762.014903][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 762.202942][ T5873] m920x_read = error: -19 [ 762.212063][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 762.416236][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 762.419559][T15809] macvlan0: entered allmulticast mode [ 762.423419][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 762.429183][T15809] veth1_vlan: entered allmulticast mode [ 762.514986][T15809] macvlan0: left allmulticast mode [ 762.520198][T15809] veth1_vlan: left allmulticast mode [ 762.562878][ T5873] m920x_read = error: -19 [ 762.595579][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 762.773457][ T5861] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 763.007134][ T5873] m920x_read = error: -19 [ 763.011502][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 763.020349][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 763.055350][ T5861] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 763.141151][ T5861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 763.173734][ T5861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.186139][ T5861] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.239390][ T9] m920x_read = error: -19 [ 763.244110][ T5861] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.244129][ T9] dvb-usb: error -19 while querying for an remote control event. [ 763.255032][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.453686][ T5873] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 763.485907][ T9] m920x_read = error: -19 [ 763.490442][ T9] dvb-usb: error -19 while querying for an remote control event. [ 763.513113][ T5861] usb 6-1: GET_CAPABILITIES returned 0 [ 763.535110][ T5861] usbtmc 6-1:16.0: can't read capabilities [ 763.541117][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.541197][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.616446][ T5873] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 763.715129][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.724353][ T9] m920x_read = error: -19 [ 763.745770][ T9] dvb-usb: error -19 while querying for an remote control event. [ 763.819583][ T5861] usb 6-1: USB disconnect, device number 45 [ 763.836998][ T5873] usb 4-1: config 0 descriptor?? [ 763.876305][ T5873] cp210x 4-1:0.0: cp210x converter detected [ 764.020325][ T9] m920x_read = error: -19 [ 764.024800][ T9] dvb-usb: error -19 while querying for an remote control event. [ 764.201628][ T9] m920x_read = error: -19 [ 764.206296][ T9] dvb-usb: error -19 while querying for an remote control event. [ 764.313166][ T5873] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 764.405378][ T9] m920x_read = error: -19 [ 764.409851][ T9] dvb-usb: error -19 while querying for an remote control event. [ 764.650565][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 764.657796][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 765.248374][ T8] m920x_read = error: -19 [ 765.258364][ T8] dvb-usb: error -19 while querying for an remote control event. [ 765.465348][ T9] m920x_read = error: -19 [ 765.494392][ T9] dvb-usb: error -19 while querying for an remote control event. [ 765.630438][T15837] fuse: Bad value for 'user_id' [ 765.666293][T15837] fuse: Bad value for 'user_id' [ 765.688069][ T9] m920x_read = error: -19 [ 765.692465][ T9] dvb-usb: error -19 while querying for an remote control event. [ 765.711190][T15837] fuse: Bad value for 'user_id' [ 765.716089][T15837] fuse: Bad value for 'user_id' [ 765.751745][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 765.901932][ T8] m920x_read = error: -19 [ 765.906379][ T8] dvb-usb: error -19 while querying for an remote control event. [ 765.913811][T15841] __nla_validate_parse: 25 callbacks suppressed [ 765.913828][T15841] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2502'. [ 765.965546][T15841] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 766.001179][T15841] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2502'. [ 766.102437][ T9] m920x_read = error: -19 [ 766.113196][ T9] dvb-usb: error -19 while querying for an remote control event. [ 766.130413][ T5929] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 766.174576][T13563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 766.187496][T13563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 766.206888][T13563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 766.220045][T13563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 766.261405][T13563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 766.269075][T13563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 766.294539][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 766.302088][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 766.310322][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 766.576396][ T9] m920x_read = error: -19 [ 766.863606][ C1] net_ratelimit: 1 callbacks suppressed [ 766.863636][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 766.876440][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.009366][ T9] dvb-usb: error -19 while querying for an remote control event. [ 767.039769][ T5929] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 767.071693][ T5929] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 767.099910][ T5873] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 767.116993][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 767.125612][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 767.133703][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 767.167442][ T5873] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 767.175792][ T5929] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 767.185511][ T9] m920x_read = error: -19 [ 767.206637][ T9] dvb-usb: error -19 while querying for an remote control event. [ 767.226221][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.238689][ T5929] usb 6-1: Product: syz [ 767.242896][ T5929] usb 6-1: Manufacturer: syz [ 767.247591][ T5929] usb 6-1: SerialNumber: syz [ 767.260757][ T5873] usb 4-1: cp210x converter now attached to ttyUSB0 [ 767.270022][T15849] lo speed is unknown, defaulting to 1000 [ 767.277992][ T5929] usb 6-1: config 0 descriptor?? [ 767.284263][T15845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 767.292596][ T5873] usb 4-1: USB disconnect, device number 105 [ 767.302408][T15845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 767.310897][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 767.323800][ T5873] cp210x 4-1:0.0: device disconnected [ 767.398044][ T9] m920x_read = error: -19 [ 767.410085][ T9] dvb-usb: error -19 while querying for an remote control event. [ 767.580392][ T9] m920x_read = error: -19 [ 767.584820][ T9] dvb-usb: error -19 while querying for an remote control event. [ 767.600908][T15849] chnl_net:caif_netlink_parms(): no params data found [ 767.602782][T15845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 767.615544][T15845] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 767.719057][ T29] audit: type=1400 audit(1738865903.209:1987): avc: denied { ioctl } for pid=15866 comm="syz.2.2510" path="socket:[43212]" dev="sockfs" ino=43212 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 767.932922][T15845] netlink: 'syz.5.2504': attribute type 1 has an invalid length. [ 767.963045][T15845] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2504'. [ 767.986056][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.993336][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 768.237300][ T5873] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 768.250880][ T9] m920x_read = error: -19 [ 768.256088][ T9] dvb-usb: error -19 while querying for an remote control event. [ 768.299067][ T5929] Error reading MAC address [ 768.314565][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.335342][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.388432][T15849] bridge_slave_0: entered allmulticast mode [ 768.406824][T15849] bridge_slave_0: entered promiscuous mode [ 768.444336][ T5929] m920x_read = error: -19 [ 768.449213][ T5873] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 768.465210][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 768.474100][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.489823][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.496981][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.506415][T15849] bridge_slave_1: entered allmulticast mode [ 768.518080][ T5873] usb 4-1: config 0 descriptor?? [ 768.521543][T15849] bridge_slave_1: entered promiscuous mode [ 768.573719][ T5873] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 768.585691][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.615285][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 