last executing test programs: 22m21.278535191s ago: executing program 32 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000000c0)={r1, 0x20}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={r1, &(0x7f0000000000)=""/226}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) 22m21.132495754s ago: executing program 33 (id=369): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x80, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x9, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x1, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x6, 0x83f4, 0x129, 0x3, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x825, 0x81, 0x9, 0xf9a2, 0x8001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x5, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x19, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0x3, 0x6, 0x46, 0x4c2336d3, 0x7fffffff, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x401, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x5, 0x7fff, 0x3, 0x6, 0xf, 0x10, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x46d4, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x3ff, 0x5a48e326, 0x4, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8, 0xce6d, 0x9}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x2, 0x100}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8m58.066647621s ago: executing program 34 (id=3383): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x129081, 0x0) unshare(0x24060400) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000180)={0x8, 0x1}) 8m55.080544654s ago: executing program 35 (id=3418): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8m52.892427073s ago: executing program 36 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a30ee000000140004800800024000000000080001400000000571000000060a010400004008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0xc080) 8m52.566288062s ago: executing program 37 (id=3442): mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 8m37.026515978s ago: executing program 38 (id=3474): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40020, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x4) 8m6.086508288s ago: executing program 39 (id=3716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x200040cc) 7m57.215867458s ago: executing program 40 (id=3823): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r0, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}}, 0x8000) 7m29.654576798s ago: executing program 41 (id=3879): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x5c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 6m48.532461119s ago: executing program 42 (id=4204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) 6m35.622955706s ago: executing program 43 (id=4217): r0 = io_uring_setup(0x697d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xa9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) getpeername$packet(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m18.739884373s ago: executing program 44 (id=4327): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000ec0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x40, 0x5, 0x1, 'e'}}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x54f554893171c338, 0x11, 0xd8, {0xd8, 0x7, "fbce8571fe062660047d3d38a221bf2e1a004d1676f52bb687bdfa04ac2de9e59306befe919b48e2310291eddf5a09089b24ad7bf0b3d51e4d79e6f0ff2fd64e6b3d8c7d0d74b36cf32e1c3c580b5bf67e8247caa96d5c1f2e5c82b301b5bcf9ccfa785866f53b8226e0808dfd04bae36ee72c0026a1128c67f21c7526614650752e8201a248dddf992dbfe7e71e645ced49745aef117194f4f6076b2381f6db45ff961fb6eafc1df4fa7073b886a0ed6490c7fe1246b84933a9540f7e43d2cec3f51c3dc3b91a0a1dc744517c246ec686872ff52845"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xa, 0xf8, "ceb535338cd6495fbb7584974a0af91bffaedd388d5c161a21f3fc0cedc6dc3ab94a68e37f9808f26d0567ee70467634624f4672ffbcaf0cfd4a9df20af75db612f1aa4ec6da4be2929676e454b6e3b73d9ce6632ad09cf5fae9a9cf7fde6515eaed3ec98f2f41f72d5ca37cf7bbdb0e4281df83e3728c60fd7d7a5d85591cf88d579854a80db2dd4770f526feafc305e02b9f6f48b817dc1d740a6b90bcf21cea121d96918e8e58e5fe088081cb6c811ec0dde7ddcf9c4d4f3618575ec981294e00823921c344e01cc9a12cefc90891544ca0bec6f3b392026f23327ef67efc80ff228c040bc5582b4117f5b8c78e7eb4fe6c1ea7bd7c70"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0xc0, 0x5, 0x5, "3bdbd420a8"}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="8af89f24183eb7176db1ab4325244d81bfb74a49a2c11f13172f6e63c39c9d9e82563d4af8a070fc44197d78ad59a41ecae4fa7fb50dfb11dbf0f7f50ca998203d2ffa4cdb3107ba45a288aa3c1018fdff4e28d95d1d9249ffff7976b5b759cf12db6a80012b431bfc6f27c0862872506b6e8e3ab43d089595c71c85323faa2d67532da94448e8ceb306296ec013cb6ba6b498866f40b4f842978cd8b5914c723e5f1a523446c12d9e678a052c958216ac397433540ef03df5a8f078cf19bfe97b13bbe0661bc52f687aa4782f82dc04c111018e7bfa34a529290135b7309b6d61b6ca39fcb43db133c9368d0234b15b4e43c59eec10fd56b6"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000300)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="400d00b6000000c13fa4dd07999cfc259ef2e1ed7ca3d16ef183999ebae35ba20f1a5aa48360b15921c53daa2784c6a470c9171eb2b5a9b6067516e0b7836831e03cad371234cd6680b2eec2f23fd0ca9a56621d7b05f5fc12cb74625a79d235043ddd845869c5632ef0bc341eaf563ce9f61bc9175f44a50afc9a9e0ab7ac75bc5f57"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x18, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x10c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x6, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x45}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3e5b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0xfffffffffffffdef, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x30000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x927a}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) 6m1.284110109s ago: executing program 7 (id=4368): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 6m0.764236478s ago: executing program 7 (id=4372): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000756c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x30, 0x3a, 0x0, @empty, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 6m0.657028167s ago: executing program 7 (id=4373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m0.399150531s ago: executing program 7 (id=4376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 6m0.340708464s ago: executing program 7 (id=4378): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x2000008, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m59.89551212s ago: executing program 7 (id=4380): mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x10005) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs$pagemap(r1, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f00006f1000/0x3000)=nil, &(0x7f0000ebb000/0x4000)=nil, 0x1ff, &(0x7f0000000300)=[{0x8, 0x2, 0x2}], 0x1, 0x1, 0x5, 0x12, 0x42, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write(r6, &(0x7f00000003c0)="9a33cb7a49", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r9}}, 0x40) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000"], 0x0, 0x34}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) 5m59.24950476s ago: executing program 45 (id=4380): mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x10005) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs$pagemap(r1, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f00006f1000/0x3000)=nil, &(0x7f0000ebb000/0x4000)=nil, 0x1ff, &(0x7f0000000300)=[{0x8, 0x2, 0x2}], 0x1, 0x1, 0x5, 0x12, 0x42, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write(r6, &(0x7f00000003c0)="9a33cb7a49", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r9}}, 0x40) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000"], 0x0, 0x34}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) 5m25.943155511s ago: executing program 1 (id=4491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r2) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) read(r5, &(0x7f0000000000), 0x0) msync(&(0x7f000044f000/0x4000)=nil, 0x4000, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x1, 0xb4, 0x2]}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0xa4d, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0x40000, 0x66db}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xa8, 0x6, 0x1ff, 0x1}}, @wr_drn={0x68, 0x20, {0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0x6}}, @nested_amd_vmload={0x182, 0x18}], 0x100}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[], 0x68}}, 0xa040) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) 5m24.636358592s ago: executing program 1 (id=4496): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) 5m24.459712284s ago: executing program 1 (id=4498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x200) 5m24.271653519s ago: executing program 1 (id=4501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 5m23.050744813s ago: executing program 1 (id=4506): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48840) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m22.372093178s ago: executing program 1 (id=4508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040100000000000000000002000000050001000100"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 5m21.763075609s ago: executing program 46 (id=4508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001040100000000000000000002000000050001000100"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 4m38.819831393s ago: executing program 2 (id=4630): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001e00150126bd7000fbdbdf2500000000000000000000ffffe0000001000004d602006c00fe8000000000000000000000000000252d09417b98b446000c0015005c0735003b00060008000b"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000ffffffff800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c6173740000000004b6028008000340000001", @ANYRES32=r5], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x8002) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r6, &(0x7f000000ac40)={@val={0x0, 0x6}, @void, @ipv4=@esp={{0x5, 0x4, 0x0, 0x25, 0xb88, 0x65, 0x0, 0xe, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast}, {0x4d6, 0x1b68, @cc={0x1, 0x0, 0x9, 0x2, 0x6, 0x7f, 0x5a74, [@ipv6=@generic={0x5, 0x6, "8e4fef", 0xb2a, 0x5c, 0x1, @empty, @private0, {[], "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"}}]}}}}, 0xb8c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1100000004000000040000000500000018000000", @ANYRES32, @ANYBLOB="9d00000000000000000000000008000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001050500000000000000080a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001180006"], 0xac}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc00000000000000000000000000000108000740000000012c00068014000500fe800000000000000000000400000031140004"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 4m37.30765663s ago: executing program 0 (id=4636): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m35.286642891s ago: executing program 0 (id=4638): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4048aecb, &(0x7f0000000000)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) fspick(0xffffffffffffffff, 0x0, 0x1) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x8001}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 4m34.404372603s ago: executing program 2 (id=4642): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x1}) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x60, 0x3, 0x7, 0x8, 0x3, 0x81}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 4m32.798536187s ago: executing program 2 (id=4646): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e24, @loopback}], 0x40) 4m32.663363018s ago: executing program 2 (id=4648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 4m32.447956657s ago: executing program 2 (id=4649): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='udf\x00', 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x94}}, 0x0) 4m31.694641073s ago: executing program 0 (id=4651): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x70180, 0x1f4) ioctl(r1, 0xc0145608, &(0x7f0000000400)="030000000100000001") setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)="d5", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x2, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES64=0xffffffffffffffff, @ANYBLOB="010000000000000e9edb1f9a98"], 0x18}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=0x0], 0xa4}, 0x1, 0x0, 0x0, 0x4c056}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x7, 0x9}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) 4m30.356155639s ago: executing program 2 (id=4655): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @sco, @ax25={0x3, @bcast}, @in={0x2, 0x5, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20004000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x3a, @multicast1, 0x4e20, 0x3, 'lblc\x00', 0x20, 0x561b87fb, 0x1b}, {@broadcast, 0x4e20, 0x3, 0x5, 0x80000001, 0x6}}, 0x44) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000002c0)={0x0, r2, r0, 0x67, 0x6c, '\x00', {0x200, 0x1, 0x2, 0x0, 0x9, 0x4, 0xc, 0xffffffff, {0x9}, {0x8000000000000001, 0x4}, {0xffffffffffffd6e0, 0x5}, 0x7, 0x5, 0x8, 0x6, 0xb6f1, 0x3ff, 0x800, 0xb4, 0xe, 0x4, '\x00', 0x5, 0x6, 0x2, 0x1}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) recvmsg$inet_nvme(r0, &(0x7f0000001880)={&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001800)=""/70, 0x46}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f00000019c0)={r2, &(0x7f00000018c0)='&@\x00', 0x400, &(0x7f0000001900)={@align=0xffffffffffffffff, {0x8, 0x1000, 0x7ff, 0x6}}, 0x5, &(0x7f0000001940)={@_ha_fsid}, &(0x7f0000001980)=0x2}) ioctl$I2C_TENBIT(r8, 0x704, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x54, r10, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004094}, 0x5015ee44789bcf43) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f0000001d00)={0x53e9, 0xd, 0x9}) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001d80)={0x2, 0x0, @pic={0x3, 0x2, 0x10, 0x9, 0xd6, 0x9, 0x20, 0x8, 0x2, 0xf, 0xde, 0x9, 0x3, 0x6, 0x9, 0x7}}) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x20200, 0x0) splice(r2, &(0x7f0000001fc0), r12, &(0x7f0000002040)=0x2, 0x1ff, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000002100)={&(0x7f0000002080)=""/104, 0x68, 0xfff80000, 0x7fffffff}) ioctl$VIDIOC_S_INPUT(r12, 0xc0045627, &(0x7f0000002140)=0x6) r13 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002180), 0x340, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) 4m28.612791064s ago: executing program 47 (id=4655): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @sco, @ax25={0x3, @bcast}, @in={0x2, 0x5, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20004000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000200)=0x1, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x3a, @multicast1, 0x4e20, 0x3, 'lblc\x00', 0x20, 0x561b87fb, 0x1b}, {@broadcast, 0x4e20, 0x3, 0x5, 0x80000001, 0x6}}, 0x44) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000002c0)={0x0, r2, r0, 0x67, 0x6c, '\x00', {0x200, 0x1, 0x2, 0x0, 0x9, 0x4, 0xc, 0xffffffff, {0x9}, {0x8000000000000001, 0x4}, {0xffffffffffffd6e0, 0x5}, 0x7, 0x5, 0x8, 0x6, 0xb6f1, 0x3ff, 0x800, 0xb4, 0xe, 0x4, '\x00', 0x5, 0x6, 0x2, 0x1}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) recvmsg$inet_nvme(r0, &(0x7f0000001880)={&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001800)=""/70, 0x46}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f00000019c0)={r2, &(0x7f00000018c0)='&@\x00', 0x400, &(0x7f0000001900)={@align=0xffffffffffffffff, {0x8, 0x1000, 0x7ff, 0x6}}, 0x5, &(0x7f0000001940)={@_ha_fsid}, &(0x7f0000001980)=0x2}) ioctl$I2C_TENBIT(r8, 0x704, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000c0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x54, r10, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004094}, 0x5015ee44789bcf43) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f0000001d00)={0x53e9, 0xd, 0x9}) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000001d80)={0x2, 0x0, @pic={0x3, 0x2, 0x10, 0x9, 0xd6, 0x9, 0x20, 0x8, 0x2, 0xf, 0xde, 0x9, 0x3, 0x6, 0x9, 0x7}}) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x20200, 0x0) splice(r2, &(0x7f0000001fc0), r12, &(0x7f0000002040)=0x2, 0x1ff, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000002100)={&(0x7f0000002080)=""/104, 0x68, 0xfff80000, 0x7fffffff}) ioctl$VIDIOC_S_INPUT(r12, 0xc0045627, &(0x7f0000002140)=0x6) r13 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002180), 0x340, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) 4m28.576852573s ago: executing program 0 (id=4659): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 4m28.226991195s ago: executing program 0 (id=4660): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0xa4fc, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2, 0x800000}, {@rand_addr=0x80, 0x7}, {@private=0xa010100, 0x1}]}]}}}}}}}, 0x0) 4m27.030795758s ago: executing program 4 (id=4663): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9", 0x1}], 0x1}}], 0x2, 0x40480c0) sendto$inet(r1, &(0x7f0000000000)="1ec419", 0x3, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m26.839929399s ago: executing program 0 (id=4664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x5015, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x20000010) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 4m26.179103358s ago: executing program 48 (id=4664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x5015, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x20000010) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 4m26.151919932s ago: executing program 4 (id=4667): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x800) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='udf\x00', 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x94}}, 0x0) 4m25.167390973s ago: executing program 4 (id=4668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpgid(0x0) capset(0x0, &(0x7f00000000c0)={0x4, 0x3, 0x8, 0x3, 0x7, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m24.058576913s ago: executing program 4 (id=4670): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 4m23.846042546s ago: executing program 4 (id=4671): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x82001, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x40008}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x3237, 0x55}, {@empty, 0x4e24, 0x1, 0x0, 0x12d60, 0x32d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @loopback, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002680)={@remote, 0x300, 0x0, 0x3, 0x9, 0x0, 0x8}, 0x20) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0x0, r6, &(0x7f0000000200)={0x478, 0x5, 0x1, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x0, 0xff, 0x2, 0x2, 0x6}, 0x20) 4m19.447982978s ago: executing program 4 (id=4679): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 4m19.03864386s ago: executing program 49 (id=4679): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 8.827696272s ago: executing program 3 (id=5400): mmap(&(0x7f0000567000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6ce4000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x2, 0x60000, 0xc, 0x2, 0x8}) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="e6c37adc001c00128009000100766c616e0000ac82b000000c000280060001000200000008", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r2, 0x0, r2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 8.723897275s ago: executing program 6 (id=5401): setns(0xc9, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x3) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000100)=0x1c) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @remote, 0x80000000}}, 0x24) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000180)=0x7fffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100005938d7401097307733961e000001090212000100001e000904458d4fa5e4243aa10f93b376138c20c62e83b6be1cf8e859c66198416bf984c49a15e5c97826d391fb65b4bade00000000d7f9421b0970fc4adb8a47f2bb62ccd0333197818c6e184333532338e000f34576e9a14cf66c7e1fc6d86f27f8978431b2942ddd2592e30d00b49205ac7bf60994b562"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r6, 0xc0485630, &(0x7f0000000000)={0xfffffff8, "e0bfeb0262362e18742b7c680a639d41688cdd7f7d86df0118d623e2aa4309a6", 0x3, 0x1, 0xffffffff, 0x3f1708, 0x4}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r3], 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6.628117867s ago: executing program 5 (id=5414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d30000000000000080005"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000031000010400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 6.370477177s ago: executing program 5 (id=5416): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./tracefs/instances/foo\x00', 0x10) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 6.127274026s ago: executing program 3 (id=5417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff8000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x800000200000000) 6.084352309s ago: executing program 9 (id=5418): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001000)={0x20, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000200)={0x801400, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r6, &(0x7f0000000000)=""/116, 0x74) process_madvise(r5, 0x0, 0x0, 0x17, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000000e0601040000000000000000050000080900020073797a300000000005000100070000000900020073797a31000000000900020073797a30000000000900020073797a31000000000900020073797a30000000001744b6019903705d8f35011de747b2c3ce384d8ced60484ea13332ceb4ee7d023bddfcb443d2daa111116ed7b5aba0b68dad341c72dcdb4c6790e03b038e3d734691104ad8f55890680b3edba8b53f06383f"], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x5034) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 5.897091047s ago: executing program 5 (id=5420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x8000000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.848341253s ago: executing program 3 (id=5421): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r2, 0x800, {0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x5, 0x1a, 0x0, "4c34c59b20d56236fc221a71649fb0b4662df02f087d0ac37fda5dc428193230c95a3b53477ae9a55ddd18ef63a604942e4aa31b3eb60bba16869be793703556", "d4d64e72b620dbd04dbb6b1529e00014900726fa0bf1ffd15faffe3690b1d83aa4c8d80706ae87131935c4243886fc606a4d09393c432b1c58d9cfee685d2c12", "2661210d09ca41ce43ba288d3778e611791bbf979b6e37ead2d45df8a8010ddf", [0x9, 0x6]}}) write(r2, &(0x7f0000000180)='1', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2fde0) 5.770895212s ago: executing program 9 (id=5422): r0 = socket(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_op], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x0, 0xfd, 0x0, 0x0, 0x0, @mcast1, @remote, 0x7, 0x7800, 0x2}}) recvmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/107, 0x6b}], 0x1, &(0x7f00000002c0)=""/178, 0xb2}, 0x1) 5.74482635s ago: executing