last executing test programs: 8m52.722831804s ago: executing program 32 (id=786): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x400, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 7m56.475267925s ago: executing program 33 (id=1026): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000387000/0x4000)=nil) accept$unix(r0, 0x0, 0x0) close(0x3) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x428, 0xd0, 0x0, 0x148, 0x0, 0x148, 0x390, 0x240, 0x240, 0x390, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xffffffff, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x11}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8, 0x10, [0x22, 0x2b, 0x1c, 0x3f, 0x1, 0x2a, 0x39, 0x8, 0xc, 0x23, 0x2e, 0x12, 0x6a, 0x13, 0x36, 0x6], 0x2, 0x10, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.84672218s ago: executing program 2 (id=2022): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) 2m32.267395923s ago: executing program 2 (id=2023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000100)="458047cfadf7018505d4a7447878d0ce4d16e494dbb92c8928c7cf730a4964774b6391c08076000000080000000000000000", 0x32}], 0x2) 2m29.310449721s ago: executing program 2 (id=2034): syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x109b, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x3c, 0x27, 0x12, 0xff, 0xe66, 0x25, 0xf694, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1089, 0x3, 0xaf, 0x4, 0x90, 0x8, [{{0x9, 0x4, 0x3c, 0x8, 0xe, 0xff, 0xff, 0xff, 0xfb, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x7, 0xd, "097c4b33f2b3"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x9, 0x10, "22b4"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xf78, 0x239, 0xe, "87a6884d5756d7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x6, 0x2, "f6d49fc22294c16e0b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc, 0x8001, 0x4, "c4780bc80680fd14"}]}, @generic={0x99, 0x6, "5ad8602eab5a0baa34139c31c90b9fb0a810f989ff0ebab2076ee463edb60e68bfe3c5e4cd5775d444e6d20287224d1e1f4224c8ec9533c8f18b9907a145dc57a7653aff385af6b3debf13680f46e3f537b97f09743f82b7c6fcda6eb975abab2f3ef02e25f920fdfd4563f1ebca15ca2a92e16b8d3b57d0e53330647a4dad3faf5eb4b292baf96cd65c1aed7380b5ae245087092ef7bc"}], [{{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x3, 0xc5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x7f, 0x1, 0x5, [@generic={0x101, 0x7, "0f0e5ec92612d073b21b99ff9f8c3533eacd24374dcf91e705c7c1c9ac97d754c8ccc0a6d40242bfcfc61fd84443800afc41a666033834dab49350322a5ec55a1ef93cf2c4c566540967a515902db65b5a98c77717551ba54e57c9959086853519875b3a890fc316f7d247f0854364184eb940db7c2e29a47bdbf565cbf4a4fc142b44e3c46155aa05739a3d4a9316d39a7f53594fb10ef80d52ad0848db8f57e7ee731e580c02e806229072bf6887acdf59f0433c19c8840be80e3185729884d2ccb8b49275343956521943a3b746330d01fe591af127d22a10bf3af2db398e052e7c9c9b1696bb867c6730b746a6a7580d9c16bcd39149c6e4e0fa17b745"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0xa, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x11, 0xea47}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x1, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd4, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x6, 0xf, 0x3, [@generic={0xaa, 0x11, "3ab0ebd65b028e8a0de8328b9742b7c0379507edf3d574f0e8e6656bf62e613b94d28e53aea276352afdc6bb50fdcdc90feb1cbbf4efdb64f5ede49e2f30b76fb2150da138830a92686501fbf141964c6dd2ba6685ffffe2edd29b2a6cd3d0875dbdd6f72a9ab9e06ac0ba12b0bc2e6c193886e401445383807231c7e5be0556334b184fafd59c27b31b64c0dcfc8b5beb170613363ca7d75a84bfe2a92a56ee07b788f3139dd201"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x4, 0x3, 0x1, [@generic={0xe6, 0x1e, "f1f15aaa857a69d49d7cec21b0dcd822e2944360b71abaceeefa6bc44a5dee975ba054e06d78812eb703b9e5b6132a3a78ee368688786f417c5768d2deebbfe3e4aeb097d2e977897286b5d5184398eff41565e6af506d124b501ea577ad9b135f97b0a7bb9c964a8e1cb5825c8420551246091e08ac3318ac302e118aa43de0cb49434485449e8f011fbd32e7846875ec02673099347843837a70e643314e20be0e7bb3f8210614b74c3ce94a501c9d9e39a5c8300d6c08677c4cb390169e9cc3eca14f22bb8ed88a00da358d886e3e848a5cbf78a2490aa47e30cdae2ab0e5b928f2c6"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x81, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x4, 0xda8b}, @generic={0xe, 0xf, "062fe0c5b2ba5a7992862139"}]}}, {{0x9, 0x5, 0xe, 0xb5770f08c83f4bb8, 0x3ff, 0x9, 0x5, 0xb, [@generic={0x26, 0x6, "1b59ac83ea242e5aeb64473c3c64f0ae3d341e4d6a6a8d6072d9393484ec3e6dbe8f0e66"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x81, 0x55, 0xf9, [@generic={0xd2, 0x10, "164bd4670c108d799e9ab615ab9b381fecffc99eb8d71fcd7f0ab523b77f1a214d480848eef43d846c499114ccb6de74058d8a8422db7f72085c86538f16444df1d3bbbe662f4eda6553293e8cc5a83bb5c2814ce90d4f8dff6bceb0d9b86eb68d7b1e57c3a55a4cd6fbcc50f503f0c1d3b659efd7344ca80c112cff2eefe699036e4124837cb0fb4b5d0b8d2fff8aee9bb9b7fe3b6a0ad99c76de53b538b9f8ba478d08b57f4ccfa2271ee44709e9087a5d5fc24610ef2ec4ff56f633dea8a9f968ab5902e801c7b9a6ac051af57178"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x2, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x40}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0xd7, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0x81, 0x1, [@generic={0x6a, 0xc, "96609546f442f5ef46d820e8acfaf1dd21275c8964b948ec1a048d964730b60c4e9d165b9982218e81e00ad4905c3f6ea58e92874c74a01b3bf06e2f0a5e83b15822ec77645e1825d05315782b42c28ce88fbac5e06a49ff0bf6fc265a7eec17343a79abb1ef98aa"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x7f}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xf, 0xb, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xac0}]}}]}}, {{0x9, 0x4, 0x4, 0x9, 0xb, 0xbe, 0xd3, 0x9f, 0x46, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "d0f2ec1ea0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0xb}, [@obex={0x5, 0x24, 0x15, 0x7af}, @mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x3, 0x6e, [@generic={0x14, 0x2, "ff9e626acc3a0e88af190603e65402659cf5"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x1, 0xb1, 0x1, [@generic={0xbf, 0x9, "baa280a755e8e3852f7d9c72c24e04d018b4bfc42931f1b31b4c0caca7c9a47865b9901f6dc8d49b77d798f9412785b14f9ef3b68be8fa47b3ca6ae9a46d73604b62289bfa10565260b0fb6415c6693c6479abf88eb9437a3a6fdbf91846884e9a28b51f777453650676263f6f47a7e1843717d65ce9eaf9d3df58ef742a2574447de8f5d19cede3fc5f470a0077067e01a53fb9838b935019073a58bf12056802286bdaf12de11dc7c85640d3eb9dff604f3f8016acd643d864fde743"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x8, 0x100}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x9, 0x1, 0x34, [@generic={0xf3, 0x1, "71dca3f4158f5bb3c605e91eb9956256b622cc2c7c8412c9abf902d236b4a385f9e1c9ffbd01442f0fa5a811fe33cebf843b68c1adc8e3ba13a8701713d1c5ebc013dc36b11e117a9a2a7be1b6427377b50c9334b4e9b0647086a6e114b32f4acffd129f930ef707e9ae8095ccbd42a7a0a04d13365d6c29c62dbe4a20e886bc2c74111c930d225bdcca61268af34fe77caac4c97fd5cbc1085011d5d12d3eb694f558fbb1147a946e3acb70f8a70693248369261835b4aa441d5ae63981511861d28fc2d86e324a658e0eca1c0427c8ac3833e18ab73691b661c7f50d1fca3a67727a09f848f75e9c332a09616d4daa9a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7e0}]}}, {{0x9, 0x5, 0x8, 0x4, 0x450, 0x9, 0xfe, 0x3, [@generic={0x42, 0x23, "fabb0002e58e7fbeddb8e9bc2234030c0a5dbb92d3ab7bbd17b272ed969b4615ae6eed482b0c6a78acd0e284911745f0bd11787db7f8e7e6c4feb2ea81cd935f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x32}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x4, 0xbd, 0x1, [@generic={0x4, 0x30, "e7f0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x2, 0xc, 0x7, [@generic={0x28, 0x10, "ef16fe0f9ecc0c412c6e6bde9689a6464f13b3fbbfabc3a54259da0df617c548d2ddb5aa2643"}, @generic={0x13, 0x22, "b899df36211e383d67480ba63f8c34a0dc"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x4, 0x6, 0x1, [@generic={0x9f, 0x1a, "8dfe97d1ae7ed47d35103abe286f362dfe265c745a25eaa3a32e7bc9971e51b8b2b34c8d60ff2d538f29e483cc08806766797db28241598b221ba796c0ac88843003b7f362e46b012b30f38cdd547bf2de2fc430d875ed6bcb60550ff82176e5fae7091aea0560a1a38fc26b998405beb02bb26b8a938125222cc8750f64a026044ac16d6e3c4431ed7c02948939ba1c6ab5e4f2c51882855e11892bfb"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x4, 0x2, 0x9, [@generic={0xf5, 0x11, "d60810c337d0032d100076bc6eaf1084e37548c69bc23c65c095f38a5253e7844a42047461f22c71e6f40088ca28b3fee1d9ef557354e07356b21bd3c3a1f2451867732708a0539b60392ed57b617dccc8b35573bc5bd96ff0688d844aed9eedebf05a7e5af731cacce459a7429f3270cbb902838af6b5a7a028af4766dfd0a006d4be3baf31371c78cf166396c3911604eee06fdd1f069f05383a51477027266d9c4776a3c60c88b2e00ec4fc404d83507393d9fc6e9677e7934dd4e3163cfda696f0b11d75154eb9818f08d5ce67e492d7c5201b43f36309e54b34b49f4d89b9109b0af8b4391f11ef34dee0d8da308cb329"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x7, 0x1c, 0x8, [@generic={0xaf, 0x23, "6002ca3df2352cf735074a88871f3f68274f9f1f1a585d2c9dafe95cddaf4505bd4a7adf988d029f36aeb239814c34aade7912ac57b1982b8a7ad28ec79c2403964b5f7821a009e585533e91b1f6045e0d874beaec7f35ef78023d68b64136c86c6569482629d80351d91e159cc08fedb29c3cb03ff763c17e9d254dc910a29b8d69b0b72da9a6e34ef9ff369c00f4d92ac225a0cc1719dd637ea277234872f27700376a601750b45d5298e749"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x3c, 0x1, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}]}}, {{0x9, 0x4, 0x94, 0x0, 0xc, 0xa4, 0xd0, 0x4f, 0xfb, [@uac_control={{0xa, 0x24, 0x1, 0x68, 0x2}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x6, 0x5, [0x9, 0xa, 0x2, 0x6, 0x2]}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0xb}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x5, 0x1, [0x9], 0x9}]}, @generic={0xe0, 0xe, "a43dc44251606c8916a7486b9acc58359411d4ec4615bec5b839208aea8ed1624e4f137df9ad048476355ef7a42a93790680c4ae1345745786c8b9a8460b264a58ce4fba99b05700c700f4e43b8d6ed2e58e2bfb6d4dd90d48ab6fca83b1642fa065c48b4da0783edf48ad0ea5c9c593de3cc1c6f917211c84474b93a62b9643beb8a215450270fa05078da4ae8b220b3660756dacf9ddd979244492fc1763f3c180f26c9aeaf0879daf3c858717a565eafc065d3ec6ab938fe56790ef01f9572796d181203c67594c5cbbc85ce000519b808e35f849a0eee5d186c75e19"}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0xb, 0x81, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x54, 0x3}]}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0xe1, 0xa2, 0x3, [@generic={0x20, 0xa, "31103836d6a4c9d8a28f72a43d25008f350f49674c10aa499f49f445d705"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x3, 0xe, 0x4, [@generic={0x90, 0x11, "2a46d82e2978467c0e8acf90a273358d75c36acff46f47395f7f44237be469b756e6323448848edef0fc6174521edb27b79ac8722ebe07499ec328da66c5883c87696231d3dcf8560dcb56272ce82855ade2450f9a1dea2734a3259edf571c48f665dd51ee294b0b9c930717bf5ab93182600c0cbc87993c37ebf27c103cb32d2b4b977b5ad96a0796a09e9e816e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x7f, 0x2, 0x9, [@generic={0x6e, 0x2, "168f48180041426ccf37539bd593481c8e37f403c4426e7c6fec144e928271a4bfec4c11433d5ccbdad137d47b7b25082d044acad48ad7c6a825540f35774ff450b824c01f5fcb191f06b0b8a49fbb98a336d120f8b65c4037a3f990eb7ada9ed8f6296c2bb79bf8a275319f"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x3, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x14, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x6d}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x6, 0x57, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x8}, @generic={0x77, 0x1, "37028ba591ebac419cb8492f26faf2e3b0cf0ee469fb0762d8532d68cc37b07c7b73b25693bd1fa748495342ea3e5e4da49f10a0185e4423889c3206518eec157958a4b388496cfcb182f7f4da112c733a608b708fe783695ff5be360980a38c2022977d29c75399a317c1f32aa124b1b043a1cecc"}]}}, {{0x9, 0x5, 0xc, 0x16, 0x20, 0x3, 0x81, 0x1, [@generic={0x6d, 0x9, "dc1584adcb0192e55ab802d57d577828d52990d5941ad4596c75b58fd0f8c1fc686f82fcc917a06f15169ee97d7c56cdf4278b8bdde218b138bb395ea3eb8eed54144a0e2be4969eb09986cdc00da2febb9ecdd96357aadd981c3de8604148f8359b57a45851e4091ed525"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0xf9, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3}, @generic={0x6f, 0x21, "2007854c8a45060537f6e189caa8a371d12af03897485a0b9dc8c01b57169a426c36cf08902c0f85ad12c8719d8fb31209596936aa557780e2d3839014f8ec35c900ccab0e3e7eb1d69ad920f272925cac9e3b48c1a1a1edba105f10b4966c3e9bb5f613b97e3db67c6d8332af"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x6, 0xe, 0x40, [@generic={0x32, 0x5, "8ee97a1a6b8003e76d1db2af673edb5847c0ad6a76ca6620770dcf62375d133cec1efc5a37f959519eb7a5fc49dc6593"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0xb, 0x4, 0xc4, [@generic={0x2a, 0x3, "80ccb514efbae306530640f362f753997710d4d9e72018e56f8bbc0d7a61a33d95b96c00f81ba6b1"}, @generic={0x1f, 0xa, "66001591bc194334cdaeaa5761147f195bd3164de4fbb668823da71157"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x80, 0xa9, [@generic={0xdd, 0x21, "1aa428234078a6a605ef9597e8b7bbc94caec1f0a4ebd01d58677cee3b29cb80d2c334c0476f65326af895c1f4b76ecc6e796b08afc0d979e34db9af85e8667df491750c53c5c7534776f40bd9ce02814bc5ce8e5149dcfd6e413fe875380844ad37fa8dcc09ada0fc2ffad5bfa0ee1652ae7535b393f9bc057f99854e7f3ecb87e4235ff187d620eeb34888eb9892aa3dd061b9e206f53e10463bea8d2eb9ff50981a155bf60b130840cfb3867313ecd347950d1404111881ea0dd4b41f5a49d17470c48e20d9a294208fa2eca468e9eb9e5844e74fdc33065595"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x2, 0x94, 0xb4, 0x8, 0x1}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xea, 0xc, 0xcd6f}]}, 0x8, [{0x15, &(0x7f0000001440)=@string={0x15, 0x3, "a67f19c9d6363077eacb274aab30e77532f388"}}, {0xe4, &(0x7f0000001480)=@string={0xe4, 0x3, "c3a660053f69578ba34ba854a9b558a9deb9aa35e4f184ea2520cf072d8a5b3ff90321825e19b7fd7539275f50646ed52e07619c80c978db552ba1c91e3ddcacc13b9d3b26bfdd7cb0903f7c1d3890ae1ceae68e622bb2957f418bba01a2ee7fcb46501316c5b2eb07c19497224f131b8d52b6967d725c796e4a3cd0a4633ad175b2cddb1586885f7f71262ca9d513f19a3f3de0f9c0773f6400344cbec3631002e064a8f601a9006c2e706c4ef5ef4d07a713b5948df2c0622d8530374399d541ea7998be50311851a70c21f8fe9ae72e7ab60b493c96910344a03d822127c72449"}}, {0x8d, &(0x7f0000001580)=@string={0x8d, 0x3, "5a3de25fb8b8259165a43f8aa67984cd9542370228264b8a0bc865d1f89fd4f38a0b1593f9c7069d653d34b1e67aa9688d98044af2ae443e4c40619982f6e4a6e229d6f63d276fa9799769c583f34593dafe6cda6c9157e525638d9cd4cf15ecd1279c2fa48416d8ec629527b991cc9bcb314277e486f21143697c1f6c325431b904de5b3ff9fc418b63b8"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1c01}}, {0xb2, &(0x7f00000016c0)=@string={0xb2, 0x3, "d3bc7c680944f2a7100d6706424f3ee98850b37d54bf39e67ae7569214e0f25dff892dea7ab05a795a465a3e4592faadf03ebcdfb540111604f6784178ac1da875c01a93e7fc2a9b07c47446071b45184df49c334b0d2e15c0382a4aa14287a0868c9664a2aaa1807ee0df77a79318c264ee368698afd571e2fcb6ff9b07f8650a748e1f1fda88167f939a8bc068bfb77629a1bb338407497bafb44e5050969ffeedd6497c0cce73845c0d0591a0689d"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x100a}}, {0xa7, &(0x7f00000017c0)=@string={0xa7, 0x3, "a7e2b8cd1333d3060ddc52a567f683aba5ecf335688e169d4e59c31e7b45d3475a8fb84aaa0ca1b009f62cf8fa23276f7cebcc8d3c4bbb212327555023d91bdf25ad636c8357818567d956ea17020ec7b81b13b1f536f252da1e18e9d2bdcefd3cae31257f2ceaaac4edeea3149cb6960a26d2af4c71a079e970bb4da663f0f89cd11540e7817a79378ed0f67af3fc1dc68b1063c8c03936c777b0115a59a40a520144ea6b"}}]}) syz_usb_disconnect(r0) syz_usb_connect$printer(0xc, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x1, 0xf}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf, 0x3, 0xbc}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x140, 0x4, 0x81, 0xfe, 0x20, 0xcc}, 0x32, &(0x7f0000000080)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0xf3, 0xe288}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x3d, 0xf000, 0x7ff, [0xff0f, 0xff0000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x8, 0x4, 0x5, 0x57}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2001}}, {0x9c, &(0x7f0000000140)=@string={0x9c, 0x3, "46c3096c4e9823115b13167a5b7bc7e9e0f3a21a362554186e464f93d3296f8009547384576ef45f7729a737149ab282a67b38e1595331addc04297a28ad256bcf3ca8b6f15f16760ef66df080c481d313080a693d3b56a3af2ac0e8dc5ccb308eef40a8dd7121203b50b5cd631813348776fc812316ffc1d108efa6edb4de1af6117ff851e4ec54b59e6835ad072e364b5ec8000870ed71edc2"}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socket$inet(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) dup(r7) 2m26.13665059s ago: executing program 2 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffe, 0x0, 0x318, 0x1, 0x24}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$radio(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0x0, 0x1, 0x4ee4}) 2m25.992950457s ago: executing program 2 (id=2045): openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x240400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3f, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$inet(r3, 0x0, 0x44010) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffcf}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x7f00) socket$inet6_sctp(0xa, 0x1, 0x84) 2m24.591826346s ago: executing program 2 (id=2047): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @generic={0x30f, 0x8863, 0x6, 0x7, 0x8, @multicast, "b7540fe690baa9", @multicast, "dc"}}}}, 0x0) fanotify_init(0xf00, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 2m20.442573427s ago: executing program 1 (id=2062): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) statx(0xffffffffffffffff, 0x0, 0x100, 0x400, &(0x7f0000000140)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20048044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2000c000) close(0x3) 2m20.094412715s ago: executing program 1 (id=2063): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000100)={0x3, 0x2, 0xffff8001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) gettid() sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="c5d2dc3df405df68c9deaa5aa2", 0xd}, {&(0x7f0000000540)="f56c1003c0a0f4d6eff2713b46698e120a4a3300d2c0e67726a5f82f9e7a1c79f6d5e9d61aa39feca0a7e9ec2ab31f093ccf36a2e4fbf80d4cfde4a0182a27743ea387cc2ec69cabbcb7d13edcea76b3dc53efa8af1dee135dead20d8277871c611d81b34f6e5029849aed6e97110c1cd3a6ece7c3fa3dcf6785c01e737fa6343ec99069d25a2eb3e9ee709be9860b5e6c", 