last executing test programs: 22m44.448039242s ago: executing program 3 (id=875): syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) r0 = socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="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", 0x281}], 0x1}}], 0x1, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0) 22m42.287013194s ago: executing program 3 (id=880): rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) msync(&(0x7f0000625000/0x4000)=nil, 0x4000, 0x6) sendmmsg$sock(r1, &(0x7f00000004c0)=[{{0x0, 0xf003, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(0xffffffffffffffff, 0x7ff, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000280)="2500c5d311ac437a42641442189d559ad45e1833f0f71485a1ced14b398c497ab03a931009c2bd395bac8f55c284677a99cdbf07c5bdadf3eb021ca375aa48bf626ef9a421519dcddb464671006487329e378a7a028309bd1e8c3cc2ef3d7d909229ed75812dd406efd1368b5c8837b00e9788080433e5a4c04078d4d1fa41edffe4834c66fe14419817e17d11fa5b042f1cade4cd29dbba3bf26493cf2893117e86d5c1e7daf5ab6bde75", 0xab) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r4, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[@ANYBLOB="629bad45402124663ef2a5fdb5"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)="f6fbecb43c5854e3b8015cf0831380919d63e0c918b14cb8e23c2377fe1eb018a70b02b57c21710f56552e65b1de40d7ad7f84569ceb877abfc5b720d50c984a1922f3bab2c555a4188ca175c32bfaa579ed43e066d4d7ad5398f96bbbb57b9cfa51e872e0f330118d09c5ddbead56e7a67d124c60a9529559ec907c491fcdf968d22dcd38a7c4a62d10a9a516034a7f6265d9dd", 0x94}], 0x1, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x6c, 0x3, 0x9, [{@multicast1}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}}, {@empty, 0x100}]}, @timestamp={0x44, 0x2c, 0x71, 0x0, 0x9, [0x3, 0x4, 0xfff80000, 0x3, 0x4, 0xffffff8e, 0x400, 0x2, 0x80000001, 0x8]}, @timestamp_addr={0x44, 0xc, 0x5b, 0x1, 0xf, [{@multicast1, 0x2}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x1b, [@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x78}, @local, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x6}]}, @ra={0x94, 0x4}, @generic={0x82, 0x3, "e5"}]}}}], 0x170}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000740)="6b7e56aec360c85b0d499c0be97f109b603fe02725cb6322a68c76c2ff87fa1039d53ec5c00f8ac915782c45bef85d48a9a1f0f084879e455929a24b7d73f81a7b2718f9e990c7", 0x47}, {&(0x7f00000007c0)="44019b847b559d414b04aa0ce179783878636a2934761b30c2ada2a6f69e97991cb5820c28c72da80c2fbe04ea12cb4f572374ef600cd5b6a68c0cea953f2ad9dcb73bd9f63a24a848f36df5be05d32f3ccbb08e3dccb67cd1611719d89d30974821c7d0b143a4c4ff178697e2ef9549eea31e8d6998561fe1900a7a8ab3e9ae599a9344a162b3483fe6f9a34743606fd43ff049ebb24c17171742ae0bafc0b4111a3de1daccc14a20ea513eb214023a113fe15b34614eea6006630b36f1a46ea5953385a9b40519d53e54407314bcb69b3264d5108ce4800dda90f7f8305b4d501cf00f319f273d1fbd2826e967d36b8a58a4", 0xf3}, {&(0x7f0000000440)="7f2cb77c2fcf2d41cfbdb7883d4191117215a9e0aa6321fedf23d995f68900ed0deaacdb7568209ec6a72582d8a5a222d9eb466659f7ea68f290a4e15063", 0x3e}, {&(0x7f00000008c0)="b4d31d7047bfbaef19c1adfec01f9921bb287a8a13c682a670743af8d06780bfc6", 0x21}, {&(0x7f0000000900)="8ea55e01b162b3b6fda12b11a6eceeb26442e9a0bab08139871e68b5c9441f32e1739b6e3da5dcb050cfeda227deff13d31bf59fdec875cfea5fa3d9116afb000b360eb19ab0f68f0e27d7c3193935032ba24aa3fec3e16f91018c4b473454eb77ba4ab6ed75638502b33592c64dce8e6178c3da2fab94092f8713b314", 0x7d}, {&(0x7f0000000980)="4204", 0x2}, {&(0x7f0000000a80)="e71f66f64c1b0bb2aa99f28506e8edd272a556470d51c66b15702c5cc34ea165f94c939b5c5a23e99571caae92a8b55462346c1488fd90c9c36d4072be2e487c2ec2150624602dee11d2a6d88ac62b3d6a250ad3b6dbf717b10776e4c1ffe11ed562daaeabdec111a458a40e8c18e392643f20f7da9bc039b4110a52503976eb72", 0x81}], 0x7}}, {{&(0x7f0000000b40)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000000b80)="dceb73bc5cd3548f95a802da82bc6f338d614e4c10c1f903241df43eeac6601acb115da5a448b4ebeaa81346cf7b95034ec624834b2104d8f1be100a3ded656085ccdadd54947b504edbc8d2e2ec208bb221d4a5514a5ebaecce675094a59094f1ef9a0955735758491914627133c93ed9aa913b5cf3fb5d9c4985646736c1d76952a8993322caec47fd34c69dfeedaf873014ce9ce65667afdf71c688b3a4dba8c7fcab4484f0f87d00a037165aea95b916c98e16650818adb4877be5e3ae9398269209e13bc8a2c99f09e6", 0xcc}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="0174e4155107e3ca6cc874ccf9075ab16696503d8d6fe813bfaf019eb45d3215eae49bdb03957872ce33b4bdef137c401fd79134be7572580b85fb2bad7a7cc76175d0219ef6c9babea569a9e70b41de94a9823291888516f1fa551d71217adbd4603415892cae0b0da2e404619a8157cf163c3d6119fb6459c1b8fee4bf5fde9e2ac8ed858122ef046c66a1d66de320d40e832d66913504df57a79946c03bcaf804bdd6b4713011f747190d58c8440c4eecbec23af622a5bf57bc08893e9f4c6d7c370824eccd29a3cb88af5a06c2a823a529cd43b8b1678ce85e1baf", 0xdd}, {&(0x7f0000001d80)="aa5f1e38c39922b6c3827dde3dff43e23b6f66692df66c3587a7dd83a561395387d58916cb78b3ec8ac75277bf0164b5b85625f0f01d71b94b6bed19abd108fb031ec7df147f9f3aefd016afc0c23a252cc18dc921a0dfc2eedb433a6a8a337cfa67f9f2e154f95419626ebdda368bdde0bb9fa702e648b9ac2bf1b88e0497f1eb1b9f864f1dcdebbfbb8ef26d907f2cb2150939d14259261e690a9d66de2b9370fd5be002a7b81e08a84ef67adcaa3ca27121edf6fcb637015de55b11a2a146d0c2", 0xc2}], 0x4, &(0x7f0000001ec0)}}, {{&(0x7f0000001f00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000003140)=[{&(0x7f0000001f40)="17d9c41b48fb1b2e1ff22f4338a6bd3eac5e700e225208a38e3f4de31e7a6f50eadefbf5c0f444cc65bfb0004d0bffa3a75987e9d01bcc0283b791f36bc0711ee37cc50c73b1113adc6a82786ac8b75fb18ccfdb2217cdf6a302ae4862e2fc95a21ecc677a67c8402761ec42a1bc5afd1fc12a0b43f90218e70eb302245fa01172a3851f3a", 0x85}, {&(0x7f0000002000)="385b995216e570566c49", 0xa}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="25de14c18ea8ec0fc847f575b0cde2a0e2b012ece1e9b827439f3b71da5f7f39f9897c228ea9aeb3b5b32a7633e965e18ca7e35e5d9ab67062f4e6573ae6625a942d9a09f4812a380f1f4545ca8249321f23b5952b1ebe2a16e243b367f10aba3000b45b2d9b37ba9a9fa9e4540a2878d03d30788a42f17a1b55b0be27581d6936569a86b5c9986470889235440ee12f06a1b0d76e6820075051b13b905040cb0747dc785cdf637c58ce19845ba69a26dcf14344fe7a1db31428c1d5b700d36389afcd6bd12c3f7b6099b9351324dedda336b2de9361df5e54e9c3b1889a599d5b60aeeb534f1b5ab63e4a5e4a4e65", 0xef}], 0x4, &(0x7f0000003180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x30}}, {{&(0x7f00000031c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000004680)=[{&(0x7f0000003200)="75d7df1371897de486807a3582b352ee2376fbb781859be9a3740fc2a12d3e47ca1fa07a1f4759fbbb7df7c68586bb4a9c8e2073482a30d61ab2abf62f7c005a8632e3dba4414492a2abd46814911a4ee737ecafc6cbf853377ac198edec4bfe3130283d466594ff6417c8", 0x6b}, {&(0x7f0000003280)="2211cdc7d47ebc24de0f421445d5ab1de2b5635fb89b0868b5c97e5c9d8859ddd5e7c40e8f36ccec1463f4148d8d9c91c837620d9d7c349218b6c652", 0x3c}, {&(0x7f00000032c0)="47028e1139382bf8f2a5f646ead755b2a7ed45601b148be44182d0177ba920676a8f162fdfcf5c6cbd0588ab6fce864c8b25272e35dab07b2947ece564ea495f7282b643657905f680094409101a77062267b33c9a6b29daba347085becf4a14d06cf64717803f04fab953c0c2873b3ce6174274db0af163ceb5ab8ee81a486f6ae5a8cb3d44840c786477b38c31018d31219f05ed2102e734ac04b8e1a1d0d4443d8f027341ab2299b6f460844cb718267efb38a05e304f023dd3b3b7b4", 0xbe}, {&(0x7f0000003380)="0edaa8e0e4ddf170dcc8e8caf854a7019b80ac83373773a37b18f5a46fd9034627d6368d97c7ba4ead7f4bc88fbcab0f7300058239a51910a07b54fecebd8d50ecf6d399c8371cde766dc1efcb7e47eec08cd102b35381a8b1cd4e63540eac4d2da20ff88085147677", 0x69}, {&(0x7f0000003400)="abb0c21842fd7f50e61fae1df995d9eb3ad5ce2904820692b1337f95aea392808ac63aa2b7803161198d2db756c045dd74a427d38d39e07b16ccc394f04895639b7380c7afff582676d529c8ac41ee1a5fe29cebd26b929035c130ae2d00faf3a1d3bf4135ccd0b430d5c771f134b44e3cd01c4b761f06712825fe564e69e86da08d60d4afb367e186b335a07d3d74dbb9ce6a6a15a2723457e0b5eaebe147c37955e860b1d9fa485a04244b6c9745df907dda624c370eccf78061a37995cba09a9f5503a0ae0919683b08fee14f2b2030a34ec65d5a37f23200711264d7f61596bca9d94f1e26fbd70e9db1dddb848aeeeabb69008d53a581", 0xf9}, {&(0x7f0000003500)="b7f3e29338ff2c8e029002c79389edc940f5247c81058e97ff060c0e86b30cc381eda96679d76697606690a40fe5c5984c74f64189480e3c31c9b9698d1180d3ad9cab1c33264b1419ed54f507fa0d466507c43f8403dd10dddfde2783e2932e", 0x60}, {&(0x7f0000003580)="bca1ac6ec21201a06c41b1ea779a1364e43c014642f8793149b92655d1b6fa44cfc542f384feb2b9719a03e033c7d328b7b8b45ecccaf6cae7208aadeef33e00fc16f6b581ad897d7d25bbaf6b9679c9620be9c0ce087c163ecd677c89c2202377e11eaffc02522530cfdfb50ea732776c716fe39393a2214ac58bd4bff241d377d748cacdc295fa96228102afe5178eabd0b825b8b4f7fe0ad9c97f7979c5a57cde95ec56eaac108bdcf413f378ad97", 0xb0}, {&(0x7f0000003640)="455364381d998f4ed79b498bbdb3392d140197058945b49fc3ac3fd5ec78230727538d330058dc2bc33c050d64c1c0d037cec802cc6dbc0eb932a0", 0x3b}, {&(0x7f0000003680)="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", 0x1000}], 0x9}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000004740)="2c5d9501c4fe08cb30513f4108511b65a985cc41066edc49ef3cd32620f7090f15482dac17a69e256646f9e42194bee50176b70e7249558bc58f8afb9969769770daf1650d6c608ba550db2eb173b7383166809cd1f2b6f853695641", 0x5c}, {&(0x7f00000047c0)}, {&(0x7f0000004800)="7d84c1e914a836bc6b58059e93036459436682f8779adff94186a9f4c99d909fc7fb167f3846dfc33c81b811f8f4b8e5e5857efb9158a1258ddc6a7e2555b095524b9cd9a6c2c7f65c1aa3dd9ded0ec9d27667129572ba8154719a078db8846f11e3f1196051845d180002d95ee982fc12ec817bf493e3827f769e61ba04cd7371c832d5cdc86edc374f4bb67684", 0x8e}, {&(0x7f00000048c0)="5fc7f9dfaa40b372105f9a71d3da35ab37c52706f61f53db0160ed478a573fab2d9cae29db27bb95ff6fc2cc23c0d40a6b164c3efef94d4f0f6c456b1fe555aeb31e6e6b40af0e5be263313a84804e34b221b0acb56b6d2ff5cbac446f5ee281761b571b046c14549e4a6fac8032bd25a2613419ab15a8a573556867d026b6d589afbd8b7174af4df3b8f08a2306e8ee5cd6745fac40a5e83d618bc396c0ff8ad16b2750fa8b", 0xa6}], 0x4, &(0x7f00000049c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}], 0x18}}, {{&(0x7f0000004a00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000004a40)="214c8cfa0d845446599e1dd768d84c79d0f64e6c318751fff02166ad77db803502eb2280b0f36e5d2e6f355fc11fa8e573bdb7ba4aa81a274cdf2f737bcccc617341f49769c370e1b5d7bb139e72447647cb4e718b494e52d53aeab4263b43ce4c98d330f1bce90fba6707736d6adbd1b0289d06af47c79f22c9cf4ce080bf75364420fbd050ee62fab03a24e636d19458ed4eb2d125dbe228815c648c80a313436c970b9edd0871ccf4e3457423234b55ac565cf065d45505", 0xb9}, {&(0x7f0000004b00)="113e7e08e8e8cfc66b5f777c195462ed304de2f1b86e946e8877d58b99bdf761a52c00243ccba182a7d72233", 0x2c}, {&(0x7f0000004b40)="973dcbb2f54a6704e638284a286d85b887b51d8fb424e27d42107abbd038a3e916038eedf2758da59199a187b89f9c049fd0e0732b72127df860fb25e29eb71d7d2caf225ff83e6dda91a8e7274213f4b45b52784a0a019a223870fdcabd9e2bcb4c228e93", 0x65}, {&(0x7f0000004bc0)="977406b07eaa884d222633e5fef89c3de9791901d3c1e61ddccd878dc72b6498d5094fa56b0ccc5489ef61febe54309f3b67694c941393920121ad492d526d946cb246d52acea10f021dc5e11148cafeae4c43f8b617d4b8228c9376", 0x5c}, {&(0x7f0000004c40)="6ef7f8e66860b077227ff39dff4b07ebabc61ebc89942a106a1578503d7756", 0x1f}], 0x5}}], 0x7, 0x40000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r2, r8) 22m41.73517286s ago: executing program 3 (id=886): socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) flock(r4, 0x8) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x4, 0x5e, 0x7, 0x0, 0x1}) 22m41.462374857s ago: executing program 3 (id=888): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) socket(0x10, 0x803, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000080)) 22m40.516589522s ago: executing program 3 (id=889): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x7}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x2}]}]}, 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x150, 0x1403, 0x4, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008010}, 0x8004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 22m40.079103377s ago: executing program 3 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts-serpent-avx2,sha256-ce)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f0000000080)=""/205, 0xcd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001b00)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd2c, 0x13160000, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 22m25.009527862s ago: executing program 32 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts-serpent-avx2,sha256-ce)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f0000000080)=""/205, 0xcd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001b00)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd2c, 0x13160000, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 14m55.659225136s ago: executing program 5 (id=2605): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)="c6d9aa5c7699f5a613037da5f25b70e174f7ec4047484661a71254d9a5bdceab3998ca0f4603bdf5716288c58c4d7795c239447b19c07c653b8485623aa377ac7c24e7e956b335cd89a25bb5f5708150f5278e65ccddca11324f3ad1394945bcb7385f8ee845c97953bc4bb52ddfffc14ed4273a934e0a6a0bded173a5bbf116c9b614b91fa082bacc8194d25fe3e2d20aaef0b8aafd396d04e5e1ab8eb66b8c116d2b1e7695cdc6", 0xa8}, {&(0x7f0000000d40)="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", 0xf58}], 0x2) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000003200)=""/4096, 0x1000) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x8, 0xfffff018}, {0x6}]}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRES64=r4], 0x20000600}, 0x1, 0x0, 0x0, 0x4c892}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m52.376197682s ago: executing program 5 (id=2618): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) close(r2) 14m51.029534931s ago: executing program 5 (id=2622): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) read$hiddev(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x221) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9fd3182f3ef9ea028b761d8d18b12c0fbf64e01fdc16ab3f19ccea2d34d16c315afe1e0654083cd85bdecc1d0c08b65aa2b2b59ecb592696ae75b74bced0a71a55e78c444bc6465fc101e4d0d773fceabb706647834c3dac7f5053ba0fc5a1b7012444dace5c0a0be4300e09210200040122e20b090503022000050b08090580014001030607cc31074fbfe106909c0e2a9e3c8f70de1215b05b4e75f54d1fa06a425bb8c7fef594d2ffdf29b12ec1b945fa8258e29da5d13e03ec0c272e99523b2a0be430b629f7fa5bb1d4efc8455fff57efa9f30ce50458ae7f8b794ead783acf5e9960b78172cee5cf148a84453239e84e0e513347117423804b3e605c5fee826960698e8fcb3ed028f3686f7e7c4fc44974d6987f3a16f956683194e67b59a1225efa8d91d82fa9115ce443a8e13e7a3e934b017d087333eef373067226b5e8d836f1f1bdb35584b0e08c8edcc0f3390725010106ff7f090504", @ANYBLOB="b2"], 0x0) 14m47.390021176s ago: executing program 5 (id=2638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) listen(r2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 14m46.859123858s ago: executing program 5 (id=2640): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f00000002c0)={0x8000000000000000, 0x5, 0x1, 0xc05}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0xffc99a3b, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 14m45.646992493s ago: executing program 5 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1a, 0x80000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x20f9) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 32) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async, rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x0) 14m45.030804414s ago: executing program 33 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1a, 0x80000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x20f9) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 32) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async, rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x0) 8m33.701269333s ago: executing program 2 (id=3974): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$unix(0x1, 0x2, 0x0) shutdown(r3, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r8, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=[{0x2, 0x5, 0xf, 0xf}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x878}, 0x94) 8m32.995181864s ago: executing program 2 (id=3979): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) (fail_nth: 7) 8m32.394724772s ago: executing program 2 (id=3983): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r0, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x3, 0x3, 0x9, 0x29c3, 0xa2, 0x3, 0xb9}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x3, 0x7, 0x20c, 0x3, 0x14, 0x101, 0x5}, &(0x7f0000000140)=0x9c) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_cancel(0x0, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) io_uring_enter(r3, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) 8m31.061538905s ago: executing program 2 (id=3987): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001517ee40f00a0600000001020301090212ef25b10000000d04000000ff05490041d8fe2f7528453f9eb22e4ef58b16f86e50288df0b03e5186469b94"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400e1600000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 8m27.907045484s ago: executing program 2 (id=3997): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) membarrier(0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x58000}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3b006b459626977f000000000800000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r5, 0x40, r6}, 0x10) r7 = syz_clone(0x3000, &(0x7f0000000300)="95e670170222ef1edccc03cf0239dd91cc29465560845258e56c5335115b8512c5e1d3856f856fbfcfe761d453a8d18de425c6ed098aa7047c5b5d70847fbfd4b847696d06fe7455c9e7052ae157bcd4e14d829b120bf66953400574ffe5a23c6b66f207725a7b4a996832c55103ad22176cce8dae1f3c801f6348e05bfc405703c00cfb6c", 0x85, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)="be3432649a118ac26dcefd") sched_setscheduler(r7, 0x1, &(0x7f00000001c0)=0x7fffffff) 8m27.165312097s ago: executing program 2 (id=3999): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x42000) socket$inet(0x2, 0x3, 0x7f) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0x1000a2, 0x0) 8m11.579174789s ago: executing program 34 (id=3999): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x42000) socket$inet(0x2, 0x3, 0x7f) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0x1000a2, 0x0) 2m37.329385034s ago: executing program 1 (id=5463): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00'}, 0x10) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m35.961909689s ago: executing program 1 (id=5466): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x801, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002340)}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m34.702281058s ago: executing program 1 (id=5468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0xe}, 0x20, 0x4000000000000, 0x0) getpid() mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x108, &(0x7f0000000300)={0x0, 0x1, 0x3}) 2m34.350162025s ago: executing program 1 (id=5469): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x2, 0x2, 0x4, 0x1000, 0xfffb}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x20000) sendmmsg$inet6(r3, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480c0) socket(0x10, 0x803, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="0c010000160001"], 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r9 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) waitid(0x0, r10, 0x0, 0x8, 0xfffffffffffffffd) syz_usb_control_io(r2, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="0093783acf5c799afa18000000000000ad9238dbd6f40a662506ee5f7c0ca84320127f1a0d0a0c2e18ba9ddcb23674ea31e17996d341d1b3876191d2d09472a51dcc053c153f7fccffa7f26807be886910f9fb7eac8dddf6508ca75104f03eeeb524596e8d73eef30be18e797328c2454daf9156ab2141bdb6066454a1e7448a513799f9767d6f7ec08e8f97dff3f3fe2b88f2200ca890bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r11, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r11, 0xc018480b, 0x0) 2m30.393633078s ago: executing program 1 (id=5483): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x6cc42, 0x0) read$FUSE(r3, 0x0, 0xeffd) 2m29.991472992s ago: executing program 1 (id=5485): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005b80)={@empty, 0x33, r6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xa8, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @initial, {0x4, 0x3}}, 0x2, @random=0x1, 0x8086, @val, @val, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0xa}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x3}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xff, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 2m14.295632525s ago: executing program 35 (id=5485): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005b80)={@empty, 0x33, r6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xa8, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x70, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @initial, {0x4, 0x3}}, 0x2, @random=0x1, 0x8086, @val, @val, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0xa}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x3}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xff, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 12.446093854s ago: executing program 6 (id=5924): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004094) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) unshare(0x8020540) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000100), 0x1003) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889) recvmsg$can_j1939(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 11.540052094s ago: executing program 6 (id=5929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x174, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8a0}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x97}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8f}]}]}]}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 8.477447053s ago: executing program 7 (id=5938): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x44880) 8.434867255s ago: executing program 4 (id=5939): openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x1e1200, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000300)=0xff, 0xd18, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000007"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000700)=r4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x20, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x8, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x2, 0x6, 0x5, 0x80, 0x3}, @call={0x85, 0x0, 0x0, 0x9b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x84f6}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x29, &(0x7f0000000140)=""/41, 0x41000, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x2, 0x34ad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, r2, r5], 0x0, 0x10, 0x9}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa00, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010000100000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007600000c000280061f0500000000000000000000a9be27b13631e5e4bee1e3051574fb393388c88ae992c4ab7439ee3473015e519bb8ead7c22589c4217d4cbd1466f9b00a3d77718602b40d37c887e1934cc9fc7fbd1be4fb7d5d589f1d6fce3e6e10aadf07c561dbacc040be8c26632bd027e3d274f8a0c508a07b6dbdb9510cbbd07d102de412144edb622aaed940a382116c45416295e30f8046626479b4392ecf55926a8ed776da9da66653a64b34c6b257c734094c1425bb1745e6e2a3718af0f4fbe5846e8319e96e5f3bbf1bef"], 0x3c}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x100004, 0x7f, {}, {0x2, 0xc, 0xf8, 0x7, 0x6, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1, 0x0, r6}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$BLKRASET(r6, 0x1262, &(0x7f0000000080)=0xd37) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f042}) 8.412743305s ago: executing program 6 (id=5940): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r0, 0x29, 0x1a, 0x0, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x4, 0xf9, 0x2, 0x5}]}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r1}) r2 = syz_clone(0x40000080, &(0x7f0000000100)="daf2f7e1fcb3189ac05a31503ff79287c9fa64f3f20fe5300f8ea42be94db93036d8b27ba2cfe77a944c7720b56fb354f4713a8775b22a2d74b60807e4c144a85717", 0x42, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="c101e2cdd9696578a746d363") prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, &(0x7f0000000200)) 8.187026808s ago: executing program 8 (id=5941): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$unix(0x1, 0x2, 0x0) shutdown(r4, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x1) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r9, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=[{0x2, 0x5, 0xf, 0xf}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x878}, 0x94) 7.359482774s ago: executing program 4 (id=5943): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "fbc3064eb18ead9d484b0dcc20242877"}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0xffffffff, 0xfffffffffffffed9) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b0000000000000020000000001100"], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x5}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000000)=[{r3, 0x2002}], 0x1, 0x7f) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) open_tree(0xffffffffffffff9c, 0x0, 0x89101) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) unshare(0x42060000) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x6e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB="009d3c4a86077a7b750d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 7.289461562s ago: executing program 8 (id=5944): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0x0, 0x275, 0x48e, 0x4, r9, 0x4, '\x00', r4, r8, 0x0, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r7, 0x25, 0x2, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000080)={0x81, "42a8a45d8d000000000500000000000000000000c2bf330e00"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x3a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="78000000550000042cbd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00000300fc0100200000000000000000002e00000000000020000100479dc05e556465ccfebfc95b7e6be086621e69beccb7656c0ed2f8e52b3f9cc64c4f760194249346131a126f148b2347df6e609d4a250b84508d4e4b95745c70066628467f2bf08ed3e55069fcac5ab6516e31a846cfb102d34cee1d5933d17d57b51281943ea32992ae730fce68a2ced623ff7ec7aff07484b49c5ac7909115747b87bd80d0f74912025bafbe", @ANYRES32=r7, @ANYBLOB="01010100fe8000000000000000000000000000aa0000000020000100", @ANYRES32=r11, @ANYBLOB="010002000000000000000000000000000000000186dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x4008840) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 6.212839363s ago: executing program 0 (id=5945): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) poll(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0xd931d3864d39dcca) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 6.159165418s ago: executing program 8 (id=5946): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000080)=""/243, 0xf3}, &(0x7f0000000000), 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x33, 0x28000000}, {&(0x7f00000002c0)=""/178, 0xb2}, &(0x7f0000000600), 0x0, 0x10, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/246, 0xf6}, &(0x7f0000000780), 0x5d}}], 0xa8}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xa, 0x1, '{[%^&\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6.100680847s ago: executing program 8 (id=5947): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0x12, &(0x7f0000001580)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f7ffffff7b21070000000000bfa200000000000007020000f8ffffffb70300000800b7040000000000008500000082000000775af4ff0100000018600000060000000000000002000000181100000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018630000040000000000000008000000"], &(0x7f00000000c0)='syzkaller\x00', 0x10, 0x87, &(0x7f0000001680)=""/135, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x0, 0xa, 0x800, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)=[0xffffffffffffffff], &(0x7f0000001800), 0x10, 0x3}, 0x94) 6.085136988s ago: executing program 7 (id=5948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000100001002abd700e0200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000240012800c0001006d6163766c616e001400028008000100100000000800030001000000140035006d6163766c616e30"], 0x58}}, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff9d}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x5f, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) setsockopt$sock_void(r6, 0x1, 0x3f, 0x0, 0x0) pread64(r3, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, 0x0, 0x7) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) sched_getattr(0x0, &(0x7f0000000280)={0x38}, 0x38, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.104817748s ago: executing program 0 (id=5949): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0a03"], 0xd) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x7, 0x7fffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, r2}) 5.100815068s ago: executing program 7 (id=5950): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x2a100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x10000052, 0x300081, 0x401, 0xb49, 0x9, 0x2, 0x3, 0x1}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000300)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bind$isdn(r1, &(0x7f0000000500)={0x22, 0x3, 0x6, 0x3, 0x5}, 0x6) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r5, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000140)=0x80) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000040)=0x2, 0x4) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, 0x0, 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x7fff, 0x8, {{0x9, 0x4, 0x0, 0x3e, 0x24, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x57}, @generic={0x94, 0xb, "03a2955e075a60ec07"}]}}}}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40084149, &(0x7f0000000080)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101241, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c00050017"], 0x15) 5.03125377s ago: executing program 6 (id=5951): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) 4.939214208s ago: executing program 6 (id=5952): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ea30227", @ANYRES16=r1, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23004a) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x4, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = timerfd_create(0x7, 0x0) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000000)=0x3) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0xffffffff, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r7}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x3ff, 0x5}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 4.915414104s ago: executing program 0 (id=5953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120600"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000440)=@framed={{}, [@generic={0x9, 0x4, 0x5, 0x9, 0x1731}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 3.723257178s ago: executing program 4 (id=5954): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x86, 0x0, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4281, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4281, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) recvmmsg$unix(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000005f40)=""/232, 0xe8}, {&(0x7f0000000040)}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/146, 0x92}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/247, 0xf7}, {&(0x7f0000000080)=""/109, 0x6d}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x9, &(0x7f0000003640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003700)=""/109, 0x6d}], 0x1, &(0x7f0000003780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x130}}, {{&(0x7f00000038c0)=@abs, 0x6e, &(0x7f0000003cc0), 0x0, &(0x7f0000003d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003e00)=""/190, 0xbe}], 0x1, &(0x7f0000003f00)}}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000003fc0)=""/105, 0x69}, {&(0x7f0000004040)=""/32, 0x20}, {&(0x7f0000004080)=""/246, 0xf6}, {&(0x7f0000003b00)=""/97, 0x61}, {&(0x7f0000004200)=""/198, 0xc6}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/33, 0x21}, {&(0x7f0000005340)=""/234, 0xea}], 0x8, &(0x7f0000006040)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000003b80), 0x6e, &(0x7f0000005700)=[{&(0x7f00000056c0)=""/32, 0x20}], 0x1, &(0x7f0000005740)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000005840)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000058c0)=""/244, 0xf4}, {&(0x7f00000059c0)=""/41, 0x29}], 0x2, &(0x7f0000005a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000004180), 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005b80)=""/67, 0x43}, {&(0x7f0000005c00)=""/50, 0x32}], 0x2, &(0x7f0000005c80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x8, 0x0, &(0x7f0000005f00)={0x0, 0x989680}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.700897856s ago: executing program 6 (id=5955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ff8a000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair(0x22, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000180)=@can={0x1d, r8}, 0x80, 0x0}}], 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000300)="edf43b9a3cb708d2165bc4c1bb1ef4a7646f926040d2ac392e9338d4ba654a602229107bf56b6fcff4942da43ab1b3caa2d098b17df239265ce571e92905cc476d0b2883e2ba8db6af241a51dff782f2f4d337da785e", 0x56}], 0x2, &(0x7f0000000300)=ANY=[], 0x10b8}, 0x20004) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) 3.009083552s ago: executing program 7 (id=5956): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x801, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002340)}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3.008745274s ago: executing program 8 (id=5957): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004094) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) unshare(0x8020540) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000100), 0x1003) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889) recvmsg$can_j1939(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.994545052s ago: executing program 0 (id=5958): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'/28], 0x48) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x4, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 2.992687771s ago: executing program 4 (id=5959): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff, 0x0, 0x40000, [0x1]}]}) close_range(r9, r10, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$inet6_udp_int(r10, 0x11, 0x1, &(0x7f0000000180)=0x10000, 0x4) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8001}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.611863303s ago: executing program 8 (id=5960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) poll(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0xd931d3864d39dcca) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 513.858732ms ago: executing program 0 (id=5961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@code={0xa, 0x59, {"c4a1b054b6cf7b00003e400fed3d10f30000660f629a0c00000066bad104edb805000000b9030000000f01c166400f388275000fb58de96438114d0fc71a66baa000ec8f297882f8"}}, @rdmsr={0x32, 0x18, {0xaee}}, @cpuid={0x14, 0x18, {0xd}}, @code={0xa, 0x56, {"66460f63bb01000000b90a060000b80e000000ba000000000f303ef30f0966ba6100edb98a0400000f32ff610866f30f1efc660f3882073e400f8300000000c4e12c5976cb"}}, @code={0xa, 0x75, {"66b829018ed80fc79e00600000440febf766baf80cb8a8708f85ef66bafc0cedb9800000c00f3235008000000f30450f009ca2f78f0000c744240006000000c744240200000000c7442406000000000f011c240f01cf64f22a7dd6c4827d32bd00000100"}}, @wr_crn={0x46, 0x20, {0xd, 0x86}}, @wrmsr={0x1e, 0x20, {0x837, 0x5}}, @cpuid={0x14, 0x18, {0x4, 0xfff}}, @rdmsr={0x32, 0x18, {0xc0010114}}], 0x1c4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000040)="ea5f0cea00663e660f3a44da08650f01c9660fc7741df3f36521000f320f01c90f0d2cb803010f00d836f030a37ec8", 0x2f}], 0x1, 0x28, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0x1a, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffa}, @efer={0x2, 0x4100}], 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r1, 0x2f, 0x2000, 0x4}, 0x20) 510.681609ms ago: executing program 4 (id=5962): r0 = socket(0x2, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket(0xa, 0x5, 0x0) getpeername$l2tp6(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x46) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'macvlan1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x6, 0x5ef, 0x9, 0xbe, 0xd1, [0x1, 0xf2]}}) 107.77598ms ago: executing program 7 (id=5963): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0xfff, r1}, 0x38) 3.061731ms ago: executing program 0 (id=5964): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="001bd697677eef0b89c5ea6d25"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x7ffffffffffffffa, 0x0, {0x9}}, 0x18) fallocate(r1, 0x0, 0x0, 0x1000f4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x4f8, 0xffffffff, 0x230, 0x230, 0x348, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xffffff00], 'pimreg1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x11, 0x3, 0x7, 0x2}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@frag={{0x30}, {[0xd1, 0x93a8], 0x7, 0x3, 0x3}}, @common=@frag={{0x30}, {[0x6, 0x80000000], 0x9, 0x0, 0x6}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:sulogin_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 0x4e21, 0x0, 0x7, 0x4e23, 0x10, 0x4}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4, 0x2}, {0xffffffffffffffff, 0x2, 0x5}}}}, {{@ipv6={@empty, @remote, [0x3c39261e294d114, 0xff, 0xff, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x10}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1, 0xc}, {0x2}, {0x2, 0x6, 0x4}, 0xb, 0x38}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000404000000000000000000611233000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0502000017040200280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.808358ms ago: executing program 4 (id=5965): socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004094) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 0s ago: executing program 7 (id=5966): socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004094) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) kernel console output (not intermixed with test programs): 0x16d/0x220 [ 1583.910448][T27475] ? __pfx___sys_sendmsg+0x10/0x10 [ 1583.910480][T27475] do_syscall_64+0xcd/0x4c0 [ 1583.910499][T27475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.910515][T27475] RIP: 0033:0x7fcefff8ebe9 [ 1583.910528][T27475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.910543][T27475] RSP: 002b:00007fcf00de9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1583.910558][T27475] RAX: ffffffffffffffda RBX: 00007fcf001b5fa0 RCX: 00007fcefff8ebe9 [ 1583.910569][T27475] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 1583.910578][T27475] RBP: 00007fcf00de9090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.910587][T27475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.910601][T27475] R13: 00007fcf001b6038 R14: 00007fcf001b5fa0 R15: 00007ffcfe42d248 [ 1583.910624][T27475] [ 1584.124118][T27477] overlayfs: failed to resolve './file0': -2 [ 1584.412435][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5612'. [ 1584.421680][ T30] audit: type=1400 audit(2000000972.679:35919): avc: denied { read } for pid=27480 comm="syz.0.5612" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1584.445561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.449450][ T974] m920x_read = error: -19 [ 1584.468287][ T974] dvb-usb: error while querying for an remote control event. [ 1584.513537][ T30] audit: type=1400 audit(2000000972.679:35920): avc: denied { open } for pid=27480 comm="syz.0.5612" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1584.593286][T27485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5611'. [ 1584.964581][ T974] m920x_read = error: -19 [ 1584.968952][ T974] dvb-usb: error while querying for an remote control event. [ 1585.047710][ T30] audit: type=1400 audit(2000000973.259:35921): avc: denied { accept } for pid=27486 comm="syz.8.5614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1585.087168][ T30] audit: type=1400 audit(2000000973.259:35922): avc: denied { ioctl } for pid=27486 comm="syz.8.5614" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1585.114993][ T974] m920x_read = error: -19 [ 1585.119622][ T974] dvb-usb: error while querying for an remote control event. [ 1585.132676][ T30] audit: type=1400 audit(2000000973.399:35923): avc: denied { listen } for pid=27489 comm="syz.0.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1585.223316][ T30] audit: type=1400 audit(2000000973.399:35924): avc: denied { accept } for pid=27489 comm="syz.0.