program 8 (id=5423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x6202, 0x4) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a482", 0x48}], 0x1}}], 0x1, 0x2090) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ftruncate(0xffffffffffffffff, 0x8800000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x1) 4.812022239s ago: executing program 6 (id=5424): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000008c0)="f6bd268f7e", 0x5) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/QEMU0001:00/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='ohci-platform', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='QEMU0001:00', 0xb) 4.804339065s ago: executing program 8 (id=5425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3b}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.762187853s ago: executing program 8 (id=5426): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x91) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000001c0)={r12, @in={{0x2, 0x4e23, @empty}}, 0xfffc}, 0x90) mkdirat(r8, &(0x7f0000000300)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f78906", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.58787668s ago: executing program 9 (id=5427): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa18080045000028000400000006907864010108ac14", @ANYRES32=0x41424344, @ANYRESHEX=r1, @ANYBLOB="077e6d306aa74c762deacc25176a5088cea7a4bbdc6a8e00000090787748ce28ee62a307977484fddd98c2f3075b8bb09cf44274d358a8e7086a5d3aaca88961a01827975a6375903df84488ecd9080b213d1f83bf435c6107e24811f2cfd7"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0xf0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x6f1, 0x800000008, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x2000, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(r3, &(0x7f0000000240)='./debug/ref_tracker/netns-7-4026531833-notrefcnt\x00', 0x10003, 0x98) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x80000001}], 0x18, 0x50}], 0x1, 0x40800) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x68a80) r5 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in=@private=0xa010101, @in=@multicast1, 0x4e21, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x80, 0x2f, 0x0, r6}, {0x2, 0x7fffffff, 0xe, 0x6, 0xffffffff, 0xfffffffffffffff8, 0x6, 0x8}, {0x3, 0x0, 0x100, 0x83}, 0x5, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x33}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4003504, 0x2, 0x0, 0xff, 0x200, 0x8, 0x3ff}}, 0xe8) 4.151022583s ago: executing program 9 (id=5428): mmap(&(0x7f0000567000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6ce4000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x2, 0x60000, 0xc, 0x2, 0x8}) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="e6c37adc001c00128009000100766c616e0000ac82b000000c000280060001000200000008", @ANYRES32, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r3, 0x0, r3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.135815255s ago: executing program 6 (id=5429): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.980044447s ago: executing program 5 (id=5430): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./tracefs/instances/foo\x00', 0x10) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 3.209083808s ago: executing program 3 (id=5431): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x3}, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="77355109baefc392860ec9c2ddc4fdcc08435fa1b66328214087d097e44321d2ec2fb2e590b730296fb0ab1469caa78e7bd82640edb88ea20f41ae5547026f8c765e7a8b8b2f1cfe922e45b58b2317f4f9f7c4d1ea20d5decf92a0f41707bef14f4606685f9a28878b9bc1bccea1ae81ac45506aef6646ebee92bf90fb263b2d6f90ce4b04414149bbccf974bc2364525508c1bd8c9aa4faa9b89e4eff2ac92e57afff3d896eca2f3de9c518fc20db3dc5654f852f30eacc792a8618d68aeed9451d5e6e7def6fd680ce3264ed252a0034ebc95b6e00b0ce1ba1a5ddf8fccbf6", 0xe0, 0x0, &(0x7f0000000180)={0x2, 0xc8, {0x0, 0xc, 0x35, "d0dae002c6c74a1c8ab5bf1bf0adffb8dd6b013a0eca03d25fc4dd0ac4d3d237a89d8a7892bf78b05ba74d82f47244ce1bc850f0f3", 0x86, "28c77a2ac8d261a223fc04ea77b18c0cfbe980c15a97e45ff2f4e8cd589d419c80dd5274f815ea39ff5351765a27a02c680f77f994cf0fa19619ded44734d2e06f27a488ba52e4d285f88feecf8d772ace6c3fa32a744b9b1cfa49b8c117524e2dc9f486e02d71c93b8a9bde211207cf4e5262a7fd4c28dae1d37c3cde451b2a14e2783df1a9"}, 0x2e, "475323718f8d21d2a7c8c965f4a865b1273041f5b716af9793ade2d7b390ae4c62b59ae630c909654630baf649ca"}, 0x102}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xd001, 0x103) (async) syz_usb_connect(0x5, 0x73d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0xe0, 0x4, 0xce, 0x40, 0xeb1, 0x7007, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72b, 0x2, 0xd, 0xf9, 0x80, 0x11, "", [{{0x9, 0x4, 0xc3, 0x3, 0x4, 0xce, 0xc6, 0xf9, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b0"}, {0x5, 0x24, 0x0, 0xd9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0xfffb, 0x1}, {0x6, 0x24, 0x1a, 0x81, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x6e0}, @mbim={0xc, 0x24, 0x1b, 0xa4c4, 0x5, 0x7, 0x4, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0xc98, 0x43a}, @obex={0x5, 0x24, 0x15, 0x8}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d93c0fdbca"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x1, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x0, 0x2, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xe2}, @mdlm={0x15, 0x24, 0x12, 0x3ff}]}], [{{0x9, 0x5, 0xb, 0x2, 0x20, 0xff, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x29, 0x2, 0x7f}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x9, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9a, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x2}]}}]}}, {{0x9, 0x4, 0x54, 0xe, 0x10, 0x20, 0x4b, 0x5, 0x3, [], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0xfb, 0x9, 0xc, [@generic={0x20, 0x6, "4af7c44ad85ac497948ff4ae4fd69d04b451ddd0634c049a394319ef5f88"}, @generic={0xdd, 0x21, "0dc6d361b26c327fd32f696b7efa3e97f55ebdd56a28ed603f0e3a0aa06ffbac5ad01ef48aa489d4b4307ae32cd948d61e781a28f9ef8e46e93d1b8db3487c71a0b9c0be410c832ab94416e33e319bcdfbf84c0c800ea2a75ca3a9f0b8a513983cb11e59f93a66711819a027f9e79832e3ea7464ea933223338d6a9f4cec2fdbdc819dac215c45cc8c588ca3d8e43e6e1fc8ffa4245c6542c219715717e7b9fe661363174b07d584fad335f88c1aad705671144a493bdab0dd9655c029857e192224da57e28aeab310c70c8148eb056dd4e6ec1ce8d095a581f836"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0x7f, 0xd, [@generic={0x39, 0x1e, "4b1d62d180f5560249d2924750ae0160620100a472d38f0a8597dff9be67b1a0ba789620780c9e3fe5ee466e6a87284113ecefa1451161"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x7, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x5, 0x4, [@generic={0x2d, 0xd, "7ba3b2a68c58f87526417161fc942f3cecf863ee6c862e8b99a634183007688a67321cab88f6d6497e4130"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0xa, 0x9, [@generic={0xd3, 0x4, "70d798c0ef27c56bb12973918a92593629f8055b9b9cfa8c1a122c20f3f89e4c171f0a9bc64e0f9c28eef94b9ade80930d8c066144360846815fd5e0ad65593fa82e04953e728e3766fe7c29c08f7ed571620cb8a8adf9c4ef4b2e53a11a26d4a80e3d4ea46eca74f1dc58a2d91e32605dca0faaaca106f3752b396e833735add0e7b51602db7e3a3c111bb9af4c59a5c3056d11823d2bc85cd32de276e47cbe38244f8056d652518010de5a23728a77a15a4625b8a238456305814acba7c8556950c034e8c889cb8a93432239be6e7da2"}, @generic={0xb7, 0x9, "4224d65852712942cffc804cbdd282dd6e7b622ba427fac1a415ef0ad15447ae03386173c38cde41fdbf107fd78fc86e414047cf548086ebd51a5ada607fdc536b28daa5eda9a43dfe7cff2ed19587a7c78283910742e887f2cfe8321c0f3822a7081c6f7435621df840172850b7513187cda9c7998242103dd3868d7522032da65b47c48225eaecd0909218871ce959e79cf41b621e6bd54a24944c2fd7ecebbffa4098fe12a1f511b54121e45a03f126ba039712"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x3, 0x9, 0x80}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x9, 0x1a, 0x40, [@generic={0x63, 0x10, "ad243347a40a5c4e4fe4d1a67459878a7446e76ac3fab7a6b2e8ea5e8de60da30ef558ee70649b8a1919d3c4a956f3fafd1f9c9a9becdc575815206b87205974bca171b60c30873e9483b1a9cce8afc3d7ce7d4946e6ae68ec125cf2d5f5112fa5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x8, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x1ff}, @generic={0x52, 0x1, "73fa782a2bdb63c6076769f05180ab643ea372c29c13fdadbbd4f40a17040c607d0f7d0c47d1eacb3f7fcd9f2a864964386977c361e9a7b6c129e27aca3dc00d7449fa189bb9a89033461c5373db6540"}]}}, {{0x9, 0x5, 0x4e, 0x10, 0x40, 0xe7, 0x0, 0x7, [@generic={0xbb, 0x30, "3a40d7ba1b81b6bc70174a8b82a7206a8a286a11f08cc36baf64fe37e12b257d567d39a5d94c8734566d9bf759f0347808f1748ce7cf080df2870a9aec14b19f6292e148fc63a05e7705af13c83302d8222d2f343f567bded283c2f64c5ff15afec49abafe7e0998962ea236285ac81807f294efa7e3007a0a547aae196e139c4b2f7b5c623070ce00ec3261be7feacc1995c5c9ba59f5805719f404d49df395969af5a0b886bf5ae2ec0b00d16ef884994fb04da9a1f65a27"}, @generic={0x51, 0x23, "551c8cdf6294ca58f5d0d285ca41f78cbbc510d882ce93d5b1aa6de2f3c9994b0633284369870eb6ad167208f6fb8838270b1f04fa2dbda726451ec0ea9a347f834f3814a4bec1a6d3b16937ce6838"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x4, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}]}}, {{0x9, 0x5, 0x2, 0x1c, 0x10, 0x4, 0x8, 0x2}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0xa, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x2}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x8, 0x8, 0x94, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0xffff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0xf3, 0x5, 0x3, [@generic={0xd, 0xf, "e03360d64160734c9a11b2"}]}}, {{0x9, 0x5, 0x7, 0x1f, 0x3ff, 0x0, 0x2, 0xa, [@generic={0xcf, 0x9, "95d521b454b09fc32d3430669cfda4aed7174fcca1f545b0a587ddb7a8729d8bb44718bfa8834d35a1933c856175ec371a0b013c74891acc24e4bd61d2b2ff761ec0fb50194a6b0ab7673c87bcd6c43c6daf109a56bb72bdfa9f4f0483b1fe2fe401d85ca9966de6025650cafca73ca8800c9564c54f2fa949e6d111526105b437e759c7e64264d06f2f58acdab7c84bf0a8d060ce7454f76f322e416aee682eb8d05fbbf73cb594b0c4b5caebed0c34fb219088497ff2891cb314aedb92f18a53c1f699e19b338fa4b2ddcb41"}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0xb6232e7c0cd086cf, 0x3, 0x3, 0x49, 0xff, 0x2}, 0x34, &(0x7f0000000b00)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "67eff312b6bd9a915d5adc60cfa4be5a"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7, 0xf, 0xe4e, [0xffc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf1, 0x5, 0x0, 0xbfe7, 0x1}]}, 0x1, [{0x6d, &(0x7f0000000b40)=@string={0x6d, 0x3, "6da0e750fbfb5485d8e853a13230826b8e16ad45d8a07e9379be3443e3810d1646a49feb39822ed4a4adbeb867b2e614e0e1db6b8503baacf3ca3a16f13cb9af82b2725e7d5b82b2bd4269e88a1de39e43b28c594fb95df15d644ec1bb27aaa65e1388196d8ae293041a9e"}}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c00), 0x2608c0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000c40)={0x400, 0x4, 0x10, "05aaf5ed12a56ae16a2a49f1e84999cc0799e98ce9f7a040405d9e3a7085d14f", 0x31435641}) (async) syz_usb_connect$midi(0x3, 0x6f, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1686, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x2, 0x60, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0xf}], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x5, 0x7, 0x14, {0x4}}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x0, 0x8, {0x7, 0x25, 0x1, 0x3, "7efeb1"}}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x8, 0xfb, 0x4, {0xe, 0x25, 0x1, 0xa, "1ab30bf74b9ccc4c816c"}}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x0, 0x3, 0xf7, {0x8, 0x25, 0x1, 0x4, "d7496211"}}}]}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x3, 0x6b, 0x3, 0xff}, 0x2a, &(0x7f0000000d40)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "11428b6f5371c4d1c54274f0de9a1032"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x9, 0x200}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7, 0x8, 0x8}]}, 0x5, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000e40)=@string={0x4, 0x3, "6612"}}, {0x50, &(0x7f0000000e80)=@string={0x50, 0x3, "8c1eac1536178ccec4251e3d612d5c57d6f6b09d7217ab8a5a0f1b839d6c9f15b6f7990d23c5fd5361992ef66251f9686d57b1ed7b3a0e1fe50257b799d445bd676429d1524f73e18fee5b9d083c"}}]}) (async) syz_usb_connect$uac3(0x6, 0x142, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x60, 0x582, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x3, 0x1, 0xf4, 0x20, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x24, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4b, 0x7}, [@extension_unit={0x1d, 0x24, 0xa, 0x4, 0x5, [0x0, 0x2, 0x3, 0x0, 0x3, 0x1]}, @multiply_unit={0xb, 0x24, 0xd, 0x9, 0x3, 0x3, 0x3}, @selector_unit={0x5, 0x24, 0xc, 0x9}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x404, 0x1, 0x8, 0x0, 0x8, 0xacf, 0x2, 0x188}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6f}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x6, 0x8, "371015c10c"}, @as_header={0x17, 0x24, 0x1, 0x7, 0x9, 0x0, 0x0, 0x6, 0x0, 0x5b94, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0xb8, 0x3, "e100d0", "a9f5"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2e, 0x3, "7325f3"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x8, 0x6, '%D'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x8, 0x0, {0xa, 0x25, 0x25, 0x9, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x2, 0x6, 0x7, "790308", "248976"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xf7, 0x0, 0x0, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1d, 0x9, "48e180"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0xc, 0xc4, '!', "a21dce"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x55}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x43, 0x6, 0xb, {0xa, 0x25, 0x25, 0xfffffff7, 0xe, 0x8}}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0xa3, 0x0, 0x8, 0x8, 0xb}, 0x5, &(0x7f0000001140)={0x5, 0xf, 0x5}, 0xa, [{0x42, &(0x7f0000001180)=@string={0x42, 0x3, "f129d8943c145b70f3afa7fa6c04b154720c2bbea37c3a640d4dc5159dc210329d99c125f892e0f4d762f3fb173280d24b2746bda5daf8ab4601613c69f53e7d"}}, {0x8, &(0x7f0000001200)=@string={0x8, 0x3, "38944c4663b3"}}, {0x1e, &(0x7f0000001240)=@string={0x1e, 0x3, "9060c7fb08c4e7c9ecf15f5ede56d45172d7a3c4842b410d9852a205"}}, {0xce, &(0x7f0000001280)=@string={0xce, 0x3, "99461f9db87df7ec988bb9f4ac3ee92f4bfc223870cc6fbb66aba394d28bb6bed3ba574ba59b9025b2e86b800e76e45d5c201680ca186caeafe257bd95da578160d006c657844dfc1ffcf646479fdd2738844dd2b1e8e509669f73eac9f628f9f8a5df280e475e279b38cfc21240b7064125f4db2732c04bd1fb340677d232f62f8b471994ccf8a1e71a4272c3a07494fe745747d5d5ff8cf5825492e0b133d36e60e68b9755b3ddda80bc324e0582686baed4b48c02539b2c67d22df79e83231b20c70c1ed492b2790290ce"}}, {0xa8, &(0x7f0000001380)=@string={0xa8, 0x3, "dc9f7b2a255c06413bce1069e82ffa33310073171986a3008f8665ac7c9b12dd1647c59cecc3a79a72af87a8ee03c0bba03e8f87ad85cf094d6c69833883123b51946bdd4cffe7d05fd290cdd560538928e3cfc1fada98fadae8c70ed5949f115fdee1c2e6d851860702d755ff2ac900453c9ef861efbff6965bca4364bedffd0349b45271991d4d8df1d895e250678dc7061b4bb831c78acc1e88254b4a8a8462f4ddc7a8bb"}}, {0xcc, &(0x7f0000001440)=@string={0xcc, 0x3, "8b023d26e5feef87fa5a305e6d6c7748a894a1d17c965bdeb36b93324228c74de1b3a22aa8856cc85c4bd75cf08ea8c0c87d62601c0b7df6daaa2fe08f7fb936930258a2f044e06c041390a9b2405e48d811f19ae3b5616b38bf91b6e015e353520721524cf132d56f4deb26464e6b4b5102da59d2c86e14cf880d364bfbfc8b1701efa83e9cbac3ff01fa116caf0f7198db8c9c82e099d0707b84e8c205649eea5683ab59f9f66e63899300480dc8c7cf4a0ff33aabcf1b640d403e4b9a612016f666f4670d67a3c88b"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x426}}, {0xfc, &(0x7f0000001580)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x42a}}, {0x78, &(0x7f00000016c0)=@string={0x78, 0x3, "336c3c606d8e47af672da2ac54511465d5038fcd661c89970b2ca8ba877f4e31312e917a984f7477d29cc34780c171c2536e715bf56fc6a77c1b7d24bd708051a95474c8d49edfad3a5fdf839a781c8e2600769b8f6d71e1df1305eb38b023fc1eb540211105f13d2669a2b412a3d7e209e00a1aec9f"}}]}) r2 = syz_open_dev$vcsn(&(0x7f0000001800), 0x8000, 0x101241) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f00000018c0)={&(0x7f0000001840)=[{0x2, 0x0, 0x9, 0x1, 0x6, 0x2, 0xc7, 0x4}, {0x0, 0x0, 0x6, 0x80, 0x2, 0xfffffffffffffffa, 0x9}], 0x2, 0x38, 0x1, 0xff}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001900), 0x8000) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f00000019c0)={&(0x7f0000001940)='/dev/nvram\x00', &(0x7f0000001980)='/dev/nvram\x00', 0x5}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r4, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40884}, 0x4040814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b80), r0) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @multicast1, @empty}, &(0x7f0000001c00)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x90}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8814) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001d40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001d00)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000001d80)={0x4, 0x8, 0xfa00, {r8, 0xffff}}, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), r5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001f40)={0x1, &(0x7f0000001f00)=[{0xf, 0xf8, 0x6}]}) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), r5) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002080)={'syztnl0\x00', &(0x7f0000002000)={'gretap0\x00', r7, 0x10, 0x700, 0x400, 0x1000, {{0xb, 0x4, 0x3, 0x2, 0x2c, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0xc, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb0}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000020c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f00000022c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002100)={0x170, r10, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x24040800}, 0x14040000) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000002300)) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r13, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc404) 3.17653677s ago: executing program 5 (id=5432): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x800) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='udf\x00', 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x94}}, 0x0) 3.076991564s ago: executing program 6 (id=5433): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001000)={0x20, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 2.422339949s ago: executing program 5 (id=5434): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x12, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="20040400000004ad9257"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0}) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = syz_ublk_setup_io_uring(0x32d1, &(0x7f0000000200)={0x0, 0x4, 0x1000, 0x3, 0x13a, 0x0, r3}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r4, 0x5af, 0x7725, 0x16, 0x0, 0x34) 1.574767168s ago: executing program 6 (id=5435): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) migrate_pages(r1, 0x7, &(0x7f00000000c0)=0x1000, &(0x7f0000000180)=0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0xfffeffff, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) capget(&(0x7f0000000240)={0x19980330, r1}, &(0x7f0000000280)={0x4, 0x5, 0x1, 0xcb, 0x32, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x100000003, {0x2, 0xf0, 0x1}, {0x0, 0x1, 0x2}, 0xfe}, {0x0, 0x2, {0x1, 0x80}, {0x0, 0x1, 0x2}, 0xff, 0x2}], 0x40) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.557268704s ago: executing program 8 (id=5436): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r0, 0x1, 0x70bd2b, 0x25dfdbf6, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xe256610c62009b3d}, 0x600000c0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x2}]}}]}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000001c0)) ioctl(r4, 0x40104d01, &(0x7f0000000a00)) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x480001, 0x0) ioctl$BLKSSZGET(r2, 0x1268, &(0x7f0000000180)) 1.076045994s ago: executing program 8 (id=5437): r0 = socket$alg(0x26, 0x5, 0x0) mount$afs(&(0x7f0000000100)=@cell={0x23, '', 'syz1', '.backup'}, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000380)={[{}, {@dyn}]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r3, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) recvmmsg(r4, &(0x7f0000004380)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/97, 0x61}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/144, 0x90}], 0xa, &(0x7f0000004280)=""/240, 0xf0}, 0x1c000002}], 0x1, 0x40002001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5) 1.033574625s ago: executing program 9 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000170000000e0001006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) 840.011307ms ago: executing program 9 (id=5439): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003840)={@flat=@weak_binder={0x77622a85, 0xb, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0xffffffff, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x11}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x1}) r4 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000000300)="9101000000112233") openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="200101000000af31ce7870db"], 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000440)={0x24, &(0x7f00000001c0)={0x0, 0x0, 0x45, {0x45, 0x9, "d097b677692ad11e0ed9dec72368eb413d354704403c5c8b7e2be030650ebd07e2c0dd32667d027a9348e7363e7c29a0aa8e3b3a47542c8768f1177af997cf975facfa"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f00000003c0)={0x0, 0x22, 0x4, {[@main=@item_012={0x1, 0x0, 0x9, '6'}, @main=@item_012={0x1, 0x0, 0x9, "1b"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x11, 0x1, {0x22, 0x447}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x1, 0x7c, "7c04f384e94535cf6d102a0068633581591f35909ace593da73c8e58926857fafbb9bc8bd3d4f9bf2b6d7bc1f14e7bf2d916b7305077cb4836cf0add3bbb68462faeaebb995f6e0b3040d85ca66aa522651f6fca788a0a0496d21d8c2cff95d6dfde2b0b0d8cc9217ac3fbf3a4245fea2739571796668136b0c75790"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x6}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/221, 0xdd}], 0x1}, 0x5}], 0x1, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000600)}]) r8 = syz_open_dev$dri(&(0x7f0000000140), 0x4000000000009, 0x80000) ioctl$DRM_IOCTL_AUTH_MAGIC(r8, 0x40046411, &(0x7f0000000180)=0x8) 726.643892ms ago: executing program 6 (id=5440): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000003c0)={&(0x7f00000007c0)=[{0x6, 0x4201, 0x0, 0x0}], 0x1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_setup(0x8b1, &(0x7f0000001040)=0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000001200)={r5, &(0x7f0000001100)='syzkaller\x00', 0x4280, &(0x7f0000001140)={@_ha_fsid={[0x0, 0x4]}, {0x5, 0xb, 0xffd5, 0xec1c}}, 0x80000001, &(0x7f0000001180), &(0x7f00000011c0)=0x6}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r10, 0x0, 0x0) io_submit(r7, 0x3, &(0x7f0000001440)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0xdd0, r5, &(0x7f0000001080)="02ee187ebf859195b62766a6e8df34ba51121519a8b5f0e4a11f3cae01ecc96e57db6830ba3c4ae091cd3d88fabd8855eb8e00fac7533d485942350b4f38b4adcd3acd", 0x43, 0xfffffffffffffff9, 0x0, 