0x91}, {&(0x7f0000000600)="4d66b05d07e530467b7e662652f34913024a1177a80c2ed2b610b185478a", 0x1e}, {&(0x7f0000000640)="fa94c4361456a7a8e2bb1fc83f9b7ecc997163d7963a368a01ca099ef6abd8e8d4065f8f51b2ba0b1729c04943fa151b066b3189f2b9743759c2ea6a37bff44010fa13603c25af1a50155d687680b108f55c543d2b0e836e67fa98fa5e323af5ebbd2ae43db6366bb10d32e5e4aaa949f27739b4e764d4ed875e4b20ef0b8fa1f2944e76d8ba7525f32a1002aad7fae3eea2e225bdf6cd5a78e5fba060ee48de4e61d14ef1d620855bb94c8922b6a70ab65582c97c250d2aa2764e00d30951c27ef1516a47a500aaa9527602dd98f8f32c9447b0fc46d9673d96dccf", 0xdc}, {&(0x7f0000000740)}], 0x5}}, {{&(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="1f3ed08a1ea06780855ce67e8b6369c88c2308f2d57f31262871c02ba9c9fb94cedfaf28091957186f7871c395f2aae06a5f39b44d31d56c0c7dc6fe2c14b95ae24e3a97e32b307ba32bea0c3fe18fa15d411b9aa37cb15df12dbe55573d48a7e3d9c47a563ed927ef9ae679978ef42ba91154fced13dcce", 0x78}], 0x1, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x18}}, {{&(0x7f0000000940)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000980)="9319a25f51eb69f6d3d7ad731f442e7d4800efe3dfe7cbffc3576cc0d017999a4809db68b064afe8d32451c3bf2d1d8a146dc396bc228968f12d7c27c1abc487471c6c23e9aa23f4616b91f95334d0b4c9b38e46397f7df3eb3ae045949c5e048eb2d58057c2004f864cc7d87eb2f3adfa03b429ae75010ee38b7c29a297a018ef9ce6796732dbd1baf210bdf6606c913e42fc18ac136dc43864356570467c99fe4cae41012d684dd993534daa5036b8e0cb7870c01c797b69b8e9336bdd5eaa97a1f61f341f422ca018054e496d598c62e339b7573c3337dd6b1aed1a22fe2194", 0xe1}, {&(0x7f0000000a80)="81f76328668e81a88e327715a6d8d034020c3961e1791abf1016a76154a356b5998a4062e1fd9c72c30fc528a47e83da1f462b79f0e737ea98ce5e7e92a669666491f0c15b179498ce53860094e103399bea5a9aa5fd088e7af699ce984653a741656c7cdf2ae2638c96994be6933c5b2f784c1689b0e16ab3c959c3dfdab6391e33636c96cd609e3b62f7d7ea8952356e9fa14eb1589ab9ae9f374e66468cd6e0557fb8646655f94eafc2438e3d9cba83b8f459c30b5d5863f60a16e3b545d9b1a5069a58801431ab4aadba2fda1ca4138b170958fb40c863", 0xd9}, {&(0x7f0000000b80)="8fb58a45c2b111f29aa88874510c44df2ff38774aa97890ab8c321f723c99e80b5d4a364602137c806bc1b42f7347917900db87c6f74a24393c5c835f6bf07e422239ecf6016c694432fb4b2a23b4622047f8e63f57b19e2bf221936153fc0231ad13cd8315d8ed25dcaabb240d7a7856e2d8ce2fdf3861b6b6d6b9085e22f5432d238378a27", 0x86}, {&(0x7f0000000c40)="135a642ac3217cdb0ae5c8cd9ddb388f5f347df15b782d6489f28e46986f1fed372300afe246", 0x26}, {&(0x7f0000000c80)="bd9520ea3226c3038e30b6d4fc40e0c5f2039a1d887473021b5ae6cc2a4bbc2add48f969bd70e5e18d17a413370a5ffa618664a7ad56c45504b18c33abd3ca72fb7e592e99f2d439c5a9ce0a4e3c6c055a736714db9e551fd3bf7a571bce8943de38bac4c0f57e17d12a0cf224337b166cefa6856944fdc9811757905adcc3b2ed5078cee5702c3b218c8873cd77633f4ebaa9d7c17bd6e71273862c77e7b09b945febda91304c2d62208f01e5ddc3fa9ec28338a7bafac47162a36fcc23065388941564946b3e77b8c5d53ff93c", 0xce}], 0x5, &(0x7f0000000e00)=[@ip_retopts={{0x48, 0x0, 0x7, {[@cipso={0x86, 0x17, 0x2, [{0x7, 0x11, "063a44c488a6ed41d26a7ad125761f"}]}, @end, @cipso={0x86, 0xf, 0x0, [{0x6, 0x9, "1cabe86312d472"}]}, @generic={0x44, 0xb, "61d9492d35212611ab"}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x32, 0x3, [{0x0, 0xd, "4419ae3d5e1d9d9c5690fe"}, {0x4, 0xa, "bc9b30bf34d7010b"}, {0x6, 0xf, "1308638cf6f0d8825eb1a58114"}, {0x1, 0x6, "5bd31020"}]}, @rr={0x7, 0x23, 0x79, [@multicast2, @local, @local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast]}, @lsrr={0x83, 0x1f, 0xdc, [@multicast1, @remote, @empty, @private=0xa010102, @local, @local, @empty]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff168f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x178}}], 0x3, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000080), 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x24, 0x0, "698e86252c563a2eb894ac1de863c518984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) socket$inet6_sctp(0xa, 0x1, 0x84) 2m19.65815732s ago: executing program 1 (id=2066): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) socket$inet(0x2, 0x5, 0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x4, 'syz0\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000080)=0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@fragment={0x2c, 0x0, 0x6, 0x1, 0x0, 0x16, 0x66}, 0x8) sysinfo(&(0x7f00000015c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}}, 0x0) 2m18.255007788s ago: executing program 1 (id=2069): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f00000006c0)="3b000000010006", 0x7) 2m18.233849742s ago: executing program 1 (id=2070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000240), 0xc3b8, 0x4f4646881e3e2614) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = gettid() r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r5, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000001e80)="d7a893db4fbf210fc82929f23f2a1b403134b46d70b96a74bf7ddf6f8f60e61db2616165509089b9a4abbfdf3a0b3fdcb9e36596f98b8525481fa9a09a5c5e628ec3c2acb3d88b6047668f294648b90c0813f00d775e0d387ebc6a7e86019df3e91b1969ba8f03d46c4fb48e4a46ab1dc3bebb165455f257c882cf53b8c2a336d3dab2f5f8fefacb58ba601e5ad9f3114b4fb7c4110020952e0be2bc045329a17a38809ff3c97e23483ef2ad993bab2d2435228d65f6857e19c6ac9ee705f1b4e078d062678b8875b93fe1e4d32c6411d0bec49abfb8fb70a27cc1c6dddab6fccca1d8fe32813974bcd6383503a2597e58ea2cf0332493024f1309abe727e00ab115d6783bec84fbb0db7a3c1b183cafcbec5029fb69b5b3cc1024125aefd288c5c04ba8ae9e9be522976acf9bd98cb543912926377c2a3a24170100575f534797b63878ea593c2f639db345c64545de66afb512c263264f94c5439c8afcf509e85d25958b4e3c56c807f5d9e13c47e0ae13c72f6d388d44586a1883c668bd699e", 0x181}], 0x2}}], 0x1, 0x20040) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400000076006331000000031f00000004000080", @ANYRESHEX=r3, @ANYRES8=r4, @ANYRES64=r6], 0x14}], 0x1}, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x200001) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)={0x1204, 0x14, 0x200, 0x70bd25, 0x25dfdbfd, {0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "5ee3b2873eaf5250eec27c3fb052db84911bf461077022108e5bc5c350d44ee635aa32d12010ebdc6c166828ccc4e2671de7027d2454a8cc6e40496f971051512126a1c3049ff8c3d86be4e2e67bfb5ff1f86fcc67c2d08d95b29ab51d4fbf8ce064a5fe6e30ac7c826be182119fbefeecc7b4c327f00eec69a29cea06fe2abafaf0c86135b3a1f4112cccee63b3f762dad2a6a21ac3270cd79775f8"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "860ca124fb45cbf6f49aff9c09c5e0a1fc6eaea7336aefdbc5e39858a4bf26204435a54873ec6f77ab859208c18e8b4ab66b9c7f6d915a3bfd1079acff3f637b652a14ac986dd1c4eb44695ca168722897fe3dfe9c5c01a11025b23633dbc6d15207eb92cf98"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "af84189d"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "61bc19839e6460a5d604c703f362b9980a224b6fafdfeda85b6b1655dedf647a038ed92dd722c88d5d06e141008eb50ccf54d453946098a6e00027f3e7d25ec7ab29e2d1b906cd10509fec085a4bb2c590b36b5c4e24d1cca26811d1d22d1d36641ef30c7a74132a484d2bc0b7"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "fec2ed664641c56b8e8a498f607b302bacae590d42a3fc4af5043ac96bc0c5e9ac59b1c8ab19a0901895f698a527b40e5b96761e897dd66d97daabb5c7a77ba3f66ca950192baf026da2e612021dcb8588976f97c1f821ac1d76e118d455"}]}, 0x1204}, 0x1, 0x0, 0x0, 0x4008080}, 0x5db5f9159a81c640) 2m17.309029491s ago: executing program 1 (id=2072): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xf7, &(0x7f00000002c0)={@multicast, @random="8a0a63cdec59", @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "8564", "52b677", 0x19, "c77196a800bdd367513152bb10e5d44d845bcf5695a27c9abb17e3d65b238a28495544a7955853981de681fee230ad701f02b0d83da4440bd9d741f64639ca60c1298ebec1a361be857695364a85c03cd339dc24ecbfcb2aa551a95c1a7da5a9460ab964a8a0f261c5d5328d8d124de0e09e2338a6955ac4f2da32668814d88e91c206efcc31593c463353a4f58333d38cfbb5748fe212e9e52fee768ed577bcda8b29e9dd31c79d4439a056b815277937e608f4b7de0a4b976692a0e12ca43f4308f35197908617c118060a3ab13be49b5ff5bd47ce5ed3be430fb9f06f5b21"}}}}}, 0x0) fanotify_init(0xf00, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 2m11.936835248s ago: executing program 34 (id=2042): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) 2m9.909413885s ago: executing program 35 (id=2047): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @generic={0x30f, 0x8863, 0x6, 0x7, 0x8, @multicast, "b7540fe690baa9", @multicast, "dc"}}}}, 0x0) fanotify_init(0xf00, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 2m5.953165701s ago: executing program 7 (id=2088): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005"], 0x74}}, 0x0) 2m5.5684554s ago: executing program 7 (id=2101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) inotify_init1(0x80800) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2m5.062783113s ago: executing program 8 (id=2091): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f00000006c0)="3b000000010006", 0x7) 2m4.966998879s ago: executing program 8 (id=2104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) r2 = io_uring_setup(0x4494, &(0x7f0000000340)={0x0, 0x12c0, 0x4806b00081b0201f, 0x3, 0x257}) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x123e, 0x400, 0x0, 0x2cf, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000180)='\x00V', 0x2, 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd_index=0x4, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000080000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="8842237f4267747748f00eda52a8cdfe653a25e2b46ea774746d5990d2eac2fa3487a27b1e30d03e29324f35d95954ea515a"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m4.687999085s ago: executing program 7 (id=2105): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) 2m3.900298061s ago: executing program 8 (id=2107): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) ioprio_set$pid(0x1, 0x0, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) lseek(0xffffffffffffffff, 0x3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) semctl$SETVAL(0x0, 0x7, 0x10, &(0x7f0000000280)=0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000002000000020000", 0x1c) 2m3.147291008s ago: executing program 8 (id=2109): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x400, &(0x7f0000000140)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20048044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2000c000) close(0x3) 2m2.926284274s ago: executing program 36 (id=2072): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xf7, &(0x7f00000002c0)={@multicast, @random="8a0a63cdec59", @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "8564", "52b677", 0x19, "c77196a800bdd367513152bb10e5d44d845bcf5695a27c9abb17e3d65b238a28495544a7955853981de681fee230ad701f02b0d83da4440bd9d741f64639ca60c1298ebec1a361be857695364a85c03cd339dc24ecbfcb2aa551a95c1a7da5a9460ab964a8a0f261c5d5328d8d124de0e09e2338a6955ac4f2da32668814d88e91c206efcc31593c463353a4f58333d38cfbb5748fe212e9e52fee768ed577bcda8b29e9dd31c79d4439a056b815277937e608f4b7de0a4b976692a0e12ca43f4308f35197908617c118060a3ab13be49b5ff5bd47ce5ed3be430fb9f06f5b21"}}}}}, 0x0) fanotify_init(0xf00, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 2m1.692058109s ago: executing program 8 (id=2114): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 2m1.614072502s ago: executing program 8 (id=2115): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x29, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @generic={0x30f, 0x8863, 0x6, 0x7, 0x8, @multicast, "b7540fe690baa9", @multicast}}}}, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 1m50.412601426s ago: executing program 37 (id=2105): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) 1m47.285127471s ago: executing program 38 (id=2115): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x29, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @generic={0x30f, 0x8863, 0x6, 0x7, 0x8, @multicast, "b7540fe690baa9", @multicast}}}}, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 1m22.398422455s ago: executing program 9 (id=2282): r0 = socket(0x9, 0x1, 0x3fb) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000002500)=[{{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f00000009c0)="0dcc748e07cc524b562aaeab9c7d5f7c08a98b3cbaf5690136d654a3c567512b37838e9c3c4dc89ebeeb6b0b2fe0fe4692fbfa52b82485d505a1735371c0795af91e8b75dde0c008d70cc77d4a7df080a72bf4d1f2093ee06118f6b97debf6e3b2e9684d8161c9c61f4405bdf13129323d3b8edc0486893ee227cc0d435f3d9cf4be7b0ca0449a3dba2a4d293ff2219eff0e2af5f4100a9ab8a4a97772563318034be3fc95f7bb80c7a87ad7020866357372fd571f49045fd91d9f9866e64a739161af19ecf1b6", 0xc7}, {&(0x7f0000000ac0)="6151351cb02374f645bd03453239a53b121d3deb3cf55121a5ff9fa9a5b19f1c985a0054e6bdedc72dbc73de9098cf48ccabdd80bd63f67afd3f096078889dc1ea535b580b8e6df6824e21a11d0303d34c0e32a47962f0ad3fa47e0adc16da15d545b17a3d4b361319bfe8039f18b797651b61fea84285e47c4604bf7af61caadb86e6d7dc8a44447506647756eaac1a0c6af25d18d3311362b803a1504b746bbc0a5625f5ae1092132e8e57b1cdf19d41d9ec67964d460682354e466c06fd9831caa8e49933275316611a8c6e6c49be5396ca5f85d6919f04825ff88363ed3c", 0xe0}, {&(0x7f0000000bc0)="8f4e3eb2b8bdeb4f563aa64b05cb90cb59beed8db6c469c8d75f25be3fede5520e2e7c9684ac19de13b5c605fd09c755e8812cd50931074bd208939dd3542941571904a30f3eac285039faeeabc5d24a4c7d209fbb255e34d433a95cc5192f0b2fcc5cd655488648ccabd468f23203d734fb969489ad0a4b917b953d02ebf9ab9619e31437285dc94abec31cda5ceaf45fdbcec4b606210f7918ed47f64dcf63848ef4687133e15d31c4a55c6c980b238e9fea56b9d27cd2b7c3ac155bc5a9e851da207cbd", 0xc5}, {&(0x7f0000002580)="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", 0x10a}, {&(0x7f0000000d80)="1dc3b5c944681f8857708cda47b1507dcb20d04f2028e5e78b6a05ba37c8066efb5edfb5355d3fdb1cc896f17279ff9f11e83514a22b4f20e7846e65b03c42d5b9616747c0f3632f1d0de1d908f41ef0bac67f6269f84d61b4cacdbc62ce278a837c9bf70ec1fcb0f388404b5e17521b6fae071f780b6f622d330dc4885cfad4ca381c83f7d27b67ac83d7c7b82d6b99c54260857b2efb2b8d113f643f7398dce94d5038ee4cfda66983933a499496fee60ef82c2aaf245842d202ab51e10e5b5913da7e55f415dec3d1765173abd9cde59b2e45eaf1a83f4e18203f825e1d9bb959fe920c0f56ceb222d50d725b2adf8a1c066ef94e21999e0fa75606db", 0xfe}, {&(0x7f0000000e80)="f24cb5e1b18e44d239e26a9f4e482cc522c0be919a51a1b42d79bee19383591068f425786180feeb2e7a44675f183f69e909a58780a9bcfbbc84bb50a74d33496eae4f44ae5b1c7dbddab6ebf809edaa2154994b97275fc6b2978ee3538599", 0x5f}, {&(0x7f00000014c0)="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", 0x1000}], 0x7, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001000)="e580031d4c1270b3a6b08da9fdb72c86e9dc85e044bc50b1191c273726d59cd118126ea87e615dc35427151a16f742d1a65444021ff254011013a81194b431fc1dbafd846cfbcb4bdb11b790f5c5048a3e6ccb939e269823dc9ba54142530d2b2984bccb4ac383d7675f68c685c804", 0x6f}, {&(0x7f00000001c0)="d90a3f2a17a068", 0x7}, {&(0x7f00000010c0)}, {&(0x7f0000000cc0)="7526f40e684c960f927fcd7f6ff5a1586ab9900294a36ea037b8d3784d54cdae19629cfa8763507a5f722f63bc86ff1a2f2e199c14964cd195998645ad96f405dd7fcb76a651e2f3c9e2f78ce0acfc19b5595502e3ebfbefd170aadbc17292a76f2aedb180fe31a16dcdd79f8e3093a62f0bad8c84a3c9e56fdd1cc8e6ffd0b9b93447b7e1e7445234b7adfc16d7cad2b0fba17fa933b6d3035ebc9e2bed5c1acd64faaf83092d82e8d6107d6d0a3c8ef21503b2f8", 0xb5}, {&(0x7f0000001180)="ea1513906cb1fecf2f19e81dd8a8d5be3c134df32a99887e89ba05a643f0a3685068b4b9c9ad082b2fc0fc33e3e5762228133c4ea4875d82d657b4e84db06c48f3c35b9d94b6b196156331", 0x4b}, {&(0x7f0000001200)="6a33740338d58626cae8301588440995e96ede35ca5563576adbf9e9b954b9a013ae5d3ea24ef7750d4a5d6b1020c9a560dea3499f118a54bd125fd3a88002f14468e27d1598a0309a0e82d526d9d103cc2c57b37d95a7b17257bb34254e6920accb8da72d4072880ed805fed77febbb00705926090a5b6a3409d1ec238dc8326a59", 0x82}, {&(0x7f00000012c0)="db54d0e6a326097c06f1c00a150667f3ae55134f0340f980de41cd3124ce0cf901faced587ba432825c51e29ce88e1fa2d58d67253281b", 0x37}], 0x7, &(0x7f0000001080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}], 0x40, 0x4000011}}], 0x2, 0x400c051) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40001003, 0x0) r3 = mq_open(0x0, 0x800, 0x24, &(0x7f0000000300)={0x3b36, 0x8, 0x6, 0x790d}) close_range(r1, r3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002fc0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x275, 0x40000000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffe93, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xdeb, 0x8002}]}, 0x14, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x869a497f0c10386c, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) close(0x3) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/21, 0x200000, 0x1000, 0x4}, 0x20) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) bind$xdp(r8, &(0x7f0000000100), 0x10) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4000, 0x3}) 1m21.343165052s ago: executing program 9 (id=2290): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) connect$inet6(r6, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4", 0x12, 0x8000, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000000003, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x800000000000000, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x10, 0x0, 0x870f, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) openat(0xffffffffffffff9c, 0x0, 0x2, 0xac) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r9 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="14000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r9, &(0x7f0000000c80), 0x0}, 0x20) mmap(&(0x7f000038c000/0x2000)=nil, 0x2000, 0xc, 0x20000000ec071, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc028ae92, &(0x7f0000000100)={0x7, 0x200000}) io_uring_setup(0x3beb, &(0x7f0000000100)={0x0, 0xe861, 0x0, 0x4, 0x2aa}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20840, 0x0) 1m19.831091223s ago: executing program 9 (id=2293): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$clear(0x7, r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1m19.367479911s ago: executing