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1585.227520][T27497] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1585.243780][ T974] m920x_read = error: -19 [ 1585.251387][T27494] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5616'. [ 1585.256941][ T974] dvb-usb: error while querying for an remote control event. [ 1585.331090][T27497] cramfs: wrong magic [ 1585.390623][ T974] m920x_read = error: -19 [ 1585.395027][ T974] dvb-usb: error while querying for an remote control event. [ 1585.564552][ T974] m920x_read = error: -19 [ 1585.568912][ T974] dvb-usb: error while querying for an remote control event. [ 1586.102697][ T974] m920x_read = error: -19 [ 1586.107035][ T974] dvb-usb: error while querying for an remote control event. [ 1586.230390][ T974] m920x_read = error: -19 [ 1586.234748][ T974] dvb-usb: error while querying for an remote control event. [ 1586.363724][ T5910] m920x_read = error: -19 [ 1586.368085][ T5910] dvb-usb: error while querying for an remote control event. [ 1586.480469][T18206] m920x_read = error: -19 [ 1586.484933][T18206] dvb-usb: error while querying for an remote control event. [ 1587.069337][T18206] m920x_read = error: -19 [ 1587.085394][T18206] dvb-usb: error while querying for an remote control event. [ 1587.120576][ T5910] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1587.265254][T18206] m920x_read = error: -19 [ 1587.269583][T18206] dvb-usb: error while querying for an remote control event. [ 1587.352236][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.368328][ T5910] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1587.378271][ T5910] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1587.388027][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.397314][T18206] m920x_read = error: -19 [ 1587.401844][T18206] dvb-usb: error while querying for an remote control event. [ 1587.413174][ T5910] usb 1-1: config 0 descriptor?? [ 1587.440745][T27514] binder: 27513:27514 ioctl c00c620f 2000000003c0 returned -22 [ 1587.510612][T18206] m920x_read = error: -19 [ 1587.515620][T18206] dvb-usb: error while querying for an remote control event. [ 1587.540386][T12820] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1587.553002][T27520] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5623'. [ 1587.593933][T27522] netlink: 'syz.8.5624': attribute type 10 has an invalid length. [ 1587.623822][T27522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.636214][ T5910] Bluetooth: Can't get state to change to load ram patch err [ 1587.646239][T27522] bond0: (slave team0): Enslaving as an active interface with an up link [ 1587.654893][T18206] m920x_read = error: -19 [ 1587.659227][T18206] dvb-usb: error while querying for an remote control event. [ 1587.668521][ T5910] Bluetooth: Loading patch file failed [ 1587.675056][ T5910] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 1587.703366][T12820] usb 5-1: Using ep0 maxpacket: 16 [ 1587.706831][ T5910] usb 1-1: USB disconnect, device number 90 [ 1587.728687][T12820] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1587.780715][T12820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.791748][T12820] usb 5-1: config 0 descriptor?? [ 1587.794666][T18206] m920x_read = error: -19 [ 1587.799260][T12820] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1587.813914][T18206] dvb-usb: error while querying for an remote control event. [ 1587.940916][T18206] m920x_read = error: -19 [ 1587.945425][T18206] dvb-usb: error while querying for an remote control event. [ 1588.085684][T27535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5625'. [ 1588.100614][T18206] m920x_read = error: -19 [ 1588.105878][T18206] dvb-usb: error while querying for an remote control event. [ 1588.231696][T18206] m920x_read = error: -19 [ 1588.245386][T18206] dvb-usb: error while querying for an remote control event. [ 1588.279519][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5626'. [ 1588.460622][ T5910] m920x_read = error: -19 [ 1588.467406][ T5910] dvb-usb: error while querying for an remote control event. [ 1589.164168][ T5910] m920x_read = error: -19 [ 1589.168840][ T5910] dvb-usb: error while querying for an remote control event. [ 1589.290593][ T5910] m920x_read = error: -19 [ 1589.294997][ T5910] dvb-usb: error while querying for an remote control event. [ 1589.435047][T27517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.460687][T27517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.470670][ T5910] m920x_read = error: -19 [ 1589.480297][ T5910] dvb-usb: error while querying for an remote control event. [ 1589.564069][T27549] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5628'. [ 1589.610555][T18206] m920x_read = error: -19 [ 1589.614950][T18206] dvb-usb: error while querying for an remote control event. [ 1589.720361][T12820] gspca_sonixj: i2c_w8 err -71 [ 1589.740436][T12820] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1589.752569][T18206] m920x_read = error: -19 [ 1589.753484][T12820] usb 5-1: USB disconnect, device number 113 [ 1589.762984][T18206] dvb-usb: error while querying for an remote control event. [ 1589.844932][T27552] netlink: 'syz.7.5630': attribute type 10 has an invalid length. [ 1589.861746][T27552] bond0: (slave wlan1): Opening slave failed [ 1589.870750][T18206] m920x_read = error: -19 [ 1589.875207][T18206] dvb-usb: error while querying for an remote control event. [ 1589.990317][T18206] m920x_read = error: -19 [ 1589.994854][T18206] dvb-usb: error while querying for an remote control event. [ 1590.110566][T18206] m920x_read = error: -19 [ 1590.115014][T18206] dvb-usb: error while querying for an remote control event. [ 1590.230426][T18206] m920x_read = error: -19 [ 1590.234821][T18206] dvb-usb: error while querying for an remote control event. [ 1590.350397][T18206] m920x_read = error: -19 [ 1590.354850][T18206] dvb-usb: error while querying for an remote control event. [ 1590.385926][T27562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5633'. [ 1590.470308][T18206] m920x_read = error: -19 [ 1590.475264][T18206] dvb-usb: error while querying for an remote control event. [ 1590.600266][T18206] m920x_read = error: -19 [ 1590.704794][T18206] dvb-usb: error while querying for an remote control event. [ 1590.823106][T18206] m920x_read = error: -19 [ 1590.832193][T18206] dvb-usb: error while querying for an remote control event. [ 1590.940741][T18206] m920x_read = error: -19 [ 1590.951619][T18206] dvb-usb: error while querying for an remote control event. [ 1591.060319][T18206] m920x_read = error: -19 [ 1591.065900][T18206] dvb-usb: error while querying for an remote control event. [ 1591.201127][T18206] m920x_read = error: -19 [ 1591.210200][T18206] dvb-usb: error while querying for an remote control event. [ 1591.350877][T18206] m920x_read = error: -19 [ 1591.512673][T18206] dvb-usb: error while querying for an remote control event. [ 1591.628897][T18206] m920x_read = error: -19 [ 1591.688179][T27580] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1591.998994][T18206] dvb-usb: error while querying for an remote control event. [ 1592.048963][ T30] audit: type=1400 audit(2000000980.309:35925): avc: denied { create } for pid=27573 comm="syz.4.5636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1592.053509][T27583] netlink: 'syz.4.5636': attribute type 10 has an invalid length. [ 1592.085972][T27583] batman_adv: batadv0: Adding interface: team0 [ 1592.094391][T27583] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.119599][ T30] audit: type=1400 audit(2000000980.319:35926): avc: denied { ioctl } for pid=27573 comm="syz.4.5636" path="socket:[104667]" dev="sockfs" ino=104667 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1592.120334][T18206] m920x_read = error: -19 [ 1592.153658][T18206] dvb-usb: error while querying for an remote control event. [ 1592.162111][T27583] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1592.280530][T18206] m920x_read = error: -19 [ 1592.287782][T18206] dvb-usb: error while querying for an remote control event. [ 1592.297905][T27583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5636'. [ 1592.319696][ T30] audit: type=1400 audit(2000000980.579:35927): avc: denied { append } for pid=27573 comm="syz.4.5636" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1592.345143][T27583] usb usb3: usbfs: process 27583 (syz.4.5636) did not claim interface 0 before use [ 1592.378298][T27588] pim6reg1: entered promiscuous mode [ 1592.383794][T27588] pim6reg1: entered allmulticast mode [ 1592.400964][ T974] m920x_read = error: -19 [ 1592.409717][ T974] dvb-usb: error while querying for an remote control event. [ 1592.489611][T27590] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1592.501354][T27590] cramfs: wrong magic [ 1592.623778][ T974] m920x_read = error: -19 [ 1592.628141][ T974] dvb-usb: error while querying for an remote control event. [ 1593.165358][T18206] m920x_read = error: -19 [ 1593.175064][T18206] dvb-usb: error while querying for an remote control event. [ 1593.305733][T18206] m920x_read = error: -19 [ 1593.312855][T27601] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5641'. [ 1593.355527][T18206] dvb-usb: error while querying for an remote control event. [ 1594.029339][T18206] m920x_read = error: -19 [ 1594.033916][T18206] dvb-usb: error while querying for an remote control event. [ 1594.150330][T18206] m920x_read = error: -19 [ 1594.154872][T18206] dvb-usb: error while querying for an remote control event. [ 1594.183809][T27612] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1594.205744][T27612] cramfs: wrong magic [ 1594.270385][T18206] m920x_read = error: -19 [ 1594.274898][T18206] dvb-usb: error while querying for an remote control event. [ 1594.509333][T18206] m920x_read = error: -19 [ 1594.510285][T27617] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1594.524452][T27617] cramfs: wrong magic [ 1594.526125][T18206] dvb-usb: error while querying for an remote control event. [ 1595.172906][ T1208] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1595.180689][ T5910] m920x_read = error: -19 [ 1595.185302][ T5910] dvb-usb: error while querying for an remote control event. [ 1595.590817][ T974] m920x_read = error: -19 [ 1595.601817][ T974] dvb-usb: error while querying for an remote control event. [ 1595.672212][ T1208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.699832][ T1208] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1595.709241][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.730605][ T974] m920x_read = error: -19 [ 1595.730666][ T1208] usb 5-1: config 0 descriptor?? [ 1595.734977][ T974] dvb-usb: error while querying for an remote control event. [ 1595.994850][ T1208] pwc: Askey VC010 type 2 USB webcam detected. [ 1596.068281][T27631] netlink: 25 bytes leftover after parsing attributes in process `syz.8.5649'. [ 1596.202538][ T1208] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1596.209810][ T1208] pwc: recv_control_msg error -32 req 02 val 2700 [ 1596.216837][T27624] netlink: 'syz.6.5647': attribute type 10 has an invalid length. [ 1596.229255][T27624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.237946][T27624] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1596.250464][ T974] m920x_read = error: -19 [ 1596.254787][ T974] dvb-usb: error while querying for an remote control event. [ 1596.428486][ T30] audit: type=1400 audit(2000000984.609:35928): avc: denied { read } for pid=27627 comm="syz.7.5650" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1596.454044][ T1208] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1596.462422][ T30] audit: type=1400 audit(2000000984.639:35929): avc: denied { map } for pid=27627 comm="syz.7.5650" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1596.498899][T27638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5648'. [ 1596.510822][ T5910] m920x_read = error: -19 [ 1596.530616][ T5910] dvb-usb: error while querying for an remote control event. [ 1596.824902][ T1208] pwc: recv_control_msg error -32 req 04 val 1000 [ 1596.843241][ T5910] m920x_read = error: -19 [ 1596.851478][ T1208] pwc: recv_control_msg error -32 req 04 val 1300 [ 1596.867273][ T30] audit: type=1400 audit(2000000984.639:35930): avc: denied { execute } for pid=27627 comm="syz.7.5650" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1596.895035][ T5910] dvb-usb: error while querying for an remote control event. [ 1596.970349][ T1208] pwc: recv_control_msg error -32 req 04 val 1400 [ 1596.980656][ T1208] pwc: recv_control_msg error -32 req 02 val 2000 [ 1597.020667][ T5910] m920x_read = error: -19 [ 1597.025027][ T5910] dvb-usb: error while querying for an remote control event. [ 1597.160264][ T5910] m920x_read = error: -19 [ 1597.164698][ T5910] dvb-usb: error while querying for an remote control event. [ 1597.201241][ T1208] pwc: recv_control_msg error -32 req 04 val 1500 [ 1597.208238][ T1208] pwc: recv_control_msg error -32 req 02 val 2500 [ 1597.290563][ T974] m920x_read = error: -19 [ 1597.294901][ T974] dvb-usb: error while querying for an remote control event. [ 1597.420552][ T974] m920x_read = error: -19 [ 1597.426324][ T974] dvb-usb: error while querying for an remote control event. [ 1597.460380][ T1208] pwc: recv_control_msg error -71 req 02 val 2600 [ 1597.477548][ T1208] pwc: recv_control_msg error -71 req 02 val 2900 [ 1597.495197][ T1208] pwc: recv_control_msg error -71 req 02 val 2800 [ 1597.512752][ T1208] pwc: recv_control_msg error -71 req 04 val 1100 [ 1597.546457][ T974] m920x_read = error: -19 [ 1597.552147][ T1208] pwc: recv_control_msg error -71 req 04 val 1200 [ 1597.564691][ T974] dvb-usb: error while querying for an remote control event. [ 1597.580279][ T1208] pwc: Registered as video103. [ 1597.605680][ T1208] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input83 [ 1597.681675][ T974] m920x_read = error: -19 [ 1597.689409][ T974] dvb-usb: error while querying for an remote control event. [ 1597.736595][ T1208] usb 5-1: USB disconnect, device number 114 [ 1597.853033][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5656'. [ 1597.880868][ T974] m920x_read = error: -19 [ 1597.902850][ T974] dvb-usb: error while querying for an remote control event. [ 1598.043639][ T974] m920x_read = error: -19 [ 1598.049259][ T974] dvb-usb: error while querying for an remote control event. [ 1598.169342][ T974] m920x_read = error: -19 [ 1598.173927][ T974] dvb-usb: error while querying for an remote control event. [ 1598.188497][ T30] audit: type=1400 audit(2000000986.449:35931): avc: denied { ioctl } for pid=27663 comm="syz.4.5657" path="socket:[104927]" dev="sockfs" ino=104927 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1598.330479][ T5910] m920x_read = error: -19 [ 1598.342586][ T5910] dvb-usb: error while querying for an remote control event. [ 1598.461161][ T5910] m920x_read = error: -19 [ 1598.465542][ T5910] dvb-usb: error while querying for an remote control event. [ 1598.596389][ T5910] m920x_read = error: -19 [ 1598.601044][ T5910] dvb-usb: error while querying for an remote control event. [ 1598.712321][ T5910] m920x_read = error: -19 [ 1598.722707][ T5910] dvb-usb: error while querying for an remote control event. [ 1598.840742][ T974] m920x_read = error: -19 [ 1598.845378][ T974] dvb-usb: error while querying for an remote control event. [ 1598.960378][ T974] m920x_read = error: -19 [ 1598.966152][ T974] dvb-usb: error while querying for an remote control event. [ 1599.090550][ T974] m920x_read = error: -19 [ 1599.104092][ T974] dvb-usb: error while querying for an remote control event. [ 1599.224637][ T974] m920x_read = error: -19 [ 1599.229102][ T974] dvb-usb: error while querying for an remote control event. [ 1599.355506][ T974] m920x_read = error: -19 [ 1599.366679][ T974] dvb-usb: error while querying for an remote control event. [ 1599.501198][ T974] m920x_read = error: -19 [ 1599.517545][ T974] dvb-usb: error while querying for an remote control event. [ 1599.652282][ T974] m920x_read = error: -19 [ 1599.664221][ T974] dvb-usb: error while querying for an remote control event. [ 1599.780709][ T974] m920x_read = error: -19 [ 1599.785090][ T974] dvb-usb: error while querying for an remote control event. [ 1600.013481][T27677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1600.066941][ T974] m920x_read = error: -19 [ 1600.133255][ T974] dvb-usb: error while querying for an remote control event. [ 1600.209409][ T30] audit: type=1400 audit(2000000988.469:35932): avc: denied { getopt } for pid=27682 comm="syz.8.5662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1600.290443][ T974] m920x_read = error: -19 [ 1600.295601][ T974] dvb-usb: error while querying for an remote control event. [ 1600.401803][T16789] Bluetooth: hci4: command 0x040f tx timeout [ 1600.413874][ T974] m920x_read = error: -19 [ 1600.424376][ T974] dvb-usb: error while querying for an remote control event. [ 1600.454513][T27690] netlink: 'syz.0.5663': attribute type 1 has an invalid length. [ 1600.473535][ T43] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1600.741389][ T974] m920x_read = error: -19 [ 1600.823650][ T974] dvb-usb: error while querying for an remote control event. [ 1600.921283][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1600.940282][ T974] m920x_read = error: -19 [ 1600.984955][ T43] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 1600.998834][ T974] dvb-usb: error while querying for an remote control event. [ 1601.019523][ T43] usb 5-1: config 0 has no interface number 0 [ 1601.214084][ T974] m920x_read = error: -19 [ 1601.233017][ T43] usb 5-1: config 0 interface 153 has no altsetting 0 [ 1601.240365][ T974] dvb-usb: error while querying for an remote control event. [ 1601.259355][ T43] usb 5-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=c1.31 [ 1601.277342][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.285466][ T43] usb 5-1: Product: syz [ 1601.289699][ T43] usb 5-1: Manufacturer: syz [ 1601.294889][ T43] usb 5-1: SerialNumber: syz [ 1601.350883][ T974] m920x_read = error: -19 [ 1601.374057][ T43] usb 5-1: config 0 descriptor?? [ 1601.384390][ T974] dvb-usb: error while querying for an remote control event. [ 1601.405292][ T43] HFC-S_USB 5-1:0.153: probe with driver HFC-S_USB failed with error -5 [ 1602.129971][T27705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5669'. [ 1602.141908][ T43] m920x_read = error: -19 [ 1602.152294][ T43] dvb-usb: error while querying for an remote control event. [ 1602.312588][ T43] m920x_read = error: -19 [ 1602.316919][ T43] dvb-usb: error while querying for an remote control event. [ 1602.647297][ T43] m920x_read = error: -19 [ 1602.658966][ T43] dvb-usb: error while querying for an remote control event. [ 1602.780422][ T43] m920x_read = error: -19 [ 1602.784879][ T43] dvb-usb: error while querying for an remote control event. [ 1602.910636][ T5910] m920x_read = error: -19 [ 1602.938751][ T5910] dvb-usb: error while querying for an remote control event. [ 1602.940920][T27720] FAULT_INJECTION: forcing a failure. [ 1602.940920][T27720] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.043789][T27720] CPU: 0 UID: 0 PID: 27720 Comm: syz.0.5673 Not tainted syzkaller #0 PREEMPT(full) [ 1603.043807][T27720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1603.043814][T27720] Call Trace: [ 1603.043818][T27720] [ 1603.043823][T27720] dump_stack_lvl+0x16c/0x1f0 [ 1603.043840][T27720] should_fail_ex+0x512/0x640 [ 1603.043852][T27720] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1603.043866][T27720] should_failslab+0xc2/0x120 [ 1603.043880][T27720] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1603.043891][T27720] ? schedule+0x2d7/0x3a0 [ 1603.043900][T27720] ? fuse_request_alloc+0x22/0x200 [ 1603.043917][T27720] fuse_request_alloc+0x22/0x200 [ 1603.043930][T27720] fuse_get_req+0x748/0xfd0 [ 1603.043947][T27720] ? __pfx_fuse_get_req+0x10/0x10 [ 1603.043961][T27720] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1603.043983][T27720] __fuse_simple_request+0xb8/0xcb0 [ 1603.043997][T27720] ? __asan_memset+0x23/0x50 [ 1603.044015][T27720] fuse_lookup_name+0x2ad/0x780 [ 1603.044035][T27720] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1603.044051][T27720] ? find_held_lock+0x2b/0x80 [ 1603.044081][T27720] fuse_lookup+0x26a/0x560 [ 1603.044092][T27720] ? __pfx_fuse_lookup+0x10/0x10 [ 1603.044110][T27720] ? d_alloc_parallel+0x828/0x1480 [ 1603.044133][T27720] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1603.044154][T27720] fuse_atomic_open+0x2cd/0x470 [ 1603.044165][T27720] ? __pfx_fuse_atomic_open+0x10/0x10 [ 1603.044175][T27720] lookup_open.isra.0+0x83d/0x1580 [ 1603.044190][T27720] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1603.044216][T27720] ? lookup_fast+0x156/0x610 [ 1603.044228][T27720] path_openat+0x893/0x2cb0 [ 1603.044245][T27720] ? __pfx_path_openat+0x10/0x10 [ 1603.044261][T27720] do_filp_open+0x20b/0x470 [ 1603.044274][T27720] ? __pfx_do_filp_open+0x10/0x10 [ 1603.044297][T27720] ? alloc_fd+0x471/0x7d0 [ 1603.044313][T27720] do_sys_openat2+0x11b/0x1d0 [ 1603.044328][T27720] ? __pfx_do_sys_openat2+0x10/0x10 [ 1603.044352][T27720] __do_sys_openat2+0x1c0/0x2d0 [ 1603.044368][T27720] ? __pfx___do_sys_openat2+0x10/0x10 [ 1603.044382][T27720] ? ksys_write+0x1ac/0x250 [ 1603.044399][T27720] do_syscall_64+0xcd/0x4c0 [ 1603.044412][T27720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.044424][T27720] RIP: 0033:0x7fcefff8ebe9 [ 1603.044433][T27720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.044444][T27720] RSP: 002b:00007fcf00de9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 1603.044455][T27720] RAX: ffffffffffffffda RBX: 00007fcf001b5fa0 RCX: 00007fcefff8ebe9 [ 1603.044462][T27720] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 1603.044469][T27720] RBP: 00007fcf00de9090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.044475][T27720] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1603.044482][T27720] R13: 00007fcf001b6038 R14: 00007fcf001b5fa0 R15: 00007ffcfe42d248 [ 1603.044496][T27720] [ 1603.050421][ T5910] m920x_read = error: -19 [ 1603.347418][ T5910] dvb-usb: error while querying for an remote control event. [ 1603.500258][ T5910] m920x_read = error: -19 [ 1603.504807][ T5910] dvb-usb: error while querying for an remote control event. [ 1603.574868][T27727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.586833][T27727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.597223][ T30] audit: type=1400 audit(2000000991.859:35933): avc: denied { create } for pid=27729 comm="syz.6.