768.636159][ T5873] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 768.652755][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.656384][ T5873] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 768.679961][ T5873] usb 4-1: media controller created [ 768.685571][ T5929] m920x_read = error: -19 [ 768.689928][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 768.702794][ T5873] dvb-usb: bulk message failed: -22 (5/0) [ 768.720332][T15849] team0: Port device team_slave_0 added [ 768.721706][ T5873] dvb-usb: MAC address reading failed. [ 768.747658][T15849] team0: Port device team_slave_1 added [ 768.747965][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.787239][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 769.019267][ T5929] m920x_read = error: -19 [ 769.060692][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 769.087179][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 769.094290][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 769.217070][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 769.233909][ T5873] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 769.274401][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 769.301515][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.308527][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.337510][ T5873] dvb-usb: schedule remote query interval to 100 msecs. [ 769.351585][ T5873] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 769.431848][T13563] Bluetooth: hci0: command tx timeout [ 769.471916][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.496623][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.503744][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.540787][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.687150][ T5929] m920x_read = error: -19 [ 769.691572][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 769.705540][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 769.712854][ T5873] usb 4-1: USB disconnect, device number 106 [ 769.722478][ T9] dvb-usb: error while querying for an remote control event. [ 769.723351][ T5861] usb 6-1: USB disconnect, device number 46 [ 769.743937][T15849] hsr_slave_0: entered promiscuous mode [ 769.776165][T15849] hsr_slave_1: entered promiscuous mode [ 769.791549][T15849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.803350][T15849] Cannot create hsr debugfs directory [ 769.811029][T15899] overlayfs: failed to clone upperpath [ 769.836586][ T5873] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 769.900126][ T9] m920x_read = error: -19 [ 769.918620][ T9] dvb-usb: error -19 while querying for an remote control event. [ 770.152355][T15908] Mount JFS Failure: -22 [ 770.209741][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 770.216914][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 770.360351][ T9] m920x_read = error: -19 [ 770.370612][ T9] dvb-usb: error -19 while querying for an remote control event. [ 770.542694][ T5873] m920x_read = error: -19 [ 770.566609][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 770.936489][T15904] ALSA: mixer_oss: invalid OSS volume '' [ 770.942420][T15904] ALSA: mixer_oss: invalid OSS volume 'IG' [ 771.065668][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 771.181894][ T5873] m920x_read = error: -19 [ 771.191809][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 771.204518][ T9] usb 3-1: device descriptor read/64, error -71 [ 771.215418][T15849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.321545][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 771.328781][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 771.366169][ T5861] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 771.396864][ T5873] m920x_read = error: -19 [ 771.403853][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 771.462448][T15849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.546836][ T5861] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 771.568247][ T5861] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 771.576241][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 771.642133][ T5861] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 52, changing to 4 [ 771.654171][T13563] Bluetooth: hci0: command tx timeout [ 771.660818][ T5929] m920x_read = error: -19 [ 771.669363][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 771.733269][ T5861] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 13368, setting to 1023 [ 771.756183][T15849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.766679][ T5861] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 771.785200][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 771.794099][ T5861] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 771.803505][ T5861] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 771.811961][ T5861] usb 6-1: Product: syz [ 771.823820][ T5861] usb 6-1: Manufacturer: syz [ 771.824479][ T9] usb 3-1: device descriptor read/64, error -71 [ 771.828445][ T5861] usb 6-1: SerialNumber: syz [ 771.830376][ T5861] usb 6-1: config 0 descriptor?? [ 771.848877][ T5861] ldusb 6-1:0.0: Interrupt in endpoint not found [ 771.878099][ T5929] m920x_read = error: -19 [ 771.882523][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 771.915832][T15849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.964021][ T9] usb usb3-port1: attempt power cycle [ 772.082338][ T5929] m920x_read = error: -19 [ 772.102699][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 772.122327][T15937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2530'. [ 772.306000][ T5873] m920x_read = error: -19 [ 772.322362][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 772.331293][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 772.391480][ T9] usb 3-1: device descriptor read/8, error -71 [ 772.415366][T15849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 772.433381][ C1] net_ratelimit: 1 callbacks suppressed [ 772.433402][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 772.446163][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 772.472907][T15849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 772.494243][T15849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 772.514826][T15849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 772.676132][ T5929] m920x_read = error: -19 [ 772.681533][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 772.732712][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 772.801655][ T29] audit: type=1400 audit(1738865907.970:1988): avc: denied { create } for pid=15941 comm="syz.0.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 773.302311][ T5929] m920x_read = error: -19 [ 773.307029][ T9] usb 3-1: device descriptor read/8, error -71 [ 773.313801][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 773.439518][ T9] usb usb3-port1: unable to enumerate USB device [ 773.466304][T15849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.485900][T15849] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.514223][ T9] m920x_read = error: -19 [ 773.524186][ T9] dvb-usb: error -19 while querying for an remote control event. [ 773.541559][ T9912] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.548699][ T9912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.556243][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 773.563267][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 773.683210][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.690375][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.694764][ T9] m920x_read = error: -19 [ 773.702050][ T9] dvb-usb: error -19 while querying for an remote control event. [ 773.876437][T13563] Bluetooth: hci0: command tx timeout [ 773.898456][ T9] m920x_read = error: -19 [ 773.903005][ T9] dvb-usb: error -19 while querying for an remote control event. [ 774.104744][T15958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2535'. [ 774.646271][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 774.653429][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 774.731105][ T9] m920x_read = error: -19 [ 774.736146][ T9] dvb-usb: error -19 while querying for an remote control event. [ 774.810390][T15849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.977376][ T9] m920x_read = error: -19 [ 774.988967][ T5861] usb 6-1: USB disconnect, device number 47 [ 774.998348][ T9] dvb-usb: error -19 while querying for an remote control event. [ 775.157038][T15849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.192371][T15983] overlayfs: failed to clone upperpath [ 775.202709][ T9] m920x_read = error: -19 [ 775.258580][ T9] dvb-usb: error -19 while querying for an remote control event. [ 775.311403][T15849] veth0_vlan: entered promiscuous mode [ 775.338744][T15849] veth1_vlan: entered promiscuous mode [ 775.355922][ T29] audit: type=1400 audit(1738865910.346:1989): avc: denied { create } for pid=15992 comm="syz.2.