0x2, r8}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x4, r6, &(0x7f0000001280)="4c9d3c84c4815f5e76b6e0bf9c1e9a8e39c4cd7f0d89c5a687f5057eef6003e8e4445e237903ceb41552bafb33e82026f7aa44a3c1e288eea4f5465e8a72214d5d0170674a65189afeac366f8f", 0x4d, 0x4, 0x0, 0x3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x1, r9, &(0x7f0000001380)="38e8d56dedd25c2d59fa149742203b31b37d48dc963db53fb659d57cbc4ccd53a366189a49bfb89f75ccd751cb535aa504f18d7055a740a30d1d031c793b0b99559b5b8772c51eb5a147121acb1b795e65", 0x51, 0x5, 0x0, 0x0, r10}]) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 675.576016ms ago: executing program 3 (id=5441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="cd52f8ee1fc1ccaa28bd7000ffdbdf2497050000"], 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', r4, 0x4, 0x7, 0x5, 0x8001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8, 0x7800, 0x7f, 0x5}}) bind$packet(r1, &(0x7f0000000240)={0x11, 0xd, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_fuse_handle_req(r7, &(0x7f00000006c0)="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", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x1) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xb) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r9 = openat(r8, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r9, &(0x7f0000000500)='A', 0x1000) 272.451469ms ago: executing program 3 (id=5442): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r2, 0x800, {0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x5, 0x1a, 0x0, "4c34c59b20d56236fc221a71649fb0b4662df02f087d0ac37fda5dc428193230c95a3b53477ae9a55ddd18ef63a604942e4aa31b3eb60bba16869be793703556", "d4d64e72b620dbd04dbb6b1529e00014900726fa0bf1ffd15faffe3690b1d83aa4c8d80706ae87131935c4243886fc606a4d09393c432b1c58d9cfee685d2c12", "2661210d09ca41ce43ba288d3778e611791bbf979b6e37ead2d45df8a8010ddf", [0x9, 0x6]}}) write(r2, &(0x7f0000000180)='1', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2fde0) 0s ago: executing program 8 (id=5443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000e1d472359043bfc00007369ab000100"/27, @ANYRES32=r1, @ANYRES8=r3, @ANYRESHEX=0x0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = semget$private(0x0, 0x7, 0x191) semtimedop(r6, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semctl$SETVAL(r6, 0x0, 0x10, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x42, '\x00', 0x0, @sock_ops=0x3}, 0x94) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x10296fc4, 0x0, 0x3, 0x8, 0x3, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="5001000000000000030000000000000004000000000000000300000000000000f8ffffffffffffff020000000000000003000000010001000600000000000000090000000000000004000000000000000d000000000000000600000000000000000000000000000002000000010000000600000000800000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="018000000000008000000000010000000000000401000000000000000100000094015432000000000000000004000000000000000100000000000000ff07000000000000ffffffffffffff7fff0780003fa300000300000000000000000007000000000003000000000000000600000000000000050000000900000002000000000000000200000006000000070000000080000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000000000000070000000000000001000000000300"/44], 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',fscache,cache=fscache,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESHEX=r7, @ANYBLOB="2c6673636f6e74657874040000000000000075b63660303ade799d682c7375626a"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r10, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r9, 0x407, 0x100004) write$eventfd(r9, &(0x7f0000000240), 0xffffff14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): vice=63.0c [ 1439.819164][ T29] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1440.169731][T24409] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5169'. [ 1440.178777][T24409] Unknown options in mask b7f2 [ 1441.130397][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.141700][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.161212][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.169415][T22406] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 1441.178398][T22406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.190060][ T29] usb 9-1: config 0 descriptor?? [ 1441.195251][T22406] usb 6-1: config 0 has no interface number 0 [ 1441.206818][T22406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.216724][T22406] usb 6-1: Product: syz [ 1441.221051][T22406] usb 6-1: Manufacturer: syz [ 1441.225697][T22406] usb 6-1: SerialNumber: syz [ 1441.230640][ T5730] m920x_read = error: -19 [ 1441.235067][ T5730] dvb-usb: error while querying for an remote control event. [ 1441.245306][T22406] usb 6-1: config 0 descriptor?? [ 1441.253349][T22406] usbtest 6-1:0.99: couldn't get endpoints, -22 [ 1441.262282][T22406] usbtest 6-1:0.99: probe with driver usbtest failed with error -22 [ 1441.355111][T24416] xt_hashlimit: max too large, truncated to 1048576 [ 1441.372779][T22406] m920x_read = error: -19 [ 1441.383334][T22406] dvb-usb: error while querying for an remote control event. [ 1441.519338][T22406] m920x_read = error: -19 [ 1441.571004][T22406] dvb-usb: error while querying for an remote control event. [ 1441.780606][T22406] m920x_read = error: -19 [ 1441.817795][T22406] dvb-usb: error while querying for an remote control event. [ 1441.879118][T24385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5162'. [ 1441.941834][T24391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5162'. [ 1441.989455][T22406] m920x_read = error: -19 [ 1442.019972][T22406] dvb-usb: error while querying for an remote control event. [ 1442.047136][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 1442.115663][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1442.213969][ T29] usb 9-1: USB disconnect, device number 25 [ 1442.233120][ T5787] m920x_read = error: -19 [ 1442.237971][T24385] ip6erspan0: entered promiscuous mode [ 1442.254973][ T5787] dvb-usb: error while querying for an remote control event. [ 1442.294504][T22406] usb 6-1: USB disconnect, device number 96 [ 1442.582577][T24424] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5174'. [ 1442.593104][T24424] Unknown options in mask b7f2 [ 1443.244194][ T5787] m920x_read = error: -19 [ 1443.265072][ T5787] dvb-usb: error while querying for an remote control event. [ 1443.449048][T22406] m920x_read = error: -19 [ 1443.467884][T22406] dvb-usb: error while querying for an remote control event. [ 1443.610616][T22406] m920x_read = error: -19 [ 1443.633960][T22406] dvb-usb: error while querying for an remote control event. [ 1443.637664][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5177'. [ 1443.801661][T24433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1443.810738][T24433] Unknown options in mask b7f2 [ 1444.233186][T24434] Process accounting paused [ 1444.237998][T22406] m920x_read = error: -19 [ 1444.259434][T22406] dvb-usb: error while querying for an remote control event. [ 1444.449106][ T29] m920x_read = error: -19 [ 1444.466339][ T29] dvb-usb: error while querying for an remote control event. [ 1444.499000][ T5696] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1444.609231][ T29] m920x_read = error: -19 [ 1444.620235][ T29] dvb-usb: error while querying for an remote control event. [ 1444.669576][ T5696] usb 6-1: Using ep0 maxpacket: 32 [ 1444.693882][ T5696] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1444.720439][ T5696] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1444.744793][ T5696] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.759124][ T29] m920x_read = error: -19 [ 1444.779596][ T29] dvb-usb: error while querying for an remote control event. [ 1444.779809][ T30] audit: type=1400 audit(1787473691.254:2149): avc: denied { setopt } for pid=24439 comm="syz.9.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1444.808715][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1444.833623][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.857615][ T5696] usb 6-1: config 0 descriptor?? [ 1444.889067][ T29] m920x_read = error: -19 [ 1444.906032][ T29] dvb-usb: error while querying for an remote control event. [ 1445.049664][ T29] m920x_read = error: -19 [ 1445.062335][ T29] dvb-usb: error while querying for an remote control event. [ 1445.091892][T24444] binder: 24441:24444 ioctl 4018620d 0 returned -22 [ 1445.214747][ T29] m920x_read = error: -19 [ 1445.273891][ T29] dvb-usb: error while querying for an remote control event. [ 1445.352600][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.414997][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.462465][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.493617][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.520173][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.555173][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.569159][ T5787] m920x_read = error: -19 [ 1445.580404][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1445.581904][ T5787] dvb-usb: error while querying for an remote control event. [ 1445.749418][ T5787] m920x_read = error: -19 [ 1445.764007][ T5787] dvb-usb: error while querying for an remote control event. [ 1445.920224][ T5787] m920x_read = error: -19 [ 1445.947630][ T5787] dvb-usb: error while querying for an remote control event. [ 1446.116926][ T5787] m920x_read = error: -19 [ 1446.156246][ T5787] dvb-usb: error while querying for an remote control event. [ 1446.329941][ T5787] m920x_read = error: -19 [ 1446.357354][ T5787] dvb-usb: error while querying for an remote control event. [ 1446.538398][T24457] xt_hashlimit: max too large, truncated to 1048576 [ 1446.550731][ T5787] m920x_read = error: -19 [ 1447.164294][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1447.265974][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1447.388440][ T5696] hid-alps 0003:044E:120B.0040: unknown main item tag 0x0 [ 1447.498528][ T5696] hid-alps 0003:044E:120B.0040: unbalanced collection at end of report description [ 1447.636861][ T5696] hid-alps 0003:044E:120B.0040: parse failed [ 1447.702296][ T5696] hid-alps 0003:044E:120B.0040: probe with driver hid-alps failed with error -22 [ 1447.724505][ T5787] dvb-usb: error while querying for an remote control event. [ 1447.894979][ T5696] usb 6-1: USB disconnect, device number 97 [ 1448.909085][ T29] m920x_read = error: -19 [ 1448.913490][ T29] dvb-usb: error while querying for an remote control event. [ 1448.973291][T24470] Bluetooth: ISO socket layer initialized [ 1449.029058][ T29] m920x_read = error: -19 [ 1449.040108][ T29] dvb-usb: error while querying for an remote control event. [ 1449.169058][ T29] m920x_read = error: -19 [ 1449.182076][ T29] dvb-usb: error while querying for an remote control event. [ 1449.319001][ T29] m920x_read = error: -19 [ 1449.337346][ T29] dvb-usb: error while querying for an remote control event. [ 1449.479102][ T29] m920x_read = error: -19 [ 1449.498605][ T29] dvb-usb: error while querying for an remote control event. [ 1449.639082][ T29] m920x_read = error: -19 [ 1449.663246][ T29] dvb-usb: error while querying for an remote control event. [ 1449.769697][T24483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5189'. [ 1449.778723][T24483] Unknown options in mask b7f2 [ 1450.780391][ T29] m920x_read = error: -19 [ 1450.807380][ T29] dvb-usb: error while querying for an remote control event. [ 1450.949194][ T29] m920x_read = error: -19 [ 1450.975699][ T29] dvb-usb: error while querying for an remote control event. [ 1451.131266][ T29] m920x_read = error: -19 [ 1451.148178][ T29] dvb-usb: error while querying for an remote control event. [ 1451.316129][ T29] m920x_read = error: -19 [ 1451.401190][ T29] dvb-usb: error while querying for an remote control event. [ 1451.530485][ T29] m920x_read = error: -19 [ 1451.553897][ T29] dvb-usb: error while querying for an remote control event. [ 1451.639294][T24497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1451.699028][ T29] m920x_read = error: -19 [ 1451.721549][ T29] dvb-usb: error while querying for an remote control event. [ 1451.870982][ T29] m920x_read = error: -19 [ 1451.887935][ T29] dvb-usb: error while querying for an remote control event. [ 1452.019013][ T24] m920x_read = error: -19 [ 1452.023463][ T24] dvb-usb: error while querying for an remote control event. [ 1452.034614][T24501] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5197'. [ 1452.373718][ T24] m920x_read = error: -19 [ 1452.922677][ T24] dvb-usb: error while querying for an remote control event. [ 1453.059083][ T24] m920x_read = error: -19 [ 1453.079087][ T29] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 1453.093924][ T24] dvb-usb: error while querying for an remote control event. [ 1453.242710][ T24] m920x_read = error: -19 [ 1453.261062][ T29] usb 7-1: device descriptor read/64, error -71 [ 1453.268063][ T24] dvb-usb: error while querying for an remote control event. [ 1453.417742][ T24] m920x_read = error: -19 [ 1453.423609][T24523] xt_hashlimit: max too large, truncated to 1048576 [ 1453.462018][ T24] dvb-usb: error while querying for an remote control event. [ 1453.569308][ T29] usb 7-1: new low-speed USB device number 111 using dummy_hcd [ 1453.661639][ T24] m920x_read = error: -19 [ 1453.735725][ T24] dvb-usb: error while querying for an remote control event. [ 1453.809005][ T29] usb 7-1: device descriptor read/64, error -71 [ 1453.872203][ T24] m920x_read = error: -19 [ 1453.876852][ T24] dvb-usb: error while querying for an remote control event. [ 1454.103838][ T29] usb usb7-port1: attempt power cycle [ 1454.119289][ T24] m920x_read = error: -19 [ 1454.129000][ T24] dvb-usb: error while querying for an remote control event. [ 1454.171130][ T30] audit: type=1400 audit(1787473700.644:2150): avc: denied { create } for pid=24520 comm="syz.3.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1454.259341][ T5787] m920x_read = error: -19 [ 1454.266233][T24522] input: syz0 as /devices/virtual/input/input78 [ 1454.272124][ T5787] dvb-usb: error while querying for an remote control event. [ 1454.346495][T24530] random: crng reseeded on system resumption [ 1454.459036][ T5787] m920x_read = error: -19 [ 1454.480535][ T29] usb 7-1: new low-speed USB device number 112 using dummy_hcd [ 1455.006494][ T5787] dvb-usb: error while querying for an remote control event. [ 1455.258794][T24530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5199'. [ 1456.500463][ T29] usb 7-1: device descriptor read/8, error -71 [ 1456.608998][ T5730] m920x_read = error: -19 [ 1456.613405][ T5730] dvb-usb: error while querying for an remote control event. [ 1456.679296][ T5787] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1456.683920][T24552] FAULT_INJECTION: forcing a failure. [ 1456.683920][T24552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1456.729031][ T5730] m920x_read = error: -19 [ 1456.736030][T24552] CPU: 0 UID: 0 PID: 24552 Comm: syz.3.5204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.736058][T24552] Tainted: [L]=SOFTLOCKUP [ 1456.736066][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1456.736075][T24552] Call Trace: [ 1456.736081][T24552] [ 1456.736088][T24552] dump_stack_lvl+0x100/0x190 [ 1456.736119][T24552] should_fail_ex.cold+0x5/0xa [ 1456.736142][T24552] _copy_from_user+0x2e/0xd0 [ 1456.736168][T24552] kstrtouint_from_user+0xd6/0x1d0 [ 1456.736187][T24552] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1456.736205][T24552] ? __lock_acquire+0x4c5/0x1ec0 [ 1456.736238][T24552] ? lock_acquire+0x1b9/0x370 [ 1456.736267][T24552] proc_fail_nth_write+0x83/0x220 [ 1456.736294][T24552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1456.736325][T24552] vfs_write+0x2aa/0x1050 [ 1456.736348][T24552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1456.736376][T24552] ? __pfx_vfs_write+0x10/0x10 [ 1456.736397][T24552] ? find_held_lock+0x2b/0x80 [ 1456.736419][T24552] ? __fget_files+0x215/0x3d0 [ 1456.736450][T24552] ? __fget_files+0x21f/0x3d0 [ 1456.736482][T24552] ksys_write+0x12a/0x250 [ 1456.736506][T24552] ? __pfx_ksys_write+0x10/0x10 [ 1456.736533][T24552] do_syscall_64+0x123/0x790 [ 1456.736560][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.736579][T24552] RIP: 0033:0x7fdba815e90e [ 1456.736600][T24552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1456.736617][T24552] RSP: 002b:00007fdba9108fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1456.736635][T24552] RAX: ffffffffffffffda RBX: 00007fdba91096c0 RCX: 00007fdba815e90e [ 1456.736647][T24552] RDX: 0000000000000001 RSI: 00007fdba91090a0 RDI: 0000000000000004 [ 1456.736658][T24552] RBP: 00007fdba9109090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.736669][T24552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1456.736680][T24552] R13: 00007fdba8426038 R14: 00007fdba8425fa0 R15: 00007fff29736b08 [ 1456.736705][T24552] [ 1456.789665][ T5730] dvb-usb: error while querying for an remote control event. [ 1457.020792][ T5787] usb 6-1: Using ep0 maxpacket: 32 [ 1457.050511][ T5787] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1457.075063][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.090593][ T5787] usb 6-1: Product: syz [ 1457.100638][ T5787] usb 6-1: Manufacturer: syz [ 1457.108912][ T5787] usb 6-1: SerialNumber: syz [ 1457.130615][ T5787] usb 6-1: config 0 descriptor?? [ 1457.198358][T24561] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5205'. [ 1457.260448][ T5730] m920x_read = error: -19 [ 1457.264891][ T5730] dvb-usb: error while querying for an remote control event. [ 1457.380035][ T5730] m920x_read = error: -19 [ 1457.384662][ T5730] dvb-usb: error while querying for an remote control event. [ 1457.522837][ T5730] m920x_read = error: -19 [ 1457.538163][ T5730] dvb-usb: error while querying for an remote control event. [ 1457.631968][ T5787] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 1457.639470][ T5787] airspy 6-1:0.0: Could not detect board [ 1457.663846][ T5787] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1457.674556][T22406] m920x_read = error: -19 [ 1457.679122][T22406] dvb-usb: error while querying for an remote control event. [ 1457.695182][ T5787] usb 6-1: USB disconnect, device number 98 [ 1457.745209][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5208'. [ 1457.787749][T24559] block device autoloading is deprecated and will be removed. [ 1457.794127][ T5730] m920x_read = error: -19 [ 1457.794151][ T5730] dvb-usb: error while querying for an remote control event. [ 1457.899038][ T5787] m920x_read = error: -19 [ 1457.906338][ T5787] dvb-usb: error while querying for an remote control event. [ 1457.963894][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5210'. [ 1458.883959][ T5787] m920x_read = error: -19 [ 1458.919697][ T5787] dvb-usb: error while querying for an remote control event. [ 1459.029013][T13190] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1459.079132][ T29] m920x_read = error: -19 [ 1459.087727][ T29] dvb-usb: error while querying for an remote control event. [ 1459.189000][T13190] usb 7-1: Using ep0 maxpacket: 32 [ 1459.205384][T13190] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1459.228978][ T29] m920x_read = error: -19 [ 1459.244584][ T29] dvb-usb: error while querying for an remote control event. [ 1459.255827][T13190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.289037][T13190] usb 7-1: Product: syz [ 1459.301769][T13190] usb 7-1: Manufacturer: syz [ 1459.316600][T13190] usb 7-1: SerialNumber: syz [ 1459.341724][T13190] usb 7-1: config 0 descriptor?? [ 1459.389281][ T29] m920x_read = error: -19 [ 1459.403842][ T29] dvb-usb: error while querying for an remote control event. [ 1459.561337][ T29] m920x_read = error: -19 [ 1459.575579][ T29] dvb-usb: error while querying for an remote control event. [ 1459.711877][ T29] m920x_read = error: -19 [ 1459.728561][ T29] dvb-usb: error while querying for an remote control event. [ 1459.775587][T13190] airspy 7-1:0.0: Board ID: 00 [ 1459.799623][T13190] airspy 7-1:0.0: Firmware version: [ 1459.869033][ T29] m920x_read = error: -19 [ 1459.892019][ T29] dvb-usb: error while querying for an remote control event. [ 1460.039542][ T29] m920x_read = error: -19 [ 1460.054278][ T29] dvb-usb: error while querying for an remote control event. [ 1460.209126][ T29] m920x_read = error: -19 [ 1460.230750][ T29] dvb-usb: error while querying for an remote control event. [ 1460.379032][ T29] m920x_read = error: -19 [ 1460.388812][ T29] dvb-usb: error while querying for an remote control event. [ 1460.442418][T24574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.485418][T24574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.519604][ T29] m920x_read = error: -19 [ 1460.554674][ T29] dvb-usb: error while querying for an remote control event. [ 1460.570560][T24591] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 1460.581531][T24591] SELinux: failed to load policy [ 1460.730435][ T29] m920x_read = error: -19 [ 1460.760357][ T29] dvb-usb: error while querying for an remote control event. [ 1460.939654][ T29] m920x_read = error: -19 [ 1461.026338][ T29] dvb-usb: error while querying for an remote control event. [ 1461.229426][T13190] airspy 7-1:0.0: usb_control_msg() failed -110 request 12 [ 1461.235148][ T29] m920x_read = error: -19 [ 1461.296179][T13190] airspy 7-1:0.0: Registered as swradio24 [ 1461.304011][T13190] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1461.305809][ T29] dvb-usb: error while querying for an remote control event. [ 1461.331154][ T24] usb 7-1: USB disconnect, device number 114 [ 1461.429263][T24593] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5214'. [ 1461.490554][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5214'. [ 1461.502324][ T29] m920x_read = error: -19 [ 1461.513552][T24593] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5214'. [ 1461.541324][ T29] dvb-usb: error while querying for an remote control event. [ 1461.589652][T24596] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5214'. [ 1461.690172][ T29] m920x_read = error: -19 [ 1461.705349][ T29] dvb-usb: error while querying for an remote control event. [ 1462.343277][T13190] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1462.347905][ T29] m920x_read = error: -19 [ 1462.392250][ T29] dvb-usb: error while querying for an remote control event. [ 1462.529241][ T29] m920x_read = error: -19 [ 1462.530154][T13190] usb 10-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 1462.556270][T13190] usb 10-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.557013][ T29] dvb-usb: error while querying for an remote control event. [ 1462.615536][T13190] usb 10-1: config 0 interface 0 altsetting 26 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.662512][T13190] usb 10-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.703528][T13190] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1462.718714][T13190] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.755018][T13190] usb 10-1: config 0 descriptor?? [ 