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1603.620747][ T43] m920x_read = error: -19 [ 1603.625238][ T43] dvb-usb: error while querying for an remote control event. [ 1603.633851][ T30] audit: type=1400 audit(2000000991.889:35934): avc: denied { write } for pid=27729 comm="syz.6.5676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1603.697689][ T1208] usb 5-1: USB disconnect, device number 115 [ 1603.741558][ T43] m920x_read = error: -19 [ 1603.751613][ T43] dvb-usb: error while querying for an remote control event. [ 1603.870268][ T43] m920x_read = error: -19 [ 1603.874626][ T43] dvb-usb: error while querying for an remote control event. [ 1603.986789][T21805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1603.997120][T21805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1604.006061][T21805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1604.015550][T21805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1604.020343][ T43] m920x_read = error: -19 [ 1604.022996][T21805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1604.026948][ T43] dvb-usb: error while querying for an remote control event. [ 1604.068970][T27734] wlan0 speed is unknown, defaulting to 1000 [ 1604.069590][T27734] lo speed is unknown, defaulting to 1000 [ 1604.071113][T27734] wg2 speed is unknown, defaulting to 1000 [ 1604.170567][ T43] m920x_read = error: -19 [ 1604.175073][ T43] dvb-usb: error while querying for an remote control event. [ 1604.214899][T27738] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5679'. [ 1604.290639][ T43] m920x_read = error: -19 [ 1604.352362][ T43] dvb-usb: error while querying for an remote control event. [ 1604.530402][ T43] m920x_read = error: -19 [ 1604.534827][ T43] dvb-usb: error while querying for an remote control event. [ 1604.718447][T27734] chnl_net:caif_netlink_parms(): no params data found [ 1604.730469][ T43] m920x_read = error: -19 [ 1604.755436][ T43] dvb-usb: error while querying for an remote control event. [ 1604.870281][ T43] m920x_read = error: -19 [ 1604.874690][ T43] dvb-usb: error while querying for an remote control event. [ 1604.977429][T27734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.988805][T27734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.996152][T27734] bridge_slave_0: entered allmulticast mode [ 1605.003585][T27734] bridge_slave_0: entered promiscuous mode [ 1605.011131][T27734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.018684][T27734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.031905][T27734] bridge_slave_1: entered allmulticast mode [ 1605.046702][T27734] bridge_slave_1: entered promiscuous mode [ 1605.050469][ T43] m920x_read = error: -19 [ 1605.067403][ T43] dvb-usb: error while querying for an remote control event. [ 1605.098290][T27734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.117320][T27734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.169630][T27734] team0: Port device team_slave_0 added [ 1605.179145][T27734] team0: Port device team_slave_1 added [ 1605.223049][ T43] m920x_read = error: -19 [ 1605.228866][ T43] dvb-usb: error while querying for an remote control event. [ 1605.234410][T27734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.244911][T27734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.272662][T27734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.285144][T27734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.293586][T27734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.341519][ T43] m920x_read = error: -19 [ 1605.379167][T27751] netlink: 'syz.4.5680': attribute type 5 has an invalid length. [ 1605.399154][ T43] dvb-usb: error while querying for an remote control event. [ 1605.650759][ T43] m920x_read = error: -19 [ 1605.658009][ T43] dvb-usb: error while querying for an remote control event. [ 1605.710497][ T5910] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1605.723223][T27734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.731564][T27752] SELinux: policydb magic number 0x6e616c77 does not match expected magic number 0xf97cff8c [ 1605.759275][T27752] SELinux: failed to load policy [ 1605.768080][T27734] hsr_slave_0: entered promiscuous mode [ 1605.774653][T27734] hsr_slave_1: entered promiscuous mode [ 1605.781002][T27734] debugfs: 'hsr0' already exists in 'hsr' [ 1605.786857][T27734] Cannot create hsr debugfs directory [ 1605.840995][ T43] m920x_read = error: -19 [ 1605.845361][ T43] dvb-usb: error while querying for an remote control event. [ 1605.894887][ T5910] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1605.904360][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.960807][ T43] m920x_read = error: -19 [ 1606.040243][ T43] dvb-usb: error while querying for an remote control event. [ 1606.051132][ T5910] usb 5-1: config 0 descriptor?? [ 1606.070516][T21805] Bluetooth: hci0: command tx timeout [ 1606.202104][ T43] m920x_read = error: -19 [ 1606.207066][ T43] dvb-usb: error while querying for an remote control event. [ 1606.361530][ T43] m920x_read = error: -19 [ 1606.366661][ T43] dvb-usb: error while querying for an remote control event. [ 1606.491374][ T43] m920x_read = error: -19 [ 1606.526182][ T43] dvb-usb: error while querying for an remote control event. [ 1606.765343][ T43] m920x_read = error: -19 [ 1606.771472][ T43] dvb-usb: error while querying for an remote control event. [ 1606.874762][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.883381][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.899118][T27765] netlink: 'syz.0.5684': attribute type 10 has an invalid length. [ 1606.911094][ T43] m920x_read = error: -19 [ 1606.918100][ T43] dvb-usb: error while querying for an remote control event. [ 1606.919305][T27765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.948502][T27765] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1607.054248][ T974] m920x_read = error: -19 [ 1607.061942][ T974] dvb-usb: error while querying for an remote control event. [ 1607.171093][ T974] m920x_read = error: -19 [ 1607.179295][ T974] dvb-usb: error while querying for an remote control event. [ 1607.487574][ T5910] ath6kl: Failed to submit usb control message: -110 [ 1607.495107][ T5910] ath6kl: unable to send the bmi data to the device: -110 [ 1607.513943][ T5910] ath6kl: Unable to send get target info: -110 [ 1607.597087][ T5910] ath6kl: Failed to init ath6kl core: -110 [ 1607.610772][ T974] m920x_read = error: -19 [ 1607.650424][ T974] dvb-usb: error while querying for an remote control event. [ 1607.673326][ T5910] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1607.790587][ T5910] m920x_read = error: -19 [ 1607.794945][ T5910] dvb-usb: error while querying for an remote control event. [ 1607.849507][T27734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1607.908147][T27734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1607.924373][ T5910] m920x_read = error: -19 [ 1607.928725][ T5910] dvb-usb: error while querying for an remote control event. [ 1607.954874][T27734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1607.997863][T27734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1608.050344][ T5910] m920x_read = error: -19 [ 1608.054882][ T5910] dvb-usb: error while querying for an remote control event. [ 1608.106592][T12820] usb 5-1: USB disconnect, device number 116 [ 1608.170893][ T43] m920x_read = error: -19 [ 1608.175237][ T43] dvb-usb: error while querying for an remote control event. [ 1608.200535][T21805] Bluetooth: hci0: command tx timeout [ 1608.310443][ T974] m920x_read = error: -19 [ 1608.314871][ T974] dvb-usb: error while querying for an remote control event. [ 1608.330060][T27734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.460761][ T974] m920x_read = error: -19 [ 1608.480113][T27800] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1608.486916][ T974] dvb-usb: error while querying for an remote control event. [ 1608.520501][T27800] /dev/nullb0: Can't open blockdev [ 1608.548167][T27734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.674740][ T974] m920x_read = error: -19 [ 1608.679097][ T974] dvb-usb: error while querying for an remote control event. [ 1608.706566][T16347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.713845][T16347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.217325][ T974] m920x_read = error: -19 [ 1609.223464][ T974] dvb-usb: error while querying for an remote control event. [ 1609.290562][T16347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.297651][T16347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.350660][ T974] m920x_read = error: -19 [ 1609.355239][ T974] dvb-usb: error while querying for an remote control event. [ 1609.470566][T18206] m920x_read = error: -19 [ 1609.474915][T18206] dvb-usb: error while querying for an remote control event. [ 1609.610666][T18206] m920x_read = error: -19 [ 1609.615020][T18206] dvb-usb: error while querying for an remote control event. [ 1609.810785][T18206] m920x_read = error: -19 [ 1609.815136][T18206] dvb-usb: error while querying for an remote control event. [ 1609.878926][ T30] audit: type=1400 audit(2000000998.109:35935): avc: denied { map } for pid=27804 comm="syz.0.5691" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1610.005851][ T30] audit: type=1400 audit(2000000998.109:35936): avc: denied { execute } for pid=27804 comm="syz.0.5691" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1610.112044][T27734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.140443][T18206] m920x_read = error: -19 [ 1610.144992][T18206] dvb-usb: error while querying for an remote control event. [ 1610.230460][T21805] Bluetooth: hci0: command tx timeout [ 1610.270361][T18206] m920x_read = error: -19 [ 1610.282530][T18206] dvb-usb: error while querying for an remote control event. [ 1610.580298][T18206] m920x_read = error: -19 [ 1610.595891][T18206] dvb-usb: error while querying for an remote control event. [ 1610.740555][ T974] m920x_read = error: -19 [ 1610.744913][ T974] dvb-usb: error while querying for an remote control event. [ 1611.004898][ T5910] m920x_read = error: -19 [ 1611.009277][ T5910] dvb-usb: error while querying for an remote control event. [ 1611.183117][T27832] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1611.352281][T27832] cramfs: wrong magic [ 1611.824138][ T5910] m920x_read = error: -19 [ 1611.840345][ T5910] dvb-usb: error while querying for an remote control event. [ 1612.013441][T18206] m920x_read = error: -19 [ 1612.017799][T18206] dvb-usb: error while querying for an remote control event. [ 1612.140854][ T5910] m920x_read = error: -19 [ 1612.145282][ T5910] dvb-usb: error while querying for an remote control event. [ 1612.741621][T21805] Bluetooth: hci0: command tx timeout [ 1612.758086][ T5910] m920x_read = error: -19 [ 1612.763077][ T5910] dvb-usb: error while querying for an remote control event. [ 1612.765889][T27842] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5698'. [ 1612.789182][T27842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5698'. [ 1612.801924][T27842] netlink: 'syz.7.5698': attribute type 10 has an invalid length. [ 1612.809733][T27842] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5698'. [ 1612.828515][T27847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1612.844066][T27842] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1612.890239][ T5910] m920x_read = error: -19 [ 1612.894593][ T5910] dvb-usb: error while querying for an remote control event. [ 1612.958361][T27850] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5699'. [ 1612.987910][T27847] FAULT_INJECTION: forcing a failure. [ 1612.987910][T27847] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.020854][T27847] CPU: 0 UID: 0 PID: 27847 Comm: syz.0.5700 Not tainted syzkaller #0 PREEMPT(full) [ 1613.020871][T27847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1613.020877][T27847] Call Trace: [ 1613.020882][T27847] [ 1613.020886][T27847] dump_stack_lvl+0x16c/0x1f0 [ 1613.020903][T27847] should_fail_ex+0x512/0x640 [ 1613.020917][T27847] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1613.020931][T27847] should_failslab+0xc2/0x120 [ 1613.020944][T27847] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1613.020955][T27847] ? __alloc_skb+0x2b2/0x380 [ 1613.020969][T27847] __alloc_skb+0x2b2/0x380 [ 1613.020982][T27847] ? __pfx___alloc_skb+0x10/0x10 [ 1613.020993][T27847] ? genl_rcv_msg+0x4bb/0x800 [ 1613.021011][T27847] netlink_ack+0x15d/0xb80 [ 1613.021028][T27847] netlink_rcv_skb+0x332/0x420 [ 1613.021040][T27847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1613.021055][T27847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1613.021074][T27847] ? netlink_deliver_tap+0x1ae/0xd30 [ 1613.021085][T27847] ? selinux_netlink_send+0x578/0x830 [ 1613.021099][T27847] ? is_vmalloc_addr+0x86/0xa0 [ 1613.021111][T27847] genl_rcv+0x28/0x40 [ 1613.021123][T27847] netlink_unicast+0x5a7/0x870 [ 1613.021138][T27847] ? __pfx_netlink_unicast+0x10/0x10 [ 1613.021150][T27847] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1613.021167][T27847] netlink_sendmsg+0x8d1/0xdd0 [ 1613.021182][T27847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.021200][T27847] ____sys_sendmsg+0xa95/0xc70 [ 1613.021215][T27847] ? copy_msghdr_from_user+0x10a/0x160 [ 1613.021228][T27847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.021253][T27847] ___sys_sendmsg+0x134/0x1d0 [ 1613.021266][T27847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1613.021295][T27847] __sys_sendmsg+0x16d/0x220 [ 1613.021307][T27847] ? __pfx___sys_sendmsg+0x10/0x10 [ 1613.021328][T27847] do_syscall_64+0xcd/0x4c0 [ 1613.021341][T27847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.021353][T27847] RIP: 0033:0x7fcefff8ebe9 [ 1613.021364][T27847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1613.021375][T27847] RSP: 002b:00007fcf00de9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.021386][T27847] RAX: ffffffffffffffda RBX: 00007fcf001b5fa0 RCX: 00007fcefff8ebe9 [ 1613.021393][T27847] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000004 [ 1613.021400][T27847] RBP: 00007fcf00de9090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.021406][T27847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.021412][T27847] R13: 00007fcf001b6038 R14: 00007fcf001b5fa0 R15: 00007ffcfe42d248 [ 1613.021427][T27847] [ 1613.027237][T27734] veth0_vlan: entered promiscuous mode [ 1613.298629][ T5910] m920x_read = error: -19 [ 1613.303019][ T5910] dvb-usb: error while querying for an remote control event. [ 1613.472641][ T43] m920x_read = error: -19 [ 1613.643766][ T43] dvb-usb: error while querying for an remote control event. [ 1613.735625][T27859] program syz.4.5701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1613.758173][ T30] audit: type=1400 audit(2000001001.989:35937): avc: denied { write } for pid=27854 comm="syz.4.5701" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1613.813254][T27859] netlink: zone id is out of range [ 1613.828080][T27859] netlink: zone id is out of range [ 1613.836248][T27859] netlink: zone id is out of range [ 1613.842161][T27859] netlink: zone id is out of range [ 1613.847274][T27859] netlink: zone id is out of range [ 1613.853088][T27859] netlink: zone id is out of range [ 1613.858234][T27859] netlink: zone id is out of range [ 1613.863625][T27859] netlink: zone id is out of range [ 1613.871242][T27859] netlink: zone id is out of range [ 1614.212956][T18206] m920x_read = error: -19 [ 1614.217286][T18206] dvb-usb: error while querying for an remote control event. [ 1614.248926][T27734] veth1_vlan: entered promiscuous mode [ 1614.340893][ T43] m920x_read = error: -19 [ 1614.346919][ T43] dvb-usb: error while querying for an remote control event. [ 1614.759555][T27734] veth0_macvtap: entered promiscuous mode [ 1614.818096][T27734] veth1_macvtap: entered promiscuous mode [ 1614.831219][ T43] m920x_read = error: -19 [ 1614.835582][ T43] dvb-usb: error while querying for an remote control event. [ 1614.908574][T27734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.947523][T27734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1615.033292][ T43] m920x_read = error: -19 [ 1615.038000][ T43] dvb-usb: error while querying for an remote control event. [ 1615.137877][ T30] audit: type=1400 audit(2000001003.399:35938): avc: denied { write } for pid=27869 comm="syz.0.5706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1615.159388][T16345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.170517][ T43] m920x_read = error: -19 [ 1615.174863][ T43] dvb-usb: error while querying for an remote control event. [ 1615.189234][T16345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.260371][T27773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.272312][T16345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.290990][T27773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.302355][T27882] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1615.312256][T16345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.331957][T27882] cramfs: wrong magic [ 1615.342832][ T8859] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.347549][ T43] m920x_read = error: -19 [ 1615.360002][ T43] dvb-usb: error while querying for an remote control event. [ 1615.367951][T16345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.514668][ T43] m920x_read = error: -19 [ 1615.519021][ T43] dvb-usb: error while querying for an remote control event. [ 1615.636539][ T43] m920x_read = error: -19 [ 1615.643499][ T43] dvb-usb: error while querying for an remote control event. [ 1615.694898][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5710'. [ 1615.719140][T27885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.800246][ T43] m920x_read = error: -19 [ 1615.814228][ T43] dvb-usb: error while querying for an remote control event. [ 1615.960777][ T43] m920x_read = error: -19 [ 1616.043857][ T43] dvb-usb: error while querying for an remote control event. [ 1616.132506][T27898] IPVS: Error joining to the multicast group [ 1616.599836][T27281] m920x_read = error: -19 [ 1616.606108][T27281] dvb-usb: error while querying for an remote control event. [ 1616.679167][ T30] audit: type=1400 audit(2000001004.939:35939): avc: denied { create } for pid=27902 comm="syz.4.