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 775.436242][T15849] veth0_macvtap: entered promiscuous mode [ 775.437311][ T29] audit: type=1400 audit(1738865910.355:1990): avc: denied { sys_admin } for pid=15992 comm="syz.2.2545" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 775.448865][ T9] m920x_read = error: -19 [ 775.500173][T15993] lo speed is unknown, defaulting to 1000 [ 775.501387][T15849] veth1_macvtap: entered promiscuous mode [ 775.518662][ T9] dvb-usb: error -19 while querying for an remote control event. [ 775.540786][ T29] audit: type=1400 audit(1738865910.365:1991): avc: denied { bind } for pid=15989 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 775.635022][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.694119][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.704039][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.726287][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.736198][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.758177][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 775.765465][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 775.818743][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.832530][ T9] m920x_read = error: -19 [ 775.838276][ T9] dvb-usb: error -19 while querying for an remote control event. [ 775.875808][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.940860][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.022513][T15849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.100327][T13563] Bluetooth: hci0: command tx timeout [ 776.250279][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.282517][ T9] m920x_read = error: -19 [ 776.286921][ T9] dvb-usb: error -19 while querying for an remote control event. [ 776.290153][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.335965][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.347453][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 776.358371][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.389810][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.406508][T16026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2552'. [ 776.426436][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.458646][T15849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.464209][ T9] m920x_read = error: -19 [ 776.475591][ T9] dvb-usb: error -19 while querying for an remote control event. [ 776.480073][T15849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.511734][T15849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.569010][T15849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.597381][T15849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.617319][T15849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.644358][T15849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.645983][ T9] m920x_read = error: -19 [ 776.688751][ T9] dvb-usb: error -19 while querying for an remote control event. [ 776.734326][T16029] netlink: 'syz.5.2555': attribute type 10 has an invalid length. [ 776.767994][T16029] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 776.869958][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 776.871310][ T9] m920x_read = error: -19 [ 776.877153][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 776.899744][ T29] audit: type=1400 audit(1738865911.796:1992): avc: denied { create } for pid=16028 comm="syz.5.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 776.921589][ T9] dvb-usb: error -19 while querying for an remote control event. [ 776.984503][ T29] audit: type=1400 audit(1738865911.796:1993): avc: denied { getopt } for pid=16028 comm="syz.5.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.107064][ T9937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.127189][ T9] m920x_read = error: -19 [ 777.146305][ T9] dvb-usb: error -19 while querying for an remote control event. [ 777.185199][ T9937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.217757][T16035] hpfs: Bad magic ... probably not HPFS [ 777.230112][ T29] audit: type=1400 audit(1738865911.796:1994): avc: denied { setopt } for pid=16028 comm="syz.5.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.347551][ T9912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.381757][ T9912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.416358][ T9] m920x_read = error: -19 [ 777.421932][ T9] dvb-usb: error -19 while querying for an remote control event. [ 777.495011][ T29] audit: type=1400 audit(1738865912.357:1995): avc: denied { mounton } for pid=15849 comm="syz-executor" path="/root/syzkaller.hgJonA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 777.643371][ T9] m920x_read = error: -19 [ 777.647772][ T9] dvb-usb: error -19 while querying for an remote control event. [ 777.832546][ T9] m920x_read = error: -19 [ 777.837008][ T9] dvb-usb: error -19 while querying for an remote control event. [ 777.992427][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 777.999639][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 778.036550][ T8] m920x_read = error: -19 [ 778.047726][ T8] dvb-usb: error -19 while querying for an remote control event. [ 778.726991][ T8] m920x_read = error: -19 [ 778.732112][ T8] dvb-usb: error -19 while querying for an remote control event. [ 778.911023][ T8] m920x_read = error: -19 [ 778.923101][ T8] dvb-usb: error -19 while querying for an remote control event. [ 779.093592][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 779.100866][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 779.185164][ T29] audit: type=1326 audit(1738865913.919:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac2b8cde9 code=0x7ffc0000 [ 779.489469][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 779.582693][ T8] m920x_read = error: -19 [ 779.587748][ T8] dvb-usb: error -19 while querying for an remote control event. [ 779.600062][ T29] audit: type=1326 audit(1738865913.919:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac2b8cde9 code=0x7ffc0000 [ 779.624426][ T29] audit: type=1326 audit(1738865913.919:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16044 comm="syz.1.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fcac2b8cde9 code=0x7ffc0000 [ 779.756405][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 779.756967][ T8] m920x_read = error: -19 [ 779.774920][ T25] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 779.775013][ T8] dvb-usb: error -19 while querying for an remote control event. [ 779.817304][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.857215][ T25] usb 2-1: Product: syz [ 779.878113][ T25] usb 2-1: Manufacturer: syz [ 779.882782][ T25] usb 2-1: SerialNumber: syz [ 779.918277][ T25] usb 2-1: config 0 descriptor?? [ 779.946331][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 780.040785][ T5873] m920x_read = error: -19 [ 780.074957][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 780.205647][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 780.212875][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 780.271570][ T5873] m920x_read = error: -19 [ 780.276763][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 780.623672][ T5873] m920x_read = error: -19 [ 780.661445][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 780.791442][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 780.825672][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 780.835764][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 780.845099][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 780.854514][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 780.857931][ T8] m920x_read = error: -19 [ 780.869516][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 780.873827][ T8] dvb-usb: error -19 while querying for an remote control event. [ 780.919091][T16058] lo speed is unknown, defaulting to 1000 [ 781.082476][ T5873] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 781.128970][ T5929] m920x_read = error: -19 [ 781.153559][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 781.275064][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 781.294995][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 781.306158][T16058] chnl_net:caif_netlink_parms(): no params data found [ 781.317216][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 781.318005][ T5873] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 781.324349][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 781.358870][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.381916][ T5929] m920x_read = error: -19 [ 781.388000][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 781.408579][ T5873] usb 4-1: config 0 descriptor?? [ 781.501160][ T25] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 781.590296][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.597528][ T5929] m920x_read = error: -19 [ 781.597582][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 781.723726][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.766229][ T8] m920x_read = error: -19 [ 781.770714][ T8] dvb-usb: error -19 while querying for an remote control event. [ 781.781618][T16058] bridge_slave_0: entered allmulticast mode [ 781.806049][T16058] bridge_slave_0: entered promiscuous mode [ 781.836019][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.869863][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.884469][T16058] bridge_slave_1: entered allmulticast mode [ 781.891437][T16058] bridge_slave_1: entered promiscuous mode [ 781.955863][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.965888][ T9] m920x_read = error: -19 [ 781.971222][ T9] dvb-usb: error -19 while querying for an remote control event. [ 781.972615][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.012966][ T5929] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 782.080993][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 782.098808][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 782.108747][ T25] usb 2-1: USB disconnect, device number 16 [ 782.126004][ T5873] usb 4-1: USB disconnect, device number 107 [ 782.128584][T16058] team0: Port device team_slave_0 added [ 782.142260][ T8] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 782.176537][ T5924] m920x_read = error: -19 [ 782.183731][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 782.185632][T16058] team0: Port device team_slave_1 added [ 782.190609][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 782.215859][ T5929] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.223892][ T5929] usb 3-1: config 0 has no interface number 0 [ 782.236067][ T5929] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.248801][ T5929] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.268177][ T5929] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 782.278074][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.298831][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.301677][ T5929] usb 3-1: config 0 descriptor?? [ 782.315529][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.352321][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.397093][T16058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.422054][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.448477][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 782.448614][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 782.455287][ T5924] m920x_read = error: -19 [ 782.466507][T16058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.468805][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 782.487793][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 782.501142][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.515049][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.524897][ T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 782.534373][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.559477][ T8] usb 6-1: config 0 descriptor?? [ 782.969051][T16058] hsr_slave_0: entered promiscuous mode [ 783.113213][T13563] Bluetooth: hci5: command tx timeout [ 783.138267][ T5873] m920x_read = error: -19 [ 783.142754][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 783.248945][T16058] hsr_slave_1: entered promiscuous mode [ 783.255831][T16058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.264370][T16058] Cannot create hsr debugfs directory [ 783.316999][ T5873] m920x_read = error: -19 [ 783.321740][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 783.540985][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 783.548199][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 783.962971][ T5929] usbhid 3-1:0.1: can't add hid device: -71 [ 783.969930][ T5873] m920x_read = error: -19 [ 783.971778][T16089] team0: No ports can be present during mode change [ 783.975277][ T5929] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 783.991023][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 784.007273][ T5929] usb 3-1: USB disconnect, device number 87 [ 784.055684][ T8] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0020/input/input41 [ 784.146362][T16058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.166380][T16058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 784.169837][ T5873] m920x_read = error: -19 [ 784.188402][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 784.219708][ T8] appleir 0003:05AC:8241.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 784.235082][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.235134][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.363358][T16089] netlink: 'syz.5.2569': attribute type 1 has an invalid length. [ 784.386495][ T8] m920x_read = error: -19 [ 784.390895][ T8] dvb-usb: error -19 while querying for an remote control event. [ 784.430381][T16058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.449452][T16058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 784.485881][T16108] netlink: 352 bytes leftover after parsing attributes in process `syz.1.2573'. [ 784.587004][T16058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.598013][T16058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 784.600062][ T5873] m920x_read = error: -19 [ 784.624701][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 784.663370][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 784.670497][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 784.704326][T16118] fuse: Bad value for 'fd' [ 784.823756][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 784.823779][ T29] audit: type=1326 audit(1738865919.204:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.2577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f502758cde9 code=0x0 [ 784.837221][ T5873] m920x_read = error: -19 [ 784.860128][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 784.877976][T16058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.888471][T16058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 785.043750][ T5873] m920x_read = error: -19 [ 785.066970][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 785.363934][T13563] Bluetooth: hci5: command tx timeout [ 785.476468][ T9] m920x_read = error: -19 [ 785.480892][ T9] dvb-usb: error -19 while querying for an remote control event. [ 785.551844][T16058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 785.579626][T16058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.596447][T16058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.649030][T16058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.669050][ T5929] m920x_read = error: -19 [ 785.673492][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 785.760312][T16058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.767259][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 785.767374][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 785.869127][T16058] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.876390][ T5924] m920x_read = error: -19 [ 785.880768][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 785.965966][ T29] audit: type=1326 audit(1738865920.280:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.161969][ T29] audit: type=1326 audit(1738865920.289:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.190138][ T29] audit: type=1326 audit(1738865920.289:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.217222][ T29] audit: type=1326 audit(1738865920.289:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.244219][ T29] audit: type=1326 audit(1738865920.289:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.271006][ T29] audit: type=1326 audit(1738865920.289:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.399146][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.406360][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.419243][ T29] audit: type=1326 audit(1738865920.289:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.444276][ T5873] usb 6-1: USB disconnect, device number 48 [ 786.606217][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.613474][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.649841][ T29] audit: type=1326 audit(1738865920.289:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.663104][ T8] m920x_read = error: -19 [ 786.682467][ T29] audit: type=1326 