1462.769000][ T29] m920x_read = error: -19 [ 1462.777411][ T29] dvb-usb: error while querying for an remote control event. [ 1462.919254][ T29] m920x_read = error: -19 [ 1462.931291][ T29] dvb-usb: error while querying for an remote control event. [ 1463.060901][ T29] m920x_read = error: -19 [ 1463.073133][ T29] dvb-usb: error while querying for an remote control event. [ 1463.140401][T24620] FAULT_INJECTION: forcing a failure. [ 1463.140401][T24620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1463.183397][T13190] usbhid 10-1:0.0: can't add hid device: -71 [ 1463.201844][ T29] m920x_read = error: -19 [ 1463.215341][ T30] audit: type=1400 audit(1787473709.674:2151): avc: denied { open } for pid=24592 comm="syz.9.5214" path="/dev/ttyr7" dev="devtmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1463.217389][ T29] dvb-usb: error while querying for an remote control event. [ 1463.249240][T13190] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1463.265395][T24620] CPU: 1 UID: 0 PID: 24620 Comm: syz.8.5223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.265429][T24620] Tainted: [L]=SOFTLOCKUP [ 1463.265436][T24620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.265448][T24620] Call Trace: [ 1463.265455][T24620] [ 1463.265462][T24620] dump_stack_lvl+0x100/0x190 [ 1463.265495][T24620] should_fail_ex.cold+0x5/0xa [ 1463.265516][T24620] ? prepare_alloc_pages+0x16d/0x5b0 [ 1463.265536][T24620] should_fail_alloc_page+0xeb/0x140 [ 1463.265555][T24620] prepare_alloc_pages+0x1f0/0x5b0 [ 1463.265578][T24620] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1463.265605][T24620] ? stack_depot_save_flags+0x27/0x9f0 [ 1463.265625][T24620] ? stack_depot_save_flags+0x49a/0x9f0 [ 1463.265644][T24620] ? kasan_save_stack+0x3f/0x50 [ 1463.265666][T24620] ? kasan_save_stack+0x30/0x50 [ 1463.265688][T24620] ? kasan_save_track+0x14/0x30 [ 1463.265710][T24620] ? __kasan_kmalloc+0xaa/0xb0 [ 1463.265734][T24620] ? __kmalloc_noprof+0x324/0x820 [ 1463.265758][T24620] ? bpf_test_init.isra.0+0x88/0x100 [ 1463.265777][T24620] ? bpf_prog_test_run_xdp+0x587/0x1670 [ 1463.265797][T24620] ? __sys_bpf+0x2265/0x4a30 [ 1463.265821][T24620] ? __x64_sys_bpf+0xce/0x140 [ 1463.265845][T24620] ? do_syscall_64+0x123/0x790 [ 1463.265870][T24620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.265890][T24620] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1463.265935][T24620] ? __lock_acquire+0x4c5/0x1ec0 [ 1463.265972][T24620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1463.266004][T24620] ? policy_nodemask+0xed/0x4f0 [ 1463.266026][T24620] alloc_pages_mpol+0x201/0x550 [ 1463.266046][T24620] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1463.266067][T24620] ? _copy_from_user+0x59/0xd0 [ 1463.266097][T24620] alloc_pages_noprof+0x1a/0x160 [ 1463.266118][T24620] bpf_prog_test_run_xdp+0x10e0/0x1670 [ 1463.266149][T24620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1463.266178][T24620] ? fput+0x7c/0x100 [ 1463.266195][T24620] ? __bpf_prog_get+0x97/0x290 [ 1463.266215][T24620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1463.266236][T24620] __sys_bpf+0x2265/0x4a30 [ 1463.266268][T24620] ? __pfx___sys_bpf+0x10/0x10 [ 1463.266291][T24620] ? find_held_lock+0x2b/0x80 [ 1463.266312][T24620] ? get_pid_task+0xfc/0x250 [ 1463.266333][T24620] ? get_pid_task+0xfc/0x250 [ 1463.266361][T24620] ? find_held_lock+0x2b/0x80 [ 1463.266390][T24620] ? rcu_read_lock_any_held+0x6a/0x90 [ 1463.266412][T24620] ? find_held_lock+0x2b/0x80 [ 1463.266432][T24620] ? ksys_write+0x190/0x250 [ 1463.266454][T24620] ? ksys_write+0x190/0x250 [ 1463.266495][T24620] ? fput+0x7c/0x100 [ 1463.266512][T24620] ? ksys_write+0x1ac/0x250 [ 1463.266539][T24620] ? __x64_sys_bpf+0xce/0x140 [ 1463.266563][T24620] __x64_sys_bpf+0xce/0x140 [ 1463.266590][T24620] ? do_syscall_64+0xae/0x790 [ 1463.266618][T24620] do_syscall_64+0x123/0x790 [ 1463.266647][T24620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.266666][T24620] RIP: 0033:0x7f217499e0d9 [ 1463.266683][T24620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.266700][T24620] RSP: 002b:00007f2175873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1463.266718][T24620] RAX: ffffffffffffffda RBX: 00007f2174c25fa0 RCX: 00007f217499e0d9 [ 1463.266730][T24620] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 1463.266741][T24620] RBP: 00007f2175873090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.266755][T24620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.266766][T24620] R13: 00007f2174c26038 R14: 00007f2174c25fa0 R15: 00007fff2a295b48 [ 1463.266791][T24620] [ 1463.282253][T13190] usb 10-1: USB disconnect, device number 24 [ 1463.829790][ T29] m920x_read = error: -19 [ 1463.842454][ T29] dvb-usb: error while querying for an remote control event. [ 1463.979205][ T29] m920x_read = error: -19 [ 1463.990833][ T29] dvb-usb: error while querying for an remote control event. [ 1464.010126][T15926] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1464.126262][ T30] audit: type=1400 audit(1787473710.594:2152): avc: denied { read } for pid=24626 comm="syz.3.5225" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1464.159605][ T29] m920x_read = error: -19 [ 1464.166611][ T29] dvb-usb: error while querying for an remote control event. [ 1464.168698][ T30] audit: type=1400 audit(1787473710.594:2153): avc: denied { open } for pid=24626 comm="syz.3.5225" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1464.210016][T15926] usb 9-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1464.239002][T15926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.261023][T15926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1464.279292][ T29] m920x_read = error: -19 [ 1464.283696][ T29] dvb-usb: error while querying for an remote control event. [ 1464.288995][ T30] audit: type=1400 audit(1787473710.594:2154): avc: denied { ioctl } for pid=24626 comm="syz.3.5225" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1464.319166][T15926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.354459][T15926] usb 9-1: config 0 descriptor?? [ 1464.399163][ T29] m920x_read = error: -19 [ 1464.403578][ T29] dvb-usb: error while querying for an remote control event. [ 1464.519656][ T24] m920x_read = error: -19 [ 1464.529037][ T24] dvb-usb: error while querying for an remote control event. [ 1464.571247][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.599949][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.639101][ T29] m920x_read = error: -19 [ 1464.643554][ T29] dvb-usb: error while querying for an remote control event. [ 1464.669545][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1464.678963][T13190] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1464.759109][ T29] m920x_read = error: -19 [ 1464.766340][ T29] dvb-usb: error while querying for an remote control event. [ 1464.813518][T15926] apple 0003:05AC:024F.0041: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1464.829825][ T24] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1464.841918][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.847836][T15926] apple 0003:05AC:024F.0041: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.8-1/input0 [ 1464.852583][ T24] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1464.852612][ T24] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1464.866412][T13190] usb 6-1: Using ep0 maxpacket: 8 [ 1464.899501][ T29] m920x_read = error: -19 [ 1464.912653][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.922476][ T29] dvb-usb: error while querying for an remote control event. [ 1464.937938][T13190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1464.938490][ T24] usb 10-1: Product: syz [ 1464.954802][T13190] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1464.964377][ T24] usb 10-1: Manufacturer: syz [ 1464.969707][ T24] usb 10-1: SerialNumber: syz [ 1464.983198][T13190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.009053][T13190] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1465.030566][ T29] usb 9-1: USB disconnect, device number 26 [ 1465.033439][T13190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.053992][T13190] usb 6-1: Product: syz [ 1465.059211][ T5787] m920x_read = error: -19 [ 1465.063978][ T5787] dvb-usb: error while querying for an remote control event. [ 1465.064312][T13190] usb 6-1: Manufacturer: syz [ 1465.092163][T13190] usb 6-1: SerialNumber: syz [ 1465.179164][ T5787] m920x_read = error: -19 [ 1465.192227][ T5787] dvb-usb: error while querying for an remote control event. [ 1465.319232][ T29] m920x_read = error: -19 [ 1465.329032][ T29] dvb-usb: error while querying for an remote control event. [ 1465.392471][T24634] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1465.459109][ T29] m920x_read = error: -19 [ 1465.464979][ T29] dvb-usb: error while querying for an remote control event. [ 1465.517920][T13190] usb 6-1: selecting invalid altsetting 1 [ 1465.599108][ T29] m920x_read = error: -19 [ 1465.604179][ T29] dvb-usb: error while querying for an remote control event. [ 1465.719654][ T29] m920x_read = error: -19 [ 1465.727821][ T29] dvb-usb: error while querying for an remote control event. [ 1465.811834][T13190] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1465.836884][T13190] usb 6-1: USB disconnect, device number 99 [ 1465.853735][ T30] audit: type=1400 audit(1787473712.324:2155): avc: denied { getattr } for pid=24651 comm="syz.8.5233" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=104504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1465.879441][ T29] m920x_read = error: -19 [ 1465.884038][ T29] dvb-usb: error while querying for an remote control event. [ 1466.039905][ T29] m920x_read = error: -19 [ 1466.055863][ T29] dvb-usb: error while querying for an remote control event. [ 1466.064224][ T24] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1466.277856][ T29] m920x_read = error: -19 [ 1466.295462][ T29] dvb-usb: error while querying for an remote control event. [ 1466.399173][ T24] usb 10-1: device descriptor read/64, error -32 [ 1466.469437][ T29] m920x_read = error: -19 [ 1466.490878][ T29] dvb-usb: error while querying for an remote control event. [ 1466.629260][ T29] m920x_read = error: -19 [ 1466.634363][ T29] dvb-usb: error while querying for an remote control event. [ 1466.689055][ T24] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1466.789108][ T29] m920x_read = error: -19 [ 1466.798953][ T29] dvb-usb: error while querying for an remote control event. [ 1466.826194][ T30] audit: type=1400 audit(1787473713.294:2156): avc: denied { write } for pid=24668 comm="syz.8.5240" name="cluster" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1466.859598][ T24] usb 10-1: device descriptor read/64, error -32 [ 1466.882695][ T30] audit: type=1400 audit(1787473713.294:2157): avc: denied { write } for pid=24668 comm="syz.8.5240" name="node" dev="configfs" ino=104059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1466.926107][ T5696] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1466.941106][ T5787] m920x_read = error: -19 [ 1466.945738][ T5787] dvb-usb: error while querying for an remote control event. [ 1466.976588][ T30] audit: type=1400 audit(1787473713.414:2158): avc: denied { write } for pid=24668 comm="syz.8.5240" name="heartbeat" dev="configfs" ino=104060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1467.069093][ T5787] m920x_read = error: -19 [ 1467.074416][ T5787] dvb-usb: error while querying for an remote control event. [ 1467.098987][ T5696] usb 6-1: Using ep0 maxpacket: 32 [ 1467.118314][ T5696] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1467.129009][ T24] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1467.141520][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.160024][ T24] usb 10-1: device descriptor read/8, error -32 [ 1467.161970][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.199170][ T5787] m920x_read = error: -19 [ 1467.203764][ T5787] dvb-usb: error while querying for an remote control event. [ 1467.210161][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.254265][ T5696] usb 6-1: config 0 descriptor?? [ 1467.340376][ T5787] m920x_read = error: -19 [ 1467.347910][T24675] FAULT_INJECTION: forcing a failure. [ 1467.347910][T24675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.381286][ T5787] dvb-usb: error while querying for an remote control event. [ 1467.424208][T24675] CPU: 0 UID: 0 PID: 24675 Comm: syz.8.5241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.424243][T24675] Tainted: [L]=SOFTLOCKUP [ 1467.424251][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1467.424261][T24675] Call Trace: [ 1467.424268][T24675] [ 1467.424275][T24675] dump_stack_lvl+0x100/0x190 [ 1467.424307][T24675] should_fail_ex.cold+0x5/0xa [ 1467.424333][T24675] _copy_to_user+0x32/0xd0 [ 1467.424360][T24675] simple_read_from_buffer+0xcb/0x170 [ 1467.424389][T24675] proc_fail_nth_read+0x1af/0x230 [ 1467.424415][T24675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1467.424445][T24675] ? rw_verify_area+0xce/0x6d0 [ 1467.424466][T24675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1467.424495][T24675] vfs_read+0x1e4/0xb40 [ 1467.424521][T24675] ? __pfx_vfs_read+0x10/0x10 [ 1467.424542][T24675] ? find_held_lock+0x2b/0x80 [ 1467.424565][T24675] ? __fget_files+0x215/0x3d0 [ 1467.424598][T24675] ? __fget_files+0x21f/0x3d0 [ 1467.424633][T24675] ksys_read+0x12a/0x250 [ 1467.424655][T24675] ? __pfx_ksys_read+0x10/0x10 [ 1467.424687][T24675] do_syscall_64+0x123/0x790 [ 1467.424717][T24675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.424737][T24675] RIP: 0033:0x7f217495e90e [ 1467.424753][T24675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1467.424770][T24675] RSP: 002b:00007f2175851fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1467.424789][T24675] RAX: ffffffffffffffda RBX: 00007f21758526c0 RCX: 00007f217495e90e [ 1467.424801][T24675] RDX: 000000000000000f RSI: 00007f21758520a0 RDI: 0000000000000004 [ 1467.424813][T24675] RBP: 00007f2175852090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.424824][T24675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.424834][T24675] R13: 00007f2174c26128 R14: 00007f2174c26090 R15: 00007fff2a295b48 [ 1467.424859][T24675] [ 1467.428978][ T24] usb 10-1: reset high-speed USB device number 25 using dummy_hcd [ 1467.629992][ T5787] m920x_read = error: -19 [ 1467.634422][ T5787] dvb-usb: error while querying for an remote control event. [ 1467.643186][T24683] fuse: Bad value for 'fd' [ 1467.691826][T24650] raw-gadget.1 gadget.9: failed to queue suspend event [ 1467.700083][ T5696] usbhid 6-1:0.0: can't add hid device: -32 [ 1467.709276][ T24] usb 10-1: device descriptor read/8, error -32 [ 1467.712959][T24650] raw-gadget.1 gadget.9: failed to queue disconnect event [ 1467.728842][ T5696] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1467.748998][ T29] m920x_read = error: -19 [ 1467.753436][ T29] dvb-usb: error while querying for an remote control event. [ 1467.843657][ T24] speedtch 10-1:1.0: speedtch_bind: device reset failed (-19)! [ 1467.870235][ T29] m920x_read = error: -19 [ 1467.874684][ T29] dvb-usb: error while querying for an remote control event. [ 1467.908424][ T30] audit: type=1326 audit(1787473714.374:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24687 comm="syz.9.5246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe27319e0d9 code=0x0 [ 1467.984800][ T24] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1467.993944][ T29] m920x_read = error: -19 [ 1468.001318][ T29] dvb-usb: error while querying for an remote control event. [ 1468.062762][ T24] usb 10-1: USB disconnect, device number 25 [ 1468.069140][ T5696] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1468.149030][ T29] m920x_read = error: -19 [ 1468.156979][ T29] dvb-usb: error while querying for an remote control event. [ 1468.229557][ T5696] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1468.250056][ T5696] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.276329][ T5696] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.291467][ T24] m920x_read = error: -19 [ 1468.300130][ T24] dvb-usb: error while querying for an remote control event. [ 1468.346077][ T5696] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1468.857767][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.877353][ T24] m920x_read = error: -19 [ 1468.883510][ T5696] usb 9-1: Product: syz [ 1468.887946][ T5696] usb 9-1: Manufacturer: syz [ 1468.897241][ T5696] usb 9-1: SerialNumber: syz [ 1468.901807][ T24] dvb-usb: error while querying for an remote control event. [ 1469.059174][ T24] m920x_read = error: -19 [ 1469.066687][ T24] dvb-usb: error while querying for an remote control event. [ 1469.145804][ T5696] snd-usb-6fire 9-1:1.0: unable to receive device firmware state. [ 1469.185633][ T5696] snd-usb-6fire 9-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 1469.219950][ T24] m920x_read = error: -19 [ 1469.242403][ T24] dvb-usb: error while querying for an remote control event. [ 1469.389132][ T5730] m920x_read = error: -19 [ 1469.394105][ T5730] dvb-usb: error while querying for an remote control event. [ 1469.529219][ T5730] m920x_read = error: -19 [ 1469.536305][ T5730] dvb-usb: error while querying for an remote control event. [ 1469.543980][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1469.685968][ T5730] m920x_read = error: -19 [ 1469.704677][ T5730] dvb-usb: error while querying for an remote control event. [ 1469.731493][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1469.794970][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1469.823855][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1469.866691][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.878792][ T5730] m920x_read = error: -19 [ 1469.907160][ T5730] dvb-usb: error while querying for an remote control event. [ 1469.949829][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1470.045106][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.076396][ T24] usb 4-1: Product: syz [ 1470.082657][ T5730] m920x_read = error: -19 [ 1470.094744][ T5730] dvb-usb: error while querying for an remote control event. [ 1470.106501][ T24] usb 4-1: Manufacturer: syz [ 1470.131951][ T24] usb 4-1: SerialNumber: syz [ 1470.252603][ T5730] m920x_read = error: -19 [ 1470.264464][ T5730] dvb-usb: error while querying for an remote control event. [ 1470.482620][ T5730] m920x_read = error: -19 [ 1470.494395][ T5730] dvb-usb: error while querying for an remote control event. [ 1470.510110][ T24] usb 4-1: selecting invalid altsetting 1 [ 1470.630561][ T30] audit: type=1400 audit(1787473717.094:2160): avc: denied { write } for pid=24707 comm="syz.9.5251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1470.939897][ T5730] m920x_read = error: -19 [ 1470.947982][ T5730] dvb-usb: error while querying for an remote control event. [ 1470.985620][ T5696] usb 9-1: USB disconnect, device number 27 [ 1471.012405][T13190] usb 6-1: USB disconnect, device number 100 [ 1471.079485][ T5730] m920x_read = error: -19 [ 1471.085343][ T5730] dvb-usb: error while querying for an remote control event. [ 1471.106645][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1471.270716][ T5730] m920x_read = error: -19 [ 1471.277850][ T5730] dvb-usb: error while querying for an remote control event. [ 1471.287642][ T24] usb 4-1: USB disconnect, device number 61 [ 1471.747811][T24722] fuse: Bad value for 'fd' [ 1471.760363][ T5730] m920x_read = error: -19 [ 1471.767812][ T5730] dvb-usb: error while querying for an remote control event. [ 1471.834296][T24717] netlink: 'syz.3.5253': attribute type 1 has an invalid length. [ 1471.898985][ T24] m920x_read = error: -19 [ 1471.905637][ T24] dvb-usb: error while querying for an remote control event. [ 1471.942826][T24717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.109376][ T24] m920x_read = error: -19 [ 1472.117939][T24728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.127655][ T24] dvb-usb: error while querying for an remote control event. [ 1472.141655][ T30] audit: type=1400 audit(1787473718.604:2161): avc: denied { create } for pid=24738 comm="syz.8.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1472.169476][T24728] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1472.230950][ T30] audit: type=1400 audit(1787473718.704:2162): avc: denied { ioctl } for pid=24738 comm="syz.8.5259" path="socket:[104131]" dev="sockfs" ino=104131 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1472.237228][T24728] bond1: (slave vti0): Error -95 calling set_mac_address [ 1472.272009][ T24] m920x_read = error: -19 [ 1472.282276][ T24] dvb-usb: error while querying for an remote control event. [ 1472.318556][ T30] audit: type=1400 audit(1787473718.784:2163): avc: denied { write } for pid=24738 comm="syz.8.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1472.342469][T13190] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1472.410419][ T24] m920x_read = error: -19 [ 1472.423037][ T24] dvb-usb: error while querying for an remote control event. [ 1472.484514][T24733] gretap1: entered promiscuous mode [ 1472.522475][T13190] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1472.535988][T24733] bond1: (slave gretap1): making interface the new active one [ 1472.546468][T13190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.564824][T13190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.574082][T24733] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1472.578995][ T24] m920x_read = error: -19 [ 1472.604066][ T24] dvb-usb: error while querying for an remote control event. [ 1472.616561][T13190] as10x_usb: device has been detected [ 1472.645580][T13190] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1472.741317][ T5730] m920x_read = error: -19 [ 1472.758095][ T5730] dvb-usb: error while querying for an remote control event. [ 1472.795188][T24761] tipc: Enabling of bearer rejected, failed to enable media [ 1472.828594][T13190] usb 4-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1472.905999][T24717] macvlan2: entered promiscuous mode [ 1472.920683][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1472.935400][T24717] macvlan2: entered allmulticast mode [ 1472.949098][ T5730] m920x_read = error: -19 [ 1472.951747][T24717] bond1: entered promiscuous mode [ 1472.955309][ T5730] dvb-usb: error while querying for an remote control event. [ 1472.979795][T24717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1473.021544][T24717] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1473.042441][T24717] bond1: left promiscuous mode [ 1473.095697][T13190] as10x_usb: error during firmware upload part1 [ 1473.104964][T13190] Registered device Abilis Systems DVB-Titan [ 1473.108987][ T5730] m920x_read = error: -19 [ 1473.125204][ T24] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1473.156598][ T5730] dvb-usb: error while querying for an remote control event. [ 1473.163329][T13190] usb 4-1: USB disconnect, device number 62 [ 1473.171956][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1473.208787][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1473.231003][T13190] Unregistered device Abilis Systems DVB-Titan [ 1473.234436][T13190] as10x_usb: device has been disconnected [ 1473.241076][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.280276][ T24] usb 9-1: Product: syz [ 1473.302949][ T5730] m920x_read = error: -19 [ 1473.309681][ T24] usb 9-1: Manufacturer: syz [ 1473.318225][ T5730] dvb-usb: error while querying for an remote control event. [ 1473.328071][ T24] usb 9-1: SerialNumber: syz [ 1473.469419][ T5730] m920x_read = error: -19 [ 1473.487381][ T5730] dvb-usb: error while querying for an remote control event. [ 1473.601927][T24775] fuse: Bad value for 'fd' [ 1473.606866][ T24] usb 9-1: Limiting number of CPorts to U8_MAX [ 1473.633031][ T5730] m920x_read = error: -19 [ 1473.645726][ T5730] dvb-usb: error while querying for an remote control event. [ 1473.779909][ T5730] m920x_read = error: -19 [ 1473.787606][ T5730] dvb-usb: error while querying for an remote control event. [ 1473.799732][T13190] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1473.818082][ T24] usb 9-1: failed to set cport flags for port 0 [ 1473.855147][ T24] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1473.877350][ T30] audit: type=1400 audit(1787473720.344:2164): avc: denied { connect } for pid=24778 comm="syz.3.