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1616.789768][T27281] m920x_read = error: -19 [ 1616.800540][T27281] dvb-usb: error while querying for an remote control event. [ 1617.550891][ T30] audit: type=1400 audit(2000001004.979:35940): avc: denied { listen } for pid=27899 comm="syz.0.5711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1617.612347][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1617.645897][ T30] audit: type=1400 audit(2000001005.879:35941): avc: denied { mount } for pid=27909 comm="syz.6.5715" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1617.710994][T27281] m920x_read = error: -19 [ 1617.715345][T27281] dvb-usb: error while querying for an remote control event. [ 1617.727332][ T30] audit: type=1400 audit(2000001005.879:35942): avc: denied { watch } for pid=27909 comm="syz.6.5715" path="/2/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1617.830672][T27281] m920x_read = error: -19 [ 1617.835043][T27281] dvb-usb: error while querying for an remote control event. [ 1617.960615][T27281] m920x_read = error: -19 [ 1617.970266][T27281] dvb-usb: error while querying for an remote control event. [ 1618.080925][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.105800][T18206] m920x_read = error: -19 [ 1618.111291][T18206] dvb-usb: error while querying for an remote control event. [ 1618.122080][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.145211][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.400408][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.409448][T18206] m920x_read = error: -19 [ 1618.507876][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.525532][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.536142][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.552504][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1618.570303][T18206] dvb-usb: error while querying for an remote control event. [ 1618.592060][T27919] netlink: 'syz.8.5718': attribute type 10 has an invalid length. [ 1619.068845][T27919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.077592][T27919] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1619.107317][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1619.120718][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1619.170315][T18206] m920x_read = error: -19 [ 1619.174716][T18206] dvb-usb: error while querying for an remote control event. [ 1619.314246][T18206] m920x_read = error: -19 [ 1619.318724][T18206] dvb-usb: error while querying for an remote control event. [ 1619.490859][T18206] m920x_read = error: -19 [ 1619.498602][T18206] dvb-usb: error while querying for an remote control event. [ 1619.660685][T18206] m920x_read = error: -19 [ 1619.665016][T18206] dvb-usb: error while querying for an remote control event. [ 1620.379668][T27281] m920x_read = error: -19 [ 1620.402898][T27281] dvb-usb: error while querying for an remote control event. [ 1620.868792][T18206] m920x_read = error: -19 [ 1620.885155][T18206] dvb-usb: error while querying for an remote control event. [ 1622.144275][ T30] audit: type=1400 audit(2000001009.639:35943): avc: denied { unmount } for pid=27734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1622.176628][T27950] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1622.194966][T27950] cramfs: wrong magic [ 1622.309194][T18206] m920x_read = error: -19 [ 1622.315790][T18206] dvb-usb: error while querying for an remote control event. [ 1622.384778][ T30] audit: type=1400 audit(2000001010.649:35944): avc: denied { setopt } for pid=27954 comm="syz.8.5727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1622.450425][T18206] m920x_read = error: -19 [ 1622.459097][T18206] dvb-usb: error while querying for an remote control event. [ 1622.476847][ T30] audit: type=1400 audit(2000001010.699:35945): avc: denied { setopt } for pid=27954 comm="syz.8.5727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1622.591227][T18206] m920x_read = error: -19 [ 1622.595648][T18206] dvb-usb: error while querying for an remote control event. [ 1622.710809][T18206] m920x_read = error: -19 [ 1622.715316][T18206] dvb-usb: error while querying for an remote control event. [ 1622.830770][T18206] m920x_read = error: -19 [ 1622.835201][T18206] dvb-usb: error while querying for an remote control event. [ 1622.951039][T18206] m920x_read = error: -19 [ 1622.958281][T18206] dvb-usb: error while querying for an remote control event. [ 1623.070499][T18206] m920x_read = error: -19 [ 1623.103992][T18206] dvb-usb: error while querying for an remote control event. [ 1623.307808][T27281] m920x_read = error: -19 [ 1623.354131][T27281] dvb-usb: error while querying for an remote control event. [ 1623.459258][T27969] net_ratelimit: 17 callbacks suppressed [ 1623.459271][T27969] netlink: set zone limit has 4 unknown bytes [ 1623.560729][T27281] m920x_read = error: -19 [ 1623.575298][T27281] dvb-usb: error while querying for an remote control event. [ 1624.192983][ T30] audit: type=1400 audit(2000001012.459:35946): avc: denied { connect } for pid=27976 comm="syz.0.5732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1624.668865][T27281] m920x_read = error: -19 [ 1624.676664][T27281] dvb-usb: error while querying for an remote control event. [ 1624.820858][T27281] m920x_read = error: -19 [ 1625.084551][T27281] dvb-usb: error while querying for an remote control event. [ 1625.210443][ T974] m920x_read = error: -19 [ 1625.214810][ T974] dvb-usb: error while querying for an remote control event. [ 1625.260649][T27992] FAULT_INJECTION: forcing a failure. [ 1625.260649][T27992] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.273855][T27992] CPU: 0 UID: 0 PID: 27992 Comm: syz.0.5736 Not tainted syzkaller #0 PREEMPT(full) [ 1625.273879][T27992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1625.273885][T27992] Call Trace: [ 1625.273891][T27992] [ 1625.273896][T27992] dump_stack_lvl+0x16c/0x1f0 [ 1625.273913][T27992] should_fail_ex+0x512/0x640 [ 1625.273929][T27992] ? ___neigh_create+0x172/0x28c0 [ 1625.273944][T27992] should_failslab+0xc2/0x120 [ 1625.273957][T27992] __kmalloc_noprof+0xd2/0x510 [ 1625.273972][T27992] ___neigh_create+0x172/0x28c0 [ 1625.273995][T27992] ? __pfx____neigh_create+0x10/0x10 [ 1625.274012][T27992] ip_finish_output2+0x1bb9/0x21a0 [ 1625.274028][T27992] ? ip_skb_dst_mtu+0x5a7/0xc70 [ 1625.274042][T27992] ? __pfx_ip_finish_output2+0x10/0x10 [ 1625.274055][T27992] ? ip_skb_dst_mtu+0x5b6/0xc70 [ 1625.274067][T27992] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 1625.274079][T27992] ? __pfx_ip_finish_output+0x10/0x10 [ 1625.274099][T27992] __ip_finish_output.part.0+0x1b4/0x350 [ 1625.274115][T27992] ip_output+0x35e/0xa10 [ 1625.274129][T27992] __ip_queue_xmit+0x1d30/0x2620 [ 1625.274146][T27992] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1625.274159][T27992] __tcp_transmit_skb+0x265f/0x3df0 [ 1625.274184][T27992] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1625.274208][T27992] ? tcp_fastopen_cache_get+0x309/0x6d0 [ 1625.274227][T27992] ? tcp_fastopen_no_cookie+0x158/0x1a0 [ 1625.274242][T27992] tcp_connect+0x23e7/0x4e10 [ 1625.274266][T27992] ? __pfx_tcp_connect+0x10/0x10 [ 1625.274283][T27992] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1625.274305][T27992] tcp_v4_connect+0x153a/0x1bb0 [ 1625.274325][T27992] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1625.274340][T27992] ? mptcp_token_new_connect+0x1e9/0x600 [ 1625.274359][T27992] mptcp_connect+0x4b2/0xae0 [ 1625.274376][T27992] __inet_stream_connect+0x917/0xf60 [ 1625.274396][T27992] ? __pfx___inet_stream_connect+0x10/0x10 [ 1625.274420][T27992] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1625.274439][T27992] mptcp_sendmsg+0x14b4/0x1eb0 [ 1625.274455][T27992] ? sock_has_perm+0x259/0x2f0 [ 1625.274469][T27992] ? __pfx_sock_has_perm+0x10/0x10 [ 1625.274484][T27992] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1625.274501][T27992] ? __might_fault+0xe3/0x190 [ 1625.274512][T27992] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1625.274524][T27992] ? __import_iovec+0x1dd/0x650 [ 1625.274540][T27992] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1625.274552][T27992] inet_sendmsg+0x119/0x140 [ 1625.274569][T27992] ____sys_sendmsg+0x973/0xc70 [ 1625.274584][T27992] ? copy_msghdr_from_user+0x10a/0x160 [ 1625.274595][T27992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1625.274613][T27992] ? __pfx__kstrtoull+0x10/0x10 [ 1625.274626][T27992] ___sys_sendmsg+0x134/0x1d0 [ 1625.274639][T27992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1625.274658][T27992] ? find_held_lock+0x2b/0x80 [ 1625.274681][T27992] __sys_sendmmsg+0x200/0x420 [ 1625.274695][T27992] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1625.274712][T27992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1625.274731][T27992] ? fput+0x9b/0xd0 [ 1625.274746][T27992] ? ksys_write+0x1ac/0x250 [ 1625.274758][T27992] ? __pfx_ksys_write+0x10/0x10 [ 1625.274771][T27992] __x64_sys_sendmmsg+0x9c/0x100 [ 1625.274783][T27992] ? lockdep_hardirqs_on+0x7c/0x110 [ 1625.274794][T27992] do_syscall_64+0xcd/0x4c0 [ 1625.274807][T27992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.274819][T27992] RIP: 0033:0x7fcefff8ebe9 [ 1625.274829][T27992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.274840][T27992] RSP: 002b:00007fcf00dc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1625.274851][T27992] RAX: ffffffffffffffda RBX: 00007fcf001b6090 RCX: 00007fcefff8ebe9 [ 1625.274858][T27992] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000006 [ 1625.274864][T27992] RBP: 00007fcf00dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.274871][T27992] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.274877][T27992] R13: 00007fcf001b6128 R14: 00007fcf001b6090 R15: 00007ffcfe42d248 [ 1625.274891][T27992] [ 1625.956033][T28002] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1626.016760][T18206] m920x_read = error: -19 [ 1626.028380][ T30] audit: type=1400 audit(2000001014.209:35947): avc: denied { getopt } for pid=27993 comm="syz.7.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1626.054657][T18206] dvb-usb: error while querying for an remote control event. [ 1626.059156][T28002] cramfs: wrong magic [ 1626.249694][ T30] audit: type=1400 audit(2000001014.509:35948): avc: denied { connect } for pid=28010 comm="syz.0.5742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1626.357062][T18206] m920x_read = error: -19 [ 1626.362887][T18206] dvb-usb: error while querying for an remote control event. [ 1626.414093][T12820] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1626.444452][T28018] pim6reg1: entered promiscuous mode [ 1626.449888][T28018] pim6reg1: entered allmulticast mode [ 1626.622159][T18206] m920x_read = error: -19 [ 1626.623506][ T30] audit: type=1400 audit(2000001014.859:35949): avc: denied { setopt } for pid=28013 comm="syz.7.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1626.655165][ T30] audit: type=1400 audit(2000001014.859:35950): avc: denied { write } for pid=28013 comm="syz.7.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1627.372306][T18206] dvb-usb: error while querying for an remote control event. [ 1627.547101][ T974] m920x_read = error: -19 [ 1628.051272][ T30] audit: type=1400 audit(2000001014.859:35951): avc: denied { connect } for pid=28013 comm="syz.7.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1628.072362][ T30] audit: type=1400 audit(2000001014.919:35952): avc: denied { write } for pid=28013 comm="syz.7.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1628.093212][T12820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.103572][T12820] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1628.115807][ T974] dvb-usb: error while querying for an remote control event. [ 1628.167932][T12820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.297917][ T43] m920x_read = error: -19 [ 1628.302919][ T43] dvb-usb: error while querying for an remote control event. [ 1628.315339][T12820] usb 5-1: config 0 descriptor?? [ 1628.415607][T28037] __nla_validate_parse: 22 callbacks suppressed [ 1628.415640][T28037] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5748'. [ 1628.796233][ T43] m920x_read = error: -19 [ 1628.810023][ T43] dvb-usb: error while querying for an remote control event. [ 1628.846252][T12820] pwc: Askey VC010 type 2 USB webcam detected. [ 1629.021947][T27281] m920x_read = error: -19 [ 1629.026413][T27281] dvb-usb: error while querying for an remote control event. [ 1629.060066][T12820] pwc: send_video_command error -71 [ 1629.065423][T12820] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1629.159347][T12820] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1629.212891][ T43] m920x_read = error: -19 [ 1629.217281][ T43] dvb-usb: error while querying for an remote control event. [ 1629.225154][T12820] usb 5-1: USB disconnect, device number 117 [ 1630.022703][ T43] m920x_read = error: -19 [ 1630.031442][ T43] dvb-usb: error while querying for an remote control event. [ 1630.160449][ T30] audit: type=1400 audit(2000001018.419:35953): avc: denied { setattr } for pid=28054 comm="syz.6.5752" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1630.160828][ T43] m920x_read = error: -19 [ 1630.371816][ T43] dvb-usb: error while querying for an remote control event. [ 1630.492396][ T43] m920x_read = error: -19 [ 1630.837494][ T43] dvb-usb: error while querying for an remote control event. [ 1630.950761][ T43] m920x_read = error: -19 [ 1630.959290][ T43] dvb-usb: error while querying for an remote control event. [ 1631.070350][T28072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5758'. [ 1631.128124][ T43] m920x_read = error: -19 [ 1631.136703][ T43] dvb-usb: error while querying for an remote control event. [ 1631.146719][T28072] netlink: 'syz.7.5758': attribute type 1 has an invalid length. [ 1631.169690][T28072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5758'. [ 1631.291850][ T43] m920x_read = error: -19 [ 1631.296207][ T43] dvb-usb: error while querying for an remote control event. [ 1631.488803][ T43] m920x_read = error: -19 [ 1631.493317][T28086] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5759'. [ 1631.730372][ T43] dvb-usb: error while querying for an remote control event. [ 1631.850549][ T43] m920x_read = error: -19 [ 1631.854923][ T43] dvb-usb: error while querying for an remote control event. [ 1632.034274][ T43] m920x_read = error: -19 [ 1632.065991][ T43] dvb-usb: error while querying for an remote control event. [ 1632.279086][ T43] m920x_read = error: -19 [ 1632.284145][ T43] dvb-usb: error while querying for an remote control event. [ 1632.778471][ T43] m920x_read = error: -19 [ 1632.782858][ T43] dvb-usb: error while querying for an remote control event. [ 1632.910287][ T43] m920x_read = error: -19 [ 1632.914916][ T43] dvb-usb: error while querying for an remote control event. [ 1633.100923][ T43] m920x_read = error: -19 [ 1633.205954][T28109] netlink: 'syz.6.5767': attribute type 10 has an invalid length. [ 1633.252640][ T43] dvb-usb: error while querying for an remote control event. [ 1633.256302][T28109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.283081][T28109] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1633.510640][ T43] m920x_read = error: -19 [ 1633.518751][ T43] dvb-usb: error while querying for an remote control event. [ 1633.830652][ T43] m920x_read = error: -19 [ 1633.896341][ T43] dvb-usb: error while querying for an remote control event. [ 1634.305370][T27281] m920x_read = error: -19 [ 1634.310044][T27281] dvb-usb: error while querying for an remote control event. [ 1634.422042][T28128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5773'. [ 1634.794683][ T43] m920x_read = error: -19 [ 1634.800512][ T43] dvb-usb: error while querying for an remote control event. [ 1634.960232][T27281] m920x_read = error: -19 [ 1634.973413][T27281] dvb-usb: error while querying for an remote control event. [ 1635.023931][T28135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1635.100980][T27281] m920x_read = error: -19 [ 1635.107917][T27281] dvb-usb: error while querying for an remote control event. [ 1635.164505][T28141] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5777'. [ 1635.223973][T27281] m920x_read = error: -19 [ 1635.230160][T27281] dvb-usb: error while querying for an remote control event. [ 1635.367587][T27281] m920x_read = error: -19 [ 1635.372328][T27281] dvb-usb: error while querying for an remote control event. [ 1635.529284][T27281] m920x_read = error: -19 [ 1635.541993][T27281] dvb-usb: error while querying for an remote control event. [ 1636.055496][T27281] m920x_read = error: -19 [ 1636.066072][T27281] dvb-usb: error while querying for an remote control event. [ 1636.180897][T27281] m920x_read = error: -19 [ 1636.185811][T27281] dvb-usb: error while querying for an remote control event. [ 1636.350907][T27281] m920x_read = error: -19 [ 1636.355292][T27281] dvb-usb: error while querying for an remote control event. [ 1636.455795][T28156] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1636.480233][T27281] m920x_read = error: -19 [ 1636.484583][T27281] dvb-usb: error while querying for an remote control event. [ 1636.554360][T28156] overlayfs: failed to set xattr on upper [ 1636.582495][T28156] overlayfs: ...falling back to index=off. [ 1636.588394][T28156] overlayfs: ...falling back to uuid=null. [ 1637.040967][T27281] m920x_read = error: -19 [ 1637.042126][T28165] netlink: 'syz.7.5783': attribute type 10 has an invalid length. [ 1637.057790][T27281] dvb-usb: error while querying for an remote control event. [ 1637.403972][T28165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.411694][ T43] m920x_read = error: -19 [ 1637.416380][ T43] dvb-usb: error while querying for an remote control event. [ 1637.549870][T28165] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1637.707459][T28172] FAULT_INJECTION: forcing a failure. [ 1637.707459][T28172] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.720705][T28172] CPU: 1 UID: 0 PID: 28172 Comm: syz.4.5785 Not tainted syzkaller #0 PREEMPT(full) [ 1637.720732][T28172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1637.720744][T28172] Call Trace: [ 1637.720751][T28172] [ 1637.720760][T28172] dump_stack_lvl+0x16c/0x1f0 [ 1637.720786][T28172] should_fail_ex+0x512/0x640 [ 1637.720806][T28172] ? fs_reclaim_acquire+0xae/0x150 [ 1637.720833][T28172] ? tomoyo_encode2+0x100/0x3e0 [ 1637.720858][T28172] should_failslab+0xc2/0x120 [ 1637.720880][T28172] __kmalloc_noprof+0xd2/0x510 [ 1637.720906][T28172] tomoyo_encode2+0x100/0x3e0 [ 1637.720936][T28172] tomoyo_encode+0x29/0x50 [ 1637.720961][T28172] tomoyo_path_perm+0x3a5/0x460 [ 1637.720986][T28172] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1637.721020][T28172] ? do_raw_spin_lock+0x12c/0x2b0 [ 1637.721046][T28172] ? find_held_lock+0x2b/0x80 [ 1637.721082][T28172] ? __pfx_current_check_access_path+0x10/0x10 [ 1637.721105][T28172] ? simple_lookup+0x105/0x1d0 [ 1637.721126][T28172] ? lookup_one_qstr_excl+0xb3/0x250 [ 1637.721157][T28172] tomoyo_path_symlink+0x97/0xe0 [ 1637.721176][T28172] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 1637.721193][T28172] ? find_held_lock+0x2b/0x80 [ 1637.721215][T28172] ? __might_fault+0xe3/0x190 [ 1637.721238][T28172] security_path_symlink+0x152/0x2e0 [ 1637.721264][T28172] do_symlinkat+0x10d/0x310 [ 1637.721287][T28172] ? __pfx_do_symlinkat+0x10/0x10 [ 1637.721309][T28172] ? getname_flags.part.0+0x1c5/0x550 [ 1637.721333][T28172] ? __pfx_ksys_write+0x10/0x10 [ 1637.721357][T28172] __x64_sys_symlinkat+0x93/0xc0 [ 1637.721381][T28172] do_syscall_64+0xcd/0x4c0 [ 1637.721404][T28172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.721422][T28172] RIP: 0033:0x7fbad358ebe9 [ 1637.721438][T28172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1637.721456][T28172] RSP: 002b:00007fbad445a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1637.721473][T28172] RAX: ffffffffffffffda RBX: 00007fbad37b6180 RCX: 00007fbad358ebe9 [ 1637.721485][T28172] RDX: 0000200000000140 RSI: 000000000000000b RDI: 00002000000001c0 [ 1637.721497][T28172] RBP: 00007fbad445a090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.721507][T28172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.721518][T28172] R13: 00007fbad37b6218 R14: 00007fbad37b6180 R15: 00007ffe29f97e28 [ 1637.721544][T28172] [ 1638.729962][T28168] delete_channel: no stack [ 1638.735261][ T974] m920x_read = error: -19 [ 1638.761380][ T974] dvb-usb: error while querying for an remote control event. [ 1638.883467][ T5910] m920x_read = error: -19 [ 1638.887962][ T5910] dvb-usb: error while querying for an remote control event. [ 1639.010829][T27281] m920x_read = error: -19 [ 1639.209152][T28183] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5787'. [ 1639.727128][T27281] dvb-usb: error while querying for an remote control event. [ 1639.860283][T28188] hub 9-0:1.0: USB hub found [ 1639.864956][T28188] FAULT_INJECTION: forcing a failure. [ 1639.864956][T28188] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.877653][T28188] CPU: 1 UID: 0 PID: 28188 Comm: syz.6.5788 Not tainted syzkaller #0 PREEMPT(full) [ 1639.877676][T28188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1639.877686][T28188] Call Trace: [ 1639.877693][T28188] [ 1639.877700][T28188] dump_stack_lvl+0x16c/0x1f0 [ 1639.877725][T28188] should_fail_ex+0x512/0x640 [ 1639.877745][T28188] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1639.877775][T28188] should_failslab+0xc2/0x120 [ 1639.877795][T28188] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1639.877818][T28188] ? hub_probe+0x551/0x3480 [ 1639.877836][T28188] ? hub_probe+0x3d8/0x3480 [ 1639.877855][T28188] hub_probe+0x551/0x3480 [ 1639.877876][T28188] ? do_raw_spin_lock+0x12c/0x2b0 [ 1639.877893][T28188] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1639.877908][T28188] ? __pfx_hub_probe+0x10/0x10 [ 1639.877926][T28188] ? read_tsc+0x9/0x20 [ 1639.877944][T28188] ? find_held_lock+0x2b/0x80 [ 1639.877965][T28188] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1639.877994][T28188] usb_probe_interface+0x303/0xa40 [ 1639.878017][T28188] ? __pfx_usb_probe_interface+0x10/0x10 [ 1639.878039][T28188] really_probe+0x241/0xa90 [ 1639.878057][T28188] __driver_probe_device+0x1de/0x440 [ 1639.878075][T28188] driver_probe_device+0x4c/0x1b0 [ 1639.878091][T28188] __device_attach_driver+0x1df/0x310 [ 1639.878109][T28188] ? __pfx___device_attach_driver+0x10/0x10 [ 1639.878124][T28188] bus_for_each_drv+0x159/0x1e0 [ 1639.878146][T28188] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1639.878167][T28188] ? lockdep_hardirqs_on+0x7c/0x110 [ 1639.878182][T28188] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1639.878208][T28188] __device_attach+0x1e4/0x4b0 [ 1639.878223][T28188] ? __pfx___device_attach+0x10/0x10 [ 1639.878239][T28188] ? __might_fault+0xe3/0x190 [ 1639.878252][T28188] ? __might_fault+0x13b/0x190 [ 1639.878266][T28188] ? usb_ifnum_to_if+0x16f/0x1d0 [ 1639.878292][T28188] proc_ioctl+0x58e/0x6c0 [ 1639.878316][T28188] usbdev_ioctl+0x1773/0x4070 [ 1639.878333][T28188] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1639.878351][T28188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1639.878369][T28188] ? do_vfs_ioctl+0x128/0x14f0 [ 1639.878391][T28188] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1639.878413][T28188] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1639.878442][T28188] ? hook_file_ioctl_common+0x145/0x410 [ 1639.878462][T28188] ? selinux_file_ioctl+0x180/0x270 [ 1639.878481][T28188] ? selinux_file_ioctl+0xb4/0x270 [ 