audit(1738865920.289:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e78cde9 code=0x7ffc0000 [ 786.876352][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 786.883568][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 787.013298][ T8] dvb-usb: error -19 while querying for an remote control event. [ 787.198562][ T8] m920x_read = error: -19 [ 787.202990][ T8] dvb-usb: error -19 while querying for an remote control event. [ 787.367175][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 787.373529][T16058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.388138][T16058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.461542][T16152] bridge_slave_0: left allmulticast mode [ 787.468468][ T8] m920x_read = error: -19 [ 787.472897][ T8] dvb-usb: error -19 while querying for an remote control event. [ 787.486273][T16152] bridge_slave_0: left promiscuous mode [ 787.496857][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.560755][T13563] Bluetooth: hci5: command tx timeout [ 787.656111][ T5873] m920x_read = error: -19 [ 787.662037][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 787.678162][T15323] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 787.849894][ T8] m920x_read = error: -19 [ 787.854314][ T8] dvb-usb: error -19 while querying for an remote control event. [ 787.871689][T15323] usb 4-1: Using ep0 maxpacket: 16 [ 787.890067][T15323] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 787.908090][T15323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.934310][T15323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.966249][T15323] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.988206][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 787.995440][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 788.007502][T15323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.022280][T16058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.029451][T15323] usb 4-1: Product: syz [ 788.034755][T15323] usb 4-1: Manufacturer: syz [ 788.039376][T15323] usb 4-1: SerialNumber: syz [ 788.042075][ T8] m920x_read = error: -19 [ 788.055743][ T8] dvb-usb: error -19 while querying for an remote control event. [ 788.077867][T16058] veth0_vlan: entered promiscuous mode [ 788.111985][T16058] veth1_vlan: entered promiscuous mode [ 788.225654][T16058] veth0_macvtap: entered promiscuous mode [ 788.258565][T16058] veth1_macvtap: entered promiscuous mode [ 788.266965][ T8] m920x_read = error: -19 [ 788.271383][ T8] dvb-usb: error -19 while querying for an remote control event. [ 788.375304][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.399003][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.417338][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.428911][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.439812][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.455885][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.466637][ T5924] m920x_read = error: -19 [ 788.471752][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 788.481008][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.492493][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.523333][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.555505][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.579937][T16058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.623291][T16154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 788.638169][T15323] usb 4-1: 0:2 : does not exist [ 788.640761][ T5924] m920x_read = error: -19 [ 788.647986][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 788.672360][ T75] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 788.675820][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.707924][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.729834][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.751499][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.768179][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.792845][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.818520][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.832767][ T75] usb 2-1: Using ep0 maxpacket: 32 [ 788.839717][ T75] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.839805][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.864814][ T75] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.878346][ T8] m920x_read = error: -19 [ 788.882704][ T8] dvb-usb: error -19 while querying for an remote control event. [ 788.896746][ T75] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 788.901348][T16058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.905846][ T75] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.927999][T16058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.954689][T16058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.985231][T16058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.997505][ T75] usb 2-1: config 0 descriptor?? [ 789.013795][T16058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.026004][ T75] hub 2-1:0.0: USB hub found [ 789.033647][T16058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.065498][T16058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.075441][ T8] m920x_read = error: -19 [ 789.080589][ T8] dvb-usb: error -19 while querying for an remote control event. [ 789.100034][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.107232][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.112567][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.124719][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.229699][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.246300][T16169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.255541][ T5873] m920x_read = error: -19 [ 789.258988][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.259893][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 789.262306][T16169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.282632][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.325761][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.332363][ T75] hub 2-1:0.0: 1 port detected [ 789.343856][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.421391][ T5873] m920x_read = error: -19 [ 789.425993][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 789.584702][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.602969][ T5873] m920x_read = error: -19 [ 789.607466][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 789.626875][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.776811][T15323] usb 4-1: USB disconnect, device number 108 [ 789.784785][T13563] Bluetooth: hci5: command tx timeout [ 789.816778][ T5873] m920x_read = error: -19 [ 789.821199][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 790.212038][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 790.219190][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 790.316242][ T5929] m920x_read = error: -19 [ 790.331344][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 790.341655][ T25] hub 2-1:0.0: activate --> -90 [ 790.368976][ T25] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 790.378925][T12722] udevd[12722]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.394946][ T25] usb 2-1: Failed to suspend device, error -71 [ 790.405603][ T5929] usb 2-1: USB disconnect, device number 17 [ 790.425482][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 790.425504][ T29] audit: type=1400 audit(1738865924.433:2075): avc: denied { map } for pid=16197 comm="syz.5.2595" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 790.527218][ T29] audit: type=1400 audit(1738865924.433:2076): avc: denied { execute } for pid=16197 comm="syz.5.2595" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 790.539045][ T5873] m920x_read = error: -19 [ 790.557852][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2596'. [ 790.626587][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 790.853392][T16214] veth1_macvtap: left promiscuous mode [ 790.880724][T16214] macsec0: entered promiscuous mode [ 790.891507][T16214] macsec0: entered allmulticast mode [ 791.116827][ T5873] m920x_read = error: -19 [ 791.161799][ T29] audit: type=1400 audit(1738865925.041:2077): avc: denied { create } for pid=16207 comm="syz.2.