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1473.921643][ T5730] m920x_read = error: -19 [ 1473.934581][ T5730] dvb-usb: error while querying for an remote control event. [ 1474.002267][T13190] usb 7-1: Using ep0 maxpacket: 16 [ 1474.010026][T13190] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1474.021035][ T24] es2_ap_driver 9-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1474.021485][T13190] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.047642][T13190] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1474.058121][ T24] usb 9-1: USB disconnect, device number 28 [ 1474.073296][T13190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.089165][T13190] usb 7-1: Product: syz [ 1474.094336][T13190] usb 7-1: Manufacturer: syz [ 1474.100946][T13190] usb 7-1: SerialNumber: syz [ 1474.115880][ T5730] m920x_read = error: -19 [ 1474.133412][ T5730] dvb-usb: error while querying for an remote control event. [ 1474.136996][T13190] usb 7-1: config 0 descriptor?? [ 1474.191961][ T5696] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1474.276705][T23177] nvmet: connect request for invalid subsystem tes! [ 1474.279677][ T24] m920x_read = error: -19 [ 1474.287781][T24786] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 1474.295587][ T24] dvb-usb: error while querying for an remote control event. [ 1474.349935][ T5696] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1474.362863][ T5696] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.387329][ T5696] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1474.403673][ T5696] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1474.415420][ T5696] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.419068][ T24] m920x_read = error: -19 [ 1474.428642][ T5696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.443647][ T24] dvb-usb: error while querying for an remote control event. [ 1474.539304][ T5730] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1474.568259][ T24] m920x_read = error: -19 [ 1474.574133][ T24] dvb-usb: error while querying for an remote control event. [ 1474.600452][T24795] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 1474.709071][ T29] m920x_read = error: -19 [ 1474.713510][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 1474.718683][ T29] dvb-usb: error while querying for an remote control event. [ 1474.727814][ T5730] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1474.738201][ T5730] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1474.746464][ T5730] usb 6-1: config 0 has no interface number 0 [ 1474.756180][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.768728][ T5730] usb 6-1: Product: syz [ 1474.777454][ T5730] usb 6-1: Manufacturer: syz [ 1474.786598][ T5730] usb 6-1: SerialNumber: syz [ 1474.801056][ T5730] usb 6-1: config 0 descriptor?? [ 1474.831648][ T5730] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1474.840820][ T29] m920x_read = error: -19 [ 1474.847106][ T29] dvb-usb: error while querying for an remote control event. [ 1474.854649][ T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1474.900882][ T5696] gud 10-1:1.0: No supported pixel formats found [ 1474.908404][ T5696] gud 10-1:1.0: probe with driver gud failed with error -22 [ 1475.043785][T24798] SET target dimension over the limit! [ 1475.294985][T24791] Process accounting resumed [ 1475.413276][ T29] m920x_read = error: -19 [ 1475.420993][ T5730] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1475.430380][ T29] dvb-usb: error while querying for an remote control event. [ 1475.444726][ T30] audit: type=1400 audit(1787473721.914:2165): avc: denied { execute } for pid=24799 comm="syz.3.5274" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1475.463846][ T5730] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1475.482089][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1475.501521][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1475.522144][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.549133][ T5730] m920x_read = error: -19 [ 1475.553589][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.567080][ T5730] dvb-usb: error while querying for an remote control event. [ 1475.590203][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.606805][ T24] usb 9-1: config 0 descriptor?? [ 1475.621144][T24793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.709034][ T5730] m920x_read = error: -19 [ 1475.714943][ T5730] dvb-usb: error while querying for an remote control event. [ 1475.745908][T24793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.764243][T24802] xt_hashlimit: max too large, truncated to 1048576 [ 1475.795523][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1475.796482][ T5696] usb 6-1: USB disconnect, device number 101 [ 1475.847767][ T5696] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1475.869813][ T5730] m920x_read = error: -19 [ 1475.874299][ T5730] dvb-usb: error while querying for an remote control event. [ 1475.883241][ T5696] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1475.913409][ T5696] quatech2 6-1:0.51: device disconnected [ 1475.989038][ T5730] m920x_read = error: -19 [ 1475.994578][ T5730] dvb-usb: error while querying for an remote control event. [ 1476.032433][ T24] savu 0003:1E7D:2D5A.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 1476.129134][ T5730] m920x_read = error: -19 [ 1476.138456][ T5730] dvb-usb: error while querying for an remote control event. [ 1476.219110][ T5696] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1476.259122][ T5730] m920x_read = error: -19 [ 1476.268798][ T5730] dvb-usb: error while querying for an remote control event. [ 1476.379507][ T5696] usb 6-1: Using ep0 maxpacket: 32 [ 1476.385758][ T5696] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1476.400196][ T5730] m920x_read = error: -19 [ 1476.404667][ T5730] dvb-usb: error while querying for an remote control event. [ 1476.404928][ T5696] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1476.421186][ T5696] usb 6-1: config 0 has no interface number 0 [ 1476.441730][ T5696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.458719][ T5696] usb 6-1: Product: syz [ 1476.472771][ T5696] usb 6-1: Manufacturer: syz [ 1476.491526][ T5696] usb 6-1: SerialNumber: syz [ 1476.515558][ T5696] usb 6-1: config 0 descriptor?? [ 1476.526272][T13190] usb 9-1: USB disconnect, device number 29 [ 1476.537135][ T5696] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1476.539128][ T24] m920x_read = error: -19 [ 1476.571326][ T24] dvb-usb: error while querying for an remote control event. [ 1476.581805][ T5696] usb 6-1: selecting invalid altsetting 1 [ 1476.595569][ T5696] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1476.631787][ T5696] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1476.654707][ T5696] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1476.674328][ T5696] usb 6-1: media controller created [ 1476.685363][ T5719] usb 7-1: USB disconnect, device number 115 [ 1476.699044][ T24] m920x_read = error: -19 [ 1476.703641][ T24] dvb-usb: error while querying for an remote control event. [ 1476.717374][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1476.782254][T24810] bond0: (slave batadv0): Releasing backup interface [ 1476.819088][ T5730] m920x_read = error: -19 [ 1476.824655][ T5730] dvb-usb: error while querying for an remote control event. [ 1476.836203][T24810] bridge_slave_0: left allmulticast mode [ 1476.856972][T24810] bridge_slave_0: left promiscuous mode [ 1476.874841][T24810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.903962][T24810] bridge_slave_1: left allmulticast mode [ 1476.927521][T24810] bridge_slave_1: left promiscuous mode [ 1476.965046][T24810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.982397][ T24] m920x_read = error: -19 [ 1476.995681][ T24] dvb-usb: error while querying for an remote control event. [ 1477.149293][ T24] m920x_read = error: -19 [ 1477.154336][ T24] dvb-usb: error while querying for an remote control event. [ 1477.313849][ T24] m920x_read = error: -19 [ 1477.336615][ T24] dvb-usb: error while querying for an remote control event. [ 1477.479470][ T24] m920x_read = error: -19 [ 1477.489530][ T24] dvb-usb: error while querying for an remote control event. [ 1477.619424][ T24] m920x_read = error: -19 [ 1477.627001][ T24] dvb-usb: error while querying for an remote control event. [ 1477.769359][ T24] m920x_read = error: -19 [ 1477.776980][ T24] dvb-usb: error while querying for an remote control event. [ 1477.894221][ T5696] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1477.909777][ T24] m920x_read = error: -19 [ 1477.929680][ T24] dvb-usb: error while querying for an remote control event. [ 1478.079589][ T24] m920x_read = error: -19 [ 1478.105778][ T24] dvb-usb: error while querying for an remote control event. [ 1478.248973][ T5696] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1478.251000][T24810] bond0: (slave bond_slave_0): Releasing backup interface [ 1478.265460][ T24] m920x_read = error: -19 [ 1478.286920][ T24] dvb-usb: error while querying for an remote control event. [ 1478.315119][ T29] usb 10-1: USB disconnect, device number 26 [ 1478.404975][T24810] bond0: (slave bond_slave_1): Releasing backup interface [ 1478.455197][T24810] team0: Port device team_slave_0 removed [ 1478.479269][ T5787] m920x_read = error: -19 [ 1478.490090][ T5787] dvb-usb: error while querying for an remote control event. [ 1478.565101][ T30] audit: type=1400 audit(1787473725.024:2166): avc: denied { mounton } for pid=24827 comm="syz.8.5282" path="/108/file0" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1478.631155][ T24] m920x_read = error: -19 [ 1478.648704][ T24] dvb-usb: error while querying for an remote control event. [ 1478.695335][ T5787] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1478.742086][ T29] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1478.805766][ T24] m920x_read = error: -19 [ 1478.848105][T24810] team0: Port device team_slave_1 removed [ 1478.867966][ T24] dvb-usb: error while querying for an remote control event. [ 1478.929112][ T5787] usb 7-1: Using ep0 maxpacket: 16 [ 1478.958004][ T5787] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1478.975642][T24810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.983653][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 1479.018722][ T29] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1479.045801][ T5787] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1479.089881][ T24] m920x_read = error: -19 [ 1479.099962][T24810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.108303][ T29] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 1479.126405][ T24] dvb-usb: error while querying for an remote control event. [ 1479.142077][ T5787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1479.183998][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.224901][ T5787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.242247][ T29] usb 10-1: Product: syz [ 1479.257959][ T29] usb 10-1: Manufacturer: syz [ 1479.272156][ T5787] usb 7-1: Product: syz [ 1479.279456][ T24] m920x_read = error: -19 [ 1479.286166][ T29] usb 10-1: SerialNumber: syz [ 1479.303647][ T5787] usb 7-1: Manufacturer: syz [ 1479.311416][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.316394][ T24] dvb-usb: error while querying for an remote control event. [ 1479.341859][ T5787] usb 7-1: SerialNumber: syz [ 1479.412976][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.422399][T24810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.441296][ T29] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1479.484382][ T5787] usb 7-1: config 0 descriptor?? [ 1479.495995][ T29] r8152-cfgselector 10-1: config 0 descriptor?? [ 1479.511402][T24810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.559344][ T24] m920x_read = error: -19 [ 1479.583878][ T24] dvb-usb: error while querying for an remote control event. [ 1479.620311][ T5787] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1479.681284][T24810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1479.756850][ T5787] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1479.819309][ T24] m920x_read = error: -19 [ 1479.849967][ T24] dvb-usb: error while querying for an remote control event. [ 1480.062637][T22406] m920x_read = error: -19 [ 1480.104405][T22406] dvb-usb: error while querying for an remote control event. [ 1480.104768][T24818] team0: Port device xfrm0 added [ 1480.171539][T24820] tipc: Started in network mode [ 1480.176480][T24820] tipc: Node identity ca964ef22c43, cluster identity 4711 [ 1480.184258][T24820] tipc: Enabled bearer , priority 0 [ 1480.206507][ T5696] usb 6-1: USB disconnect, device number 102 [ 1480.269112][T22406] m920x_read = error: -19 [ 1480.284921][T22406] dvb-usb: error while querying for an remote control event. [ 1480.377068][ T5787] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1480.407279][ T5787] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1480.420065][T22406] m920x_read = error: -19 [ 1480.432307][T22406] dvb-usb: error while querying for an remote control event. [ 1480.560677][T22406] m920x_read = error: -19 [ 1480.568459][T22406] dvb-usb: error while querying for an remote control event. [ 1480.829484][T22406] m920x_read = error: -19 [ 1480.848453][T22406] dvb-usb: error while querying for an remote control event. [ 1480.938702][ T5787] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1480.953848][ T5787] em28xx 7-1:0.0: No AC97 audio processor [ 1481.009726][ T5730] m920x_read = error: -19 [ 1481.043928][ T5730] dvb-usb: error while querying for an remote control event. [ 1481.058272][ T5787] usb 7-1: USB disconnect, device number 116 [ 1481.069619][ T5787] em28xx 7-1:0.0: Disconnecting em28xx [ 1481.116242][ T5787] em28xx: Freeing device [ 1481.123947][T24850] xt_hashlimit: max too large, truncated to 1048576 [ 1481.181206][ T5730] m920x_read = error: -19 [ 1481.193772][ T5730] dvb-usb: error while querying for an remote control event. [ 1481.301785][ T5696] tipc: Node number set to 3872739058 [ 1481.341291][ T5730] m920x_read = error: -19 [ 1481.348622][ T5730] dvb-usb: error while querying for an remote control event. [ 1481.469146][ T5787] m920x_read = error: -19 [ 1481.477339][ T5787] dvb-usb: error while querying for an remote control event. [ 1481.599068][ T5787] m920x_read = error: -19 [ 1481.608411][ T5787] dvb-usb: error while querying for an remote control event. [ 1481.617653][T22406] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1481.640087][ T5730] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1481.833658][ T5787] m920x_read = error: -19 [ 1481.875084][ T5787] dvb-usb: error while querying for an remote control event. [ 1482.465432][ T5787] m920x_read = error: -19 [ 1482.470010][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 1482.475387][ T5787] dvb-usb: error while querying for an remote control event. [ 1482.483508][T22406] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1482.495136][ T5730] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1482.507057][T22406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.516033][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1482.589540][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1482.600702][ T24] m920x_read = error: -19 [ 1482.605829][ T24] dvb-usb: error while querying for an remote control event. [ 1482.618270][ T29] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1482.625629][T22406] usb 4-1: config 0 descriptor?? [ 1482.631200][ T29] r8152-cfgselector 10-1: No union descriptors [ 1482.651961][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.662115][T22406] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1482.674108][ T29] r8152-cfgselector 10-1: USB disconnect, device number 27 [ 1482.681493][ T5730] usb 6-1: Product: syz [ 1482.693935][ T5730] usb 6-1: Manufacturer: syz [ 1482.710468][ T5730] usb 6-1: SerialNumber: syz [ 1483.776457][ T24] m920x_read = error: -19 [ 1483.790644][ T24] dvb-usb: error while querying for an remote control event. [ 1483.819694][ T5730] usb 6-1: config 0 descriptor?? [ 1483.840195][ T5730] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1483.889798][ T5730] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1483.931247][ T29] m920x_read = error: -19 [ 1483.935735][ T29] dvb-usb: error while querying for an remote control event. [ 1483.946292][ T30] audit: type=1400 audit(1787473730.414:2167): avc: denied { getopt } for pid=24876 comm="syz.8.5296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1483.989862][ T30] audit: type=1400 audit(1787473730.424:2168): avc: denied { append } for pid=24876 comm="syz.8.5296" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1484.031740][T24854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.057256][T24854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.075002][T24877] binder: 24876:24877 ioctl 89f3 2000000002c0 returned -22 [ 1484.089125][ T29] m920x_read = error: -19 [ 1484.093666][ T29] dvb-usb: error while querying for an remote control event. [ 1484.106567][T22406] gp8psk: usb in 138 operation failed. [ 1484.114899][T22406] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1484.144037][T22406] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1484.152884][ T5696] kernel read not supported for file /video9 (pid: 5696 comm: kworker/0:4) [ 1484.162929][T22406] usb 4-1: USB disconnect, device number 63 [ 1484.249075][ T29] m920x_read = error: -19 [ 1484.253597][ T29] dvb-usb: error while querying for an remote control event. [ 1484.291348][T24883] netlink: 'syz.9.5298': attribute type 4 has an invalid length. [ 1484.340861][T24883] netlink: 17 bytes leftover after parsing attributes in process `syz.9.5298'. [ 1484.511769][T22406] m920x_read = error: -19 [ 1484.516424][ T5730] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1484.522537][T22406] dvb-usb: error while querying for an remote control event. [ 1484.544736][ T5730] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1484.618940][ T5696] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1484.648977][T22406] m920x_read = error: -19 [ 1484.657736][T22406] dvb-usb: error while querying for an remote control event. [ 1484.773242][ T5730] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1484.782742][T22406] m920x_read = error: -19 [ 1484.790069][ T5696] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1484.791748][T22406] dvb-usb: error while querying for an remote control event. [ 1484.807343][ T5730] em28xx 6-1:0.0: No AC97 audio processor [ 1484.813329][ T5696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1484.837880][ T5730] usb 6-1: USB disconnect, device number 103 [ 1484.840135][ T5696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.850974][ T5730] em28xx 6-1:0.0: Disconnecting em28xx [ 1484.869643][ T5696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.899489][ T5696] usb 10-1: config 0 descriptor?? [ 1484.900442][ T5730] em28xx: Freeing device [ 1484.928973][ T29] m920x_read = error: -19 [ 1484.933593][ T29] dvb-usb: error while querying for an remote control event. [ 1485.050513][ T29] m920x_read = error: -19 [ 1485.064247][ T29] dvb-usb: error while querying for an remote control event. [ 1485.069402][T13190] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1485.513748][ T29] m920x_read = error: -19 [ 1485.584163][ T29] dvb-usb: error while querying for an remote control event. [ 1485.789732][ T29] m920x_read = error: -19 [ 1485.834786][ T29] dvb-usb: error while querying for an remote control event. [ 1486.010644][ T29] m920x_read = error: -19 [ 1486.041873][ T29] dvb-usb: error while querying for an remote control event. [ 1486.157214][T24911] ip_tables: iptables: counters copy to user failed while replacing table [ 1486.189059][T22406] m920x_read = error: -19 [ 1486.191286][T13190] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1486.193581][T22406] dvb-usb: error while querying for an remote control event. [ 1486.206631][T13190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1486.221598][T13190] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1486.239280][T13190] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1486.249643][T13190] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1486.269102][T13190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.299639][T24911] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 1486.300694][T24899] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1486.370064][T22406] m920x_read = error: -19 [ 1486.378692][T22406] dvb-usb: error while querying for an remote control event. [ 1486.380877][ T5696] isku 0003:1E7D:319C.