program 9 (id=2296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r0) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000002c0)={@remote}, &(0x7f0000000300)=0x14) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) getpid() mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x2801, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) 1m18.718784844s ago: executing program 9 (id=2299): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905e80aff03f70709090587", @ANYRES32=r2, @ANYRESHEX=r2], 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9d3, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x10}}, 0x50) dup2(0xffffffffffffffff, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000003c0)={0x8, "f096924f2613d7ccaa8801d0e5590aa2561215f7f7e067c64196e45f7a8a380b", 0x3, 0x3, 0x1, 0x3000000, 0x20000, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) readv(r6, &(0x7f0000000280)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x20) 1m18.3199986s ago: executing program 9 (id=2301): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0]) 1m17.599529467s ago: executing program 39 (id=2301): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0]) 13.514129536s ago: executing program 3 (id=2530): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1415, 0x103, 0x70bd29}, 0x10}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_rr_get_interval(r3, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x22, 0x0, 0x0) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000140), &(0x7f0000000200)) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000480)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r7, 0x0, 0x1a, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002500090122bd7008f9ffffff02000000"], 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) socket$inet6(0xa, 0x3, 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 11.083546627s ago: executing program 3 (id=2537): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0xfffffffd, {{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x3}, {0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88f0b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 10.253421926s ago: executing program 0 (id=2541): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000340)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="950000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000f451000004000000851000000100000018120000", @ANYRES32=r3, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000060000000185800000e00"/48], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x1e00, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0xfffffffe, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x66, 0x63, 0x66, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r6 = io_uring_setup(0x1a21, &(0x7f00000001c0)={0x0, 0xc2fc, 0x80, 0x0, 0xd1}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000240)={0x4, 0x3000002}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x1d) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000000000061616161616161616161617861616161616161616165eb4e4d9b00286161616161313131313131313131313131313131334e7183003531313131313131313131000000"], 0x48, r8) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) writev(r10, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0xcb) 8.861144581s ago: executing program 6 (id=2543): inotify_init() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe0000004}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feff"], 0x0}, 0x94) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) syz_open_pts(r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000006c0)="3b000000010006", 0x7) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x1c, {0x1c, 0x23, "835b44eeab355da9e3f4d0b199b685ef33f9a82de8b0a598e60e"}}, &(0x7f0000000680)={0x0, 0x3, 0x98, @string={0x98, 0x3, "fabee1da295252b488203c064e8770a06e85c911479937a40e40619c6d001ff1a231419b55eb8c0ea9286109b28b7a6774a96286b9b99e379d11de32a6332d835e7ee47b3dfe251d754503ba751ee3bc6caf29ee1cad84cf12f79ad31cefae8e2cf6480370a0148b6afaf996ae381f7093751781f75c6592140f911b5a219c2197a7526817e27c37e57b72b48ffc9b2e5d93d66713a4"}}, &(0x7f0000000740)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x16, 0xf7, 0x2, "2e35d295", "c116a31a"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa3, 0x18, 0x1, 0x9, 0x8, 0x0, 0xf5}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x7, 0x57, "625028196fec0d098f26f61ad07180ad9c08ccb84f2e07be1d4eb4268945720708a582a688cba7497add43ccf98b0ef0cfe5d520346acb3b9d124f5faa7a0e8a8f804d20ba6ccaf728ac7663f79f3ba4767de8d7d83a6d"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x60, 0x8, [0xff0f]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x91}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "31ff"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000b40)={0x40, 0x19, 0x2, '+f'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xf4}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x9f}}) 8.778384462s ago: executing program 3 (id=2544): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$FUSE(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x60, 0xb, 0xa, 0x8, 0x1ff}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="a55bcc0578b16859831199720ee11d41763060602a3767fe27bdfff4e16ab13ecc41807e3756aed1fe000000000000c848dfc5c41aaf712204", @ANYRES16=r4, @ANYBLOB="05002abd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_procfs(r2, &(0x7f00000000c0)='personality\x00') r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r11, 0x4b41, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8.157794896s ago: executing program 4 (id=2546): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) 7.193578836s ago: executing program 4 (id=2547): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0xb, 0x8}}, './file0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x401}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000411) read$FUSE(r3, &(0x7f00000045c0)={0x2020}, 0x2020) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000002600)={0x244, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0xf5, 0xc5, "40aa062ad52e88d7c1d95e94554364d74b83e3dd872e2e779a8349e903a155ed62efdd90018eb0fb424cf1bf064250998e6f85ca541d7726607f717b34edf0cd4cd9616d81f4e6bc1de3650458a0dc4ba65e5e2358b6e42f29dc72e6e548f8fc25468291a75d08ed1eaad66e095dad92abd1c790d35b23c5bd97d9ffc1d169fdcacab6a18a372d53cdce4a7c66ada728920987fe6d3a136cec7baaf6f0846a639903e98a6cae577722795c6881d764b2fd2973ea6f522772f23f694fda16ff7b9e5376f5ef2a9e86435f16a7f66ffea427b4674ce9b95387c7dce2dd0436c7866e9bd0c824dbf3035742e4596deb2fc23d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10001}, @NL80211_ATTR_VENDOR_DATA={0xffffffffffffff4f, 0xc5, "0420a920ab0d180cb4bd3a1d0a8837f25da8d7b3dcb65b8aff2a16a420104af9c10f02e5be6956ba87b230d24149247fd63b35b4ba6cbc1e2990165f39c23cb78af5e45a1f3eaa5919a735828c16595fd8c46ab5dca3bb53d7b792e5ad06b0585d97cb72ed9c1c21ef1bf681e7659fb7d2518780e0bc424870c466f3cec5e7bd9a117ffe0f1e8857faf9ba9021d404be1518a6b556dc0d9b275042474fe1f021cdde5649827d10970e91f64933a8e1506002e178b64b525746a7646902b417ec8938529e70ca92fbbb73980b0612d8912eedddc02ac57bc17a7adf8a301c85393aa6855a61c9465108b23eecb580a22514575085038e81fe22"}, @NL80211_ATTR_VENDOR_DATA={0x8, 0xc5, "b71c988a"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000010}, 0x44) sendto$inet6(r5, &(0x7f0000000240)="9753db845ba40174ac3553ecfccb917979f47aae5415a9d7855e66e3b98627b9d28a1fea91472a79fb93a01e975bcd4260c3bdf117243e69c0e30ae2b93f8704052c3f096539cc1b3d502f1e2d6c07140aefdcfad2eaaa26c8ab10c1ae00d90b063e41b04691024b47b4e49de7e782af5f0e2f94f90d4bd652c993f768cf5f610cb00ecfdcf7bd48059c2bf5b05910c976aace1a2c83839d04c6af4592050712bb168a06876f0f7281fd53d539b7ef7faa423a187c995cd11708501be3f3d9af03a0", 0xc2, 0x20044000, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x880, 0x50) read$midi(r9, &(0x7f0000003e00)=""/75, 0x4b) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x1}, {0x1, 0x3}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'veth0_to_team\x00', 0x800}) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.140684597s ago: executing program 0 (id=2548): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01f66a0f33734c64c62c007f94800018000000000000000c"], 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r1 = syz_usbip_server_init(0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x5810) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$phonet(r5, &(0x7f0000000100)={0x23, 0x4, 0x6, 0x40}, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1fff, 0x80, 0x3231564e, 0x3, [0x2], [0x203f, 0xfffffffc], [0x0, 0x4], [0x400000000000001, 0x2000000000, 0x0, 0x7]}) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000140)) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="cfb27019522f93673da692bc54932655e497580b9cbc1467dfe7b91841ea9d16cee6a3b15b1ca0abf89a8ce34578078689355c18ad53e6988d505275424c3eebb1f411fb9fc38c8a2e4d500028fa65293fa1b60a43f59b8fdc0dd48ae29dac4cebcca7a16a94e015940a09001000000f6299af982ff34af71a52e322019bf2e349629bbec1f1e96d2c9f699ee03e8c9b285d100862fb8868404eed952e940ee17bb62dfccdc39f8ef6927ea42efd630953396463c81d85bfcd47aa8e4ef027819b0b93957a85e5f5bc36381c423022bcb50750690000391a2ed21c1f214b9bd235991006000000f53f6f99284d38d2ff67b852276f35837fee6e70767ee7641d87a98f7e452d98932886040ae9d67a092a5e42a14e04b58bdf3c88db2c5a40a629ba2cc86bddd0a12779b1cc235aa6d68e4671e58bccb2275a2d0cd169b92bfb2da4b27496d0e30b526c714c9e902c7b179c84c7aaef815226417c2a998a3f3329577190c18b96af5f694e8eed125b600cf0d6881cc165d67e171f4da8bd20d6f43f6847e83d1423a15787e9899c88a7b3596fcdfb35e5ca6e35781b55fd07cf656a4173d86e09bbca1fb6ae1d8db3409670e8cfe2edd3098b720880cad8a50f000000000000d740932133ce0a27db515086943465ca6e518aedcafd94c65fa29182fcc7760e1917b8ab1a7c90f9c17bb7640fa5747f2f2b227b33044a665b9ac1ab", @ANYRESDEC=r0, @ANYRESDEC=r6], 0x0) 6.938685557s ago: executing program 4 (id=2550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x1000000f8) 6.443989874s ago: executing program 6 (id=2552): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6.141596835s ago: executing program 6 (id=2553): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)="11212e25", 0x4}, 0x1, 0x0, 0x0, 0x24008011}, 0x8080) recvmmsg(r0, &(0x7f0000009880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x7fffffff}], 0x1, 0x63, 0x0) 6.094790746s ago: executing program 6 (id=2554): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000340)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="950000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000f451000004000000851000000100000018120000", @ANYRES32=r3, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000060000000185800000e00"/48], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x1e00, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0xfffffffe, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x66, 0x63, 0x66, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r6 = io_uring_setup(0x1a21, &(0x7f00000001c0)={0x0, 0xc2fc, 0x80, 0x0, 0xd1}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000240)={0x4, 0x3000002}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x1d) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000000000061616161616161616161617861616161616161616165eb4e4d9b00286161616161313131313131313131313131313131334e7183003531313131313131313131000000"], 0x48, r8) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) writev(r10, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0xcb) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 6.042614191s ago: executing program 5 (id=2555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="01000100000000000000010000001400048005000300050000000500030002000000080002000100000008000100000000000400088064000c800c000b8008000a0042b7000014000b80", @ANYBLOB="101bdb7412"], 0xa0}}, 0x0) 5.97845747s ago: executing program 5 (id=2556): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) 5.406804618s ago: executing program 4 (id=2557): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa19, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) r6 = getpid() kcmp(r6, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.918316805s ago: executing program 5 (id=2558): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) 4.155739856s ago: executing program 6 (id=2559): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000340)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="950000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000f451000004000000851000000100000018120000", @ANYRES32=r3, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000060000000185800000e00"/48], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x1e00, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0xfffffffe, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x66, 0x63, 0x66, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r6 = io_uring_setup(0x1a21, &(0x7f00000001c0)={0x0, 0xc2fc, 0x80, 0x0, 0xd1}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000240)={0x4, 0x3000002}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x1d) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000000000061616161616161616161617861616161616161616165eb4e4d9b00286161616161313131313131313131313131313131334e7183003531313131313131313131000000"], 0x48, r8) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0xcb) 4.11933142s ago: executing program 0 (id=2560): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fanotify_init(0x200, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0xff, 0x3, 0x2, 0x8, 0x8, 0x6}}, {0x10, 0x2, [0x0, 0x28, 0x8, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0xff, 0x6, 0x800, 0x9, 0x2, 0x7bed, 0x7fff, 0x3}}, {0xa, 0x2, [0x7, 0x8, 0x213]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0x3, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 4.072122484s ago: executing program 3 (id=2561): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) io_setup(0xe4, &(0x7f00000003c0)) listen(0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x24046850}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.903202936s ago: executing program 5 (id=2562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x4000009, 0xffffffff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x6b, 0x0, 0xf7, 0x4, 0x0, @broadcast, @multicast1}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7000fda7ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 3.665762545s ago: executing program 4 (id=2563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00e58b0000000007138b47000000097200000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000000020000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r4}, 0x38) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x1ff, 0x80000000, 0x3, 0x4, 0x17, "109ed02ad7ee665061d1edeb3ab35acc422f2b"}) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ef6a1b10c016df0571b0000d0001090212000104000000090476020003"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x2000)=nil, 0x3000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) 2.799793907s ago: executing program 5 (id=2564): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_newroute={0x2c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0xfd, 0x9}, [@RTA_UID={0x8}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xefff, 0x0, 0x10198, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000054}, 0x4040) socket$inet6(0xa, 0x3, 0xff) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) preadv2(r1, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0xa1c7, 0x1, 0x5) select(0x20000048, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20}, 0x94) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2.574658059s ago: executing program 3 (id=2565): syz_open_procfs(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1000d5018000000000000000fcdbdf25"], 0x10}, {&(0x7f0000000c40)=ANY=[@ANYBLOB="98000000420002002abd7000fddbdf25da3e71b9e8e346e9e0b3bbedf3258de2fb71db9752616b117ccea963b1d56f3cbbc7648d19915559e58bc92230c19175086ed39f0b6183b233e6365f37a56a1a17b412b3495b51cd6b7ae9e5a3a8c2bfc70a7c25a583b9ec8bdfd5a895666e31dc7429443198a78bda22eb74ca4f80ac028a52663f00"/146], 0x98}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="140300003e0000042cbd7000fedbdf2531dafce36c805b10bf454a718d30ba5acad47b0a61193ecead4c21e4b5681b5a5873c48ed8e1ad49906a22ebfd20cc11b5f73fdd1050e5c9ce61295f70cd69bca8ca3ce81400270000000000000000000000000000000000351c67b172a22db7ed1763ca3d2bcc1d7f9706272d29a89b98d5899a0089afd75a943861489d062d54e3177089bdf20d40692187fe159924dc3e771a1fd1155b9d91db8afd1d5cda74710a31a42ba626ece09a3864204fad", @ANYRES32=0x0, @ANYBLOB="f15d5d7af27f0763432251bc89fefdd2b7da62708ba56787c3b4c8608cce4b644e63da8707ce0b142d1bc78ef71472cfb94c4abf7e9ff1ff976ca93c8f2a47364ccc4887c6991b74619aacd6dff7759b60915cf2abf59de6a1cda82354b06da3fdf7db6a025886bddd22379939284fefb8a968e2e3e540da082bfe5d340b8b8d68c9cca62a98e20636d95100d512dea30ea89006d29ad93a6ecd083fb623a0a640ea6c52303d67e0097398143dabcf6230e376d6ab89b947e842301626cd5670a3c7dd60343aca8fc17d77dd3cfa2bcbdad9ed16ddbf356b4fb5e7dbc435ccbdcfc2c7a4d368011980a0ebbb9cbeac69ec8cf82c713175cbeec2c64589b6c761b508a9ef326d188346927ae1a3f2a991fb106820533c95d9df088c18273e3c115db4510f6328e09cafac778e3522ef2b9da485810554dcf1404b602f77b18b7a52eac8d912e7ca65e3a10d8c7e933fd77c05e4553699f67d41593fc3da48bf62766005ad21b72aed9b5dde38c92fd661425edb9f2b991808b532edd7ab6848f7f469333f4e04efc0ddf663c604e7c0cf9515e9129e42524b095e29a409dd9f320788cf25a3f5e11ca33dea02572ba845a8babe680d810800cf00030000001400420000000000000000000000000000000000c46cb80169ad3fb9c55423628056f91d5144532754a7f4331b942f4a11483f5ef637abf1c210141dc21916e6abc7ecd18e00c2b20e36a80ae5913da481e6820100d2c4db04a4ebdc6a5e6f859b05714dc2271d2c872f5d528b719d6f37857e68d875b00a5761590e2d945adb275553c7f426d0474f5d6a0510cfb9000000"], 0x314}], 0x3, 0x0, 0x0, 0x20000081}, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) eventfd2(0x9, 0x0) eventfd(0x800003) syz_open_dev$swradio(&(0x7f0000000840), 0x0, 0x2) r6 = memfd_secret(0x0) futimesat(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec51acbc0413a1810039000000000bf0ffff2101000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESOCT=r8], 0xfc}}, 0x20000005) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.23226695s ago: executing program 0 (id=2566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x672300, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x5000000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0xa, r6}) 2.161983563s ago: executing program 5 (id=2567): syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 1.297744461s ago: executing program 3 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000040)=""/3, 0x3}], 0x2, 0x2, 0x328) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000340)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.246280385s ago: executing program 4 (id=2569): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x60282, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="0e"], 0x1c}}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='_\x00!