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 791.262296][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 791.334412][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 791.341667][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 791.806980][T16230] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 791.884452][ T29] audit: type=1400 audit(1738865925.818:2078): avc: denied { mounton } for pid=16222 comm="syz.3.2602" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 791.926501][T16223] tmpfs: Bad value for 'mpol' [ 792.133417][ T5873] m920x_read = error: -19 [ 792.140166][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 792.233847][ T29] audit: type=1400 audit(1738865926.145:2079): avc: denied { ioctl } for pid=16222 comm="syz.3.2602" path="/456/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 792.388453][ T5929] m920x_read = error: -19 [ 792.393785][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 792.435772][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 792.442960][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 792.521461][ T5873] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 792.577057][ T8] m920x_read = error: -19 [ 792.581496][ T8] dvb-usb: error -19 while querying for an remote control event. [ 792.598846][ T75] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 792.705270][ T5873] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 792.718148][ T5873] usb 3-1: config 0 has no interface number 0 [ 792.738873][T16258] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2613'. [ 792.755018][ T5873] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.767175][T16256] misc userio: Begin command sent, but we're already running [ 792.779396][ T8] m920x_read = error: -19 [ 792.783777][ T8] dvb-usb: error -19 while querying for an remote control event. [ 792.800607][ T75] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 792.801184][ T5873] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 792.827614][ T75] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.846311][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.864505][ T5873] usb 3-1: Product: syz [ 792.865738][ T75] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.874204][ T5873] usb 3-1: Manufacturer: syz [ 792.894346][ T5873] usb 3-1: SerialNumber: syz [ 792.902447][ T75] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 792.908250][ T5873] usb 3-1: config 0 descriptor?? [ 792.926550][T16263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2612'. [ 792.944752][ T75] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 792.954398][ T75] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 792.955002][ T5873] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 792.968552][ T75] usb 1-1: Manufacturer: syz [ 792.971122][ T5929] m920x_read = error: -19 [ 792.983549][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 792.986858][ T75] usb 1-1: config 0 descriptor?? [ 793.184748][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 793.199925][ T5873] m920x_read = error: -19 [ 793.204544][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 793.368634][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.422472][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.448740][ T29] audit: type=1400 audit(1738865927.277:2080): avc: denied { shutdown } for pid=16235 comm="syz.2.2605" laddr=fe80::10 lport=45198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.547380][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 793.554604][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 793.578570][ T75] usb 1-1: USB disconnect, device number 20 [ 793.881838][ T5924] m920x_read = error: -19 [ 793.896053][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 793.999580][ T29] audit: type=1400 audit(1738865927.801:2081): avc: denied { ioctl } for pid=16277 comm="syz.1.2618" path="socket:[46054]" dev="sockfs" ino=46054 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 794.123190][ T75] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 794.158227][ T5924] m920x_read = error: -19 [ 794.166066][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 794.330538][ T75] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 794.339245][ T5924] m920x_read = error: -19 [ 794.353854][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 794.429032][ T75] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 794.552744][ T5924] m920x_read = error: -19 [ 794.552801][ T75] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 794.557173][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 794.659155][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 794.666345][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 794.781690][ T75] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.152478][ T5873] m920x_read = error: -19 [ 795.156908][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 795.202770][ T75] usb 1-1: config 0 descriptor?? [ 795.224032][ T75] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 795.332632][ T5924] m920x_read = error: -19 [ 795.337060][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 795.408310][ T75] usb 3-1: USB disconnect, device number 88 [ 795.420590][ T75] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 795.440044][T16301] netlink: 'syz.0.2616': attribute type 10 has an invalid length. [ 795.467426][T16301] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 795.478882][T16303] fuse: Unknown parameter '' [ 795.523217][T15323] usb 1-1: USB disconnect, device number 21 [ 795.526085][ T5873] m920x_read = error: -19 [ 795.533623][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 795.622264][ T5924] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 795.728831][ T5873] m920x_read = error: -19 [ 795.733284][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 795.781665][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 795.788911][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 795.857023][ T5924] usb 6-1: device descriptor read/64, error -71 [ 795.909519][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2629'. [ 795.974153][ T5929] m920x_read = error: -19 [ 796.029043][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 796.147175][ T29] audit: type=1400 audit(1738865929.802:2082): avc: denied { relabelfrom } for pid=16313 comm="syz.0.2629" name="" dev="pipefs" ino=44901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 796.148801][T16314] SELinux: Context system_u: is not valid (left unmapped). [ 796.178088][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.220785][ T29] audit: type=1400 audit(1738865929.868:2083): avc: denied { relabelto } for pid=16313 comm="syz.0.2629" name="" dev="pipefs" ino=44901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 796.273789][ T5924] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 796.305515][ T5929] m920x_read = error: -19 [ 796.309908][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 796.615659][ T5929] m920x_read = error: -19 [ 796.620101][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 796.669483][ T5924] usb 6-1: device descriptor read/64, error -71 [ 796.821793][ T5924] usb usb6-port1: attempt power cycle [ 796.831495][ T5929] m920x_read = error: -19 [ 796.835910][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 796.893490][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 796.900759][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 797.097236][ T5873] m920x_read = error: -19 [ 797.101679][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 797.243228][ T5924] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 797.289008][ T5873] m920x_read = error: -19 [ 797.407467][T16353] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 797.427071][T16350] vcan0: entered allmulticast mode [ 797.437180][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 797.451268][ T5924] usb 6-1: device descriptor read/8, error -71 [ 798.005371][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.012644][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.545775][ T5924] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 798.583903][ T5873] m920x_read = error: -19 [ 798.588414][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 799.106474][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.113807][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.352767][ T5924] usb 6-1: device descriptor read/8, error -71 [ 799.406587][ T5873] m920x_read = error: -19 [ 799.411008][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 799.450427][T16357] vcan0 (unregistering): left allmulticast mode [ 799.472289][ T5924] usb usb6-port1: unable to enumerate USB device [ 799.539915][ T29] audit: type=1326 audit(1738865932.973:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16366 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502758cde9 code=0x7ffc0000 [ 799.576273][ T29] audit: type=1326 audit(1738865933.001:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16366 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f502758cde9 code=0x7ffc0000 [ 799.615530][ T29] audit: type=1326 audit(1738865933.001:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16366 