1639.878502][T28188] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1639.878517][T28188] __x64_sys_ioctl+0x18b/0x210 [ 1639.878539][T28188] do_syscall_64+0xcd/0x4c0 [ 1639.878557][T28188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.878571][T28188] RIP: 0033:0x7f8564d8ebe9 [ 1639.878584][T28188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.878598][T28188] RSP: 002b:00007f8565b6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1639.878612][T28188] RAX: ffffffffffffffda RBX: 00007f8564fb6180 RCX: 00007f8564d8ebe9 [ 1639.878621][T28188] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000007 [ 1639.878630][T28188] RBP: 00007f8565b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.878639][T28188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.878647][T28188] R13: 00007f8564fb6218 R14: 00007f8564fb6180 R15: 00007ffe9290a708 [ 1639.878667][T28188] [ 1639.880035][T28188] hub 9-0:1.0: probe with driver hub failed with error -12 [ 1640.557179][T27281] m920x_read = error: -19 [ 1640.590869][T27281] dvb-usb: error while querying for an remote control event. [ 1640.765062][T27281] m920x_read = error: -19 [ 1640.769390][T27281] dvb-usb: error while querying for an remote control event. [ 1641.283672][T27281] m920x_read = error: -19 [ 1641.401285][T28202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5791'. [ 1641.513246][T27281] dvb-usb: error while querying for an remote control event. [ 1641.630548][ T43] m920x_read = error: -19 [ 1643.662995][ T43] dvb-usb: error while querying for an remote control event. [ 1643.683122][T28202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.783649][ T5910] m920x_read = error: -19 [ 1643.788029][ T5910] dvb-usb: error while querying for an remote control event. [ 1643.836084][T28202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.950282][T27281] m920x_read = error: -19 [ 1643.954743][T27281] dvb-usb: error while querying for an remote control event. [ 1643.967194][T28221] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5797'. [ 1644.025119][T28225] netlink: 'syz.7.5799': attribute type 2 has an invalid length. [ 1644.070304][T27281] m920x_read = error: -19 [ 1644.074718][T27281] dvb-usb: error while querying for an remote control event. [ 1644.153068][T28228] Bluetooth: MGMT ver 1.23 [ 1644.390241][T28232] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5800'. [ 1644.533651][T27281] m920x_read = error: -19 [ 1644.538170][T27281] dvb-usb: error while querying for an remote control event. [ 1644.694443][ T30] audit: type=1326 audit(2000001032.959:35954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.721297][ T30] audit: type=1326 audit(2000001032.959:35955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.769983][ T30] audit: type=1326 audit(2000001032.959:35956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.802707][ T30] audit: type=1326 audit(2000001032.959:35957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.826938][ T30] audit: type=1326 audit(2000001032.959:35958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.850971][ T5910] m920x_read = error: -19 [ 1644.855338][ T5910] dvb-usb: error while querying for an remote control event. [ 1644.868144][ T30] audit: type=1326 audit(2000001032.959:35959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.895742][ T30] audit: type=1326 audit(2000001032.959:35960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1644.924331][ T30] audit: type=1326 audit(2000001032.959:35961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1645.009667][ T5910] m920x_read = error: -19 [ 1645.014824][ T5910] dvb-usb: error while querying for an remote control event. [ 1645.104313][T28237] netlink: zone id is out of range [ 1645.125776][T28237] netlink: zone id is out of range [ 1645.130539][T27281] m920x_read = error: -19 [ 1645.131130][T28237] netlink: zone id is out of range [ 1645.141011][T28237] netlink: zone id is out of range [ 1645.141165][T27281] dvb-usb: error while querying for an remote control event. [ 1645.146242][T28237] netlink: zone id is out of range [ 1645.158990][T28237] netlink: zone id is out of range [ 1645.164301][T28237] netlink: zone id is out of range [ 1645.169481][T28237] netlink: zone id is out of range [ 1645.176668][T28237] netlink: zone id is out of range [ 1645.182100][T28237] netlink: zone id is out of range [ 1645.404278][ T30] audit: type=1326 audit(2000001032.959:35962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1645.438663][ T30] audit: type=1326 audit(2000001032.959:35963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.6.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8564d8ebe9 code=0x7ffc0000 [ 1645.540394][T27281] m920x_read = error: -19 [ 1645.545273][T27281] dvb-usb: error while querying for an remote control event. [ 1645.666350][T27281] m920x_read = error: -19 [ 1645.684697][T27281] dvb-usb: error while querying for an remote control event. [ 1645.937410][T27281] m920x_read = error: -19 [ 1645.948742][T27281] dvb-usb: error while querying for an remote control event. [ 1646.208110][ T5910] m920x_read = error: -19 [ 1646.597305][ T5910] dvb-usb: error while querying for an remote control event. [ 1646.720706][T27281] m920x_read = error: -19 [ 1646.725170][T27281] dvb-usb: error while querying for an remote control event. [ 1647.112253][T28271] netlink: 'syz.0.5810': attribute type 1 has an invalid length. [ 1647.120098][T28271] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1647.133458][T28271] netlink: 'syz.0.5810': attribute type 2 has an invalid length. [ 1647.151345][T28271] netlink: 'syz.0.5810': attribute type 1 has an invalid length. [ 1647.180258][T27281] m920x_read = error: -19 [ 1647.192177][T27281] dvb-usb: error while querying for an remote control event. [ 1647.320432][T27281] m920x_read = error: -19 [ 1648.105129][T27281] dvb-usb: error while querying for an remote control event. [ 1648.220702][ T5910] m920x_read = error: -19 [ 1648.225139][ T5910] dvb-usb: error while querying for an remote control event. [ 1648.316431][T28276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1648.329789][T28276] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1648.341280][ T5910] m920x_read = error: -19 [ 1648.348811][ T5910] dvb-usb: error while querying for an remote control event. [ 1648.593876][ T10] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1648.823213][ T5910] m920x_read = error: -19 [ 1648.827995][ T5910] dvb-usb: error while querying for an remote control event. [ 1648.838389][T28276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1648.876821][T28276] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1649.000910][ T5910] m920x_read = error: -19 [ 1649.810504][ T5910] dvb-usb: error while querying for an remote control event. [ 1650.050561][ T5910] m920x_read = error: -19 [ 1650.055173][ T5910] dvb-usb: error while querying for an remote control event. [ 1650.064018][ T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1650.075263][ T10] usb 5-1: config 0 has no interface number 0 [ 1650.149515][T28300] FAULT_INJECTION: forcing a failure. [ 1650.149515][T28300] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.162502][T28300] CPU: 0 UID: 0 PID: 28300 Comm: syz.8.5816 Not tainted syzkaller #0 PREEMPT(full) [ 1650.162526][T28300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1650.162537][T28300] Call Trace: [ 1650.162544][T28300] [ 1650.162551][T28300] dump_stack_lvl+0x16c/0x1f0 [ 1650.162576][T28300] should_fail_ex+0x512/0x640 [ 1650.162600][T28300] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1650.162631][T28300] should_failslab+0xc2/0x120 [ 1650.162652][T28300] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1650.162679][T28300] ? tty_register_device_attr+0x220/0x7c0 [ 1650.162702][T28300] tty_register_device_attr+0x220/0x7c0 [ 1650.162722][T28300] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1650.162754][T28300] rfcomm_dev_ioctl+0x16a0/0x1c90 [ 1650.162780][T28300] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 1650.162801][T28300] ? irqentry_exit+0x3b/0x90 [ 1650.162819][T28300] ? lockdep_hardirqs_on+0x7c/0x110 [ 1650.162849][T28300] rfcomm_sock_ioctl+0xaa/0xd0 [ 1650.162877][T28300] sock_do_ioctl+0x115/0x280 [ 1650.162903][T28300] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1650.162932][T28300] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1650.162960][T28300] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1650.162992][T28300] sock_ioctl+0x227/0x6b0 [ 1650.163018][T28300] ? __pfx_sock_ioctl+0x10/0x10 [ 1650.163049][T28300] ? selinux_file_ioctl+0x180/0x270 [ 1650.163073][T28300] ? selinux_file_ioctl+0xb4/0x270 [ 1650.163100][T28300] ? __pfx_sock_ioctl+0x10/0x10 [ 1650.163126][T28300] __x64_sys_ioctl+0x18b/0x210 [ 1650.163154][T28300] do_syscall_64+0xcd/0x4c0 [ 1650.163182][T28300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.163200][T28300] RIP: 0033:0x7fdab8b8ebe9 [ 1650.163215][T28300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.163233][T28300] RSP: 002b:00007fdab99b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.163250][T28300] RAX: ffffffffffffffda RBX: 00007fdab8db6180 RCX: 00007fdab8b8ebe9 [ 1650.163261][T28300] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 000000000000000a [ 1650.163273][T28300] RBP: 00007fdab99b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.163283][T28300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.163294][T28300] R13: 00007fdab8db6218 R14: 00007fdab8db6180 R15: 00007ffc92b397c8 [ 1650.163319][T28300] [ 1650.398611][ T5910] m920x_read = error: -19 [ 1650.416996][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1650.426342][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.442311][T28272] delete_channel: no stack [ 1650.445780][ T10] usb 5-1: config 0 descriptor?? [ 1650.470334][ T10] usb 5-1: can't set config #0, error -71 [ 1650.513136][ T10] usb 5-1: USB disconnect, device number 118 [ 1650.865253][ T5910] dvb-usb: error while querying for an remote control event. [ 1651.052738][ T5910] m920x_read = error: -19 [ 1651.086041][ T5910] dvb-usb: error while querying for an remote control event. [ 1651.215818][ T5910] m920x_read = error: -19 [ 1651.217915][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1651.217929][ T30] audit: type=1400 audit(2000001039.479:36000): avc: denied { shutdown } for pid=28309 comm="syz.0.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1651.247809][ T5910] dvb-usb: error while querying for an remote control event. [ 1651.443722][ T5910] m920x_read = error: -19 [ 1651.448100][ T5910] dvb-usb: error while querying for an remote control event. [ 1651.578410][ T5910] m920x_read = error: -19 [ 1651.589743][ T5910] dvb-usb: error while querying for an remote control event. [ 1651.620298][ T30] audit: type=1400 audit(2000001039.569:36001): avc: denied { unmount } for pid=27734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1651.723752][ T5910] m920x_read = error: -19 [ 1652.012778][ T5910] dvb-usb: error while querying for an remote control event. [ 1652.151488][ T5910] m920x_read = error: -19 [ 1652.169520][ T5910] dvb-usb: error while querying for an remote control event. [ 1652.257461][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1652.415785][ T5910] m920x_read = error: -19 [ 1652.420864][ T5910] dvb-usb: error while querying for an remote control event. [ 1652.451502][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1652.527518][T28337] FAULT_INJECTION: forcing a failure. [ 1652.527518][T28337] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.540324][T28337] CPU: 1 UID: 0 PID: 28337 Comm: syz.4.5830 Not tainted syzkaller #0 PREEMPT(full) [ 1652.540348][T28337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1652.540358][T28337] Call Trace: [ 1652.540365][T28337] [ 1652.540372][T28337] dump_stack_lvl+0x16c/0x1f0 [ 1652.540396][T28337] should_fail_ex+0x512/0x640 [ 1652.540421][T28337] should_failslab+0xc2/0x120 [ 1652.540442][T28337] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1652.540469][T28337] ? rcu_is_watching+0x12/0xc0 [ 1652.540491][T28337] ? rdma_restrack_init+0x49/0x150 [ 1652.540517][T28337] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 1652.540544][T28337] rdma_restrack_init+0x49/0x150 [ 1652.540570][T28337] _ib_alloc_device+0x58/0x830 [ 1652.540592][T28337] siw_newlink+0xf2/0xd70 [ 1652.540619][T28337] nldev_newlink+0x3a6/0x680 [ 1652.540638][T28337] ? __pfx_nldev_newlink+0x10/0x10 [ 1652.540655][T28337] ? finish_task_switch.isra.0+0x221/0xc10 [ 1652.540678][T28337] ? lockdep_hardirqs_on+0x7c/0x110 [ 1652.540763][T28337] ? cred_has_capability.isra.0+0x190/0x310 [ 1652.540800][T28337] ? irqentry_exit+0x3b/0x90 [ 1652.540828][T28337] ? rdma_nl_rcv_msg+0x344/0x6e0 [ 1652.540846][T28337] ? __pfx_nldev_newlink+0x10/0x10 [ 1652.540866][T28337] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1652.540886][T28337] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1652.540909][T28337] ? __lock_acquire+0x62e/0x1ce0 [ 1652.540943][T28337] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1652.540973][T28337] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1652.541004][T28337] ? netlink_deliver_tap+0x1ae/0xd30 [ 1652.541022][T28337] ? selinux_netlink_send+0x578/0x830 [ 1652.541045][T28337] ? is_vmalloc_addr+0x86/0xa0 [ 1652.541067][T28337] netlink_unicast+0x5a7/0x870 [ 1652.541092][T28337] ? __pfx_netlink_unicast+0x10/0x10 [ 1652.541122][T28337] netlink_sendmsg+0x8d1/0xdd0 [ 1652.541148][T28337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1652.541179][T28337] ____sys_sendmsg+0xa95/0xc70 [ 1652.541204][T28337] ? copy_msghdr_from_user+0x10a/0x160 [ 1652.541222][T28337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1652.541259][T28337] ___sys_sendmsg+0x134/0x1d0 [ 1652.541279][T28337] ? __pfx____sys_sendmsg+0x10/0x10 [ 1652.541333][T28337] __sys_sendmsg+0x16d/0x220 [ 1652.541352][T28337] ? __pfx___sys_sendmsg+0x10/0x10 [ 1652.541389][T28337] do_syscall_64+0xcd/0x4c0 [ 1652.541411][T28337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.541430][T28337] RIP: 0033:0x7fbad358ebe9 [ 1652.541445][T28337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1652.541462][T28337] RSP: 002b:00007fbad445a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1652.541480][T28337] RAX: ffffffffffffffda RBX: 00007fbad37b6180 RCX: 00007fbad358ebe9 [ 1652.541491][T28337] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000a [ 1652.541502][T28337] RBP: 00007fbad445a090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.541512][T28337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.541523][T28337] R13: 00007fbad37b6218 R14: 00007fbad37b6180 R15: 00007ffe29f97e28 [ 1652.541548][T28337] [ 1652.850204][ T5910] m920x_read = error: -19 [ 1652.854566][ T5910] dvb-usb: error while querying for an remote control event. [ 1652.862216][T16345] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1652.880734][T16345] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1652.889555][T16345] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1652.901063][T16345] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1652.980350][ T5910] m920x_read = error: -19 [ 1652.984723][ T5910] dvb-usb: error while querying for an remote control event. [ 1653.100386][ T5910] m920x_read = error: -19 [ 1653.104738][ T5910] dvb-usb: error while querying for an remote control event. [ 1653.202950][ T30] audit: type=1400 audit(2000001041.159:36002): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.10.21 dest=35676 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1653.230561][T27281] m920x_read = error: -19 [ 1653.234926][T27281] dvb-usb: error while querying for an remote control event. [ 1653.350292][T27281] m920x_read = error: -19 [ 1653.354620][T27281] dvb-usb: error while querying for an remote control event. [ 1653.404861][ T30] audit: type=1400 audit(2000001041.659:36003): avc: denied { name_bind } for pid=28323 comm="syz.0.5826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1653.470246][T27281] m920x_read = error: -19 [ 1653.476512][T27281] dvb-usb: error while querying for an remote control event. [ 1653.479470][T28324] bond0: (slave batadv0): Releasing backup interface [ 1653.601656][T27281] m920x_read = error: -19 [ 1653.605983][T27281] dvb-usb: error while querying for an remote control event. [ 1653.616725][ T30] audit: type=1400 audit(2000001041.859:36004): avc: denied { read } for pid=28338 comm="syz.8.5829" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1653.628510][T28324] bridge_slave_0: left allmulticast mode [ 1653.665169][T28324] bridge_slave_0: left promiscuous mode [ 1653.710508][ T30] audit: type=1400 audit(2000001041.859:36005): avc: denied { open } for pid=28338 comm="syz.8.5829" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1653.726793][T28324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.745765][ T5910] m920x_read = error: -19 [ 1653.751896][ T5910] dvb-usb: error while querying for an remote control event. [ 1653.834413][T28324] bridge_slave_1: left allmulticast mode [ 1653.853555][T28324] bridge_slave_1: left promiscuous mode [ 1653.863820][T28324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.880228][ T5910] m920x_read = error: -19 [ 1653.884628][ T5910] dvb-usb: error while querying for an remote control event. [ 1653.924970][T28324] bond0: (slave bond_slave_0): Releasing backup interface [ 1653.952226][T28324] bond0: (slave bond_slave_1): Releasing backup interface [ 1653.995125][T28324] team0: Port device team_slave_0 removed [ 1654.004340][T28324] team0: Port device team_slave_1 removed [ 1654.010555][ T43] m920x_read = error: -19 [ 1654.014943][ T43] dvb-usb: error while querying for an remote control event. [ 1654.024699][T28324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.057989][T28345] team0: Mode changed to "loadbalance" [ 1654.130529][T27281] m920x_read = error: -19 [ 1654.135435][T27281] dvb-usb: error while querying for an remote control event. [ 1654.280364][T27281] m920x_read = error: -19 [ 1654.284716][T27281] dvb-usb: error while querying for an remote control event. [ 1654.430492][T27281] m920x_read = error: -19 [ 1654.434894][T27281] dvb-usb: error while querying for an remote control event. [ 1654.559951][T27281] m920x_read = error: -19 [ 1654.580511][T27281] dvb-usb: error while querying for an remote control event. [ 1654.820275][T27281] m920x_read = error: -19 [ 1654.825034][T27281] dvb-usb: error while querying for an remote control event. [ 1655.024799][T27281] m920x_read = error: -19 [ 1655.029202][T27281] dvb-usb: error while querying for an remote control event. [ 1655.140538][T27281] m920x_read = error: -19 [ 1655.146672][T27281] dvb-usb: error while querying for an remote control event. [ 1655.261302][T27281] m920x_read = error: -19 [ 1655.266180][T27281] dvb-usb: error while querying for an remote control event. [ 1655.380983][T27281] m920x_read = error: -19 [ 1655.394885][T27281] dvb-usb: error while querying for an remote control event. [ 1655.408548][T28364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1655.590652][T27281] m920x_read = error: -19 [ 1655.602251][T27281] dvb-usb: error while querying for an remote control event. [ 1655.813798][T27281] m920x_read = error: -19 [ 1655.818426][T27281] dvb-usb: error while querying for an remote control event. [ 1655.930280][T27281] m920x_read = error: -19 [ 1655.934636][T27281] dvb-usb: error while querying for an remote control event. [ 1655.976106][T28374] wlan0 speed is unknown, defaulting to 1000 [ 1655.983026][T28374] lo speed is unknown, defaulting to 1000 [ 1655.989421][T28374] wg2 speed is unknown, defaulting to 1000 [ 1656.050515][T27281] m920x_read = error: -19 [ 1656.066380][T27281] dvb-usb: error while querying for an remote control event. [ 1656.213592][T27281] m920x_read = error: -19 [ 1656.224516][T27281] dvb-usb: error while querying for an remote control event. [ 1656.360916][T27281] m920x_read = error: -19 [ 1656.365412][T27281] dvb-usb: error while querying for an remote control event. [ 1656.511520][T27281] m920x_read = error: -19 [ 1656.515886][T27281] dvb-usb: error while querying for an remote control event. [ 1656.650240][T27281] m920x_read = error: -19 [ 1656.654630][T27281] dvb-usb: error while querying for an remote control event. [ 1656.788010][T27281] m920x_read = error: -19 [ 1656.788102][T27281] dvb-usb: error while querying for an remote control event. [ 1656.891746][T27281] m920x_read = error: -19 [ 1657.170596][T27281] dvb-usb: error while querying for an remote control event. [ 1657.300455][ T43] m920x_read = error: -19 [ 1657.307747][ T43] dvb-usb: error while querying for an remote control event. [ 1657.336026][T28391] geneve2: entered promiscuous mode [ 1657.366199][T28391] geneve2: entered allmulticast mode [ 1657.486673][T27281] m920x_read = error: -19 [ 1657.510230][T27281] dvb-usb: error while querying for an remote control event. [ 1657.671005][T27281] m920x_read = error: -19 [ 1657.750888][T27281] dvb-usb: error while querying for an remote control event. [ 1657.900606][T27281] m920x_read = error: -19 [ 1657.928596][T27281] dvb-usb: error while querying for an remote control event. [ 1658.053407][T27281] m920x_read = error: -19 [ 1658.058106][T27281] dvb-usb: error while querying for an remote control event. [ 1658.707502][T27281] m920x_read = error: -19 [ 1658.712081][T27281] dvb-usb: error while querying for an remote control event. [ 1658.850470][T27281] m920x_read = error: -19 [ 1658.854851][T27281] dvb-usb: error while querying for an remote control event. [ 1659.025540][T27281] m920x_read = error: -19 [ 1659.030606][T27281] dvb-usb: error while querying for an remote control event. [ 1659.053636][T28421] overlayfs: failed to resolve './file0': -2 [ 1659.143757][T28427] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5848'. [ 1659.511861][T27281] m920x_read = error: -19 [ 1659.541715][T27281] dvb-usb: error while querying for an remote control event. [ 1659.742884][T27281] m920x_read = error: -19 [ 1659.812147][T27281] dvb-usb: error while querying for an remote control event. [ 1659.840765][T28431] libceph: resolve '4' (ret=-3): failed [ 1659.858590][T28431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1659.870513][ T30] audit: type=1400 audit(2000001048.119:36006): avc: denied { nlmsg_read } for pid=28430 comm="syz.4.5849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1660.031595][ T30] audit: type=1400 audit(2000001048.279:36007): avc: denied { read } for pid=28433 comm="syz.7.