\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000500640101000800090000000000080009000300000008000800000000000800080002000000080004006401010014000c00fe800000000000000000000000000025"], 0x68}}, 0x1) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0}, 0x1840}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r9, 0xc02464bb, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2, 0x110, 0xa992, 0x2, 0x4e, 0x15}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r11 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001600)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) capset(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.243812114s ago: executing program 6 (id=2570): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000340)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="950000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000f451000004000000851000000100000018120000", @ANYRES32=r3, @ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008500000060000000185800000e00"/48], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x1e00, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0xfffffffe, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x66, 0x63, 0x66, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r6 = io_uring_setup(0x1a21, &(0x7f00000001c0)={0x0, 0xc2fc, 0x80, 0x0, 0xd1}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000240)={0x4, 0x3000002}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x1d) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000000000061616161616161616161617861616161616161616165eb4e4d9b00286161616161313131313131313131313131313131334e7183003531313131313131313131000000"], 0x48, r8) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) writev(r10, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0xcb) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 1.240502905s ago: executing program 0 (id=2571): r0 = socket$phonet(0x23, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x800, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x1004d804) 0s ago: executing program 0 (id=2572): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x2, 0xffffffff}) kernel console output (not intermixed with test programs): 9] ? __pfx_ksys_write+0x10/0x10 [ 791.102577][T14759] __x64_sys_sendmmsg+0x9c/0x100 [ 791.102592][T14759] ? lockdep_hardirqs_on+0x78/0x100 [ 791.102607][T14759] do_syscall_64+0xc9/0xf80 [ 791.102621][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.102633][T14759] RIP: 0033:0x7fa11159aeb9 [ 791.102643][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.102654][T14759] RSP: 002b:00007fa10f7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 791.102665][T14759] RAX: ffffffffffffffda RBX: 00007fa111815fa0 RCX: 00007fa11159aeb9 [ 791.102673][T14759] RDX: 0000000000000003 RSI: 00002000000014c0 RDI: 0000000000000003 [ 791.102679][T14759] RBP: 00007fa10f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.102686][T14759] R10: 000000000400c000 R11: 0000000000000246 R12: 0000000000000001 [ 791.102693][T14759] R13: 00007fa111816038 R14: 00007fa111815fa0 R15: 00007ffdcb499388 [ 791.102707][T14759] [ 791.103253][T14757] CPU: 1 UID: 0 PID: 14757 Comm: syz.6.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.103279][T14757] Tainted: [L]=SOFTLOCKUP [ 791.103286][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 791.103299][T14757] Call Trace: [ 791.103305][T14757] [ 791.103312][T14757] dump_stack_lvl+0x100/0x190 [ 791.103336][T14757] should_fail_ex.cold+0x5/0xa [ 791.103356][T14757] _copy_from_iter+0x1f4/0x1690 [ 791.103374][T14757] ? policy_nodemask+0xed/0x4f0 [ 791.103390][T14757] ? __pfx__copy_from_iter+0x10/0x10 [ 791.103406][T14757] ? alloc_pages_mpol+0x25a/0x550 [ 791.103422][T14757] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 791.103440][T14757] copy_page_from_iter+0xde/0x180 [ 791.103458][T14757] anon_pipe_write+0xae4/0x1d40 [ 791.103478][T14757] ? __pfx_anon_pipe_write+0x10/0x10 [ 791.103492][T14757] ? selinux_file_permission+0x8f/0x6d0 [ 791.103506][T14757] ? bpf_lsm_file_permission+0x9/0x10 [ 791.103522][T14757] ? security_file_permission+0x76/0x210 [ 791.103536][T14757] ? rw_verify_area+0xce/0x6d0 [ 791.103548][T14757] vfs_write+0x6ac/0x1070 [ 791.103561][T14757] ? __pfx_anon_pipe_write+0x10/0x10 [ 791.103577][T14757] ? __pfx_vfs_write+0x10/0x10 [ 791.103588][T14757] ? find_held_lock+0x2b/0x80 [ 791.103615][T14757] ksys_write+0x1f8/0x250 [ 791.103627][T14757] ? __pfx_ksys_write+0x10/0x10 [ 791.103644][T14757] do_syscall_64+0xc9/0xf80 [ 791.103658][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.103669][T14757] RIP: 0033:0x7f8ff239aeb9 [ 791.103679][T14757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.103690][T14757] RSP: 002b:00007f8ff31aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.103700][T14757] RAX: ffffffffffffffda RBX: 00007f8ff2615fa0 RCX: 00007f8ff239aeb9 [ 791.103708][T14757] RDX: 00000000ffffff98 RSI: 0000200000000000 RDI: 0000000000000006 [ 791.103714][T14757] RBP: 00007f8ff31aa090 R08: 0000000000000000 R09: 0000000000000000 [ 791.103721][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.103727][T14757] R13: 00007f8ff2616038 R14: 00007f8ff2615fa0 R15: 00007ffe93f69368 [ 791.103742][T14757] [ 791.536563][ T5926] m920x_read = error: -19 [ 791.540931][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 791.619221][ T9238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.705927][ T24] m920x_read = error: -19 [ 791.708321][T14763] overlayfs: workdir and upperdir must be separate subtrees [ 791.710389][ T24] dvb-usb: error -19 while querying for an remote control event. [ 791.877665][ T24] m920x_read = error: -19 [ 791.883221][ T24] dvb-usb: error -19 while querying for an remote control event. [ 791.952699][ T9238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.965371][T14146] usb 7-1: USB disconnect, device number 44 [ 792.035335][ T9238] bond0 (unregistering): Released all slaves [ 792.048772][T12274] m920x_read = error: -19 [ 792.053137][T12274] dvb-usb: error -19 while querying for an remote control event. [ 792.138334][ T5817] Bluetooth: hci7: command tx timeout [ 792.229600][T12274] m920x_read = error: -19 [ 792.239024][T12274] dvb-usb: error -19 while querying for an remote control event. [ 792.314674][T14741] lo speed is unknown, defaulting to 1000 [ 792.350163][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 792.406677][T14783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.438996][T12274] m920x_read = error: -19 [ 792.456499][T12274] dvb-usb: error -19 while querying for an remote control event. [ 792.522060][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.625923][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.638944][T12274] m920x_read = error: -19 [ 792.658298][T12274] dvb-usb: error -19 while querying for an remote control event. [ 792.660285][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 792.687274][ T9238] hsr_slave_0: left promiscuous mode [ 792.700086][ T9238] hsr_slave_1: left promiscuous mode [ 792.713623][ T9] usb 1-1: config 1 has no interface number 1 [ 792.726686][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.807975][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.822892][ T9238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.835388][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.844873][ T9238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.854650][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.860150][T12274] m920x_read = error: -19 [ 792.872866][T12274] dvb-usb: error -19 while querying for an remote control event. [ 792.880996][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.904298][ T9] usb 1-1: Product: syz [ 792.919692][ T9] usb 1-1: Manufacturer: syz [ 792.928153][ T9238] veth1_macvtap: left promiscuous mode [ 792.946387][ T9] usb 1-1: SerialNumber: syz [ 792.953450][ T9238] veth0_macvtap: left promiscuous mode [ 792.965095][ T9238] veth1_vlan: left promiscuous mode [ 792.970396][ T9238] veth0_vlan: left promiscuous mode [ 793.031228][T12274] m920x_read = error: -19 [ 793.035659][T12274] dvb-usb: error -19 while querying for an remote control event. [ 793.131530][ T9599] block nbd0: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 60 seconds [ 793.142286][ T9599] block nbd0: Possible stuck request ffff888027060200: control (read@1024,1024B). Runtime 60 seconds [ 793.153974][ T9599] block nbd0: Possible stuck request ffff888027060400: control (read@2048,1024B). Runtime 60 seconds [ 793.170708][ T9599] block nbd0: Possible stuck request ffff888027060600: control (read@3072,1024B). Runtime 60 seconds [ 793.195049][ T9] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 793.211229][T12274] m920x_read = error: -19 [ 793.219503][T12274] dvb-usb: error -19 while querying for an remote control event. [ 793.248648][ T9] usb 1-1: USB disconnect, device number 29 [ 793.331357][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.383095][T12274] m920x_read = error: -19 [ 793.387466][T12274] dvb-usb: error -19 while querying for an remote control event. [ 793.556346][ T30] audit: type=1400 audit(2000001115.040:1682): avc: denied { bind } for pid=14802 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 793.562818][T12274] m920x_read = error: -19 [ 793.590705][T12274] dvb-usb: error -19 while querying for an remote control event. [ 793.696866][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 793.763195][T12274] m920x_read = error: -19 [ 793.767572][T12274] dvb-usb: error -19 while querying for an remote control event. [ 793.915887][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 793.935703][ T24] usb 7-1: config 0 has an invalid interface number: 60 but max is 0 [ 794.030149][ T24] usb 7-1: config 0 has no interface number 0 [ 794.183123][T12274] m920x_read = error: -19 [ 794.187530][T12274] dvb-usb: error -19 while querying for an remote control event. [ 794.207422][ T5817] Bluetooth: hci7: command tx timeout [ 794.208647][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 794.264298][T14816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.363953][T12274] m920x_read = error: -19 [ 794.369155][T12274] dvb-usb: error -19 while querying for an remote control event. [ 794.383082][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.401426][ T24] usb 7-1: Product: syz [ 794.405692][ T24] usb 7-1: Manufacturer: syz [ 794.410289][ T24] usb 7-1: SerialNumber: syz [ 794.418644][ T24] usb 7-1: config 0 descriptor?? [ 794.430799][ T24] gspca_main: spca500-2.14.0 probing 046d:0900 [ 794.562282][ T5889] m920x_read = error: -19 [ 794.755215][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 794.792102][ T24] gspca_spca500: reg write: error -71 [ 794.824184][T14823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.832503][ T24] gspca_spca500: reg write: error -71 [ 794.852577][ T24] gspca_spca500: reg write: error -71 [ 794.912612][ T24] gspca_spca500: reg write: error -71 [ 794.944400][ T5889] m920x_read = error: -19 [ 794.979649][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 794.992079][ T24] gspca_spca500: reg write: error -71 [ 794.997764][ T24] gspca_spca500: reg write: error -71 [ 795.028929][ T24] gspca_spca500: reg write: error -71 [ 795.061207][ T24] gspca_spca500: reg write: error -71 [ 795.071536][ T24] gspca_spca500: reg write: error -71 [ 795.077385][ T24] gspca_spca500: reg write: error -71 [ 795.091618][ T24] gspca_spca500: reg write: error -71 [ 795.101335][ T24] gspca_spca500: reg write: error -71 [ 795.120257][ T24] gspca_spca500: reg write: error -71 [ 795.133839][ T24] gspca_spca500: reg write: error -71 [ 795.146053][ T5889] m920x_read = error: -19 [ 795.152606][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 795.174118][ T24] usb 7-1: USB disconnect, device number 45 [ 795.326532][ T5889] m920x_read = error: -19 [ 795.330902][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 795.358498][ T9238] team0 (unregistering): Port device team_slave_1 removed [ 795.428639][ T9238] team0 (unregistering): Port device team_slave_0 removed [ 795.465792][T14835] netlink: 'syz.6.2323': attribute type 2 has an invalid length. [ 795.475063][T14835] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2323'. [ 795.477209][ T5889] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 795.494199][ T24] m920x_read = error: -19 [ 795.498791][ T24] dvb-usb: error -19 while querying for an remote control event. [ 795.658289][ T24] m920x_read = error: -19 [ 795.662985][ T24] dvb-usb: error -19 while querying for an remote control event. [ 795.673748][ T5889] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 795.692706][ T5889] usb 4-1: config 0 has no interface number 0 [ 795.745501][ T5889] usb 4-1: config 0 interface 4 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 795.766442][ T5889] usb 4-1: config 0 interface 4 has no altsetting 0 [ 795.796048][ T5889] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 795.812344][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.820518][ T5889] usb 4-1: Product: syz [ 795.824682][ T5889] usb 4-1: Manufacturer: syz [ 795.829296][ T5889] usb 4-1: SerialNumber: syz [ 795.836691][ T5889] usb 4-1: config 0 descriptor?? [ 795.841920][ T5926] m920x_read = error: -19 [ 795.846273][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 796.010654][ T5889] m920x_read = error: -19 [ 796.020378][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 796.162772][ T5889] usb 4-1: USB disconnect, device number 62 [ 796.175108][ T5817] Bluetooth: hci7: command tx timeout [ 796.192426][ T5926] m920x_read = error: -19 [ 796.210252][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 796.219387][ T30] audit: type=1400 audit(2000001117.843:1683): avc: denied { mounton } for pid=14845 comm="syz.6.2327" path="/276/file0" dev="tmpfs" ino=1537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 796.269716][T14853] netlink: 'syz.6.2327': attribute type 8 has an invalid length. [ 796.276430][T14852] mkiss: ax0: crc mode is auto. [ 796.311533][T14741] chnl_net:caif_netlink_parms(): no params data found [ 796.412083][ T24] m920x_read = error: -19 [ 796.419894][ T24] dvb-usb: error -19 while querying for an remote control event. [ 796.611907][ T24] m920x_read = error: -19 [ 796.629581][ T24] dvb-usb: error -19 while querying for an remote control event. [ 796.839321][ T5889] m920x_read = error: -19 [ 796.848145][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 796.893685][T14741] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.905206][T14741] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.916871][T14741] bridge_slave_0: entered allmulticast mode [ 796.944431][T14741] bridge_slave_0: entered promiscuous mode [ 796.979452][T14867] FAULT_INJECTION: forcing a failure. [ 796.979452][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 796.992888][T14741] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.030151][T12274] m920x_read = error: -19 [ 797.031928][T14867] CPU: 0 UID: 0 PID: 14867 Comm: syz.0.