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502758cde9 code=0x7ffc0000 [ 799.648855][ T5873] m920x_read = error: -19 [ 799.658079][ T29] audit: type=1326 audit(1738865933.001:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16366 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f502758cde9 code=0x7ffc0000 [ 799.681620][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 799.788635][T16371] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 799.800365][T16371] bridge0: left promiscuous mode [ 799.813357][ T5873] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 799.858382][ T5929] m920x_read = error: -19 [ 799.878459][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 800.015959][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 800.151406][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 800.158012][ T29] audit: type=1326 audit(1738865933.076:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16366 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502758cde9 code=0x7ffc0000 [ 800.196405][ T29] audit: type=1326 audit(1738865933.076:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16366 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502758cde9 code=0x7ffc0000 [ 800.204931][ T5873] usb 1-1: config 14 has an invalid interface number: 87 but max is 0 [ 800.220311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.220446][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.237798][ T29] audit: type=1400 audit(1738865933.563:2090): avc: denied { name_connect } for pid=16369 comm="syz.5.2641" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 800.250730][ T5924] m920x_read = error: -19 [ 800.307799][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 800.317643][T16374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2643'. [ 800.322180][ T5873] usb 1-1: config 14 has no interface number 0 [ 800.327724][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2643'. [ 800.344898][ T5873] usb 1-1: config 14 interface 87 has no altsetting 0 [ 800.358692][T16374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2643'. [ 800.380900][T16374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2643'. [ 800.434920][ T5873] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=2b.d9 [ 800.448306][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.465815][ T5873] usb 1-1: Product: syz [ 800.471049][ T5873] usb 1-1: Manufacturer: syz [ 800.477780][T16374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16374 comm=syz.2.2643 [ 800.482881][ T5873] usb 1-1: SerialNumber: syz [ 800.510925][ T5924] m920x_read = error: -19 [ 800.515325][ T5924] dvb-usb: error -19 while querying for an remote control event. [ 800.699723][ T5929] m920x_read = error: -19 [ 800.704216][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 800.954143][ T5929] m920x_read = error: -19 [ 800.959988][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 801.169657][ T5929] m920x_read = error: -19 [ 801.174264][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 801.341256][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.348517][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.374326][ T5929] m920x_read = error: -19 [ 801.384909][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 801.721597][ T5929] m920x_read = error: -19 [ 801.727058][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 802.441902][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 802.449206][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 802.693000][ T5929] m920x_read = error: -19 [ 802.880589][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 802.992807][ T5873] ttusb_dec_send_command: command bulk message failed: error -22 [ 803.032938][ T5873] ttusb-dec 1-1:14.87: probe with driver ttusb-dec failed with error -22 [ 803.070329][ T5929] m920x_read = error: -19 [ 803.075924][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 803.115940][ T5873] usb 1-1: USB disconnect, device number 22 [ 803.287889][ T8] m920x_read = error: -19 [ 803.295231][ T8] dvb-usb: error -19 while querying for an remote control event. [ 803.524142][ T5873] m920x_read = error: -19 [ 803.530033][ T5873] dvb-usb: error -19 while querying for an remote control event. [ 803.564466][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.571707][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.715113][ T5929] m920x_read = error: -19 [ 803.815941][ T5929] dvb-usb: error -19 while querying for an remote control event. [ 803.929732][T16421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2657'. [ 916.296669][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 916.303739][ C0] rcu: 1-...!: (1 GPs behind) idle=cd24/1/0x4000000000000000 softirq=69970/69971 fqs=1 [ 916.316037][ C0] rcu: (detected by 0, t=10502 jiffies, g=67581, q=181 ncpus=2) [ 916.323795][ C0] Sending NMI from CPU 0 to CPUs 1: [ 916.323859][ C1] NMI backtrace for cpu 1 [ 916.323880][ C1] CPU: 1 UID: 0 PID: 15849 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 916.323898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 916.323908][ C1] RIP: 0010:lock_is_held_type+0xb0/0x150 [ 916.323945][ C1] Code: 00 41 83 c7 01 45 3b bc 24 e8 0a 00 00 0f 8d 80 00 00 00 49 63 c7 48 89 ee 48 8d 04 80 49 8d 5c c5 00 48 89 df e8 80 fe ff ff <85> c0 74 d3 41 83 fe ff 41 bd 01 00 00 00 74 13 31 c0 f6 43 22 03 [ 916.323959][ C1] RSP: 0018:ffffc90000a18d40 EFLAGS: 00000046 [ 916.323974][ C1] RAX: 0000000000000000 RBX: ffff8880674453e8 RCX: 0000000000000001 [ 916.323983][ C1] RDX: 0000000000000000 RSI: ffff888078d82300 RDI: ffff8880674453e8 [ 916.323991][ C1] RBP: ffff888078d82300 R08: 0000000000000005 R09: 0000000000000000 [ 916.324000][ C1] R10: 0000000000000001 R11: 0000000000000008 R12: ffff888067444880 [ 916.324008][ C1] R13: ffff888067445370 R14: 00000000ffffffff R15: 0000000000000003 [ 916.324016][ C1] FS: 000055557f616500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 916.324031][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.324039][ C1] CR2: 00007f5028355f98 CR3: 000000002849c000 CR4: 00000000003526f0 [ 916.324049][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 916.324057][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 916.324064][ C1] Call Trace: [ 916.324073][ C1] [ 916.324082][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 916.324105][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 916.324131][ C1] ? nmi_handle+0x1ac/0x5d0 [ 916.324153][ C1] ? lock_is_held_type+0xb0/0x150 [ 916.324166][ C1] ? default_do_nmi+0x6a/0x160 [ 916.324185][ C1] ? exc_nmi+0x170/0x1e0 [ 916.324201][ C1] ? end_repeat_nmi+0xf/0x53 [ 916.324227][ C1] ? lock_is_held_type+0xb0/0x150 [ 916.324240][ C1] ? lock_is_held_type+0xb0/0x150 [ 916.324254][ C1] ? lock_is_held_type+0xb0/0x150 [ 916.324266][ C1] [ 916.324271][ C1] [ 916.324277][ C1] ? __pfx_advance_sched+0x10/0x10 [ 916.324301][ C1] advance_sched+0x819/0xc60 [ 916.324321][ C1] ? timerqueue_del+0x83/0x150 [ 916.324340][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 916.324357][ C1] ? __pfx_advance_sched+0x10/0x10 [ 916.324373][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 916.324392][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 916.324404][ C1] ? read_tsc+0x9/0x20 [ 916.324422][ C1] hrtimer_interrupt+0x392/0x8e0 [ 916.324440][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 916.324462][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 916.324484][ C1] [ 916.324488][ C1] [ 916.324493][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 916.324511][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 916.324539][ C1] Code: b8 ff ff ff ff 65 0f c1 05 80 de 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 916.324551][ C1] RSP: 0018:ffffc9001e76f588 EFLAGS: 00000206 [ 916.324563][ C1] RAX: 0000000000000046 RBX: 1ffff92003cedeb2 RCX: 0000000025aabed9 [ 916.324572][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cf020 RDI: ffffffff8bd34c80 [ 916.324580][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd7598 [ 916.324589][ C1] R10: ffffffff96ebacc7 R11: 0000000000000007 R12: 0000000000000000 [ 916.324597][ C1] R13: ffffffff8e1bcc80 R14: 0000000000000000 R15: 0000000000000000 [ 916.324611][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 916.324628][ C1] ? rcu_is_watching+0x12/0xc0 [ 916.324644][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 916.324659][ C1] ? find_held_lock+0x2d/0x110 [ 916.324672][ C1] ? page_ext_get+0x34/0x310 [ 916.324691][ C1] ? lock_acquire+0x2f/0xb0 [ 916.324706][ C1] ? page_ext_get+0x34/0x310 [ 916.324719][ C1] page_ext_get+0x3a/0x310 [ 916.324732][ C1] ? page_ext_get+0x34/0x310 [ 916.324744][ C1] page_table_check_set.part.0+0x36/0x550 [ 916.324758][ C1] ? page_table_check_set+0x109/0x4c0 [ 916.324773][ C1] page_table_check_set+0x275/0x4c0 [ 916.324787][ C1] __page_table_check_ptes_set+0x2d0/0x3e0 [ 916.324807][ C1] ? vm_normal_page+0x13c/0x2b0 [ 916.324828][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 916.324841][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 916.324854][ C1] ? copy_page_range+0xd0b/0x5690 [ 916.324873][ C1] copy_page_range+0x20ff/0x5690 [ 916.324901][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 916.324919][ C1] ? find_held_lock+0x2d/0x110 [ 916.324933][ C1] ? __pfx_lock_release+0x10/0x10 [ 916.324949][ C1] ? lock_acquire+0x2f/0xb0 [ 916.324965][ C1] ? copy_process+0x7c12/0x8c50 [ 916.324981][ C1] ? down_write+0x14e/0x200 [ 916.324997][ C1] ? up_write+0x1b2/0x520 [ 916.325017][ C1] copy_process+0x7ccb/0x8c50 [ 916.325036][ C1] ? __pfx_copy_process+0x10/0x10 [ 916.325054][ C1] kernel_clone+0xfd/0x960 [ 916.325067][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 916.325081][ C1] ? find_held_lock+0x59/0x110 [ 916.325093][ C1] ? find_held_lock+0x2d/0x110 [ 916.325106][ C1] __do_sys_clone+0xba/0x100 [ 916.325118][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 916.325132][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 916.325152][ C1] do_syscall_64+0xcd/0x250 [ 916.325166][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.325182][ C1] RIP: 0033:0x7fcac2b83653 [ 916.325198][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 916.325209][ C1] RSP: 002b:00007ffff9ee3b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 916.325221][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcac2b83653 [ 916.325230][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 916.325238][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 916.325246][ C1] R10: 000055557f6167d0 R11: 0000000000000246 R12: 0000000000000000 [ 916.325255][ C1] R13: 00000000000927c0 R14: 00000000000baf10 R15: 00007ffff9ee3d10 [ 916.325268][ C1] [ 916.325831][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g67581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 916.930405][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 916.940370][ C0] rcu: RCU grace-period kthread stack dump: [ 916.946252][ C0] task:rcu_preempt state:R running task stack:26032 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 916.959773][ C0] Call Trace: [ 916.963050][ C0] [ 916.965980][ C0] __schedule+0xf43/0x5890 [ 916.970410][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 916.975624][ C0] ? __pfx___schedule+0x10/0x10 [ 916.980487][ C0] ? schedule+0x298/0x350 [ 916.984820][ C0] ? __pfx_lock_release+0x10/0x10 [ 916.989849][ C0] ? lock_acquire+0x2f/0xb0 [ 916.994350][ C0] ? schedule+0x1fd/0x350 [ 916.998688][ C0] schedule+0xe7/0x350 [ 917.002759][ C0] schedule_timeout+0x124/0x280 [ 917.007611][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 917.012983][ C0] ? __pfx_process_timeout+0x10/0x10 [ 917.018298][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 917.024129][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 917.029617][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 917.034421][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 917.039720][ C0] ? rcu_gp_init+0xc82/0x1630 [ 917.044415][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 917.049631][ C0] rcu_gp_kthread+0x271/0x380 [ 917.054316][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 917.059534][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 917.064734][ C0] ? __kthread_parkme+0x148/0x220 [ 917.069760][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 917.074961][ C0] kthread+0x3af/0x750 [ 917.079032][ C0] ? __pfx_kthread+0x10/0x10 [ 917.083634][ C0] ? __pfx_kthread+0x10/0x10 [ 917.088228][ C0] ret_from_fork+0x45/0x80 [ 917.092651][ C0] ? __pfx_kthread+0x10/0x10 [ 917.097242][ C0] ret_from_fork_asm+0x1a/0x30 [ 917.102023][ C0] [ 917.105052][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 917.111371][ C0] CPU: 0 UID: 0 PID: 16422 Comm: syz.0.2658 Not tainted 6.14.0-rc1-syzkaller-00034-g92514ef226f5 #0 [ 917.122125][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 917.132176][ C0] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 917.138855][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 917.158469][ C0] RSP: 0000:ffffc9000af47820 EFLAGS: 00000293 [ 917.164537][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81adcd3a [ 917.172502][ C0] RDX: ffff88802fa8a440 RSI: ffffffff81adcd14 RDI: 0000000000000005 [ 917.180467][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 917.188430][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170e8951 [ 917.196395][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 917.204359][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 917.213286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.219867][ C0] CR2: 00007f5028312fb8 CR3: 000000007cff8000 CR4: 00000000003526f0 [ 917.227836][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 917.235802][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 917.243767][ C0] Call Trace: [ 917.247045][ C0] [ 917.249896][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 917.256223][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 917.261506][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 917.266970][ C0] ? timekeeping_advance+0x72e/0xa90 [ 917.272256][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 917.277891][ C0] ? __asan_memcpy+0x3c/0x60 [ 917.282485][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 917.287792][ C0] ? rcu_is_watching+0x12/0xc0 [ 917.292555][ C0] ? update_process_times+0x178/0x2d0 [ 917.297931][ C0] ? __pfx_update_process_times+0x10/0x10 [ 917.303653][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 917.309108][ C0] ? update_wall_time+0x1c/0x40 [ 917.313962][ C0] ? tick_nohz_handler+0x376/0x530 [ 917.319073][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 917.324529][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 917.329902][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 917.335615][ C0] ? read_tsc+0x9/0x20 [ 917.339702][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 917.344822][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 917.350979][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 917.356791][ C0] [ 917.359715][ C0] [ 917.362641][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.368803][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 917.374903][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 917.381001][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 917.387102][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 917.392311][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 917.397430][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 917.402457][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 917.408008][ C0] tlb_finish_mmu+0x3c9/0x7b0 [ 917.412692][ C0] exit_mmap+0x40e/0xba0 [ 917.416943][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 917.421718][ C0] ? __pfx_mark_lock+0x10/0x10 [ 917.426507][ C0] __mmput+0x12a/0x410 [ 917.430586][ C0] mmput+0x62/0x70 [ 917.434309][ C0] do_exit+0x9ba/0x2d70 [ 917.438467][ C0] ? get_signal+0x8f7/0x26c0 [ 917.443066][ C0] ? __pfx_do_exit+0x10/0x10 [ 917.447653][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 917.452672][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 917.458053][ C0] do_group_exit+0xd3/0x2a0 [ 917.462560][ C0] get_signal+0x24ed/0x26c0 [ 917.467073][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 917.472275][ C0] ? selinux_netlbl_socket_connect+0x30/0x40 [ 917.478265][ C0] ? __pfx_get_signal+0x10/0x10 [ 917.483123][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 917.488668][ C0] ? __pfx___sys_connect+0x10/0x10 [ 917.493782][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 917.499941][ C0] ? rcu_is_watching+0x12/0xc0 [ 917.504709][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 917.510340][ C0] do_syscall_64+0xda/0x250 [ 917.514846][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.520743][ C0] RIP: 0033:0x7f5ecd58cde9 [ 917.525157][ C0] Code: Unable to access opcode bytes at 0x7f5ecd58cdbf. [ 917.532164][ C0] RSP: 002b:00007f5ece34b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 917.540576][ C0] RAX: 0000000000000000 RBX: 00007f5ecd7a6080 RCX: 00007f5ecd58cde9 [ 917.548544][ C0] RDX: 000000000000006e RSI: 000020000057eff8 RDI: 0000000000000003 [ 917.556511][ C0] RBP: 00007f5ecd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 917.564473][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.572436][ C0] R13: 0000000000000000 R14: 00007f5ecd7a6080 R15: 00007ffcfaa0ee48 [ 917.580412][ C0] [ 917.584750][ C0] vkms_vblank_simulate: vblank timer overrun