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1660.810396][T27281] m920x_read = error: -19 [ 1660.814770][T27281] dvb-usb: error while querying for an remote control event. [ 1660.931406][T27281] m920x_read = error: -19 [ 1660.939093][T27281] dvb-usb: error while querying for an remote control event. [ 1661.080230][T27281] m920x_read = error: -19 [ 1661.084584][T27281] dvb-usb: error while querying for an remote control event. [ 1661.211130][T27281] m920x_read = error: -19 [ 1661.227114][T27281] dvb-usb: error while querying for an remote control event. [ 1661.840339][T27281] m920x_read = error: -19 [ 1661.849178][T27281] dvb-usb: error while querying for an remote control event. [ 1661.984260][T27281] m920x_read = error: -19 [ 1661.988786][T27281] dvb-usb: error while querying for an remote control event. [ 1662.000591][ T30] audit: type=1804 audit(2000001050.259:36008): pid=28460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.5855" name="/newroot/516/file1" dev="fuse" ino=1 res=1 errno=0 [ 1662.027906][ T30] audit: type=1800 audit(2000001050.269:36009): pid=28460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5855" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1662.131794][T27281] m920x_read = error: -19 [ 1662.136419][T27281] dvb-usb: error while querying for an remote control event. [ 1662.350756][T27281] m920x_read = error: -19 [ 1662.384000][T28467] net_ratelimit: 42 callbacks suppressed [ 1662.384033][T28467] netlink: zone id is out of range [ 1662.401370][T28467] netlink: zone id is out of range [ 1662.407122][T28467] netlink: zone id is out of range [ 1662.412761][T28467] netlink: zone id is out of range [ 1662.417901][T28467] netlink: zone id is out of range [ 1662.423253][T28467] netlink: zone id is out of range [ 1662.428386][T28467] netlink: zone id is out of range [ 1662.433561][T28467] netlink: zone id is out of range [ 1662.440187][T28467] netlink: zone id is out of range [ 1662.445293][T28467] netlink: zone id is out of range [ 1662.500440][T27281] dvb-usb: error while querying for an remote control event. [ 1662.511609][ T30] audit: type=1400 audit(2000001050.779:36010): avc: denied { getopt } for pid=28461 comm="syz.7.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1662.620772][T27281] m920x_read = error: -19 [ 1662.625211][T27281] dvb-usb: error while querying for an remote control event. [ 1662.979864][T27281] m920x_read = error: -19 [ 1663.478101][T27281] dvb-usb: error while querying for an remote control event. [ 1663.610313][T27281] m920x_read = error: -19 [ 1663.614730][T27281] dvb-usb: error while querying for an remote control event. [ 1663.684284][T28477] overlayfs: failed to resolve './file1': -2 [ 1663.750558][T27281] m920x_read = error: -19 [ 1663.754944][T27281] dvb-usb: error while querying for an remote control event. [ 1663.965759][ T5910] m920x_read = error: -19 [ 1663.970440][ T5910] dvb-usb: error while querying for an remote control event. [ 1664.201159][T28483] netlink: 'syz.6.5862': attribute type 10 has an invalid length. [ 1664.381833][ T5910] m920x_read = error: -19 [ 1664.396258][ T5910] dvb-usb: error while querying for an remote control event. [ 1664.621544][ T5910] m920x_read = error: -19 [ 1664.677436][ T5910] dvb-usb: error while querying for an remote control event. [ 1664.949894][ T5910] m920x_read = error: -19 [ 1664.954504][ T5910] dvb-usb: error while querying for an remote control event. [ 1665.067306][T28496] lo speed is unknown, defaulting to 1000 [ 1665.073515][T28496] lo speed is unknown, defaulting to 1000 [ 1665.082894][T28496] lo speed is unknown, defaulting to 1000 [ 1665.149408][T28496] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1665.472442][T28496] lo speed is unknown, defaulting to 1000 [ 1665.478818][T28496] lo speed is unknown, defaulting to 1000 [ 1665.485328][T28496] lo speed is unknown, defaulting to 1000 [ 1665.491706][T28496] lo speed is unknown, defaulting to 1000 [ 1665.498061][T28496] lo speed is unknown, defaulting to 1000 [ 1665.504647][T28496] lo speed is unknown, defaulting to 1000 [ 1665.511026][T28496] lo speed is unknown, defaulting to 1000 [ 1665.517383][T28496] lo speed is unknown, defaulting to 1000 [ 1665.560253][ T5910] m920x_read = error: -19 [ 1665.565699][ T5910] dvb-usb: error while querying for an remote control event. [ 1665.706488][ T5910] m920x_read = error: -19 [ 1665.713465][ T5910] dvb-usb: error while querying for an remote control event. [ 1665.826390][ T30] audit: type=1400 audit(2000001054.089:36011): avc: denied { getopt } for pid=28507 comm="syz.4.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1665.827120][T28508] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1666.920481][ T5910] m920x_read = error: -19 [ 1666.924842][ T5910] dvb-usb: error while querying for an remote control event. [ 1667.020713][T28524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5868'. [ 1667.060253][ T5910] m920x_read = error: -19 [ 1667.064623][ T5910] dvb-usb: error while querying for an remote control event. [ 1667.250597][ T5910] m920x_read = error: -19 [ 1667.250669][T26777] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1667.254974][ T5910] dvb-usb: error while querying for an remote control event. [ 1667.271827][T28527] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1667.295398][T28527] cramfs: wrong magic [ 1667.785868][ T5910] m920x_read = error: -19 [ 1667.797842][ T5910] dvb-usb: error while querying for an remote control event. [ 1667.860238][T26777] usb 5-1: Using ep0 maxpacket: 8 [ 1667.867150][T26777] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1667.897440][T26777] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1667.907497][T26777] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1667.920762][T27281] m920x_read = error: -19 [ 1667.925115][T27281] dvb-usb: error while querying for an remote control event. [ 1668.093466][T27281] m920x_read = error: -19 [ 1668.108037][T27281] dvb-usb: error while querying for an remote control event. [ 1668.118099][T26777] usb 5-1: config 8 interface 0 has no altsetting 0 [ 1668.230245][T27281] m920x_read = error: -19 [ 1668.234600][T27281] dvb-usb: error while querying for an remote control event. [ 1668.272761][T26777] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1668.291803][T26777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.300865][T26777] usb 5-1: Product: syz [ 1668.305109][T26777] usb 5-1: Manufacturer: syz [ 1668.309772][T26777] usb 5-1: SerialNumber: syz [ 1668.315657][ T30] audit: type=1400 audit(2000001056.559:36012): avc: denied { name_bind } for pid=28536 comm="syz.0.5871" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1668.349912][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.362690][T28546] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5872'. [ 1668.392191][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.725794][T27281] m920x_read = error: -19 [ 1668.731241][T27281] dvb-usb: error while querying for an remote control event. [ 1668.840532][T27281] m920x_read = error: -19 [ 1669.069692][T26777] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1669.098054][T26777] usb 5-1: selecting invalid altsetting 0 [ 1669.130338][T27281] dvb-usb: error while querying for an remote control event. [ 1669.269247][T26777] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 1669.296473][T26777] usb 5-1: USB disconnect, device number 119 [ 1669.314604][ T30] audit: type=1800 audit(2000001057.579:36013): pid=28582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5877" name="bus" dev="overlay" ino=1759 res=0 errno=0 [ 1669.404835][T27281] m920x_read = error: -19 [ 1669.412910][T27281] dvb-usb: error while querying for an remote control event. [ 1669.956994][ T30] audit: type=1400 audit(2000001057.789:36014): avc: denied { create } for pid=28557 comm="syz.8.5873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1670.012656][T27281] m920x_read = error: -19 [ 1670.017540][T27281] dvb-usb: error while querying for an remote control event. [ 1670.250291][ T30] audit: type=1400 audit(2000001057.789:36015): avc: denied { ioctl } for pid=28557 comm="syz.8.5873" path="socket:[109006]" dev="sockfs" ino=109006 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1670.342570][ T30] audit: type=1400 audit(2000001057.799:36016): avc: denied { append } for pid=28557 comm="syz.8.5873" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1670.400469][T27281] m920x_read = error: -19 [ 1670.406940][ T30] audit: type=1400 audit(2000001058.499:36017): avc: denied { egress } for pid=28562 comm="syz.6.5875" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1670.406969][ T30] audit: type=1400 audit(2000001058.499:36018): avc: denied { sendto } for pid=28562 comm="syz.6.5875" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1670.527563][T27281] dvb-usb: error while querying for an remote control event. [ 1671.347546][T27281] m920x_read = error: -19 [ 1671.352173][T27281] dvb-usb: error while querying for an remote control event. [ 1671.550726][T27281] m920x_read = error: -19 [ 1671.569589][T27281] dvb-usb: error while querying for an remote control event. [ 1671.574116][T28604] overlayfs: failed to resolve './file1': -2 [ 1671.702097][T27281] m920x_read = error: -19 [ 1672.056447][T27281] dvb-usb: error while querying for an remote control event. [ 1672.065509][T28606] netlink: 'syz.6.5882': attribute type 33 has an invalid length. [ 1672.210715][T27281] m920x_read = error: -19 [ 1672.215145][T27281] dvb-usb: error while querying for an remote control event. [ 1672.247889][T28612] net_ratelimit: 16 callbacks suppressed [ 1672.247900][T28612] netlink: zone id is out of range [ 1672.258859][T28612] netlink: zone id is out of range [ 1672.264113][T28612] netlink: zone id is out of range [ 1672.269199][T28612] netlink: zone id is out of range [ 1672.274550][T28612] netlink: zone id is out of range [ 1672.279648][T28612] netlink: zone id is out of range [ 1672.284806][T28612] netlink: zone id is out of range [ 1672.291049][T28612] netlink: zone id is out of range [ 1672.296140][T28612] netlink: zone id is out of range [ 1672.301557][T28612] netlink: zone id is out of range [ 1672.370573][T27281] m920x_read = error: -19 [ 1672.374932][T27281] dvb-usb: error while querying for an remote control event. [ 1672.491459][T27281] m920x_read = error: -19 [ 1672.495805][T27281] dvb-usb: error while querying for an remote control event. [ 1672.680296][T27281] m920x_read = error: -19 [ 1672.684665][T27281] dvb-usb: error while querying for an remote control event. [ 1672.710988][ T30] audit: type=1400 audit(2000001060.979:36019): avc: denied { read } for pid=28619 comm="syz.6.5885" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1672.860462][ T43] m920x_read = error: -19 [ 1672.864872][ T43] dvb-usb: error while querying for an remote control event. [ 1672.890158][ T30] audit: type=1400 audit(2000001060.979:36020): avc: denied { open } for pid=28619 comm="syz.6.5885" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1673.030759][ T43] m920x_read = error: -19 [ 1673.035250][ T43] dvb-usb: error while querying for an remote control event. [ 1673.180265][ T43] m920x_read = error: -19 [ 1673.328732][ T43] dvb-usb: error while querying for an remote control event. [ 1673.628203][T28636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5889'. [ 1673.654140][ T43] m920x_read = error: -19 [ 1673.658498][ T43] dvb-usb: error while querying for an remote control event. [ 1673.802667][ T43] m920x_read = error: -19 [ 1673.812682][ T43] dvb-usb: error while querying for an remote control event. [ 1673.930463][ T43] m920x_read = error: -19 [ 1673.930558][ T43] dvb-usb: error while querying for an remote control event. [ 1674.050999][ T43] m920x_read = error: -19 [ 1674.055719][ T43] dvb-usb: error while querying for an remote control event. [ 1674.437242][ T43] m920x_read = error: -19 [ 1674.442912][ T43] dvb-usb: error while querying for an remote control event. [ 1674.633953][ T43] m920x_read = error: -19 [ 1674.640797][ T43] dvb-usb: error while querying for an remote control event. [ 1674.774410][ T43] m920x_read = error: -19 [ 1674.788637][ T43] dvb-usb: error while querying for an remote control event. [ 1674.910490][ T43] m920x_read = error: -19 [ 1674.914921][ T43] dvb-usb: error while querying for an remote control event. [ 1675.052022][T28658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1675.166608][ T43] m920x_read = error: -19 [ 1675.176905][ T43] dvb-usb: error while querying for an remote control event. [ 1675.351514][ T43] m920x_read = error: -19 [ 1675.355871][ T43] dvb-usb: error while querying for an remote control event. [ 1675.490211][ T43] m920x_read = error: -19 [ 1675.520468][ T43] dvb-usb: error while querying for an remote control event. [ 1676.630676][ T5910] m920x_read = error: -19 [ 1676.635297][ T5910] dvb-usb: error while querying for an remote control event. [ 1676.812952][ T974] m920x_read = error: -19 [ 1676.817310][ T974] dvb-usb: error while querying for an remote control event. [ 1676.929852][ T30] audit: type=1400 audit(2000001065.189:36021): avc: denied { lock } for pid=28673 comm="syz.6.5898" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1676.960562][ T5910] m920x_read = error: -19 [ 1676.968328][ T5910] dvb-usb: error while querying for an remote control event. [ 1677.082834][ T30] audit: type=1400 audit(2000001065.339:36022): avc: denied { ioctl } for pid=28676 comm="syz.6.5899" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1677.170907][ T5910] m920x_read = error: -19 [ 1677.180602][ T5910] dvb-usb: error while querying for an remote control event. [ 1677.310625][ T5910] m920x_read = error: -19 [ 1677.315030][ T5910] dvb-usb: error while querying for an remote control event. [ 1677.393101][T28689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1677.400359][T28689] IPv6: NLM_F_CREATE should be set when creating new route [ 1677.480425][ T5910] m920x_read = error: -19 [ 1677.487384][ T5910] dvb-usb: error while querying for an remote control event. [ 1677.507636][T28691] netlink: 'syz.0.5903': attribute type 1 has an invalid length. [ 1677.612780][T28691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1677.630732][ T5910] m920x_read = error: -19 [ 1677.635342][ T5910] dvb-usb: error while querying for an remote control event. [ 1677.780517][T28734] netlink: 'syz.8.5904': attribute type 10 has an invalid length. [ 1677.822429][T28722] bond1: (slave geneve2): making interface the new active one [ 1677.842073][T28722] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1677.951238][ T5910] m920x_read = error: -19 [ 1677.967478][ T5910] dvb-usb: error while querying for an remote control event. [ 1677.986378][T23080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.996681][T23080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.007064][T23080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.018669][T23080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.169589][ T5910] m920x_read = error: -19 [ 1678.178180][ T5910] dvb-usb: error while querying for an remote control event. [ 1678.329492][ T5910] m920x_read = error: -19 [ 1678.335684][ T5910] dvb-usb: error while querying for an remote control event. [ 1678.510414][ T5910] m920x_read = error: -19 [ 1678.533598][ T5910] dvb-usb: error while querying for an remote control event. [ 1679.077926][T18206] m920x_read = error: -19 [ 1679.084194][T18206] dvb-usb: error while querying for an remote control event. [ 1679.210700][ T974] m920x_read = error: -19 [ 1679.215073][ T974] dvb-usb: error while querying for an remote control event. [ 1679.521355][ T974] m920x_read = error: -19 [ 1679.525900][ T974] dvb-usb: error while querying for an remote control event. [ 1679.650401][ T974] m920x_read = error: -19 [ 1679.654794][ T974] dvb-usb: error while querying for an remote control event. [ 1679.709906][T28772] FAULT_INJECTION: forcing a failure. [ 1679.709906][T28772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1679.740157][T28772] CPU: 0 UID: 0 PID: 28772 Comm: syz.8.5911 Not tainted syzkaller #0 PREEMPT(full) [ 1679.740176][T28772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1679.740183][T28772] Call Trace: [ 1679.740187][T28772] [ 1679.740192][T28772] dump_stack_lvl+0x16c/0x1f0 [ 1679.740210][T28772] should_fail_ex+0x512/0x640 [ 1679.740226][T28772] _copy_to_user+0x32/0xd0 [ 1679.740241][T28772] simple_read_from_buffer+0xcb/0x170 [ 1679.740255][T28772] proc_fail_nth_read+0x197/0x240 [ 1679.740269][T28772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1679.740283][T28772] ? rw_verify_area+0xcf/0x6c0 [ 1679.740299][T28772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1679.740312][T28772] vfs_read+0x1e1/0xcf0 [ 1679.740326][T28772] ? __pfx___mutex_lock+0x10/0x10 [ 1679.740339][T28772] ? __pfx_vfs_read+0x10/0x10 [ 1679.740354][T28772] ? __fget_files+0x20e/0x3c0 [ 1679.740370][T28772] ksys_read+0x12a/0x250 [ 1679.740381][T28772] ? __pfx_ksys_read+0x10/0x10 [ 1679.740396][T28772] do_syscall_64+0xcd/0x4c0 [ 1679.740410][T28772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.740421][T28772] RIP: 0033:0x7fdab8b8d5fc [ 1679.740432][T28772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1679.740444][T28772] RSP: 002b:00007fdab99f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1679.740455][T28772] RAX: ffffffffffffffda RBX: 00007fdab8db5fa0 RCX: 00007fdab8b8d5fc [ 1679.740462][T28772] RDX: 000000000000000f RSI: 00007fdab99f50a0 RDI: 0000000000000004 [ 1679.740469][T28772] RBP: 00007fdab99f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.740476][T28772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.740482][T28772] R13: 00007fdab8db6038 R14: 00007fdab8db5fa0 R15: 00007ffc92b397c8 [ 1679.740496][T28772] [ 1679.928611][ T974] m920x_read = error: -19 [ 1680.039576][ T974] dvb-usb: error while querying for an remote control event. [ 1680.180646][ T974] m920x_read = error: -19 [ 1680.189925][ T974] dvb-usb: error while querying for an remote control event. [ 1680.197073][T28782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1680.214095][T28782] UDF-fs: Scanning with blocksize 512 failed [ 1680.225639][T28782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1680.241492][T28786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.258396][T28782] UDF-fs: Scanning with blocksize 1024 failed [ 1680.269504][T28782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1680.283101][T28782] UDF-fs: Scanning with blocksize 2048 failed [ 1680.289528][T28782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1680.302343][T28782] UDF-fs: Scanning with blocksize 4096 failed [ 1680.350208][ T974] m920x_read = error: -19 [ 1680.354764][ T974] dvb-usb: error while querying for an remote control event. [ 1680.510541][ T974] m920x_read = error: -19 [ 1680.514992][ T974] dvb-usb: error while querying for an remote control event. [ 1680.631110][ T974] m920x_read = error: -19 [ 1680.635555][ T974] dvb-usb: error while querying for an remote control event. [ 1681.220758][ T974] m920x_read = error: -19 [ 1681.235347][ T974] dvb-usb: error while querying for an remote control event. [ 1681.388927][ T974] m920x_read = error: -19 [ 1681.393372][ T974] dvb-usb: error while querying for an remote control event. [ 1681.570265][ T974] m920x_read = error: -19 [ 1681.603042][ T974] dvb-usb: error while querying for an remote control event. [ 1681.730199][ T974] m920x_read = error: -19 [ 1681.734615][ T974] dvb-usb: error while querying for an remote control event. [ 1681.850246][ T974] m920x_read = error: -19 [ 1681.855310][ T974] dvb-usb: error while querying for an remote control event. [ 1681.924656][T28829] netlink: 'syz.6.5922': attribute type 10 has an invalid length. [ 1682.282138][ T974] m920x_read = error: -19 [ 1682.296579][ T974] dvb-usb: error while querying for an remote control event. [ 1682.621186][T28831] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5924'. [ 1682.645214][ T974] m920x_read = error: -19 [ 1682.649711][ T974] dvb-usb: error while querying for an remote control event. [ 1682.855515][ T974] m920x_read = error: -19 [ 1682.873496][ T974] dvb-usb: error while querying for an remote control event. [ 1683.010472][ T974] m920x_read = error: -19 [ 1683.020036][ T974] dvb-usb: error while querying for an remote control event. [ 1683.194088][ T974] m920x_read = error: -19 [ 1683.198866][ T974] dvb-usb: error while querying for an remote control event. [ 1683.322212][ T974] m920x_read = error: -19 [ 1683.327026][ T974] dvb-usb: error while querying for an remote control event. [ 1683.531746][ T974] m920x_read = error: -19 [ 1683.536112][ T974] dvb-usb: error while querying for an remote control event. [ 1684.047093][T28847] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5927'. [ 1684.059268][ T974] m920x_read = error: -19 [ 1684.065766][ T974] dvb-usb: error while querying for an remote control event. [ 1684.083897][T28866] netlink: 'syz.0.5932': attribute type 10 has an invalid length. [ 1684.098993][T28866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.108991][T28866] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1684.123866][T28866] bond0: entered promiscuous mode [ 1684.128944][T28866] batadv0: entered promiscuous mode [ 1684.192078][ T974] m920x_read = error: -19 [ 1684.199080][ T974] dvb-usb: error while querying for an remote control event. [ 1684.336905][ T974] m920x_read = error: -19 [ 1684.350227][ T974] dvb-usb: error while querying for an remote control event. [ 1684.529273][T18206] m920x_read = error: -19 [ 1684.534034][T18206] dvb-usb: error while querying for an remote control event. [ 1684.771053][T18206] m920x_read = error: -19 [ 1684.775607][T18206] dvb-usb: error while querying for an remote control event. [ 1685.184732][ T974] m920x_read = error: -19 [ 1685.529428][ T974] dvb-usb: error while querying for an remote control event. [ 1685.667161][T28882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5935'. [ 1685.681915][ T974] m920x_read = error: -19 [ 1685.686263][ T974] dvb-usb: error while querying for an remote control event. [ 1686.247558][ T974] m920x_read = error: -19 [ 1686.264759][ T974] dvb-usb: error while querying for an remote control event. [ 1686.333527][T28904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5939'. [ 1686.392183][ T974] m920x_read = error: -19 [ 1686.396540][ T974] dvb-usb: error while querying for an remote control event. [ 1686.610247][T18206] m920x_read = error: -19 [ 1686.614707][T18206] dvb-usb: error while querying for an remote control event. [ 1686.716960][T28908] wlan0 speed is unknown, defaulting to 1000 [ 1686.735881][T28908] lo speed is unknown, defaulting to 1000 [ 1686.771695][T18206] m920x_read = error: -19 [ 1686.841748][T18206] dvb-usb: error while querying for an remote control event. [ 1686.986491][T28908] wg2 speed is unknown, defaulting to 1000 [ 1687.040914][T18206] m920x_read = error: -19 [ 1687.045326][T18206] dvb-usb: error while querying for an remote control event. [ 1687.110512][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5941'. [ 1687.192384][T18206] m920x_read = error: -19 [ 1687.196744][T18206] dvb-usb: error while querying for an remote control event. [ 1687.400682][T18206] m920x_read = error: -19 [ 1687.405040][T18206] dvb-usb: error while querying for an remote control event. [ 1687.413110][T28956] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1687.434647][T28956] cramfs: wrong magic [ 1687.479916][T12820] IPVS: starting estimator thread 0... [ 1687.590515][T28961] IPVS: using max 38 ests per chain, 91200 per kthread [ 1687.685633][T28960] vlan2: entered promiscuous mode [ 1687.690914][T28960] macvtap0: entered promiscuous mode [ 1687.703123][T18206] m920x_read = error: -19 [ 1687.718393][T18206] dvb-usb: error while querying for an remote control event. [ 1687.738594][ T30] audit: type=1400 audit(2000001075.999:36023): avc: denied { setopt } for pid=28957 comm="syz.4.5943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1688.152761][T28964] wlan0 speed is unknown, defaulting to 1000 [ 1688.173486][T28964] lo speed is unknown, defaulting to 1000 [ 1688.194937][T28964] wg2 speed is unknown, defaulting to 1000 [ 1688.450488][T18206] m920x_read = error: -19 [ 1688.450874][T28908] lo speed is unknown, defaulting to 1000 [ 1688.454931][T18206] dvb-usb: error while querying for an remote control event. [ 1688.600803][T18206] m920x_read = error: -19 [ 1688.624083][T18206] dvb-usb: error while querying for an remote control event. [ 1688.760668][T18206] m920x_read = error: -19 [ 1688.765181][T18206] dvb-usb: error while querying for an remote control event. [ 1689.400758][T18206] m920x_read = error: -19 [ 1689.430310][T18206] dvb-usb: error while querying for an remote control event. [ 1689.520054][T28964] lo speed is unknown, defaulting to 1000 [ 1689.540495][T18206] m920x_read = error: -19 [ 1689.544863][T18206] dvb-usb: error while querying for an remote control event. [ 1689.700362][ T974] m920x_read = error: -19 [ 1689.707301][ T974] dvb-usb: error while querying for an remote control event. [ 1689.715727][ T30] audit: type=1400 audit(2000001077.969:36024): avc: denied { link } for pid=29040 comm="syz.6.5951" name="#65" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1689.777955][ T30] audit: type=1400 audit(2000001077.969:36025): avc: denied { rename } for pid=29040 comm="syz.6.5951" name="#66" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1689.844624][T29059] random: crng reseeded on system resumption [ 1689.854167][ T30] audit: type=1400 audit(2000001078.109:36026): avc: denied { setopt } for pid=29044 comm="syz.7.5950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1689.873816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.890414][ T974] m920x_read = error: -19 [ 1690.625165][ T30] audit: type=1400 audit(2000001078.229:36027): avc: denied { write } for pid=29060 comm="syz.6.5952" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1690.649510][T29044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1690.866368][ T974] dvb-usb: error while querying for an remote control event. [ 1690.880537][ T30] audit: type=1400 audit(2000001078.229:36028): avc: denied { open } for pid=29060 comm="syz.6.5952" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1690.905083][ T30] audit: type=1400 audit(2000001078.239:36029): avc: denied { ioctl } for pid=29060 comm="syz.6.5952" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1690.929841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1690.980526][ T43] m920x_read = error: -19 [ 1690.984926][ T43] dvb-usb: error while querying for an remote control event. [ 1691.101100][ T43] m920x_read = error: -19 [ 1691.105737][ T43] dvb-usb: error while querying for an remote control event. [ 1691.410595][ T43] m920x_read = error: -19 [ 1691.416783][ T43] dvb-usb: error while querying for an remote control event. [ 1691.558429][ T43] m920x_read = error: -19 [ 1691.562838][ T43] dvb-usb: error while querying for an remote control event. [ 1691.700832][ T43] m920x_read = error: -19 [ 1691.707102][ T43] dvb-usb: error while querying for an remote control event. [ 1691.736904][T29084] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1691.776727][T29084] cramfs: wrong magic [ 1691.959130][ T43] m920x_read = error: -19 [ 1692.123392][ T43] dvb-usb: error while querying for an remote control event. [ 1692.170623][T29092] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5957'. [ 1692.765434][T18206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1693.877154][ T30] audit: type=1400 audit(2000001081.229:36030): avc: denied { read } for pid=29086 comm="syz.0.5958" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1694.071203][T18206] m920x_read = error: -19 [ 1694.075583][T18206] dvb-usb: error while querying for an remote control event. [ 1694.595977][T18206] m920x_read = error: -19 [ 1694.635665][T18206] dvb-usb: error while querying for an remote control event. [ 1694.911414][T18206] m920x_read = error: -19 [ 1694.915777][T18206] dvb-usb: error while querying for an remote control event. [ 1695.256131][T29136] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5966'. [ 1695.280162][T29133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5965'. [ 1695.298844][ T43] m920x_read = error: -19 [ 1695.302864][ T31] INFO: task syz-executor:17176 blocked for more than 143 seconds. [ 1695.311394][ T31] Not tainted syzkaller #0 [ 1695.318490][ T43] dvb-usb: error while querying for an remote control event. [ 1695.323178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1695.327830][T29132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5964'. [ 1695.334925][ T31] task:syz-executor state:D stack:23512 pid:17176 tgid:17176 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1695.357292][ T31] Call Trace: [ 1695.390030][ T31] [ 1695.397353][ T31] __schedule+0x1190/0x5de0 [ 1695.407830][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1695.418470][ T31] ? __pfx___schedule+0x10/0x10 [ 1695.428838][ T31] ? find_held_lock+0x2b/0x80 [ 1695.439009][ T31] ? schedule+0x2d7/0x3a0 [ 1695.444843][ T31] schedule+0xe7/0x3a0 [ 1695.449057][ T31] v9fs_evict_inode+0x26f/0x300 [ 1695.454350][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1695.459851][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1695.460247][ T43] m920x_read = error: -19 [ 1695.465774][ T31] ? evict+0x3a2/0x920 [ 1695.471756][ T43] dvb-usb: error while querying for an remote control event. [ 1695.474212][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1695.487715][T29138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5964'. [ 1695.496624][ T31] evict+0x3e3/0x920 [ 1695.496656][ T31] ? __pfx_evict+0x10/0x10 [ 1695.512117][ T31] ? iput+0x519/0x880 [ 1695.519003][ T31] iput+0x521/0x880 [ 1695.523221][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 1695.528635][ T31] dentry_unlink_inode+0x29c/0x480 [ 1695.535529][ T31] __dentry_kill+0x1d0/0x600 [ 1695.540431][ T31] dput.part.0+0x4b1/0x9b0 [ 1695.549357][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 1695.555400][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1695.565403][ T31] generic_shutdown_super+0x6c/0x390 [ 1695.572156][ T31] kill_anon_super+0x3a/0x60 [ 1695.577242][ T31] v9fs_kill_super+0x3d/0xa0 [ 1695.610529][ T43] m920x_read = error: -19 [ 1695.614960][ T43] dvb-usb: error while querying for an remote control event. [ 1695.671331][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1695.676786][ T31] deactivate_super+0xde/0x100 [ 1695.686459][ T31] cleanup_mnt+0x225/0x450 [ 1695.704955][ T31] task_work_run+0x14d/0x240 [ 1695.709569][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1695.714728][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1695.720176][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1695.725491][ T31] do_syscall_64+0x3f6/0x4c0 [ 1695.730439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.736346][ T31] RIP: 0033:0x7fc53eb8ff17 [ 1695.740874][ T31] RSP: 002b:00007ffe4176ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1695.749287][ T31] RAX: 0000000000000000 RBX: 00007fc53ec11c05 RCX: 00007fc53eb8ff17 [ 1695.757353][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4176ed30 [ 1695.765675][ T31] RBP: 00007ffe4176ed30 R08: 0000000000000000 R09: 0000000000000000 [ 1695.774416][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe4176fdc0 [ 1695.782517][ T31] R13: 00007fc53ec11c05 R14: 00000000001791cf R15: 00007ffe4176fe00 [ 1695.790891][ T31] [ 1695.794733][ T31] [ 1695.794733][ T31] Showing all locks held in the system: [ 1695.812822][T18206] m920x_read = error: -19 [ 1695.817172][T18206] dvb-usb: error while querying for an remote control event. [ 1695.827207][ T31] 2 locks held by rcu_preempt/16: [ 1695.833282][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1695.843576][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1695.852591][ T31] 1 lock held by khungtaskd/31: [ 1695.857481][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1695.867451][ T31] 2 locks held by getty/5608: [ 1695.872184][ T31] #0: ffff88814d8850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1695.884565][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1695.895182][ T31] 4 locks held by kworker/u8:28/16345: [ 1695.900722][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1695.911937][ T31] #1: ffffc90003527d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1695.922625][ T31] #2: ffffffff90382ac8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1695.931745][ T31] #3: ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1695.941916][ T31] 1 lock held by syz-executor/17176: [ 1695.947186][ T31] #0: ffff88805dc1c0e0 (&type->s_umount_key#75){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1695.957762][ T31] 1 lock held by syz-executor/26724: [ 1695.963145][T18206] m920x_read = error: -19 [ 1695.964381][ T31] #0: [ 1695.967461][T18206] dvb-usb: error while querying for an remote control event. [ 1695.977614][ T31] ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1695.988209][ T31] [ 1695.993744][ T31] ============================================= [ 1695.993744][ T31] [ 1696.006012][ T31] NMI backtrace for cpu 0 [ 1696.006025][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1696.006045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1696.006055][ T31] Call Trace: [ 1696.006062][ T31] [ 1696.006069][ T31] dump_stack_lvl+0x116/0x1f0 [ 1696.006093][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1696.006117][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1696.006145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1696.006173][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1696.006199][ T31] watchdog+0xf0e/0x1260 [ 1696.006222][ T31] ? __pfx_watchdog+0x10/0x10 [ 1696.006239][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.006258][ T31] ? __kthread_parkme+0x19e/0x250 [ 1696.006284][ T31] ? __pfx_watchdog+0x10/0x10 [ 1696.006303][ T31] kthread+0x3c2/0x780 [ 1696.006322][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.006341][ T31] ? rcu_is_watching+0x12/0xc0 [ 1696.006364][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.006383][ T31] ret_from_fork+0x5d7/0x6f0 [ 1696.006400][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.006418][ T31] ret_from_fork_asm+0x1a/0x30 [ 1696.006451][ T31] [ 1696.006458][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1696.083486][T18206] m920x_read = error: -19 [ 1696.088088][ C1] NMI backtrace for cpu 1 [ 1696.088101][ C1] CPU: 1 UID: 0 PID: 18206 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1696.088118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1696.088127][ C1] Workqueue: events legacy_dvb_usb_read_remote_control [ 1696.088149][ C1] RIP: 0010:update_curr+0x2a/0x550 [ 1696.088165][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 41 55 41 54 55 48 89 fd 48 83 c7 58 53 48 89 fa 48 c1 ea 03 48 83 ec 18 80 3c 02 00 <0f> 85 36 04 00 00 48 8d bd 78 01 00 00 48 8b 5d 58 48 b8 00 00 00 [ 1696.088179][ C1] RSP: 0018:ffffc90000a08bc0 EFLAGS: 00000046 [ 1696.088189][ C1] RAX: dffffc0000000000 RBX: ffff8880b853a3c0 RCX: 0000000000000000 [ 1696.088198][ C1] RDX: 1ffff110170a7483 RSI: ffff88807c344900 RDI: ffff8880b853a418 [ 1696.088208][ C1] RBP: ffff8880b853a3c0 R08: 0000000000000000 R09: fffffbfff2156872 [ 1696.088217][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807c3449a8 [ 1696.088225][ C1] R13: ffff88802d8024c0 R14: ffff88807c344900 R15: 0000000000000000 [ 1696.088233][ C1] FS: 0000000000000000(0000) GS:ffff8881247bb000(0000) knlGS:0000000000000000 [ 1696.088247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1696.088256][ C1] CR2: 000055555d70f608 CR3: 0000000075720000 CR4: 00000000003526f0 [ 1696.088266][ C1] Call Trace: [ 1696.088271][ C1] [ 1696.088277][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 1696.088298][ C1] enqueue_entity+0x55/0x13f0 [ 1696.088314][ C1] enqueue_task_fair+0x395/0x1200 [ 1696.088330][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1696.088348][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1696.088362][ C1] enqueue_task+0x75/0x4e0 [ 1696.088380][ C1] ttwu_do_activate+0x17e/0xb00 [ 1696.088396][ C1] try_to_wake_up+0x7a1/0x1870 [ 1696.088412][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 1696.088426][ C1] ? find_held_lock+0x2b/0x80 [ 1696.088441][ C1] ? __hrtimer_run_queues+0x529/0xad0 [ 1696.088459][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1696.088472][ C1] hrtimer_wakeup+0x47/0x60 [ 1696.088486][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 1696.088503][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1696.088518][ C1] ? read_tsc+0x9/0x20 [ 1696.088542][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1696.088561][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1696.088577][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1696.088591][ C1] [ 1696.088596][ C1] [ 1696.088601][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1696.088616][ C1] RIP: 0010:vprintk_emit+0x567/0x6d0 [ 1696.088632][ C1] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 24 be 20 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 82 b9 20 00 48 85 ed 0f 85 25 01 00 00 04 be 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 1696.088645][ C1] RSP: 0018:ffffc9000bd3f9e8 EFLAGS: 00000293 [ 1696.088655][ C1] RAX: 0000000000000000 RBX: 0000000000000017 RCX: ffffffff819acefc [ 1696.088663][ C1] RDX: ffff88802d802440 RSI: ffffffff819acf06 RDI: 0000000000000007 [ 1696.088672][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1696.088680][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920017a7f3f [ 1696.088688][ C1] R13: 0000000000000200 R14: ffff8880212f2440 R15: ffffc9000bd3fab0 [ 1696.088699][ C1] ? vprintk_emit+0x67c/0x6d0 [ 1696.088714][ C1] ? vprintk_emit+0x686/0x6d0 [ 1696.088731][ C1] ? vprintk_emit+0x686/0x6d0 [ 1696.088747][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1696.088762][ C1] ? kfree+0x2b4/0x4d0 [ 1696.088780][ C1] ? __asan_memset+0x23/0x50 [ 1696.088799][ C1] ? usb_control_msg+0x39d/0x4a0 [ 1696.088815][ C1] _printk+0xc7/0x100 [ 1696.088826][ C1] ? __pfx__printk+0x10/0x10 [ 1696.088841][ C1] ? m920x_rc_query+0xea/0x770 [ 1696.088856][ C1] m920x_rc_query+0x496/0x770 [ 1696.088871][ C1] legacy_dvb_usb_read_remote_control+0x109/0x4f0 [ 1696.088888][ C1] ? __pfx_legacy_dvb_usb_read_remote_control+0x10/0x10 [ 1696.088905][ C1] ? rcu_is_watching+0x12/0xc0 [ 1696.088923][ C1] process_one_work+0x9cf/0x1b70 [ 1696.088941][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1696.088958][ C1] ? assign_work+0x1a0/0x250 [ 1696.088972][ C1] worker_thread+0x6c8/0xf10 [ 1696.088989][ C1] ? __kthread_parkme+0x19e/0x250 [ 1696.089008][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1696.089029][ C1] kthread+0x3c2/0x780 [ 1696.089042][ C1] ? __pfx_kthread+0x10/0x10 [ 1696.089055][ C1] ? rcu_is_watching+0x12/0xc0 [ 1696.089071][ C1] ? __pfx_kthread+0x10/0x10 [ 1696.089084][ C1] ret_from_fork+0x5d7/0x6f0 [ 1696.089096][ C1] ? __pfx_kthread+0x10/0x10 [ 1696.089109][ C1] ret_from_fork_asm+0x1a/0x30 [ 1696.089130][ C1] [ 1696.090617][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1696.090631][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1696.090650][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1696.090660][ T31] Call Trace: [ 1696.090666][ T31] [ 1696.090673][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1696.090693][ T31] vpanic+0x6e8/0x7a0 [ 1696.090718][ T31] ? __pfx_vpanic+0x10/0x10 [ 1696.090743][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1696.090766][ T31] panic+0xca/0xd0 [ 1696.090796][ T31] ? __pfx_panic+0x10/0x10 [ 1696.090819][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1696.090843][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1696.090867][ T31] ? watchdog+0xd78/0x1260 [ 1696.090884][ T31] ? watchdog+0xd6b/0x1260 [ 1696.090902][ T31] watchdog+0xd89/0x1260 [ 1696.090923][ T31] ? __pfx_watchdog+0x10/0x10 [ 1696.090939][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.090957][ T31] ? __kthread_parkme+0x19e/0x250 [ 1696.090981][ T31] ? __pfx_watchdog+0x10/0x10 [ 1696.090997][ T31] kthread+0x3c2/0x780 [ 1696.091014][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.091031][ T31] ? rcu_is_watching+0x12/0xc0 [ 1696.091050][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.091066][ T31] ret_from_fork+0x5d7/0x6f0 [ 1696.091080][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.091097][ T31] ret_from_fork_asm+0x1a/0x30 [ 1696.091125][ T31] [ 1696.093386][ T31] Kernel Offset: disabled