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.031952][T14867] Tainted: [L]=SOFTLOCKUP [ 797.031958][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 797.031967][T14867] Call Trace: [ 797.031973][T14867] [ 797.031979][T14867] dump_stack_lvl+0x100/0x190 [ 797.032005][T14867] should_fail_ex.cold+0x5/0xa [ 797.032023][T14867] should_failslab+0xc2/0x120 [ 797.032044][T14867] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 797.032065][T14867] ? sidtab_sid2str_get+0x17a/0x670 [ 797.032088][T14867] ? kmemdup_noprof+0x29/0x60 [ 797.032107][T14867] kmemdup_noprof+0x29/0x60 [ 797.032126][T14867] sidtab_sid2str_get+0x17a/0x670 [ 797.032147][T14867] security_sid_to_context_core+0x35a/0x6d0 [ 797.032167][T14867] avc_audit_post_callback+0x109/0x8b0 [ 797.032190][T14867] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 797.032208][T14867] ? skb_put+0x138/0x180 [ 797.032224][T14867] ? audit_log_n_string+0x256/0x550 [ 797.032251][T14867] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 797.032269][T14867] common_lsm_audit+0x23f/0x2b0 [ 797.032287][T14867] ? __pfx_common_lsm_audit+0x10/0x10 [ 797.032303][T14867] ? find_held_lock+0x2b/0x80 [ 797.032329][T14867] ? avc_update_node.isra.0+0x573/0xb90 [ 797.032353][T14867] slow_avc_audit+0x186/0x210 [ 797.032374][T14867] ? __pfx_slow_avc_audit+0x10/0x10 [ 797.032400][T14867] ? find_held_lock+0x2b/0x80 [ 797.032420][T14867] ? avc_has_extended_perms+0x33a/0x1080 [ 797.032440][T14867] ? avc_has_extended_perms+0x33a/0x1080 [ 797.032464][T14867] avc_has_extended_perms+0x9b7/0x1080 [ 797.032492][T14867] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 797.032514][T14867] ? lockdep_hardirqs_on+0x78/0x100 [ 797.032536][T14867] ? find_held_lock+0x2b/0x80 [ 797.032555][T14867] ? tomoyo_path_number_perm+0x28f/0x580 [ 797.032584][T14867] ? tomoyo_path_number_perm+0x188/0x580 [ 797.032624][T14867] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 797.032645][T14867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 797.032677][T14867] ? selinux_file_ioctl+0x139/0x290 [ 797.032692][T14867] selinux_file_ioctl+0x139/0x290 [ 797.032711][T14867] security_file_ioctl+0xfb/0x230 [ 797.032729][T14867] __x64_sys_ioctl+0xb7/0x210 [ 797.032747][T14867] do_syscall_64+0xc9/0xf80 [ 797.032766][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.032782][T14867] RIP: 0033:0x7f512fd9aeb9 [ 797.032795][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.032810][T14867] RSP: 002b:00007f5130d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.032826][T14867] RAX: ffffffffffffffda RBX: 00007f5130015fa0 RCX: 00007f512fd9aeb9 [ 797.032836][T14867] RDX: 0000200000000040 RSI: 00000000401870cb RDI: 0000000000000004 [ 797.032845][T14867] RBP: 00007f5130d34090 R08: 0000000000000000 R09: 0000000000000000 [ 797.032854][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.032863][T14867] R13: 00007f5130016038 R14: 00007f5130015fa0 R15: 00007fff127ff488 [ 797.032886][T14867] [ 797.032992][ T30] audit: type=1400 audit(2000001118.631:1684): avc: denied { ioctl } for pid=14866 comm="syz.0.2330" path="/31/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb ssid=148 tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 797.038928][T12274] dvb-usb: error -19 while querying for an remote control event. [ 797.060376][T14867] sd 0:0:1:0: PR command failed: 1026 [ 797.060418][T14867] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 797.060454][T14867] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 797.081713][T14741] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.291177][T12274] m920x_read = error: -19 [ 797.310398][T14741] bridge_slave_1: entered allmulticast mode [ 797.515686][T14741] bridge_slave_1: entered promiscuous mode [ 797.524518][T12274] dvb-usb: error -19 while querying for an remote control event. [ 797.548147][T14882] FAULT_INJECTION: forcing a failure. [ 797.548147][T14882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.561369][T14882] CPU: 0 UID: 0 PID: 14882 Comm: syz.0.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.561392][T14882] Tainted: [L]=SOFTLOCKUP [ 797.561396][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 797.561403][T14882] Call Trace: [ 797.561408][T14882] [ 797.561413][T14882] dump_stack_lvl+0x100/0x190 [ 797.561431][T14882] should_fail_ex.cold+0x5/0xa [ 797.561444][T14882] _copy_from_user+0x2e/0xd0 [ 797.561461][T14882] get_timespec64+0x8d/0x240 [ 797.561472][T14882] ? __pfx_get_timespec64+0x10/0x10 [ 797.561483][T14882] ? __fget_files+0x215/0x3d0 [ 797.561499][T14882] do_pselect.constprop.0+0xc8/0x270 [ 797.561515][T14882] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 797.561532][T14882] ? ksys_write+0x1ac/0x250 [ 797.561547][T14882] __x64_sys_pselect6+0x149/0x1c0 [ 797.561563][T14882] do_syscall_64+0xc9/0xf80 [ 797.561577][T14882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.561589][T14882] RIP: 0033:0x7f512fd9aeb9 [ 797.561599][T14882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.561610][T14882] RSP: 002b:00007f5130d34028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 797.561621][T14882] RAX: ffffffffffffffda RBX: 00007f5130015fa0 RCX: 00007f512fd9aeb9 [ 797.561628][T14882] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000040 [ 797.561635][T14882] RBP: 00007f5130d34090 R08: 0000200000000280 R09: 0000000000000000 [ 797.561641][T14882] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 797.561648][T14882] R13: 00007f5130016038 R14: 00007f5130015fa0 R15: 00007fff127ff488 [ 797.561662][T14882] [ 797.877656][ T5889] m920x_read = error: -19 [ 797.879486][T14741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.882081][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 797.893583][T14741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.942130][T14889] mkiss: ax0: crc mode is auto. [ 797.945503][T14741] team0: Port device team_slave_0 added [ 797.962646][T14741] team0: Port device team_slave_1 added [ 798.087720][ T5889] m920x_read = error: -19 [ 798.170807][ T5817] Bluetooth: hci7: command tx timeout [ 798.298949][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 798.342155][T14741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.358128][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.431349][T14741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.459531][T12274] m920x_read = error: -19 [ 798.461120][T14741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.463908][T12274] dvb-usb: error -19 while querying for an remote control event. [ 798.482272][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.508807][T14741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.617705][T12274] m920x_read = error: -19 [ 798.637307][T12274] dvb-usb: error -19 while querying for an remote control event. [ 798.671266][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 798.847358][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 798.869966][T14895] ceph: No mds server is up or the cluster is laggy [ 799.003145][T12274] m920x_read = error: -19 [ 799.007679][T12274] dvb-usb: error -19 while querying for an remote control event. [ 799.042795][T14741] hsr_slave_0: entered promiscuous mode [ 799.062281][T14741] hsr_slave_1: entered promiscuous mode [ 799.148657][ T5889] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 799.173144][T12274] m920x_read = error: -19 [ 799.177515][T12274] dvb-usb: error -19 while querying for an remote control event. [ 799.178682][T14741] debugfs: 'hsr0' already exists in 'hsr' [ 799.220755][T14741] Cannot create hsr debugfs directory [ 799.307808][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29389, setting to 64 [ 799.335381][ T24] m920x_read = error: -19 [ 799.339776][ T24] dvb-usb: error -19 while querying for an remote control event. [ 799.356348][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2338'. [ 799.371275][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.424329][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.485974][T14916] lo: entered promiscuous mode [ 799.509776][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.544683][T12274] m920x_read = error: -19 [ 799.549049][T12274] dvb-usb: error -19 while querying for an remote control event. [ 799.662424][T14916] lo: entered allmulticast mode [ 799.686507][ T5889] usb 1-1: config 0 descriptor?? [ 799.718767][T14908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 799.768811][T14916] tunl0: entered promiscuous mode [ 799.806481][T14916] tunl0: entered allmulticast mode [ 799.848948][T12274] m920x_read = error: -19 [ 799.855646][T12274] dvb-usb: error -19 while querying for an remote control event. [ 800.035780][T14916] gre0: entered promiscuous mode [ 800.097484][T14916] gre0: entered allmulticast mode [ 800.172846][T12274] m920x_read = error: -19 [ 800.177222][T12274] dvb-usb: error -19 while querying for an remote control event. [ 800.250466][ T5889] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 800.798162][T14916] gretap0: entered promiscuous mode [ 800.954436][T12274] m920x_read = error: -19 [ 800.958811][T12274] dvb-usb: error -19 while querying for an remote control event. [ 801.022055][T14916] gretap0: entered allmulticast mode [ 801.051675][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.173530][T12274] m920x_read = error: -19 [ 801.178213][T12274] dvb-usb: error -19 while querying for an remote control event. [ 801.293261][T14916] erspan0: entered promiscuous mode [ 801.363106][T14937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.429458][T14916] erspan0: entered allmulticast mode [ 801.445942][T14916] ip_vti0: entered promiscuous mode [ 801.452388][T14916] ip_vti0: entered allmulticast mode [ 801.458752][T12274] m920x_read = error: -19 [ 801.464413][T12274] dvb-usb: error -19 while querying for an remote control event. [ 801.726477][T14916] ip6_vti0: entered promiscuous mode [ 801.744997][T14944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.827453][T12274] m920x_read = error: -19 [ 801.840584][T12274] dvb-usb: error -19 while querying for an remote control event. [ 801.925714][T14916] ip6_vti0: entered allmulticast mode [ 801.942694][T14916] sit0: entered promiscuous mode [ 801.995244][T14916] sit0: entered allmulticast mode [ 802.060848][T12274] m920x_read = error: -19 [ 802.066298][T12274] dvb-usb: error -19 while querying for an remote control event. [ 802.088011][T14916] ip6tnl0: entered promiscuous mode [ 802.093534][T14916] ip6tnl0: entered allmulticast mode [ 802.103858][T14916] ip6gre0: entered promiscuous mode [ 802.109905][T14916] ip6gre0: entered allmulticast mode [ 802.121937][T14916] syz_tun: entered promiscuous mode [ 802.230216][T12274] m920x_read = error: -19 [ 802.234654][T12274] dvb-usb: error -19 while querying for an remote control event. [ 802.281331][T14916] syz_tun: entered allmulticast mode [ 802.302691][T14916] ip6gretap0: entered promiscuous mode [ 802.313680][T14916] ip6gretap0: entered allmulticast mode [ 802.375941][T14916] bridge0: entered promiscuous mode [ 802.424049][T14916] bridge0: entered allmulticast mode [ 802.430142][T12274] m920x_read = error: -19 [ 802.435794][T12274] dvb-usb: error -19 while querying for an remote control event. [ 802.472267][T14916] vcan0: entered promiscuous mode [ 802.484432][T14916] vcan0: entered allmulticast mode [ 802.529728][T14916] bond0: entered promiscuous mode [ 802.592925][ T9883] usb 1-1: USB disconnect, device number 30 [ 802.619775][T14916] bond0: entered allmulticast mode [ 802.627778][T12274] m920x_read = error: -19 [ 802.642033][T12274] dvb-usb: error -19 while querying for an remote control event. [ 802.656801][T14916] team0: entered promiscuous mode [ 802.669762][T14916] team0: entered allmulticast mode [ 802.682696][T14916] dummy0: entered promiscuous mode [ 802.703573][T14916] dummy0: entered allmulticast mode [ 802.804448][T14916] nlmon0: entered promiscuous mode [ 802.810314][T14916] nlmon0: entered allmulticast mode [ 802.815740][T12274] m920x_read = error: -19 [ 802.820075][T12274] dvb-usb: error -19 while querying for an remote control event. [ 802.828736][T14916] caif0: entered promiscuous mode [ 802.837298][T14916] caif0: entered allmulticast mode [ 802.843775][T14916] net_ratelimit: 11 callbacks suppressed [ 802.843785][T14916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.904516][T14956] FAULT_INJECTION: forcing a failure. [ 802.904516][T14956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 802.917862][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.5.2344 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.917890][T14956] Tainted: [L]=SOFTLOCKUP [ 802.917896][T14956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 802.917907][T14956] Call Trace: [ 802.917914][T14956] [ 802.917922][T14956] dump_stack_lvl+0x100/0x190 [ 802.917951][T14956] should_fail_ex.cold+0x5/0xa [ 802.917972][T14956] should_fail_alloc_page+0xeb/0x140 [ 802.917999][T14956] prepare_alloc_pages+0x1f0/0x5f0 [ 802.918030][T14956] __alloc_frozen_pages_noprof+0x193/0x2410 [ 802.918057][T14956] ? __lock_acquire+0x4a5/0x2630 [ 802.918078][T14956] ? lockdep_hardirqs_on+0x78/0x100 [ 802.918099][T14956] ? kvm_sched_clock_read+0x11/0x20 [ 802.918116][T14956] ? sched_clock+0x38/0x60 [ 802.918134][T14956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 802.918158][T14956] ? lock_acquire+0x17c/0x330 [ 802.918174][T14956] ? find_held_lock+0x2b/0x80 [ 802.918202][T14956] ? mark_held_locks+0x40/0x70 [ 802.918219][T14956] ? finish_task_switch.isra.0+0x204/0xb70 [ 802.918245][T14956] ? lockdep_hardirqs_on+0x78/0x100 [ 802.918263][T14956] ? finish_task_switch.isra.0+0x204/0xb70 [ 802.918290][T14956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 802.918322][T14956] ? policy_nodemask+0xed/0x4f0 [ 802.918349][T14956] alloc_pages_mpol+0x1fb/0x550 [ 802.918374][T14956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 802.918405][T14956] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 802.918426][T14956] ___kmalloc_large_node+0x104/0x150 [ 802.918454][T14956] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 802.918480][T14956] __kmalloc_large_node_noprof+0x1c/0x70 [ 802.918506][T14956] ? wiphy_new_nm+0x701/0x21a0 [ 802.918530][T14956] __kmalloc_noprof+0x6b1/0x9c0 [ 802.918546][T14956] ? irqentry_exit+0x180/0x670 [ 802.918564][T14956] ? lockdep_hardirqs_on+0x78/0x100 [ 802.918583][T14956] ? irqentry_exit+0x180/0x670 [ 802.918603][T14956] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 802.918628][T14956] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 802.918653][T14956] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 802.918673][T14956] ? wiphy_new_nm+0x701/0x21a0 [ 802.918694][T14956] wiphy_new_nm+0x701/0x21a0 [ 802.918718][T14956] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 802.918743][T14956] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 802.918768][T14956] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 802.918788][T14956] ieee80211_alloc_hw_nm+0x1ac7/0x22a0 [ 802.918818][T14956] mac80211_hwsim_new_radio+0x1e1/0x57c0 [ 802.918854][T14956] ? __asan_memset+0x23/0x50 [ 802.918873][T14956] ? __nla_validate_parse+0x1e7/0x28b0 [ 802.918891][T14956] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 802.918923][T14956] hwsim_new_radio_nl+0xc1f/0x1340 [ 802.918943][T14956] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 802.918966][T14956] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 802.918997][T14956] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 802.919016][T14956] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 802.919040][T14956] genl_family_rcv_msg_doit+0x214/0x300 [ 802.919061][T14956] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 802.919088][T14956] ? bpf_lsm_capable+0x9/0x10 [ 802.919113][T14956] ? security_capable+0x80/0x260 [ 802.919140][T14956] ? ns_capable+0xd2/0xf0 [ 802.919166][T14956] genl_rcv_msg+0x560/0x800 [ 802.919187][T14956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.919207][T14956] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 802.919232][T14956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.919248][T14956] ? netlink_rcv_skb+0x131/0x420 [ 802.919278][T14956] netlink_rcv_skb+0x159/0x420 [ 802.919303][T14956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.919327][T14956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 802.919370][T14956] genl_rcv+0x28/0x40 [ 802.919385][T14956] netlink_unicast+0x5aa/0x870 [ 802.919414][T14956] ? __pfx_netlink_unicast+0x10/0x10 [ 802.919450][T14956] netlink_sendmsg+0x8b0/0xda0 [ 802.919480][T14956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.919515][T14956] ____sys_sendmsg+0xa54/0xc30 [ 802.919536][T14956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.919561][T14956] ? __lock_acquire+0x4a5/0x2630 [ 802.919580][T14956] ___sys_sendmsg+0x190/0x1e0 [ 802.919600][T14956] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.919632][T14956] ? find_held_lock+0x2b/0x80 [ 802.919672][T14956] __sys_sendmsg+0x170/0x220 [ 802.919696][T14956] ? __pfx___sys_sendmsg+0x10/0x10 [ 802.919729][T14956] ? rcu_is_watching+0x12/0xc0 [ 802.919758][T14956] do_syscall_64+0xc9/0xf80 [ 802.919780][T14956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.919799][T14956] RIP: 0033:0x7f3013b9aeb9 [ 802.919814][T14956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.919831][T14956] RSP: 002b:00007f3014aba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.919849][T14956] RAX: ffffffffffffffda RBX: 00007f3013e16180 RCX: 00007f3013b9aeb9 [ 802.919861][T14956] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 802.919871][T14956] RBP: 00007f3014aba090 R08: 0000000000000000 R09: 0000000000000000 [ 802.919882][T14956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.919892][T14956] R13: 00007f3013e16218 R14: 00007f3013e16180 R15: 00007ffff9198938 [ 802.919918][T14956] [ 803.453847][ T5889] m920x_read = error: -19 [ 803.458219][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 803.613006][T12274] m920x_read = error: -19 [ 803.617358][T12274] dvb-usb: error -19 while querying for an remote control event. [ 803.774193][T12274] m920x_read = error: -19 [ 803.778615][T12274] dvb-usb: error -19 while querying for an remote control event. [ 803.935865][ T5926] m920x_read = error: -19 [ 803.940798][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 804.098047][ T5926] m920x_read = error: -19 [ 804.125062][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 804.603628][ T5926] m920x_read = error: -19 [ 804.608003][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 804.791576][T14983] vivid-007: disconnect [ 805.068224][ T24] m920x_read = error: -19 [ 805.072700][ T24] dvb-usb: error -19 while querying for an remote control event. [ 805.081933][T14976] netlink: 'syz.0.2350': attribute type 2 has an invalid length. [ 805.089979][T14976] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2350'. [ 805.213668][T14989] overlayfs: workdir and upperdir must be separate subtrees [ 805.267924][ T24] m920x_read = error: -19 [ 805.277171][ T24] dvb-usb: error -19 while querying for an remote control event. [ 805.330835][T14970] vivid-007: reconnect [ 805.543933][T14998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.564011][ T24] m920x_read = error: -19 [ 805.570263][ T24] dvb-usb: error -19 while querying for an remote control event. [ 805.725877][ T24] m920x_read = error: -19 [ 805.738872][ T24] dvb-usb: error -19 while querying for an remote control event. [ 805.902192][ T24] m920x_read = error: -19 [ 805.906784][ T24] dvb-usb: error -19 while querying for an remote control event. [ 806.016880][T15010] kvm: pic: single mode not supported [ 806.017245][T15010] kvm: pic: level sensitive irq not supported [ 806.026850][T15010] kvm: pic: single mode not supported [ 806.033010][T15010] kvm: pic: level sensitive irq not supported [ 806.061240][T15010] kvm: pic: single mode not supported [ 806.221731][ T5889] m920x_read = error: -19 [ 806.264093][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 806.436412][T15010] SELinux: syz.0.2353 (15010) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 806.661267][T15016] overlayfs: workdir and upperdir must be separate subtrees [ 806.710896][T12274] m920x_read = error: -19 [ 806.715284][T12274] dvb-usb: error -19 while querying for an remote control event. [ 806.932605][ T24] m920x_read = error: -19 [ 806.945070][ T24] dvb-usb: error -19 while querying for an remote control event. [ 807.157233][ T24] m920x_read = error: -19 [ 807.172073][ T24] dvb-usb: error -19 while querying for an remote control event. [ 807.248992][T14741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 807.279225][T14741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 807.306709][T14741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 807.332075][T14741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 807.368833][ T24] m920x_read = error: -19 [ 807.373622][ T24] dvb-usb: error -19 while querying for an remote control event. [ 807.558151][T14741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.593056][ T794] m920x_read = error: -19 [ 807.597452][ T794] dvb-usb: error -19 while querying for an remote control event. [ 807.600841][T14741] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.645014][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.652130][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.697926][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.705066][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.730918][T15041] program syz.3.2357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 807.740175][ T30] audit: type=1400 audit(2000001129.917:1685): avc: denied { mount } for pid=15030 comm="syz.3.2357" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 807.803595][ T24] m920x_read = error: -19 [ 807.808004][ T24] dvb-usb: error -19 while querying for an remote control event. [ 808.053848][ T794] m920x_read = error: -19 [ 808.065729][ T794] dvb-usb: error -19 while querying for an remote control event. [ 808.250304][ T794] m920x_read = error: -19 [ 808.345682][T15051] overlayfs: workdir and upperdir must be separate subtrees [ 808.451153][ T794] dvb-usb: error -19 while querying for an remote control event. [ 808.660759][ T794] m920x_read = error: -19 [ 808.665166][ T794] dvb-usb: error -19 while querying for an remote control event. [ 808.760228][T14741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.878996][ T794] m920x_read = error: -19 [ 808.907940][ T794] dvb-usb: error -19 while querying for an remote control event. [ 809.097951][ T794] m920x_read = error: -19 [ 809.103863][ T794] dvb-usb: error -19 while querying for an remote control event. [ 809.174609][ T30] audit: type=1400 audit(2000001131.440:1686): avc: denied { append } for pid=15062 comm="syz.5.2359" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 809.232103][ T30] audit: type=1400 audit(2000001131.482:1687): avc: denied { ioctl } for pid=15062 comm="syz.5.2359" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 809.316792][ T794] m920x_read = error: -19 [ 809.322841][ T794] dvb-usb: error -19 while querying for an remote control event. [ 809.395063][T14741] veth0_vlan: entered promiscuous mode [ 809.424783][T14741] veth1_vlan: entered promiscuous mode [ 809.499841][T14741] veth0_macvtap: entered promiscuous mode [ 809.506905][ T794] m920x_read = error: -19 [ 809.513638][ T794] dvb-usb: error -19 while querying for an remote control event. [ 809.530507][T14741] veth1_macvtap: entered promiscuous mode [ 809.549849][T14741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.577421][T14741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.599333][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.619536][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.643035][ T30] audit: type=1400 audit(2000001131.933:1688): avc: denied { write } for pid=15077 comm="syz.6.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 809.643612][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.675130][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2361'. [ 809.685705][ T794] m920x_read = error: -19 [ 809.690187][ T794] dvb-usb: error -19 while querying for an remote control event. [ 809.697451][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.771538][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.785179][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.828996][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.851147][ T794] m920x_read = error: -19 [ 809.855529][ T794] dvb-usb: error -19 while querying for an remote control event. [ 809.868654][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.035535][ T794] m920x_read = error: -19 [ 810.039936][ T794] dvb-usb: error -19 while querying for an remote control event. [ 810.063824][T15094] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.129843][T15089] netlink: 'syz.5.2363': attribute type 21 has an invalid length. [ 810.146737][T15089] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2363'. [ 810.166266][T15089] netlink: 'syz.5.2363': attribute type 4 has an invalid length. [ 810.177908][T15089] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2363'. [ 810.249880][ T5889] m920x_read = error: -19 [ 810.254858][T15092] netlink: 'syz.5.2363': attribute type 1 has an invalid length. [ 810.262278][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 810.274948][T15092] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2363'. [ 810.431366][ T5889] m920x_read = error: -19 [ 810.435802][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 812.010168][ T794] m920x_read = error: -19 [ 812.021271][ T5889] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 812.045177][ T794] dvb-usb: error -19 while querying for an remote control event. [ 812.345628][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 812.788337][ T30] audit: type=1400 audit(2000001134.841:1689): avc: denied { write } for pid=15108 comm="syz.0.2367" name="file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 812.825822][ T794] m920x_read = error: -19 [ 812.830322][ T794] dvb-usb: error -19 while querying for an remote control event. [ 812.838869][ T5889] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 812.853301][ T30] audit: type=1400 audit(2000001134.841:1690): avc: denied { open } for pid=15108 comm="syz.0.2367" path="/39/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 812.929799][ T30] audit: type=1400 audit(2000001134.852:1691): avc: denied { ioctl } for pid=15108 comm="syz.0.2367" path="/39/file0" dev="tmpfs" ino=228 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 813.002847][ T24] m920x_read = error: -19 [ 813.012163][ T24] dvb-usb: error -19 while querying for an remote control event. [ 813.032368][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 813.231189][ T5889] usb 4-1: config 0 has no interface number 0 [ 813.237829][ T24] m920x_read = error: -19 [ 813.243785][ T24] dvb-usb: error -19 while querying for an remote control event. [ 813.368304][ T5889] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 813.540072][T12274] m920x_read = error: -19 [ 813.544437][T12274] dvb-usb: error -19 while querying for an remote control event. [ 813.586574][T15121] overlayfs: workdir and upperdir must be separate subtrees [ 813.594037][ T5889] usb 4-1: can't read configurations, error -71 [ 813.756502][T12274] m920x_read = error: -19 [ 813.760933][T12274] dvb-usb: error -19 while querying for an remote control event. [ 813.918587][T12274] m920x_read = error: -19 [ 813.923051][T12274] dvb-usb: error -19 while querying for an remote control event. [ 814.126930][T12274] m920x_read = error: -19 [ 814.131361][T12274] dvb-usb: error -19 while querying for an remote control event. [ 814.250575][T14146] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 814.308452][T12274] m920x_read = error: -19 [ 814.328945][T12274] dvb-usb: error -19 while querying for an remote control event. [ 814.348243][T15147] FAULT_INJECTION: forcing a failure. [ 814.348243][T15147] name failslab, interval 1, probability 0, space 0, times 0 [ 814.362064][T15147] CPU: 0 UID: 0 PID: 15147 Comm: syz.6.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.362091][T15147] Tainted: [L]=SOFTLOCKUP [ 814.362097][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 814.362107][T15147] Call Trace: [ 814.362112][T15147] [ 814.362119][T15147] dump_stack_lvl+0x100/0x190 [ 814.362147][T15147] should_fail_ex.cold+0x5/0xa [ 814.362166][T15147] should_failslab+0xc2/0x120 [ 814.362191][T15147] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 814.362216][T15147] ? __alloc_skb+0x156/0x410 [ 814.362244][T15147] ? __alloc_skb+0x156/0x410 [ 814.362264][T15147] __alloc_skb+0x156/0x410 [ 814.362283][T15147] ? __alloc_skb+0x35d/0x410 [ 814.362305][T15147] ? __pfx___alloc_skb+0x10/0x10 [ 814.362324][T15147] ? irqentry_exit+0x180/0x670 [ 814.362343][T15147] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 814.362373][T15147] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 814.362409][T15147] netlink_alloc_large_skb+0x69/0x150 [ 814.362438][T15147] netlink_sendmsg+0x680/0xda0 [ 814.362468][T15147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.362492][T15147] ? __might_fault+0xb0/0x140 [ 814.362521][T15147] ____sys_sendmsg+0xa54/0xc30 [ 814.362547][T15147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 814.362577][T15147] ___sys_sendmsg+0x190/0x1e0 [ 814.362597][T15147] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.362628][T15147] ? find_held_lock+0x2b/0x80 [ 814.362667][T15147] __sys_sendmsg+0x170/0x220 [ 814.362692][T15147] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.362723][T15147] ? trace_csd_function_exit+0x71/0x1b0 [ 814.362756][T15147] do_syscall_64+0xc9/0xf80 [ 814.362778][T15147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.362797][T15147] RIP: 0033:0x7f8ff239aeb9 [ 814.362811][T15147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.362828][T15147] RSP: 002b:00007f8ff31aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.362845][T15147] RAX: ffffffffffffffda RBX: 00007f8ff2615fa0 RCX: 00007f8ff239aeb9 [ 814.362857][T15147] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 814.362868][T15147] RBP: 00007f8ff31aa090 R08: 0000000000000000 R09: 0000000000000000 [ 814.362879][T15147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.362893][T15147] R13: 00007f8ff2616038 R14: 00007f8ff2615fa0 R15: 00007ffe93f69368 [ 814.362918][T15147] [ 814.403121][ T5889] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 814.442257][T14146] usb 1-1: Using ep0 maxpacket: 8 [ 814.488531][T12274] m920x_read = error: -19 [ 814.494776][T14146] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 814.500329][T12274] dvb-usb: error -19 while querying for an remote control event. [ 814.523048][T14146] usb 1-1: config 0 has no interface number 0 [ 814.611286][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 814.633124][T14146] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.633154][T14146] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 814.633177][T14146] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 814.633201][T14146] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 814.633236][T14146] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 814.644706][ T5889] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 814.718008][T12274] m920x_read = error: -19 [ 814.723108][T12274] dvb-usb: error -19 while querying for an remote control event. [ 814.730928][T14146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.731564][ T5889] usb 4-1: config 0 has no interface number 0 [ 814.744106][T15153] FAULT_INJECTION: forcing a failure. [ 814.744106][T15153] name failslab, interval 1, probability 0, space 0, times 0 [ 814.746683][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.782491][T14146] usb 1-1: config 0 descriptor?? [ 814.799784][T15153] CPU: 0 UID: 0 PID: 15153 Comm: syz.4.2381 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.799812][T15153] Tainted: [L]=SOFTLOCKUP [ 814.799819][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 814.799829][T15153] Call Trace: [ 814.799835][T15153] [ 814.799843][T15153] dump_stack_lvl+0x100/0x190 [ 814.799871][T15153] should_fail_ex.cold+0x5/0xa [ 814.799891][T15153] should_failslab+0xc2/0x120 [ 814.799916][T15153] __kmalloc_cache_noprof+0x80/0x810 [ 814.799934][T15153] ? nfnetlink_rcv_batch+0x788/0x2880 [ 814.799955][T15153] ? __nla_parse+0x40/0x60 [ 814.799975][T15153] ? nfnetlink_rcv_batch+0x788/0x2880 [ 814.799995][T15153] nfnetlink_rcv_batch+0x788/0x2880 [ 814.800029][T15153] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 814.800050][T15153] ? find_held_lock+0x2b/0x80 [ 814.800089][T15153] ? avc_has_perm_noaudit+0x145/0x3b0 [ 814.800140][T15153] ? __nla_parse+0x40/0x60 [ 814.800160][T15153] nfnetlink_rcv+0x3bd/0x440 [ 814.800180][T15153] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 814.800206][T15153] netlink_unicast+0x5aa/0x870 [ 814.800237][T15153] ? __pfx_netlink_unicast+0x10/0x10 [ 814.800272][T15153] netlink_sendmsg+0x8b0/0xda0 [ 814.800302][T15153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.800326][T15153] ? __might_fault+0xb0/0x140 [ 814.800355][T15153] ____sys_sendmsg+0xa54/0xc30 [ 814.800375][T15153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 814.800404][T15153] ___sys_sendmsg+0x190/0x1e0 [ 814.800424][T15153] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.800455][T15153] ? find_held_lock+0x2b/0x80 [ 814.800495][T15153] __sys_sendmsg+0x170/0x220 [ 814.800519][T15153] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.800566][T15153] do_syscall_64+0xc9/0xf80 [ 814.800588][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.800606][T15153] RIP: 0033:0x7f0c5ed9aeb9 [ 814.800621][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.800637][T15153] RSP: 002b:00007f0c5fcf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.800654][T15153] RAX: ffffffffffffffda RBX: 00007f0c5f015fa0 RCX: 00007f0c5ed9aeb9 [ 814.800664][T15153] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 814.800675][T15153] RBP: 00007f0c5fcf1090 R08: 0000000000000000 R09: 0000000000000000 [ 814.800685][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.800693][T15153] R13: 00007f0c5f016038 R14: 00007f0c5f015fa0 R15: 00007ffe837e80a8 [ 814.800716][T15153] [ 814.824067][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 814.849050][T14146] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 815.054673][T14146] usb 1-1: USB disconnect, device number 31 [ 815.065736][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 815.065905][T12274] m920x_read = error: -19 [ 815.091676][T12274] dvb-usb: error -19 while querying for an remote control event. [ 815.106283][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 815.130480][T15140] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 815.153197][T14146] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 815.185679][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 815.242062][ T5889] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 815.253190][T12274] m920x_read = error: -19 [ 815.257503][T12274] dvb-usb: error -19 while querying for an remote control event. [ 815.276056][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.296852][ T5889] usb 4-1: config 0 descriptor?? [ 815.314119][ T5889] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 815.422513][ T5889] m920x_read = error: -19 [ 815.431790][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 815.459870][ T9883] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 815.601646][T15172] overlayfs: workdir and upperdir must be separate subtrees [ 815.631866][T12274] m920x_read = error: -19 [ 815.637145][T12274] dvb-usb: error -19 while querying for an remote control event. [ 815.815242][ T9883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 815.833761][ T9883] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 815.849245][ T9883] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 815.858669][ T9883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.858807][T12274] m920x_read = error: -19 [ 815.867065][ T9883] usb 6-1: Product: syz [ 815.876554][ T9883] usb 6-1: Manufacturer: syz [ 815.881613][ T9883] usb 6-1: SerialNumber: syz [ 815.898198][ T9] usb 4-1: USB disconnect, device number 64 [ 815.938096][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 816.058055][T12274] dvb-usb: error -19 while querying for an remote control event. [ 816.147296][T15166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.166690][T15166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.319441][T12274] m920x_read = error: -19 [ 816.324313][T12274] dvb-usb: error -19 while querying for an remote control event. [ 816.422746][T15188] xt_SECMARK: invalid mode: 2 [ 816.434446][T15188] netlink: 'syz.0.2390': attribute type 1 has an invalid length. [ 816.500173][T15189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9505 sclass=netlink_route_socket pid=15189 comm=syz.0.2390 [ 816.869952][ T5889] m920x_read = error: -19 [ 816.888856][T15188] bond1: entered promiscuous mode [ 816.894288][T15188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.918734][T15190] bond1: (slave bridge1): making interface the new active one [ 816.926232][T15190] bridge1: entered promiscuous mode [ 816.932657][T15190] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 817.083584][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 817.347438][T12274] m920x_read = error: -19 [ 817.352371][T12274] dvb-usb: error -19 while querying for an remote control event. [ 817.885980][T12274] m920x_read = error: -19 [ 817.890479][T12274] dvb-usb: error -19 while querying for an remote control event. [ 818.051030][T12274] m920x_read = error: -19 [ 818.109218][ T9883] usb 6-1: USB disconnect, device number 14 [ 818.121228][T15207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.295427][T12274] dvb-usb: error -19 while querying for an remote control event. [ 818.479252][ T5889] m920x_read = error: -19 [ 818.483834][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 818.773364][ T5889] m920x_read = error: -19 [ 818.792528][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 819.000156][ T30] audit: type=1400 audit(2000001141.750:1692): avc: denied { bind } for pid=15220 comm="syz.0.