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 1486.386585][ T29] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1486.529237][T22406] m920x_read = error: -19 [ 1486.535508][T22406] dvb-usb: error while querying for an remote control event. [ 1486.543728][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1486.561056][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.590721][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1486.612916][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.638525][ T29] usb 4-1: config 0 descriptor?? [ 1486.656986][T24921] db_root: cannot be changed because it's in use [ 1486.680781][T22406] m920x_read = error: -19 [ 1486.685266][T22406] dvb-usb: error while querying for an remote control event. [ 1486.735640][T24899] input: syz0 as /devices/virtual/input/input81 [ 1486.799124][T22406] m920x_read = error: -19 [ 1486.804448][T22406] dvb-usb: error while querying for an remote control event. [ 1486.854380][T22406] usb 10-1: USB disconnect, device number 28 [ 1486.871217][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.903407][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.939130][ T24] m920x_read = error: -19 [ 1486.947206][ T24] dvb-usb: error while querying for an remote control event. [ 1487.060797][ T30] audit: type=1400 audit(1787473733.534:2169): avc: denied { remount } for pid=24926 comm="syz.8.5312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1487.082361][ T24] m920x_read = error: -19 [ 1487.086933][ T24] dvb-usb: error while querying for an remote control event. [ 1487.132773][ T29] apple 0003:05AC:024F.0044: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1487.169045][ T5730] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1487.179557][ T29] apple 0003:05AC:024F.0044: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.3-1/input0 [ 1487.209154][ T24] m920x_read = error: -19 [ 1487.213688][ T24] dvb-usb: error while querying for an remote control event. [ 1487.284521][ T30] audit: type=1400 audit(1787473733.754:2170): avc: denied { call } for pid=24928 comm="syz.8.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1487.305525][T24929] binder: 24928:24929 ioctl c0306201 200000000380 returned -22 [ 1487.314259][ T30] audit: type=1400 audit(1787473733.774:2171): avc: denied { transfer } for pid=24928 comm="syz.8.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1487.335465][ T24] m920x_read = error: -19 [ 1487.340519][ T5696] usb 4-1: USB disconnect, device number 64 [ 1487.340614][ T24] dvb-usb: error while querying for an remote control event. [ 1487.369594][ T5730] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1487.384317][ T5730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1487.413699][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.432282][ T5730] usb 6-1: Product: syz [ 1487.442383][ T5730] usb 6-1: Manufacturer: syz [ 1487.455983][ T5730] usb 6-1: SerialNumber: syz [ 1487.471765][ T29] m920x_read = error: -19 [ 1487.476319][ T29] dvb-usb: error while querying for an remote control event. [ 1487.599932][ T29] m920x_read = error: -19 [ 1487.606238][ T29] dvb-usb: error while querying for an remote control event. [ 1487.709018][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1487.781283][T13190] ims_pcu 7-1:1.0: Failed to set line state, error: -71 [ 1487.807228][ C0] ims_pcu 7-1:1.0: ims_pcu_irq - usb_submit_urb failed with result -1 [ 1487.817998][T13190] ims_pcu 7-1:1.0: probe with driver ims_pcu failed with error -71 [ 1487.818837][ T29] m920x_read = error: -19 [ 1487.873850][ T29] dvb-usb: error while querying for an remote control event. [ 1488.003357][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1488.106952][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.145571][ T29] m920x_read = error: -19 [ 1488.169461][ T29] dvb-usb: error while querying for an remote control event. [ 1488.245150][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.326829][ T24] usb 9-1: Product: syz [ 1488.370957][ T29] m920x_read = error: -19 [ 1488.384484][ T24] usb 9-1: Manufacturer: syz [ 1488.410536][ T29] dvb-usb: error while querying for an remote control event. [ 1488.430761][ T24] usb 9-1: SerialNumber: syz [ 1488.589976][ T29] m920x_read = error: -19 [ 1488.619071][ T29] dvb-usb: error while querying for an remote control event. [ 1488.813129][ T29] m920x_read = error: -19 [ 1488.840391][ T24] snd-usb-6fire 9-1:1.0: unknown device firmware state received from device: [ 1488.861943][ T29] dvb-usb: error while querying for an remote control event. [ 1488.901799][ T24] 00 00 00 00 00 00 00 00 [ 1488.947824][ T24] snd-usb-6fire 9-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1489.019345][ T29] m920x_read = error: -19 [ 1489.026040][ T5730] usb 6-1: usb_control_msg returned -71 [ 1489.080132][ T29] dvb-usb: error while querying for an remote control event. [ 1489.113865][ T5730] usbtmc 6-1:1.0: can't read capabilities [ 1489.321121][ T24] m920x_read = error: -19 [ 1489.361593][ T24] dvb-usb: error while querying for an remote control event. [ 1489.395116][T13190] usb 7-1: USB disconnect, device number 117 [ 1489.397696][ T5730] usb 6-1: USB disconnect, device number 104 [ 1489.534599][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 1489.701745][ T24] m920x_read = error: -19 [ 1489.744340][ T24] dvb-usb: error while querying for an remote control event. [ 1489.793524][T13190] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1489.887428][T24946] netlink: 'syz.5.5319': attribute type 2 has an invalid length. [ 1489.941165][ T24] m920x_read = error: -19 [ 1489.955242][ T24] dvb-usb: error while querying for an remote control event. [ 1490.000526][T13190] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 1490.054283][T13190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.080703][ T5730] m920x_read = error: -19 [ 1490.092182][ T5730] dvb-usb: error while querying for an remote control event. [ 1490.103359][T13190] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.133731][T13190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1490.147983][T13190] usb 7-1: Product: syz [ 1490.156865][T13190] usb 7-1: Manufacturer: syz [ 1490.183249][T13190] navman 7-1:1.0: navman converter detected [ 1490.195746][T13190] usb 7-1: navman converter now attached to ttyUSB0 [ 1490.229003][ T5730] m920x_read = error: -19 [ 1490.233561][ T5730] dvb-usb: error while querying for an remote control event. [ 1490.369076][ T5730] m920x_read = error: -19 [ 1490.379313][ T5730] dvb-usb: error while querying for an remote control event. [ 1490.467925][T24939] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 1490.500150][ T5730] usb 7-1: USB disconnect, device number 118 [ 1490.531155][ T5730] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 1490.539237][ T24] m920x_read = error: -19 [ 1490.559112][ T24] dvb-usb: error while querying for an remote control event. [ 1490.567222][ T5730] navman 7-1:1.0: device disconnected [ 1490.607215][ T24] usb 9-1: USB disconnect, device number 30 [ 1490.679566][ T29] m920x_read = error: -19 [ 1490.688908][ T29] dvb-usb: error while querying for an remote control event. [ 1490.819171][ T5730] m920x_read = error: -19 [ 1490.830927][ T5730] dvb-usb: error while querying for an remote control event. [ 1490.847060][T24961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1490.886729][T24961] Unknown options in mask b7f2 [ 1490.958974][ T24] m920x_read = error: -19 [ 1490.963457][ T24] dvb-usb: error while querying for an remote control event. [ 1491.364919][ T24] m920x_read = error: -19 [ 1491.384740][ T24] dvb-usb: error while querying for an remote control event. [ 1491.529142][ T5730] m920x_read = error: -19 [ 1491.543464][ T5730] dvb-usb: error while querying for an remote control event. [ 1492.173024][ T5730] m920x_read = error: -19 [ 1492.195265][ T5730] dvb-usb: error while querying for an remote control event. [ 1492.331827][ T5730] m920x_read = error: -19 [ 1492.430059][ T5730] dvb-usb: error while querying for an remote control event. [ 1492.554578][T24987] kAFS: No cell specified [ 1492.589142][ T5730] m920x_read = error: -19 [ 1492.613864][ T5730] dvb-usb: error while querying for an remote control event. [ 1492.717724][T24990] xt_hashlimit: max too large, truncated to 1048576 [ 1493.729013][ T5730] m920x_read = error: -19 [ 1493.733414][ T5730] dvb-usb: error while querying for an remote control event. [ 1493.868773][ T5730] m920x_read = error: -19 [ 1493.897600][ T5730] dvb-usb: error while querying for an remote control event. [ 1494.029025][ T29] m920x_read = error: -19 [ 1494.037728][ T29] dvb-usb: error while querying for an remote control event. [ 1494.179983][ T5730] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1494.212719][ T29] m920x_read = error: -19 [ 1494.233835][ T29] dvb-usb: error while querying for an remote control event. [ 1494.370199][ T29] m920x_read = error: -19 [ 1494.375372][ T5730] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1494.388583][ T29] dvb-usb: error while querying for an remote control event. [ 1494.409835][ T5730] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.479382][ T5730] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1494.503684][ T30] audit: type=1800 audit(1787473740.974:2172): pid=24976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5327" name="bus" dev="ramfs" ino=105836 res=0 errno=0 [ 1494.534788][ T29] m920x_read = error: -19 [ 1494.540815][ T5730] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1494.554452][ T29] dvb-usb: error while querying for an remote control event. [ 1494.584397][ T5730] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.819414][ T29] m920x_read = error: -19 [ 1494.835147][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.848562][ T29] dvb-usb: error while querying for an remote control event. [ 1495.022139][ T24] m920x_read = error: -19 [ 1495.047408][ T24] dvb-usb: error while querying for an remote control event. [ 1495.220532][ T29] m920x_read = error: -19 [ 1495.255189][ T29] dvb-usb: error while querying for an remote control event. [ 1495.309709][ T5730] gud 7-1:1.0: No supported pixel formats found [ 1495.391725][ T5730] gud 7-1:1.0: probe with driver gud failed with error -22 [ 1495.434725][ T24] m920x_read = error: -19 [ 1495.457125][ T24] dvb-usb: error while querying for an remote control event. [ 1495.536023][ T5696] usb 7-1: USB disconnect, device number 119 [ 1495.600910][ T5730] m920x_read = error: -19 [ 1495.625537][ T5730] dvb-usb: error while querying for an remote control event. [ 1495.977513][T25029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5336'. [ 1495.986668][T25029] Unknown options in mask b7f2 [ 1496.545873][T25030] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 1496.555866][T25030] SELinux: failed to load policy [ 1497.302240][ T24] m920x_read = error: -19 [ 1498.007422][ T24] dvb-usb: error while querying for an remote control event. [ 1498.119077][ T24] m920x_read = error: -19 [ 1498.123495][ T24] dvb-usb: error while querying for an remote control event. [ 1498.258987][ T24] m920x_read = error: -19 [ 1498.277041][ T24] dvb-usb: error while querying for an remote control event. [ 1498.431728][ T24] m920x_read = error: -19 [ 1498.453984][ T24] dvb-usb: error while querying for an remote control event. [ 1498.562072][T25041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5345'. [ 1498.609104][ T24] m920x_read = error: -19 [ 1498.636029][ T24] dvb-usb: error while querying for an remote control event. [ 1498.778987][ T24] m920x_read = error: -19 [ 1498.788623][ T24] dvb-usb: error while querying for an remote control event. [ 1498.799064][ T5719] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1498.939655][ T24] m920x_read = error: -19 [ 1498.955705][ T24] dvb-usb: error while querying for an remote control event. [ 1499.000856][ T5719] usb 9-1: Using ep0 maxpacket: 8 [ 1499.027029][ T5719] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1499.059592][ T5719] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1499.089129][ T29] m920x_read = error: -19 [ 1499.103042][ T29] dvb-usb: error while querying for an remote control event. [ 1499.162179][T25053] xt_hashlimit: max too large, truncated to 1048576 [ 1499.290285][ T29] m920x_read = error: -19 [ 1499.324506][ T29] dvb-usb: error while querying for an remote control event. [ 1499.441456][ T5719] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.555470][ T29] m920x_read = error: -19 [ 1499.621943][ T29] dvb-usb: error while querying for an remote control event. [ 1499.859529][ T29] m920x_read = error: -19 [ 1499.916612][ T29] dvb-usb: error while querying for an remote control event. [ 1500.002890][ T5719] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1500.025098][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.034072][ T5719] usb 9-1: Product: syz [ 1500.039532][ T5719] usb 9-1: Manufacturer: syz [ 1500.044173][ T5719] usb 9-1: SerialNumber: syz [ 1500.129275][ T5730] m920x_read = error: -19 [ 1500.138428][ T5730] dvb-usb: error while querying for an remote control event. [ 1500.269425][ T29] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1500.311305][ T5730] m920x_read = error: -19 [ 1500.325587][ T5730] dvb-usb: error while querying for an remote control event. [ 1500.468929][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1500.495872][ T5730] m920x_read = error: -19 [ 1500.504463][ T29] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1500.519420][ T5730] dvb-usb: error while querying for an remote control event. [ 1500.552034][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.583453][ T29] usb 7-1: Product: syz [ 1500.605473][ T29] usb 7-1: Manufacturer: syz [ 1500.626380][ T29] usb 7-1: SerialNumber: syz [ 1500.671195][ T5730] m920x_read = error: -19 [ 1500.675825][ T29] usb 7-1: config 0 descriptor?? [ 1500.690499][ T5730] dvb-usb: error while querying for an remote control event. [ 1500.706146][ T29] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1500.752266][ T29] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1500.839190][ T24] m920x_read = error: -19 [ 1500.864798][ T24] dvb-usb: error while querying for an remote control event. [ 1500.984186][ T24] usb 7-1: USB disconnect, device number 120 [ 1501.019148][ T29] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1501.049054][ T5730] m920x_read = error: -19 [ 1501.050304][ T5719] usb 9-1: selecting invalid altsetting 1 [ 1501.072801][ T5730] dvb-usb: error while querying for an remote control event. [ 1501.200395][ T29] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1501.222068][ T24] m920x_read = error: -19 [ 1501.229356][ T29] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1501.253602][ T24] dvb-usb: error while querying for an remote control event. [ 1501.283065][ T29] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1501.338577][ T5719] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1501.341997][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1501.401567][ T5719] usb 9-1: USB disconnect, device number 31 [ 1501.409070][ T24] m920x_read = error: -19 [ 1501.415168][ T24] dvb-usb: error while querying for an remote control event. [ 1501.425988][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.466737][ T29] usb 6-1: config 0 descriptor?? [ 1501.501847][T25066] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1501.559291][ T5730] m920x_read = error: -19 [ 1501.569000][ T5730] dvb-usb: error while querying for an remote control event. [ 1501.623874][ T5696] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1501.719067][ T5730] m920x_read = error: -19 [ 1501.733662][ T5730] dvb-usb: error while querying for an remote control event. [ 1501.764816][T25075] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5358'. [ 1501.827312][ T5696] usb 10-1: Using ep0 maxpacket: 16 [ 1501.857736][ T5696] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1501.867555][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 1501.884307][ T5696] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1501.885540][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1501.903971][ T5730] m920x_read = error: -19 [ 1501.921291][ T5696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1501.930590][ T5730] dvb-usb: error while querying for an remote control event. [ 1501.971617][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.993044][ T29] usb 6-1: USB disconnect, device number 105 [ 1502.001198][ T5696] usb 10-1: Product: syz [ 1502.025740][ T5696] usb 10-1: Manufacturer: syz [ 1502.050638][ T5696] usb 10-1: SerialNumber: syz [ 1502.061138][ T5730] m920x_read = error: -19 [ 1502.075737][ T5730] dvb-usb: error while querying for an remote control event. [ 1502.095131][ T5696] usb 10-1: config 0 descriptor?? [ 1502.219345][ T5730] m920x_read = error: -19 [ 1502.251597][ T5730] dvb-usb: error while querying for an remote control event. [ 1502.419521][ T5730] m920x_read = error: -19 [ 1502.473068][ T5730] dvb-usb: error while querying for an remote control event. [ 1502.679366][ T5730] m920x_read = error: -19 [ 1502.704604][ T5730] dvb-usb: error while querying for an remote control event. [ 1502.927081][ T5730] m920x_read = error: -19 [ 1502.977759][ T5730] dvb-usb: error while querying for an remote control event. [ 1502.989928][ T5696] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1503.148940][ T5696] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1503.169013][ T5730] m920x_read = error: -19 [ 1503.177385][ T5730] dvb-usb: error while querying for an remote control event. [ 1503.219663][ T5696] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1503.231439][ T5696] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1503.339165][ T5730] m920x_read = error: -19 [ 1503.357426][ T5730] dvb-usb: error while querying for an remote control event. [ 1503.411374][T25101] FAULT_INJECTION: forcing a failure. [ 1503.411374][T25101] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.443486][T25102] xt_hashlimit: max too large, truncated to 1048576 [ 1503.491328][T25072] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5356'. [ 1503.504182][T25101] CPU: 1 UID: 0 PID: 25101 Comm: syz.8.5364 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.504214][T25101] Tainted: [L]=SOFTLOCKUP [ 1503.504222][T25101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1503.504233][T25101] Call Trace: [ 1503.504242][T25101] [ 1503.504251][T25101] dump_stack_lvl+0x100/0x190 [ 1503.504284][T25101] should_fail_ex.cold+0x5/0xa [ 1503.504311][T25101] should_failslab+0xc2/0x120 [ 1503.504330][T25101] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1503.504359][T25101] ? __alloc_skb+0x5b7/0x710 [ 1503.504383][T25101] ? __alloc_skb+0x140/0x710 [ 1503.504411][T25101] __alloc_skb+0x140/0x710 [ 1503.504434][T25101] ? __alloc_skb+0x5b7/0x710 [ 1503.504462][T25101] ? __pfx___alloc_skb+0x10/0x10 [ 1503.504492][T25101] netlink_ack+0x117/0xb80 [ 1503.504515][T25101] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1503.504545][T25101] netlink_rcv_skb+0x333/0x420 [ 1503.504569][T25101] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1503.504599][T25101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1503.504632][T25101] ? ns_capable+0xd2/0xf0 [ 1503.504663][T25101] nfnetlink_rcv+0x1b3/0x440 [ 1503.504691][T25101] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1503.504718][T25101] ? rcu_is_watching+0x13/0xc0 [ 1503.504746][T25101] netlink_unicast+0x585/0x850 [ 1503.504772][T25101] ? __pfx_netlink_unicast+0x10/0x10 [ 1503.504802][T25101] netlink_sendmsg+0x8b0/0xda0 [ 1503.504829][T25101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1503.504858][T25101] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1503.504888][T25101] ____sys_sendmsg+0xa4d/0xbe0 [ 1503.504906][T25101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1503.504931][T25101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1503.504954][T25101] ? find_held_lock+0x2b/0x80 [ 1503.504976][T25101] ? debug_object_activate+0x343/0x4b0 [ 1503.505005][T25101] ? debug_object_activate+0x343/0x4b0 [ 1503.505036][T25101] ___sys_sendmsg+0x190/0x1e0 [ 1503.505058][T25101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1503.505079][T25101] ? __pfx_debug_object_activate+0x10/0x10 [ 1503.505136][T25101] __sys_sendmmsg+0x20c/0x440 [ 1503.505165][T25101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1503.505211][T25101] ? xfd_validate_state+0x129/0x190 [ 1503.505239][T25101] ? exit_to_user_mode_loop+0x166/0x700 [ 1503.505264][T25101] __x64_sys_sendmmsg+0x9c/0x100 [ 1503.505289][T25101] ? lockdep_hardirqs_on+0x7d/0x110 [ 1503.505315][T25101] do_syscall_64+0x123/0x790 [ 1503.505344][T25101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.505364][T25101] RIP: 0033:0x7f217499e0d9 [ 1503.505381][T25101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.505399][T25101] RSP: 002b:00007f2175873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1503.505420][T25101] RAX: ffffffffffffffda RBX: 00007f2174c25fa0 RCX: 00007f217499e0d9 [ 1503.505432][T25101] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1503.505443][T25101] RBP: 00007f2175873090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.505454][T25101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.505471][T25101] R13: 00007f2174c26038 R14: 00007f2174c25fa0 R15: 00007fff2a295b48 [ 1503.505497][T25101] [ 1503.902936][ T5730] m920x_read = error: -19 [ 1503.907356][ T5730] dvb-usb: error while querying for an remote control event. [ 1504.019406][ T5730] m920x_read = error: -19 [ 1504.023854][ T5730] dvb-usb: error while querying for an remote control event. [ 1504.149148][ T5730] m920x_read = error: -19 [ 1504.159978][ T5730] dvb-usb: error while querying for an remote control event. [ 1504.282463][ T5730] m920x_read = error: -19 [ 1504.289848][ T5730] dvb-usb: error while querying for an remote control event. [ 1504.409280][ T5730] m920x_read = error: -19 [ 1504.414481][ T5730] dvb-usb: error while querying for an remote control event. [ 1504.467340][ T5696] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1504.539182][ T5730] m920x_read = error: -19 [ 1504.558648][ T5730] dvb-usb: error while querying for an remote control event. [ 1504.710936][ T5730] m920x_read = error: -19 [ 1504.743340][ T5730] dvb-usb: error while querying for an remote control event. [ 1505.379900][ T5730] m920x_read = error: -19 [ 1505.410827][ T5730] dvb-usb: error while querying for an remote control event. [ 1505.562232][ T5696] em28xx 10-1:0.0: No AC97 audio processor [ 1505.599344][ T5730] m920x_read = error: -19 [ 1505.606266][ T5730] dvb-usb: error while querying for an remote control event. [ 1505.699945][ T29] usb 10-1: USB disconnect, device number 29 [ 1505.742168][ T29] em28xx 10-1:0.0: Disconnecting em28xx [ 1505.779041][ T24] m920x_read = error: -19 [ 1505.835295][T25125] binder: BINDER_SET_CONTEXT_MGR already set [ 1505.843851][ T24] dvb-usb: error while querying for an remote control event. [ 1505.846158][T25125] binder: 25122:25125 ioctl 4018620d 200000004a80 returned -16 [ 1505.863947][T25130] binder: 25122:25130 ioctl c0306201 200000000380 returned -22 [ 1505.864078][ T29] em28xx: Freeing device [ 1505.985810][ T5730] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1506.307474][ T24] m920x_read = error: -19 [ 1506.315588][ T30] audit: type=1400 audit(1787473752.784:2173): avc: denied { connect } for pid=25131 comm="syz.9.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1506.336161][ T24] dvb-usb: error while querying for an remote control event. [ 1506.458980][ T24] m920x_read = error: -19 [ 1506.463531][ T24] dvb-usb: error while querying for an remote control event. [ 1506.471195][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 1506.479312][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1506.487746][ T5730] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=28.0e [ 1506.589023][ T24] m920x_read = error: -19 [ 1506.599084][ T5730] usb 4-1: config 6 has an invalid interface number: 149 but max is 0 [ 1506.617029][ T24] dvb-usb: error while querying for an remote control event. [ 1506.639880][ T5730] usb 4-1: config 6 has no interface number 0 [ 1506.655342][ T5730] usb 4-1: config 6 interface 149 altsetting 0 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 1506.673209][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.684020][ T5730] usb 4-1: Product: syz [ 1506.688333][ T5730] usb 4-1: Manufacturer: syz [ 1506.693219][ T5730] usb 4-1: SerialNumber: syz [ 1506.870670][T25144] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 1506.880670][T25144] SELinux: failed to load policy [ 1507.529432][T25149] xt_hashlimit: max too large, truncated to 1048576 [ 1509.522182][ T24] m920x_read = error: -19 [ 1509.530535][ T5730] usb 4-1: USB disconnect, device number 65 [ 1509.598302][ T24] dvb-usb: error while querying for an remote control event. [ 1509.809021][ T24] m920x_read = error: -19 [ 1509.816885][ T24] dvb-usb: error while querying for an remote control event. [ 1509.864736][T25106] Process accounting paused [ 1509.915645][T25148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1550 sclass=netlink_tcpdiag_socket pid=25148 comm=syz.8.5376 [ 1509.956423][ T5730] kernel read not supported for file /video9 (pid: 5730 comm: kworker/1:6) [ 1510.044986][T25162] xt_hashlimit: max too large, truncated to 1048576 [ 1510.067598][ T24] m920x_read = error: -19 [ 1510.090834][ T24] dvb-usb: error while querying for an remote control event. [ 1510.670429][ T5730] m920x_read = error: -19 [ 1510.744442][ T5730] dvb-usb: error while querying for an remote control event. [ 1511.009206][ T5730] m920x_read = error: -19 [ 1511.069985][ T5730] dvb-usb: error while querying for an remote control event. [ 1511.339389][ T5730] m920x_read = error: -19 [ 1511.416073][ T5730] dvb-usb: error while querying for an remote control event. [ 1511.842575][ T24] m920x_read = error: -19 [ 1511.860713][T25166] 9p: Bad value for 'wfdno' [ 1511.868323][ T30] audit: type=1400 audit(1787473758.334:2174): avc: denied { read } for pid=25165 comm="syz.6.5380" dev="sockfs" ino=106540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1511.899735][ T24] dvb-usb: error while querying for an remote control event. [ 1512.045285][T25174] binder: 25173:25174 ioctl c0306201 200000000380 returned -22 [ 1512.053216][ T24] m920x_read = error: -19 [ 1512.057661][ T24] dvb-usb: error while querying for an remote control event. [ 1512.134737][T25180] 9p: Bad value for 'rfdno' [ 1512.145638][T25181] ip_tables: iptables: counters copy to user failed while replacing table [ 1512.169826][ T5730] m920x_read = error: -19 [ 1512.174556][ T5730] dvb-usb: error while querying for an remote control event. [ 1512.195411][ T5719] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1512.291185][ T5730] m920x_read = error: -19 [ 1512.297451][ T5730] dvb-usb: error while querying for an remote control event. [ 1512.370406][ T5719] usb 10-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1512.383690][ T5719] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.398788][ T5719] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1512.411327][ T5719] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.419158][ T5730] m920x_read = error: -19 [ 1512.425418][ T5730] dvb-usb: error while querying for an remote control event. [ 1512.426214][ T5719] usb 10-1: config 0 descriptor?? [ 1512.548976][ T5730] m920x_read = error: -19 [ 1512.559762][ T5730] dvb-usb: error while querying for an remote control event. [ 1512.649921][T25168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.659450][T25168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.688985][ T5730] m920x_read = error: -19 [ 1512.693381][ T5730] dvb-usb: error while querying for an remote control event. [ 1512.818988][ T5730] m920x_read = error: -19 [ 1512.824849][ T5730] dvb-usb: error while querying for an remote control event. [ 1512.875872][ T5719] apple 0003:05AC:024F.0045: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1512.890583][ T5719] apple 0003:05AC:024F.0045: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.9-1/input0 [ 1512.948958][ T5730] m920x_read = error: -19 [ 1512.958919][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.083132][T13190] usb 10-1: USB disconnect, device number 30 [ 1513.099043][ T5730] m920x_read = error: -19 [ 1513.114874][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.239744][ T5719] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1513.249017][ T5730] m920x_read = error: -19 [ 1513.258904][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.398996][ T5730] m920x_read = error: -19 [ 1513.399418][ T5719] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1513.403458][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.422181][ T5719] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1513.432501][ T5719] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1513.446397][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.454925][ T5719] usb 6-1: Product: syz [ 1513.464818][ T5719] usb 6-1: Manufacturer: syz [ 1513.475394][ T5719] usb 6-1: SerialNumber: syz [ 1513.560030][ T5730] m920x_read = error: -19 [ 1513.564432][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.689130][ T5730] m920x_read = error: -19 [ 1513.696305][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.708128][ T5719] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1513.740755][ T5719] usb 6-1: USB disconnect, device number 106 [ 1513.752612][ T5719] usblp0: removed [ 1513.810479][ T5730] m920x_read = error: -19 [ 1513.821484][ T5730] dvb-usb: error while querying for an remote control event. [ 1513.933669][T25204] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.949509][ T5730] m920x_read = error: -19 [ 1513.958532][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.079400][ T5730] m920x_read = error: -19 [ 1514.087561][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=25210 comm=syz.8.5395 [ 1514.091978][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.118761][T25211] ip_tables: iptables: counters copy to user failed while replacing table [ 1514.249208][ T5730] m920x_read = error: -19 [ 1514.261804][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.389584][ T5730] m920x_read = error: -19 [ 1514.397269][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.512675][ T5719] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1514.528985][ T5730] m920x_read = error: -19 [ 1514.536811][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.659405][T13190] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1514.672246][ T5730] m920x_read = error: -19 [ 1514.674843][ T5719] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 1514.686147][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.703848][ T5719] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 69, changing to 10 [ 1514.723721][ T5719] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57344, setting to 1024 [ 1514.753471][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1514.770016][ T5719] usb 9-1: Product: syz [ 1514.775054][ T5719] usb 9-1: Manufacturer: syz [ 1514.788192][ T5719] navman 9-1:1.0: navman converter detected [ 1514.798968][ T5730] m920x_read = error: -19 [ 1514.810447][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.831581][T25166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1514.892590][ T5719] usb 9-1: navman converter now attached to ttyUSB0 [ 1514.902350][T13190] usb 10-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1514.926617][T13190] usb 10-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1514.936077][T13190] usb 10-1: Product: syz [ 1514.963545][T13190] usb 10-1: Manufacturer: syz [ 1514.969392][ T5730] m920x_read = error: -19 [ 1514.974983][ T5730] dvb-usb: error while querying for an remote control event. [ 1514.975140][T13190] usb 10-1: config 0 descriptor?? [ 1515.020496][ T5719] usb 9-1: USB disconnect, device number 32 [ 1515.031890][T13190] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1515.044307][ T5719] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 1515.045162][T13190] ftdi_sio ttyUSB1: unknown device type: 0xa446 [ 1515.061716][ T5719] navman 9-1:1.0: device disconnected [ 1515.108965][ T5730] m920x_read = error: -19 [ 1515.123405][ T5730] dvb-usb: error while querying for an remote control event. [ 1515.261472][ T5719] usb 10-1: USB disconnect, device number 31 [ 1515.278967][ T5730] m920x_read = error: -19 [ 1515.281286][ T5719] ftdi_sio 10-1:0.0: device disconnected [ 1515.298103][ T5730] dvb-usb: error while querying for an remote control event. [ 1515.424009][ T5730] m920x_read = error: -19 [ 1515.440339][ T5730] dvb-usb: error while querying for an remote control event. [ 1515.622634][ T5730] m920x_read = error: -19 [ 1515.627491][ T5730] dvb-usb: error while querying for an remote control event. [ 1515.635221][ T30] audit: type=1400 audit(1787473761.964:2175): avc: denied { accept } for pid=25226 comm="syz.6.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1515.654383][T13190] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1515.759262][ T5730] m920x_read = error: -19 [ 1515.786308][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.045014][ T5730] m920x_read = error: -19 [ 1516.098321][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.136165][ T5719] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1516.203537][T25241] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5405'. [ 1516.219855][T13190] usb 4-1: Using ep0 maxpacket: 16 [ 1516.227153][T25243] ip_tables: iptables: counters copy to user failed while replacing table [ 1516.242183][T13190] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1516.262937][T13190] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1516.279210][ T5730] m920x_read = error: -19 [ 1516.286079][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.288931][T13190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1516.327339][T13190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.346261][T13190] usb 4-1: Product: syz [ 1516.409939][ T5730] m920x_read = error: -19 [ 1516.424871][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.446720][ T5719] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1516.457757][T13190] usb 4-1: Manufacturer: syz [ 1516.463077][T13190] usb 4-1: SerialNumber: syz [ 1516.468365][ T5719] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1516.477062][ T5719] usb 7-1: config 0 has no interface number 0 [ 1516.484353][ T5719] usb 7-1: too many endpoints for config 0 interface 69 altsetting 141: 79, using maximum allowed: 30 [ 1516.497388][T13190] usb 4-1: config 0 descriptor?? [ 1516.502736][ T5719] usb 7-1: config 0 interface 69 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 1516.518720][T13190] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1516.529410][T13190] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1516.536500][ T5719] usb 7-1: config 0 interface 69 has no altsetting 0 [ 1516.545443][ T5719] usb 7-1: New USB device strings: Mfr=30, Product=0, SerialNumber=0 [ 1516.559627][ T5719] usb 7-1: Manufacturer: syz [ 1516.575223][ T5719] usb 7-1: config 0 descriptor?? [ 1516.579169][ T5730] m920x_read = error: -19 [ 1516.600379][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.732363][ T5730] m920x_read = error: -19 [ 1516.741706][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.841635][ T5596] block nbd2: Receive control failed (result -32) [ 1516.871332][ T5730] m920x_read = error: -19 [ 1516.875812][ T5730] dvb-usb: error while querying for an remote control event. [ 1516.952693][T25262] overlayfs: missing 'lowerdir' [ 1516.999250][ T5730] m920x_read = error: -19 [ 1517.006696][ T5730] dvb-usb: error while querying for an remote control event. [ 1517.087297][T25270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5413'. [ 1517.115079][T25270] bridge_slave_0: left allmulticast mode [ 1517.128976][T25270] bridge_slave_0: left promiscuous mode [ 1517.135305][T13190] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1517.139250][ T5730] m920x_read = error: -19 [ 1517.142335][T25270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.145748][ T5730] dvb-usb: error while querying for an remote control event. [ 1517.158093][T13190] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1517.192841][T25270] bridge_slave_1: left allmulticast mode [ 1517.198781][T25270] bridge_slave_1: left promiscuous mode [ 1517.205550][T25270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.231571][T25270] bond0: (slave bond_slave_0): Releasing backup interface [ 1517.253739][T25270] bond0: (slave bond_slave_1): Releasing backup interface [ 1517.278561][T25270] team0: Port device team_slave_0 removed [ 1517.296667][T25270] team0: Port device team_slave_1 removed [ 1517.304525][T25270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.308954][ T5730] m920x_read = error: -19 [ 1517.314356][T25270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.326839][T25270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.329844][ T5730] dvb-usb: error while querying for an remote control event. [ 1517.335674][T25270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.372887][T25225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5400'. [ 1517.399824][T25270] team0: Mode changed to "broadcast" [ 1517.414505][T13190] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1517.437654][T13190] em28xx 4-1:0.0: No AC97 audio processor [ 1517.467076][T13190] usb 4-1: USB disconnect, device number 66 [ 1517.483017][ T5730] m920x_read = error: -19 [ 1517.490090][T13190] em28xx 4-1:0.0: Disconnecting em28xx [ 1517.492924][ T5730] dvb-usb: error while querying for an remote control event. [ 1517.508627][T13190] em28xx: Freeing device [ 1517.639874][ T5730] m920x_read = error: -19 [ 1517.654929][ T5730] dvb-usb: error while querying for an remote control event. [ 1517.798981][T25278] overlayfs: conflicting lowerdir path [ 1517.830340][ T5730] m920x_read = error: -19 [ 1517.851726][ T5730] dvb-usb: error while querying for an remote control event. [ 1517.854683][T25279] overlay: ./file0 is not a directory [ 1517.999790][ T5730] m920x_read = error: -19 [ 1518.010664][ T5730] dvb-usb: error while querying for an remote control event. [ 1518.139016][ T5730] m920x_read = error: -19 [ 1518.147627][ T5730] dvb-usb: error while querying for an remote control event. [ 1518.256100][T25288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1550 sclass=netlink_tcpdiag_socket pid=25288 comm=syz.9.5418 [ 1518.281339][ T5730] m920x_read = error: -19 [ 1518.290498][ T5730] dvb-usb: error while querying for an remote control event. [ 1518.309605][ T30] audit: type=1400 audit(1787473764.764:2176): avc: denied { setopt } for pid=25291 comm="syz.8.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1518.449236][ T5730] m920x_read = error: -19 [ 1518.493734][ T5730] dvb-usb: error while querying for an remote control event. [ 1518.890598][ T5730] m920x_read = error: -19 [ 1518.918062][ T5719] usb 7-1: Cannot read MAC address [ 1518.996174][ T5719] MOSCHIP usb-ethernet driver 7-1:0.69: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1519.269518][ T5719] usb 7-1: USB disconnect, device number 121 [ 1519.295044][ T5730] dvb-usb: error while querying for an remote control event. [ 1519.419719][ T5730] m920x_read = error: -19 [ 1519.428939][ T5730] dvb-usb: error while querying for an remote control event. [ 1519.549179][ T5730] m920x_read = error: -19 [ 1519.561433][ T5730] dvb-usb: error while querying for an remote control event. [ 1519.571155][T25320] netlink: 'syz.8.5426': attribute type 1 has an invalid length. [ 1519.670243][T25325] overlay: ./file0 is not a directory [ 1519.720100][ T5730] m920x_read = error: -19 [ 1519.877352][ T5730] dvb-usb: error while querying for an remote control event. [ 1519.906486][T25298] SELinux: mls: truncated range [ 1519.943317][T25298] SELinux: error reading MLS range of context [ 1519.960222][T25298] SELinux: invalid ocon [ 1520.008988][ T24] m920x_read = error: -19 [ 1520.013479][ T24] dvb-usb: error while querying for an remote control event. [ 1520.149018][ T24] m920x_read = error: -19 [ 1520.154713][ T24] dvb-usb: error while querying for an remote control event. [ 1520.209113][ T5730] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1520.828570][ T24] m920x_read = error: -19 [ 1520.841310][ T24] dvb-usb: error while querying for an remote control event. [ 1520.858221][T25298] SELinux: failed to load policy [ 1520.859045][ T5696] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1520.979155][ T24] m920x_read = error: -19 [ 1520.985259][ T5730] usb 9-1: Using ep0 maxpacket: 16 [ 1520.994034][ T24] dvb-usb: error while querying for an remote control event. [ 1521.006851][ T5730] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1521.078993][ T5696] usb 10-1: Using ep0 maxpacket: 16 [ 1521.080128][ T5730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.094597][ T5696] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1521.101725][ T5730] usb 9-1: Product: syz [ 1521.113857][ T5730] usb 9-1: Manufacturer: syz [ 1521.117597][ T5696] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1521.128959][ T5730] usb 9-1: SerialNumber: syz [ 1521.178304][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1521.180930][ T5730] usb 9-1: config 0 descriptor?? [ 1521.198758][ T24] m920x_read = error: -19 [ 1521.202390][ T5696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1521.206443][ T24] dvb-usb: error while querying for an remote control event. [ 1521.349008][ T5719] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1521.394122][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.429944][ T24] m920x_read = error: -19 [ 1521.434387][ T5696] usb 10-1: Product: syz [ 1521.434410][ T5696] usb 10-1: Manufacturer: syz [ 1521.461518][ T24] dvb-usb: error while querying for an remote control event. [ 1521.549658][ T5696] usb 10-1: SerialNumber: syz [ 1521.567882][ T5696] usb 10-1: config 0 descriptor?? [ 1521.595343][ T5696] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1521.622847][ T5719] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 1521.639353][ T24] m920x_read = error: -19 [ 1521.645274][ T5696] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1521.659826][ T5719] usb 4-1: config 13 has an invalid interface number: 195 but max is 1 [ 1521.677658][ T24] dvb-usb: error while querying for an remote control event. [ 1521.682245][ T5719] usb 4-1: config 13 has an invalid interface number: 84 but max is 1 [ 1521.728935][ T5719] usb 4-1: config 13 has an invalid interface number: 112 but max is 1 [ 1521.772007][ T5719] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 1521.781389][ T5730] speedtch 9-1:0.0: speedtch_bind: data interface not found! [ 1521.800963][ T5730] speedtch 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1521.803958][ T5719] usb 4-1: config 13 has 3 interfaces, different from the descriptor's value: 2 [ 1521.845372][ T5730] usb 9-1: USB disconnect, device number 33 [ 1521.853362][ T24] m920x_read = error: -19 [ 1521.862457][ T24] dvb-usb: error while querying for an remote control event. [ 1521.867100][ T5719] usb 4-1: config 13 has no interface number 0 [ 1521.902200][ T5719] usb 4-1: config 13 has no interface number 1 [ 1521.923840][ T5719] usb 4-1: config 13 has no interface number 2 [ 1521.944837][ T5719] usb 4-1: config 13 interface 195 altsetting 3 bulk endpoint 0xB has invalid maxpacket 32 [ 1521.979246][ T5719] usb 4-1: config 13 interface 195 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1522.000723][ T29] m920x_read = error: -19 [ 1522.006665][ T29] dvb-usb: error while querying for an remote control event. [ 1522.012933][ T5719] usb 4-1: config 13 interface 195 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1522.051171][ T5719] usb 4-1: config 13 interface 84 altsetting 14 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1522.074207][ T5719] usb 4-1: config 13 interface 84 altsetting 14 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1522.109176][ T5719] usb 4-1: config 13 interface 84 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 1522.129176][ T5730] m920x_read = error: -19 [ 1522.129175][ T5719] usb 4-1: config 13 interface 84 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 1522.137840][ T5730] dvb-usb: error while querying for an remote control event. [ 1522.152791][ T24] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1522.165463][ T5719] usb 4-1: config 13 interface 84 altsetting 14 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1522.188681][ T5719] usb 4-1: config 13 interface 84 altsetting 14 has 5 endpoint descriptors, different from the interface descriptor's value: 16 [ 1522.203114][ T5696] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1522.226581][ T5696] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1522.247804][ T5719] usb 4-1: too many endpoints for config 13 interface 112 altsetting 215: 152, using maximum allowed: 30 [ 1522.278984][ T5719] usb 4-1: config 13 interface 112 altsetting 215 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1522.299711][ T5730] m920x_read = error: -19 [ 1522.301070][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has a duplicate endpoint with address 0x4, skipping [ 1522.304273][ T5730] dvb-usb: error while querying for an remote control event. [ 1522.328302][ T24] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1522.330469][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has an endpoint descriptor with address 0x4E, changing to 0xE [ 1522.362903][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.379295][ T24] usb 6-1: Product: syz [ 1522.391111][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has a duplicate endpoint with address 0x5, skipping [ 1522.393766][ T24] usb 6-1: Manufacturer: syz [ 1522.410140][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has a duplicate endpoint with address 0x2, skipping [ 1522.421489][ T24] usb 6-1: SerialNumber: syz [ 1522.437572][ T24] usb 6-1: config 0 descriptor?? [ 1522.447878][T25330] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5428'. [ 1522.450526][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has a duplicate endpoint with address 0x1, skipping [ 1522.469865][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 1522.479760][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1522.489157][ T5730] m920x_read = error: -19 [ 1522.493742][ T5730] dvb-usb: error while querying for an remote control event. [ 1522.506754][ T24] f81232 6-1:0.0: f81534a converter detected [ 1522.522114][ T5719] usb 4-1: config 13 interface 112 altsetting 215 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1522.534766][ T5696] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1522.550052][ T5696] em28xx 10-1:0.0: No AC97 audio processor [ 1522.591162][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has a duplicate endpoint with address 0x7, skipping [ 1522.611409][ T5696] usb 10-1: USB disconnect, device number 32 [ 1522.611690][ T5730] m920x_read = error: -19 [ 1522.623304][ T5730] dvb-usb: error while querying for an remote control event. [ 1522.641057][ T5696] em28xx 10-1:0.0: Disconnecting em28xx [ 1522.646696][ T5719] usb 4-1: config 13 interface 112 altsetting 215 has 11 endpoint descriptors, different from the interface descriptor's value: 152 [ 1522.652933][T25355] nbd: must specify a device to reconfigure [ 1522.684655][ T5696] em28xx: Freeing device [ 1522.685965][ T24] usb 6-1: f81534a converter now attached to ttyUSB0 [ 1522.690173][ T5719] usb 4-1: config 13 interface 195 has no altsetting 0 [ 1522.726291][ T5719] usb 4-1: config 13 interface 84 has no altsetting 0 [ 1522.746996][ T5719] usb 4-1: config 13 interface 112 has no altsetting 0 [ 1522.759291][ T5730] m920x_read = error: -19 [ 1522.767090][ T5719] usb 4-1: Dual-Role OTG device on HNP port [ 1522.774411][ T5730] dvb-usb: error while querying for an remote control event. [ 1522.782129][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.818239][ T5719] usb 4-1: Product: syz [ 1522.830789][ T5719] usb 4-1: Manufacturer: syz [ 1522.842989][ T5719] usb 4-1: SerialNumber: syz [ 1522.865988][T25344] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1522.871759][ T30] audit: type=1400 audit(1787473769.334:2177): avc: denied { read write } for pid=25353 comm="syz.8.5436" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1522.889060][T25344] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1522.918998][ T5730] m920x_read = error: -19 [ 1522.923518][ T5730] dvb-usb: error while querying for an remote control event. [ 1522.933353][T25344] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1522.947098][ T30] audit: type=1400 audit(1787473769.384:2178): avc: denied { open } for pid=25353 comm="syz.8.5436" path="/147/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1522.996845][ T30] audit: type=1400 audit(1787473769.464:2179): avc: denied { ioctl } for pid=25353 comm="syz.8.5436" path="/147/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1523.026100][T25355] zero sized request [ 1523.049298][ T5730] m920x_read = error: -19 [ 1523.053835][ T5730] dvb-usb: error while querying for an remote control event. [ 1523.165353][T25344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.179728][ T5730] m920x_read = error: -19 [ 1523.184341][ T5730] dvb-usb: error while querying for an remote control event. [ 1523.288211][T25344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.299497][ T5730] m920x_read = error: -19 [ 1523.324890][ T5730] dvb-usb: error while querying for an remote control event. [ 1523.356815][T25364] xt_hashlimit: max too large, truncated to 1048576 [ 1523.402715][T25366] binder: BINDER_SET_CONTEXT_MGR already set [ 1523.426490][T25366] binder: 25365:25366 ioctl 4018620d 200000004a80 returned -16 [ 1523.449376][ T5730] m920x_read = error: -19 [ 1523.453983][ T5730] dvb-usb: error while querying for an remote control event. [ 1523.493136][ T5719] go7007 4-1:13.195: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 1523.525467][ T5719] go7007 4-1:13.195: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 1523.526070][ T30] audit: type=1400 audit(1787473769.994:2180): avc: denied { firmware_load } for pid=5719 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1523.579021][ T29] m920x_read = error: -19 [ 1523.583647][ T29] dvb-usb: error while querying for an remote control event. [ 1523.611562][T25371] jffs2: notice: (25371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1523.639564][ T30] audit: type=1400 audit(1787473770.104:2181): avc: denied { write } for pid=25370 comm="syz.3.5441" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1523.687049][ T30] audit: type=1400 audit(1787473770.134:2182): avc: denied { add_name } for pid=25370 comm="syz.3.5441" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1523.708033][ T29] m920x_read = error: -19 [ 1523.712582][ T29] dvb-usb: error while querying for an remote control event. [ 1523.729958][ T5730] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1523.753203][ T30] audit: type=1400 audit(1787473770.134:2183): avc: denied { create } for pid=25370 comm="syz.3.5441" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1523.777557][ T30] audit: type=1400 audit(1787473770.214:2184): avc: denied { read write open } for pid=25370 comm="syz.3.5441" path="/140/file0/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1523.810039][ T24] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1523.832827][ T29] m920x_read = error: -19 [ 1523.837271][ T29] dvb-usb: error while querying for an remote control event. [ 1523.879252][ T5730] usb 10-1: device descriptor read/64, error -71 [ 1523.959060][ T29] m920x_read = error: -19 [ 1523.968927][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1524.353111][ T29] dvb-usb: error while querying for an remote control event. [ 1524.387624][ T5730] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1524.961755][T25379] [ 1524.964119][T25379] ====================================================== [ 1524.971162][T25379] WARNING: possible circular locking dependency detected [ 1524.978168][T25379] syzkaller #0 Tainted: G L [ 1524.984126][T25379] ------------------------------------------------------ [ 1524.991146][T25379] syz.8.5443/25379 is trying to acquire lock: [ 1524.997209][T25379] ffff8880782f6460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1525.005477][T25379] [ 1525.005477][T25379] but task is already holding lock: [ 1525.012815][T25379] ffff888013982460 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 1525.021437][T25379] [ 1525.021437][T25379] which lock already depends on the new lock. [ 1525.021437][T25379] [ 1525.031838][T25379] [ 1525.031838][T25379] the existing dependency chain (in reverse order) is: [ 1525.040869][T25379] [ 1525.040869][T25379] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 1525.048351][T25379] lock_acquire+0x1b9/0x370 [ 1525.053380][T25379] mnt_want_write+0x6f/0x420 [ 1525.058633][T25379] ovl_xattr_set+0x137/0x5a0 [ 1525.063733][T25379] ovl_own_xattr_set+0x86/0xd0 [ 1525.068991][T25379] __vfs_setxattr+0x175/0x1e0 [ 1525.074181][T25379] __vfs_setxattr_noperm+0x127/0x660 [ 1525.079982][T25379] __vfs_setxattr_locked+0x127/0x2b0 [ 1525.085787][T25379] vfs_setxattr+0x14a/0x390 [ 1525.090787][T25379] do_setxattr+0x145/0x180 [ 1525.095711][T25379] filename_setxattr+0x167/0x1d0 [ 1525.101158][T25379] path_setxattrat+0x1ff/0x3b0 [ 1525.106441][T25379] __x64_sys_setxattr+0xc6/0x140 [ 1525.111891][T25379] do_syscall_64+0x123/0x790 [ 1525.116994][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.123397][T25379] [ 1525.123397][T25379] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1525.132081][T25379] lock_acquire+0x1b9/0x370 [ 1525.137105][T25379] down_read+0x99/0x4c0 [ 1525.141761][T25379] lookup_slow+0x42/0x70 [ 1525.146501][T25379] path_lookupat+0x5e8/0xc40 [ 1525.151957][T25379] filename_lookup+0x202/0x590 [ 1525.157222][T25379] kern_path+0x37/0x50 [ 1525.161791][T25379] lookup_bdev+0xd8/0x2a0 [ 1525.166630][T25379] resume_store+0x1d6/0x460 [ 1525.171627][T25379] kobj_attr_store+0x58/0x80 [ 1525.176711][T25379] sysfs_kf_write+0xf2/0x150 [ 1525.181819][T25379] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1525.187617][T25379] vfs_write+0x6af/0x1050 [ 1525.192458][T25379] ksys_write+0x12a/0x250 [ 1525.197302][T25379] do_syscall_64+0x123/0x790 [ 1525.202406][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.208795][T25379] [ 1525.208795][T25379] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1525.215978][T25379] lock_acquire+0x1b9/0x370 [ 1525.220981][T25379] __mutex_lock+0x1a4/0x1bc0 [ 1525.226084][T25379] kernfs_fop_write_iter+0x2c2/0x5f0 [ 1525.231880][T25379] iter_file_splice_write+0x830/0x10b0 [ 1525.237837][T25379] do_splice+0x109c/0x1fa0 [ 1525.242760][T25379] __do_splice+0x33b/0x370 [ 1525.247689][T25379] __x64_sys_splice+0x187/0x250 [ 1525.253066][T25379] do_syscall_64+0x123/0x790 [ 1525.258166][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.264646][T25379] [ 1525.264646][T25379] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 1525.272002][T25379] check_prev_add+0xeb/0xe60 [ 1525.277106][T25379] __lock_acquire+0x1492/0x1ec0 [ 1525.282469][T25379] lock_acquire+0x1b9/0x370 [ 1525.287471][T25379] __mutex_lock+0x1a4/0x1bc0 [ 1525.292564][T25379] pipe_lock+0x69/0x80 [ 1525.297132][T25379] iter_file_splice_write+0x1fd/0x10b0 [ 1525.303084][T25379] do_splice+0x109c/0x1fa0 [ 1525.307995][T25379] __do_splice+0x33b/0x370 [ 1525.312905][T25379] __x64_sys_splice+0x187/0x250 [ 1525.318276][T25379] do_syscall_64+0x123/0x790 [ 1525.323386][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.329807][T25379] [ 1525.329807][T25379] other info that might help us debug this: [ 1525.329807][T25379] [ 1525.340041][T25379] Chain exists of: [ 1525.340041][T25379] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#6 [ 1525.340041][T25379] [ 1525.353598][T25379] Possible unsafe locking scenario: [ 1525.353598][T25379] [ 1525.361034][T25379] CPU0 CPU1 [ 1525.366380][T25379] ---- ---- [ 1525.371726][T25379] rlock(sb_writers#6); [ 1525.375952][T25379] lock(&ovl_i_mutex_dir_key[depth]); [ 1525.383904][T25379] lock(sb_writers#6); [ 1525.390559][T25379] lock(&pipe->mutex); [ 1525.394692][T25379] [ 1525.394692][T25379] *** DEADLOCK *** [ 1525.394692][T25379] [ 1525.402818][T25379] locks held by syz.8.5443/25379: 1, last CPU#0: [ 1525.409199][T25379] #0: ffff888013982460 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 1525.418238][T25379] [ 1525.418238][T25379] stack backtrace: [ 1525.424102][T25379] CPU: 0 UID: 0 PID: 25379 Comm: syz.8.5443 Tainted: G L syzkaller #0 PREEMPT(full) [ 1525.424119][T25379] Tainted: [L]=SOFTLOCKUP [ 1525.424123][T25379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1525.424130][T25379] Call Trace: [ 1525.424136][T25379] [ 1525.424141][T25379] dump_stack_lvl+0x100/0x190 [ 1525.424159][T25379] print_circular_bug.cold+0x178/0x1be [ 1525.424178][T25379] check_noncircular+0x146/0x160 [ 1525.424197][T25379] check_prev_add+0xeb/0xe60 [ 1525.424214][T25379] ? stack_depot_save_flags+0x27/0x9f0 [ 1525.424227][T25379] __lock_acquire+0x1492/0x1ec0 [ 1525.424245][T25379] ? __x64_sys_splice+0x187/0x250 [ 1525.424257][T25379] ? do_syscall_64+0x123/0x790 [ 1525.424276][T25379] lock_acquire+0x1b9/0x370 [ 1525.424293][T25379] ? pipe_lock+0x69/0x80 [ 1525.424310][T25379] ? __pfx___might_resched+0x10/0x10 [ 1525.424329][T25379] __mutex_lock+0x1a4/0x1bc0 [ 1525.424347][T25379] ? pipe_lock+0x69/0x80 [ 1525.424362][T25379] ? pipe_lock+0x69/0x80 [ 1525.424378][T25379] ? __pfx___mutex_lock+0x10/0x10 [ 1525.424397][T25379] ? __kasan_kmalloc+0xaa/0xb0 [ 1525.424414][T25379] ? __kmalloc_noprof+0x345/0x820 [ 1525.424431][T25379] ? pipe_lock+0x69/0x80 [ 1525.424446][T25379] pipe_lock+0x69/0x80 [ 1525.424462][T25379] iter_file_splice_write+0x1fd/0x10b0 [ 1525.424475][T25379] ? __pfx___futex_wait+0x10/0x10 [ 1525.424490][T25379] ? __pfx_try_to_wake_up+0x10/0x10 [ 1525.424502][T25379] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1525.424514][T25379] ? __lock_acquire+0x4c5/0x1ec0 [ 1525.424531][T25379] ? find_held_lock+0x2b/0x80 [ 1525.424544][T25379] ? futex_wake+0x4ea/0x5e0 [ 1525.424561][T25379] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1525.424573][T25379] do_splice+0x109c/0x1fa0 [ 1525.424584][T25379] ? __lock_acquire+0x4c5/0x1ec0 [ 1525.424603][T25379] ? __pfx_do_splice+0x10/0x10 [ 1525.424613][T25379] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1525.424631][T25379] ? find_held_lock+0x2b/0x80 [ 1525.424645][T25379] __do_splice+0x33b/0x370 [ 1525.424657][T25379] ? __pfx___do_splice+0x10/0x10 [ 1525.424670][T25379] __x64_sys_splice+0x187/0x250 [ 1525.424686][T25379] do_syscall_64+0x123/0x790 [ 1525.424703][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.424716][T25379] RIP: 0033:0x7f217499e0d9 [ 1525.424726][T25379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.424738][T25379] RSP: 002b:00007f2175852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1525.424749][T25379] RAX: ffffffffffffffda RBX: 00007f2174c26090 RCX: 00007f217499e0d9 [ 1525.424756][T25379] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 [ 1525.424762][T25379] RBP: 00007f2174a35024 R08: 00000000088000cc R09: 0000000000000000 [ 1525.424769][T25379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.424776][T25379] R13: 00007f2174c26128 R14: 00007f2174c26090 R15: 00007fff2a295b48 [ 1525.424786][T25379] [ 1525.775715][T25376] SELinux: mls: truncated range [ 1525.780746][T25376] SELinux: error reading MLS range of context [ 1525.786860][T25376] SELinux: invalid ocon [ 1525.846702][T25376] SELinux: failed to load policy [ 1525.902276][ T24] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1525.941208][ T24] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1525.970359][ T24] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1525.990372][ T24] usb 7-1: config 0 has no interface number 0 [ 1526.008968][ T24] usb 7-1: config 0 interface 50 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1526.031901][ T24] usb 7-1: config 0 interface 50 has no altsetting 0 [ 1526.039168][ T3101] m920x_read = error: -19 [ 1526.043695][ T3101] dvb-usb: error while querying for an remote control event. [ 1526.054765][ T29] usb 6-1: USB disconnect, device number 107 [ 1526.060899][ T5730] usb 10-1: device descriptor read/64, error -71 [ 1526.068301][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.079109][ T24] usb 7-1: Product: syz [ 1526.083691][ T29] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1526.091869][ T24] usb 7-1: Manufacturer: syz [ 1526.096803][ T29] f81232 6-1:0.0: device disconnected [ 1526.102749][ T24] usb 7-1: SerialNumber: syz [ 1526.108617][ T24] usb 7-1: config 0 descriptor?? [ 1526.178941][ T29] m920x_read = error: -19 [ 1526.183459][ T5730] usb usb10-port1: attempt power cycle [ 1526.188978][ T29] dvb-usb: error while querying for an remote control event. [ 1526.319019][ T29] m920x_read = error: -19 [ 1526.328532][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1526.338062][ T29] dvb-usb: error while querying for an remote control event. [ 1526.348612][ T24] usb 7-1: setting power ON [ 1526.353205][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1526.360344][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1526.370009][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1526.388980][ T24] usb 7-1: media controller created [ 1526.412653][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1526.433063][ T24] usb 7-1: digital interface selection failed (-22) [ 1526.448885][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1526.460042][ T29] m920x_read = error: -19 [ 1526.471219][ T29] dvb-usb: error while querying for an remote control event. [ 1526.482874][ T24] usb 7-1: setting power OFF [ 1526.498961][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1526.504731][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1526.528881][ T24] (NULL device *): no alternate interface [ 1526.537101][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1526.554992][ T24] usb 7-1: USB disconnect, device number 122 [ 1526.618944][ T29] m920x_read = error: -19 [ 1526.623300][ T29] dvb-usb: error while querying for an remote control event. [ 1526.749221][ T24] m920x_read = error: -19 [ 1526.755199][ T24] dvb-usb: error while querying for an remote control event. [ 1526.878927][ T24] m920x_read = error: -19 [ 1526.883323][ T24] dvb-usb: error while querying for an remote control event. [ 1527.018969][ T24] m920x_read = error: -19 [ 1527.040407][ T24] dvb-usb: error while querying for an remote control event. [ 1527.168961][ T24] m920x_read = error: -19 [ 1527.173643][ T24] dvb-usb: error while querying for an remote control event. [ 1527.290314][ T24] m920x_read = error: -19 [ 1527.298880][ T24] dvb-usb: error while querying for an remote control event. [ 1527.429018][ T24] m920x_read = error: -19 [ 1527.438896][ T24] dvb-usb: error while querying for an remote control event. [ 1527.578981][ T24] m920x_read = error: -19 [ 1527.584855][ T24] dvb-usb: error while querying for an remote control event. [ 1527.708929][ T24] m920x_read = error: -19 [ 1527.718902][ T24] dvb-usb: error while querying for an remote control event. [ 1527.858927][ T24] m920x_read = error: -19 [ 1527.863927][ T24] dvb-usb: error while querying for an remote control event. [ 1527.988951][ T24] m920x_read = error: -19 [ 1527.998878][ T24] dvb-usb: error while querying for an remote control event. [ 1528.138985][ T24] m920x_read = error: -19 [ 1528.143355][ T24] dvb-usb: error while querying for an remote control event. [ 1528.288964][ T24] m920x_read = error: -19 [ 1528.298887][ T24] dvb-usb: error while querying for an remote control event. [ 1528.409016][ T24] m920x_read = error: -19 [ 1528.413405][ T24] dvb-usb: error while querying for an remote control event. [ 1528.540321][ T24] m920x_read = error: -19 [ 1528.548894][ T24] dvb-usb: error while querying for an remote control event. [ 1528.679015][ T24] m920x_read = error: -19 [ 1528.690279][ T24] dvb-usb: error while querying for an remote control event. [ 1528.819014][ T24] m920x_read = error: -19 [ 1528.848942][ T24] dvb-usb: error while querying for an remote control event. [ 1528.965938][ T24] m920x_read = error: -19 [ 1528.971680][ T24] dvb-usb: error while querying for an remote control event. [ 1529.098941][ T24] m920x_read = error: -19 [ 1529.103315][ T24] dvb-usb: error while querying for an remote control event. [ 1529.228948][ T24] m920x_read = error: -19 [ 1529.238900][ T24] dvb-usb: error while querying for an remote control event. [ 1529.368955][ T24] m920x_read = error: -19 [ 1529.373398][ T24] dvb-usb: error while querying for an remote control event. [ 1529.498932][ T24] m920x_read = error: -19 [ 1529.503592][ T24] dvb-usb: error while querying for an remote control event. [ 1529.628958][ T24] m920x_read = error: -19 [ 1529.638899][ T24] dvb-usb: error while querying for an remote control event. [ 1529.768961][ T24] m920x_read = error: -19 [ 1529.774842][ T24] dvb-usb: error while querying for an remote control event. [ 1529.898930][ T24] m920x_read = error: -19 [ 1529.908893][ T24] dvb-usb: error while querying for an remote control event. [ 1530.038963][ T24] m920x_read = error: -19 [ 1530.043341][ T24] dvb-usb: error while querying for an remote control event. [ 1530.170806][ T24] m920x_read = error: -19 [ 1530.186245][ T24] dvb-usb: error while querying for an remote control event. [ 1530.319029][ T24] m920x_read = error: -19 [ 1530.324612][ T24] dvb-usb: error while querying for an remote control event. [ 1530.450423][ T24] m920x_read = error: -19 [ 1530.457903][ T24] dvb-usb: error while querying for an remote control event. [ 1530.588969][ T24] m920x_read = error: -19 [ 1530.593417][ T24] dvb-usb: error while querying for an remote control event. [ 1530.718929][ T24] m920x_read = error: -19 [ 1530.728943][ T24] dvb-usb: error while querying for an remote control event. [ 1530.858909][ T24] m920x_read = error: -19 [ 1530.863279][ T24] dvb-usb: error while querying for an remote control event. [ 1530.988936][ T24] m920x_read = error: -19 [ 1530.998886][ T24] dvb-usb: error while querying for an remote control event. [ 1531.128955][ T24] m920x_read = error: -19 [ 1531.134919][ T24] dvb-usb: error while querying for an remote control event. [ 1531.275490][ T24] m920x_read = error: -19 [ 1531.288902][ T24] dvb-usb: error while querying for an remote control event. [ 1531.398930][ T24] m920x_read = error: -19 [ 1531.408886][ T24] dvb-usb: error while querying for an remote control event. [ 1531.538945][ T24] m920x_read = error: -19 [ 1531.543331][ T24] dvb-usb: error while querying for an remote control event. [ 1531.668915][ T24] m920x_read = error: -19 [ 1531.678901][ T24] dvb-usb: error while querying for an remote control event. [ 1531.808951][ T5730] m920x_read = error: -19 [ 1531.813315][ T5730] dvb-usb: error while querying for an remote control event. [ 1531.938930][ T5730] m920x_read = error: -19 [ 1531.943326][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.068927][ T5730] m920x_read = error: -19 [ 1532.073310][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.197387][ T5730] m920x_read = error: -19 [ 1532.208881][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.342836][ T5730] m920x_read = error: -19 [ 1532.347198][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.468941][ T5730] m920x_read = error: -19 [ 1532.478951][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.609022][ T5730] m920x_read = error: -19 [ 1532.618897][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.738965][ T5730] m920x_read = error: -19 [ 1532.760436][ T5730] dvb-usb: error while querying for an remote control event. [ 1532.878951][ T5730] m920x_read = error: -19 [ 1532.888887][ T5730] dvb-usb: error while querying for an remote control event. [ 1533.018934][ T5730] m920x_read = error: -19 [ 1533.025351][ T5730] dvb-usb: error while querying for an remote control event. [ 1533.158964][ T24] m920x_read = error: -19 [ 1533.163339][ T24] dvb-usb: error while querying for an remote control event. [ 1533.288919][ T24] m920x_read = error: -19 [ 1533.294712][ T24] dvb-usb: error while querying for an remote control event. [ 1533.421703][ T24] m920x_read = error: -19 [ 1533.427516][ T24] dvb-usb: error while querying for an remote control event. [ 1533.558932][ T24] m920x_read = error: -19 [ 1533.563349][ T24] dvb-usb: error while querying for an remote control event. [ 1533.688970][ T24] m920x_read = error: -19 [ 1533.694310][ T24] dvb-usb: error while querying for an remote control event. [ 1533.819021][ T24] m920x_read = error: -19 [ 1533.830909][ T24] dvb-usb: error while querying for an remote control event. [ 1533.958950][ T24] m920x_read = error: -19 [ 1533.968875][ T24] dvb-usb: error while querying for an remote control event. [ 1534.078979][ T24] m920x_read = error: -19 [ 1534.088936][ T24] dvb-usb: error while querying for an remote control event. [ 1534.199016][ T24] m920x_read = error: -19 [ 1534.203404][ T24] dvb-usb: error while querying for an remote control event. [ 1534.338916][ T24] m920x_read = error: -19 [ 1534.343292][ T24] dvb-usb: error while querying for an remote control event. [ 1534.468920][ T24] m920x_read = error: -19 [ 1534.474712][ T24] dvb-usb: error while querying for an remote control event. [ 1534.600977][ T24] m920x_read = error: -19 [ 1534.605363][ T24] dvb-usb: error while querying for an remote control event. [ 1534.728921][ T24] m920x_read = error: -19 [ 1534.738930][ T24] dvb-usb: error while querying for an remote control event. [ 1534.868974][ T24] m920x_read = error: -19 [ 1534.876253][ T24] dvb-usb: error while querying for an remote control event.