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 819.024290][ T30] audit: type=1400 audit(2000001141.750:1693): avc: denied { name_bind } for pid=15220 comm="syz.0.2399" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 819.047512][ T30] audit: type=1400 audit(2000001141.750:1694): avc: denied { node_bind } for pid=15220 comm="syz.0.2399" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 819.069022][ T5889] m920x_read = error: -19 [ 819.080485][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 819.727935][ T5889] m920x_read = error: -19 [ 819.732334][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 819.896816][T15237] overlayfs: workdir and upperdir must be separate subtrees [ 819.898349][ T5889] m920x_read = error: -19 [ 820.085333][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 820.094018][T15236] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 820.144914][T15236] netlink: 'syz.0.2402': attribute type 4 has an invalid length. [ 820.195846][T15236] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2402'. [ 820.241680][ T5889] m920x_read = error: -19 [ 820.247176][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 820.622970][ T30] audit: type=1400 audit(2000001143.451:1695): avc: denied { getopt } for pid=15250 comm="syz.4.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 820.683617][ T30] audit: type=1400 audit(2000001143.493:1696): avc: denied { setopt } for pid=15249 comm="syz.3.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 820.726769][ T5889] m920x_read = error: -19 [ 820.732314][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 820.888970][T12274] m920x_read = error: -19 [ 820.893423][T12274] dvb-usb: error -19 while querying for an remote control event. [ 821.283269][ T30] audit: type=1400 audit(2000001143.503:1697): avc: denied { read } for pid=15249 comm="syz.3.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 821.383568][ T30] audit: type=1400 audit(2000001143.598:1698): avc: denied { append } for pid=15259 comm="syz.0.2407" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 821.498866][T12274] m920x_read = error: -19 [ 821.833217][ T9599] block nbd0: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 90 seconds [ 821.843880][ T9599] block nbd0: Possible stuck request ffff888027060200: control (read@1024,1024B). Runtime 90 seconds [ 821.854975][ T9599] block nbd0: Possible stuck request ffff888027060400: control (read@2048,1024B). Runtime 90 seconds [ 821.865966][ T9599] block nbd0: Possible stuck request ffff888027060600: control (read@3072,1024B). Runtime 90 seconds [ 821.892698][T12274] dvb-usb: error -19 while querying for an remote control event. [ 822.121200][T12274] m920x_read = error: -19 [ 822.125571][T12274] dvb-usb: error -19 while querying for an remote control event. [ 822.152705][ T30] audit: type=1400 audit(2000001145.005:1699): avc: denied { listen } for pid=15241 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 822.205857][ T30] audit: type=1400 audit(2000001145.005:1700): avc: denied { accept } for pid=15241 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 822.309613][T12274] m920x_read = error: -19 [ 822.314624][T12274] dvb-usb: error -19 while querying for an remote control event. [ 822.852219][T12274] m920x_read = error: -19 [ 822.875640][T12274] dvb-usb: error -19 while querying for an remote control event. [ 822.889523][T15295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.966559][ T30] audit: type=1400 audit(2000001145.855:1701): avc: denied { read write } for pid=15286 comm="syz.6.2411" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 823.114187][T12274] m920x_read = error: -19 [ 823.118751][T12274] dvb-usb: error -19 while querying for an remote control event. [ 823.298891][T12274] m920x_read = error: -19 [ 823.303443][T12274] dvb-usb: error -19 while querying for an remote control event. [ 823.566576][T12274] m920x_read = error: -19 [ 823.570946][T12274] dvb-usb: error -19 while querying for an remote control event. [ 823.746792][T12274] m920x_read = error: -19 [ 823.751171][T12274] dvb-usb: error -19 while querying for an remote control event. [ 824.003814][T12274] m920x_read = error: -19 [ 824.008603][T12274] dvb-usb: error -19 while querying for an remote control event. [ 824.061420][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 824.061437][ T30] audit: type=1400 audit(2000001147.073:1704): avc: denied { connect } for pid=15310 comm="syz.4.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 824.223883][T12274] m920x_read = error: -19 [ 824.228292][T12274] dvb-usb: error -19 while querying for an remote control event. [ 824.422322][ T24] m920x_read = error: -19 [ 824.427846][ T24] dvb-usb: error -19 while querying for an remote control event. [ 824.651190][ T24] m920x_read = error: -19 [ 824.719774][ T24] dvb-usb: error -19 while querying for an remote control event. [ 824.956072][ T24] m920x_read = error: -19 [ 825.008171][ T24] dvb-usb: error -19 while querying for an remote control event. [ 825.280562][ T24] m920x_read = error: -19 [ 825.671218][T15330] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 825.681803][ T24] dvb-usb: error -19 while querying for an remote control event. [ 826.671646][T15335] geneve1: Caught tx_queue_len zero misconfig [ 826.679402][ T24] m920x_read = error: -19 [ 826.687356][ T24] dvb-usb: error -19 while querying for an remote control event. [ 826.861493][ T24] m920x_read = error: -19 [ 826.865986][ T24] dvb-usb: error -19 while querying for an remote control event. [ 827.118354][ T24] m920x_read = error: -19 [ 827.166542][ T24] dvb-usb: error -19 while querying for an remote control event. [ 827.423979][T12274] m920x_read = error: -19 [ 827.428498][T12274] dvb-usb: error -19 while querying for an remote control event. [ 827.604759][ T9883] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 827.701420][T12274] m920x_read = error: -19 [ 827.705869][T12274] dvb-usb: error -19 while querying for an remote control event. [ 827.765822][ T9883] usb 7-1: Using ep0 maxpacket: 8 [ 827.792131][ T9883] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 827.801433][ T9883] usb 7-1: config 0 has no interface number 0 [ 827.817927][ T9883] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 827.863101][ T9883] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 827.880765][ T24] m920x_read = error: -19 [ 827.885132][ T24] dvb-usb: error -19 while querying for an remote control event. [ 827.885980][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2429'. [ 827.902361][ T9883] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 827.914678][ T9883] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.936957][T15375] FAULT_INJECTION: forcing a failure. [ 827.936957][T15375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.950924][T15375] CPU: 1 UID: 0 PID: 15375 Comm: syz.3.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.950953][T15375] Tainted: [L]=SOFTLOCKUP [ 827.950959][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 827.950970][T15375] Call Trace: [ 827.950976][T15375] [ 827.950984][T15375] dump_stack_lvl+0x100/0x190 [ 827.951012][T15375] should_fail_ex.cold+0x5/0xa [ 827.951032][T15375] _copy_to_user+0x32/0xd0 [ 827.951058][T15375] simple_read_from_buffer+0xcb/0x170 [ 827.951081][T15375] proc_fail_nth_read+0x1af/0x230 [ 827.951106][T15375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.951131][T15375] ? rw_verify_area+0xce/0x6d0 [ 827.951148][T15375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.951198][T15375] vfs_read+0x1e4/0xb30 [ 827.951221][T15375] ? __pfx_vfs_read+0x10/0x10 [ 827.951237][T15375] ? find_held_lock+0x2b/0x80 [ 827.951262][T15375] ? __fget_files+0x215/0x3d0 [ 827.951287][T15375] ? __fget_files+0x21f/0x3d0 [ 827.951316][T15375] ksys_read+0x12a/0x250 [ 827.951334][T15375] ? __pfx_ksys_read+0x10/0x10 [ 827.951361][T15375] do_syscall_64+0xc9/0xf80 [ 827.951384][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.951401][T15375] RIP: 0033:0x7fa11155b78e [ 827.951416][T15375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.951432][T15375] RSP: 002b:00007fa10f7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.951450][T15375] RAX: ffffffffffffffda RBX: 00007fa10f7d56c0 RCX: 00007fa11155b78e [ 827.951462][T15375] RDX: 000000000000000f RSI: 00007fa10f7d50a0 RDI: 0000000000000003 [ 827.951473][T15375] RBP: 00007fa10f7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 827.951483][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.951494][T15375] R13: 00007fa111816128 R14: 00007fa111816090 R15: 00007ffdcb499388 [ 827.951520][T15375] [ 828.152850][ T9883] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 828.162023][ T9883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.194566][ T9883] usb 7-1: config 0 descriptor?? [ 828.214062][ T9883] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 828.278360][ T24] m920x_read = error: -19 [ 828.282792][ T24] dvb-usb: error -19 while querying for an remote control event. [ 828.294901][T15379] input: syz0 as /devices/virtual/input/input43 [ 828.413851][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 828.441985][T12274] m920x_read = error: -19 [ 828.446682][T12274] dvb-usb: error -19 while querying for an remote control event. [ 828.584719][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 828.609411][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.622380][T12274] m920x_read = error: -19 [ 828.665613][T12274] dvb-usb: error -19 while querying for an remote control event. [ 828.700952][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.892502][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.904636][T12274] m920x_read = error: -19 [ 828.927751][T12274] dvb-usb: error -19 while querying for an remote control event. [ 828.968200][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.012800][ T24] usb 6-1: Product: syz [ 829.032578][ T24] usb 6-1: Manufacturer: syz [ 829.061837][ T24] usb 6-1: SerialNumber: syz [ 829.146812][T12274] m920x_read = error: -19 [ 829.167974][ T24] cdc_ether 6-1:1.0: invalid descriptor buffer length [ 829.203579][T12274] dvb-usb: error -19 while querying for an remote control event. [ 829.225548][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 829.403992][ T24] m920x_read = error: -19 [ 829.415881][ T24] dvb-usb: error -19 while querying for an remote control event. [ 829.428607][ T9883] usb 6-1: USB disconnect, device number 15 [ 830.539553][ T5817] Bluetooth: hci7: command tx timeout [ 830.561085][ T24] m920x_read = error: -19 [ 830.563668][T15398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.589554][ T24] dvb-usb: error -19 while querying for an remote control event. [ 830.603555][T12274] usb 7-1: USB disconnect, device number 46 [ 830.688611][T12274] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 830.820432][T15408] geneve1: Caught tx_queue_len zero misconfig [ 830.870746][ T24] m920x_read = error: -19 [ 830.875293][ T24] dvb-usb: error -19 while querying for an remote control event. [ 831.204122][ T24] m920x_read = error: -19 [ 831.223147][ T24] dvb-usb: error -19 while querying for an remote control event. [ 831.404016][ T24] m920x_read = error: -19 [ 831.408415][ T24] dvb-usb: error -19 while querying for an remote control event. [ 831.643863][T12274] m920x_read = error: -19 [ 831.648660][T12274] dvb-usb: error -19 while querying for an remote control event. [ 831.899277][T12274] m920x_read = error: -19 [ 831.990207][T12274] dvb-usb: error -19 while querying for an remote control event. [ 832.000709][T15437] mkiss: ax0: crc mode is auto. [ 832.111011][T15440] netlink: 'syz.3.2440': attribute type 21 has an invalid length. [ 832.213611][T12274] m920x_read = error: -19 [ 832.233078][T12274] dvb-usb: error -19 while querying for an remote control event. [ 832.466570][T12274] m920x_read = error: -19 [ 832.480080][T12274] dvb-usb: error -19 while querying for an remote control event. [ 832.681058][ T30] audit: type=1400 audit(2000001156.113:1705): avc: denied { connect } for pid=15449 comm="syz.0.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 832.846257][T12274] m920x_read = error: -19 [ 832.850627][T12274] dvb-usb: error -19 while querying for an remote control event. [ 833.107228][T12274] m920x_read = error: -19 [ 833.116620][T15468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.264513][ T5889] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 833.273289][T12274] dvb-usb: error -19 while querying for an remote control event. [ 833.433321][ T5926] m920x_read = error: -19 [ 833.438073][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 833.598546][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.694119][ T5889] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 833.721771][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.823193][ T5926] m920x_read = error: -19 [ 833.827632][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 833.860103][ T5889] usb 7-1: config 0 descriptor?? [ 833.938963][T15486] 9p: Bad value for 'rfdno' [ 833.948982][ T5817] Bluetooth: hci7: link tx timeout [ 833.954499][ T5817] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 833.971081][T12444] Bluetooth: hci7: link tx timeout [ 833.976550][T12444] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 834.042741][ T5926] m920x_read = error: -19 [ 834.066241][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 834.242211][ T5926] m920x_read = error: -19 [ 834.246621][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 834.256861][T15498] FAULT_INJECTION: forcing a failure. [ 834.256861][T15498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.273200][T15498] CPU: 0 UID: 0 PID: 15498 Comm: syz.0.2453 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.273229][T15498] Tainted: [L]=SOFTLOCKUP [ 834.273235][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 834.273245][T15498] Call Trace: [ 834.273251][T15498] [ 834.273258][T15498] dump_stack_lvl+0x100/0x190 [ 834.273289][T15498] should_fail_ex.cold+0x5/0xa [ 834.273308][T15498] _copy_to_user+0x32/0xd0 [ 834.273335][T15498] simple_read_from_buffer+0xcb/0x170 [ 834.273359][T15498] proc_fail_nth_read+0x1af/0x230 [ 834.273385][T15498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.273410][T15498] ? rw_verify_area+0xce/0x6d0 [ 834.273427][T15498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.273450][T15498] vfs_read+0x1e4/0xb30 [ 834.273473][T15498] ? __pfx_vfs_read+0x10/0x10 [ 834.273489][T15498] ? find_held_lock+0x2b/0x80 [ 834.273513][T15498] ? __fget_files+0x215/0x3d0 [ 834.273539][T15498] ? __fget_files+0x21f/0x3d0 [ 834.273567][T15498] ksys_read+0x12a/0x250 [ 834.273587][T15498] ? __pfx_ksys_read+0x10/0x10 [ 834.273607][T15498] ? fput+0x79/0x100 [ 834.273635][T15498] do_syscall_64+0xc9/0xf80 [ 834.273658][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.273677][T15498] RIP: 0033:0x7f512fd5b78e [ 834.273693][T15498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 834.273710][T15498] RSP: 002b:00007f5130d33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.273729][T15498] RAX: ffffffffffffffda RBX: 00007f5130d346c0 RCX: 00007f512fd5b78e [ 834.273741][T15498] RDX: 000000000000000f RSI: 00007f5130d340a0 RDI: 0000000000000004 [ 834.273752][T15498] RBP: 00007f5130d34090 R08: 0000000000000000 R09: 0000000000000000 [ 834.273762][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.273773][T15498] R13: 00007f5130016038 R14: 00007f5130015fa0 R15: 00007fff127ff488 [ 834.273798][T15498] [ 834.282429][ T5889] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 834.347357][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 834.614320][T12274] m920x_read = error: -19 [ 834.618689][T12274] dvb-usb: error -19 while querying for an remote control event. [ 834.638503][ T5889] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0022/input/input44 [ 834.697922][T15508] netlink: 'syz.0.2456': attribute type 21 has an invalid length. [ 834.787135][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 834.804095][T12274] m920x_read = error: -19 [ 834.811066][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 834.818276][T12274] dvb-usb: error -19 while querying for an remote control event. [ 834.839958][ T5889] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 834.869167][ T5860] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 834.896814][ T9] usb 4-1: config 0 has no interface number 0 [ 834.915816][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 834.982337][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 834.994511][ T5889] m920x_read = error: -19 [ 835.003653][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 835.047745][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 835.063699][ T5860] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 835.074622][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 835.106381][ T5860] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 835.118860][ T9883] usb 7-1: USB disconnect, device number 47 [ 835.164124][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 835.177966][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.194961][ T5860] usb 5-1: Product: syz [ 835.199614][ T5860] usb 5-1: Manufacturer: syz [ 835.204218][ T5860] usb 5-1: SerialNumber: syz [ 835.205291][ T5889] m920x_read = error: -19 [ 835.209486][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 835.215860][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 835.251921][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.298944][ T9] usb 4-1: config 0 descriptor?? [ 835.332197][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 835.414259][T12274] m920x_read = error: -19 [ 835.418634][T12274] dvb-usb: error -19 while querying for an remote control event. [ 835.426802][ T5889] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 835.476288][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.521666][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.578609][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 835.598507][ T5889] usb 1-1: config 0 has no interface number 0 [ 835.608269][T12274] m920x_read = error: -19 [ 835.613129][T12274] dvb-usb: error -19 while querying for an remote control event. [ 835.632273][ T5889] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 835.646892][T12274] usb 4-1: USB disconnect, device number 65 [ 835.668184][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.692141][T12274] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 835.714701][ T5889] usb 1-1: Product: syz [ 835.740402][ T5889] usb 1-1: Manufacturer: syz [ 835.855437][ T794] m920x_read = error: -19 [ 835.860250][ T794] dvb-usb: error -19 while querying for an remote control event. [ 835.878014][ T5889] usb 1-1: SerialNumber: syz [ 835.913653][ T5889] usb 1-1: config 0 descriptor?? [ 836.026099][T12444] Bluetooth: hci7: command 0x0406 tx timeout [ 836.267183][ T794] m920x_read = error: -19 [ 836.271728][ T794] dvb-usb: error -19 while querying for an remote control event. [ 836.443034][ T794] m920x_read = error: -19 [ 836.447620][ T794] dvb-usb: error -19 while querying for an remote control event. [ 836.504465][ T5889] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 836.562599][T15538] mkiss: ax0: crc mode is auto. [ 836.632814][ T5889] m920x_read = error: -19 [ 836.637231][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 836.761457][ T9883] usb 1-1: USB disconnect, device number 32 [ 837.539711][ T5889] m920x_read = error: -19 [ 837.544634][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 837.720869][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 837.730940][ T5889] m920x_read = error: -19 [ 837.748060][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 837.757963][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2466'. [ 838.069017][T15560] input: syz1 as /devices/virtual/input/input45 [ 838.081383][T12274] m920x_read = error: -19 [ 838.085843][T12274] dvb-usb: error -19 while querying for an remote control event. [ 838.118844][ T5860] usb 5-1: reset high-speed USB device number 71 using dummy_hcd [ 838.138060][ T5889] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 838.182585][ T5860] usb 5-1: device reset changed ep0 maxpacket size! [ 838.208717][ T5860] usb 5-1: USB disconnect, device number 71 [ 838.291170][ T794] m920x_read = error: -19 [ 838.295672][ T794] dvb-usb: error -19 while querying for an remote control event. [ 838.317323][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.329957][T12274] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 838.337682][ T5889] usb 1-1: config 0 has no interface number 0 [ 838.351466][ T5860] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 838.351765][ T5889] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 838.368560][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.376917][ T5889] usb 1-1: Product: syz [ 838.381056][ T5889] usb 1-1: Manufacturer: syz [ 838.385975][ T5889] usb 1-1: SerialNumber: syz [ 838.391972][ T5889] usb 1-1: config 0 descriptor?? [ 838.462004][ T794] m920x_read = error: -19 [ 838.466478][ T794] dvb-usb: error -19 while querying for an remote control event. [ 838.480545][T15571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.494775][T15571] netlink: 'syz.5.2469': attribute type 10 has an invalid length. [ 838.509809][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.519876][T15571] bond0: (slave team0): Enslaving as an active interface with an up link [ 838.559421][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 838.564792][T12274] usb 7-1: Using ep0 maxpacket: 8 [ 838.576693][ T5860] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 838.577907][T12274] usb 7-1: unable to get BOS descriptor or descriptor too short [ 838.584965][ T5860] usb 5-1: config 0 has no interface number 0 [ 838.607119][ T5889] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 838.616340][ T5860] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 838.616376][ T5860] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 838.616400][ T5860] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 838.616427][ T5860] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.616465][ T5860] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 838.616486][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.665318][ T5860] usb 5-1: config 0 descriptor?? [ 838.694983][T12274] usb 7-1: config 4 interface 0 has no altsetting 0 [ 838.704094][ T5860] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 838.706673][T12274] usb 7-1: string descriptor 0 read error: -22 [ 838.719263][T12274] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 838.728712][ T794] m920x_read = error: -19 [ 838.733091][ T794] dvb-usb: error -19 while querying for an remote control event. [ 838.745419][ T5889] usb 1-1: USB disconnect, device number 33 [ 838.753045][T12274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.774143][T12274] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 838.797450][T12274] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 838.813405][T12274] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 838.821589][T12274] usb 7-1: media controller created [ 838.845082][T12274] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 838.890518][ T24] m920x_read = error: -19 [ 838.896019][ T24] dvb-usb: error -19 while querying for an remote control event. [ 838.974720][T12274] zl10353_read_register: readreg error (reg=127, ret==0) [ 839.039578][T12274] usb 7-1: USB disconnect, device number 48 [ 839.056052][ T5889] m920x_read = error: -19 [ 839.060432][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 839.197351][T15574] netlink: 'syz.3.2470': attribute type 2 has an invalid length. [ 839.205738][T15574] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2470'. [ 839.265996][T15576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'. [ 839.322454][T15576] usb usb8: usbfs: process 15576 (syz.0.2471) did not claim interface 0 before use [ 839.340211][T12274] m920x_read = error: -19 [ 839.344632][T12274] dvb-usb: error -19 while querying for an remote control event. [ 839.500134][T12274] m920x_read = error: -19 [ 839.504806][T12274] dvb-usb: error -19 while querying for an remote control event. [ 839.706596][T12274] m920x_read = error: -19 [ 839.711573][T12274] dvb-usb: error -19 while querying for an remote control event. [ 839.861708][ T5889] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 839.910106][T12274] m920x_read = error: -19 [ 839.915140][T12274] dvb-usb: error -19 while querying for an remote control event. [ 840.014092][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 840.058027][ T5889] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 840.150657][ T5889] usb 6-1: config 0 has no interface number 0 [ 840.158941][ T794] m920x_read = error: -19 [ 840.164550][ T794] dvb-usb: error -19 while querying for an remote control event. [ 840.215758][ T5889] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.306518][ T5889] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 840.337604][ T5889] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 840.356920][T12274] m920x_read = error: -19 [ 840.367145][T12274] dvb-usb: error -19 while querying for an remote control event. [ 840.387189][ T5889] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 840.437198][ T5889] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 840.476231][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.522379][ T5889] usb 6-1: config 0 descriptor?? [ 840.540878][ T5889] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 840.555658][ T1846] usb 5-1: USB disconnect, device number 72 [ 840.561867][ T5860] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 840.567560][T12274] m920x_read = error: -19 [ 840.573108][ T1846] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 840.577377][T12274] dvb-usb: error -19 while querying for an remote control event. [ 840.608766][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2476'. [ 840.676931][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 840.686627][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2478'. [ 840.729887][T12274] usb 6-1: USB disconnect, device number 16 [ 840.749682][T12274] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 840.756597][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 840.852416][ T5889] m920x_read = error: -19 [ 840.859125][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 840.866757][ T5860] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 840.893095][ T5860] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 841.346462][ T5889] m920x_read = error: -19 [ 841.351521][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 841.363723][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.386494][ T5860] usb 7-1: Product: syz [ 841.393729][ T5860] usb 7-1: Manufacturer: syz [ 841.404095][ T5860] usb 7-1: SerialNumber: syz [ 841.515825][T12274] m920x_read = error: -19 [ 841.521873][T15609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.529800][T12274] dvb-usb: error -19 while querying for an remote control event. [ 841.597588][T15612] netlink: 'syz.0.2482': attribute type 2 has an invalid length. [ 841.608857][T15586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.619971][T15586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.629378][T15612] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2482'. [ 841.690334][T12274] m920x_read = error: -19 [ 841.694780][T12274] dvb-usb: error -19 while querying for an remote control event. [ 841.952680][T12274] m920x_read = error: -19 [ 841.961399][T12274] dvb-usb: error -19 while querying for an remote control event. [ 842.410768][T15620] overlayfs: workdir and upperdir must be separate subtrees [ 842.719187][T12274] m920x_read = error: -19 [ 842.723833][T12274] dvb-usb: error -19 while querying for an remote control event. [ 842.893397][T12274] m920x_read = error: -19 [ 842.897781][T12274] dvb-usb: error -19 while querying for an remote control event. [ 842.960851][T15629] FAULT_INJECTION: forcing a failure. [ 842.960851][T15629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.004243][T15629] CPU: 0 UID: 0 PID: 15629 Comm: syz.0.2486 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.004262][T15629] Tainted: [L]=SOFTLOCKUP [ 843.004266][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 843.004273][T15629] Call Trace: [ 843.004277][T15629] [ 843.004283][T15629] dump_stack_lvl+0x100/0x190 [ 843.004302][T15629] should_fail_ex.cold+0x5/0xa [ 843.004315][T15629] _copy_to_user+0x32/0xd0 [ 843.004332][T15629] simple_read_from_buffer+0xcb/0x170 [ 843.004350][T15629] proc_fail_nth_read+0x1af/0x230 [ 843.004367][T15629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.004384][T15629] ? rw_verify_area+0xce/0x6d0 [ 843.004395][T15629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.004411][T15629] vfs_read+0x1e4/0xb30 [ 843.004425][T15629] ? __pfx_vfs_read+0x10/0x10 [ 843.004436][T15629] ? find_held_lock+0x2b/0x80 [ 843.004456][T15629] ? __fget_files+0x215/0x3d0 [ 843.004473][T15629] ? __fget_files+0x21f/0x3d0 [ 843.004491][T15629] ksys_read+0x12a/0x250 [ 843.004504][T15629] ? __pfx_ksys_read+0x10/0x10 [ 843.004516][T15629] ? fput+0x79/0x100 [ 843.004534][T15629] do_syscall_64+0xc9/0xf80 [ 843.004548][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.004560][T15629] RIP: 0033:0x7f512fd5b78e [ 843.004569][T15629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 843.004580][T15629] RSP: 002b:00007f5130d33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.004593][T15629] RAX: ffffffffffffffda RBX: 00007f5130d346c0 RCX: 00007f512fd5b78e [ 843.004600][T15629] RDX: 000000000000000f RSI: 00007f5130d340a0 RDI: 0000000000000004 [ 843.004606][T15629] RBP: 00007f5130d34090 R08: 0000000000000000 R09: 0000000000000000 [ 843.004613][T15629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.004620][T15629] R13: 00007f5130016038 R14: 00007f5130015fa0 R15: 00007fff127ff488 [ 843.004640][T15629] [ 843.090642][T12274] m920x_read = error: -19 [ 843.227343][T12274] dvb-usb: error -19 while querying for an remote control event. [ 843.357181][ T794] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 843.594264][ T794] usb 6-1: Using ep0 maxpacket: 8 [ 843.615683][ T794] usb 6-1: unable to get BOS descriptor or descriptor too short [ 843.654591][ T794] usb 6-1: config 4 interface 0 has no altsetting 0 [ 843.664502][T12274] m920x_read = error: -19 [ 843.668923][T12274] dvb-usb: error -19 while querying for an remote control event. [ 843.695567][ T794] usb 6-1: string descriptor 0 read error: -22 [ 843.709811][ T794] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 843.718881][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.765183][ T30] audit: type=1400 audit(2000001167.756:1706): avc: denied { getopt } for pid=15637 comm="syz.6.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 843.799114][ T794] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 843.843422][T12274] m920x_read = error: -19 [ 843.847787][T12274] dvb-usb: error -19 while querying for an remote control event. [ 843.856505][ T794] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 843.872163][ T794] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 843.879487][ T794] usb 6-1: media controller created [ 843.890913][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 843.897449][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 844.014954][T12274] m920x_read = error: -19 [ 844.019348][T12274] dvb-usb: error -19 while querying for an remote control event. [ 844.052759][ T794] zl10353_read_register: readreg error (reg=127, ret==0) [ 844.093199][ T794] usb 6-1: USB disconnect, device number 17 [ 844.096229][ T5860] usb 7-1: USB disconnect, device number 49 [ 844.120477][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.140418][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 844.150447][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.164167][ T9] usb 5-1: config 0 descriptor?? [ 844.178483][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 844.500582][T12274] m920x_read = error: -19 [ 844.505154][T12274] dvb-usb: error -19 while querying for an remote control event. [ 844.567158][ T5860] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 844.671694][ T794] m920x_read = error: -19 [ 844.677301][ T794] dvb-usb: error -19 while querying for an remote control event. [ 844.716814][T15654] mkiss: ax0: crc mode is auto. [ 844.726657][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 844.739923][ T5860] usb 7-1: not running at top speed; connect to a high speed hub [ 844.755266][ T5860] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 844.765638][ T5860] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 844.777616][T15655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.786501][ T5860] usb 7-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 844.799700][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.814865][ T5860] usb 7-1: Product: syz [ 844.820645][ T5860] usb 7-1: Manufacturer: syz [ 844.827602][ T5860] usb 7-1: SerialNumber: syz [ 844.843200][ T794] m920x_read = error: -19 [ 844.864004][ T794] dvb-usb: error -19 while querying for an remote control event. [ 844.905959][ T9] usb 5-1: USB disconnect, device number 73 [ 845.064878][T15665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.071989][ T794] m920x_read = error: -19 [ 845.101637][ T794] dvb-usb: error -19 while querying for an remote control event. [ 845.251966][ T5860] usb 7-1: USB disconnect, device number 50 [ 845.286786][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.312770][ T794] m920x_read = error: -19 [ 845.328092][ T794] dvb-usb: error -19 while querying for an remote control event. [ 845.338487][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 845.494978][ T9] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 845.500124][ T794] m920x_read = error: -19 [ 845.514747][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.527005][ T794] dvb-usb: error -19 while querying for an remote control event. [ 845.538488][ T9] usb 5-1: Product: syz [ 845.640505][ T9] usb 5-1: Manufacturer: syz [ 845.652299][ T9] usb 5-1: SerialNumber: syz [ 845.671989][ T9] usb 5-1: config 0 descriptor?? [ 845.711035][T15674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.841189][ T794] m920x_read = error: -19 [ 845.859133][ T794] dvb-usb: error -19 while querying for an remote control event. [ 845.899502][T15674] netlink: 'syz.3.2501': attribute type 10 has an invalid length. [ 845.986143][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 846.001067][ T30] audit: type=1400 audit(2000001170.098:1707): avc: denied { connect } for pid=15675 comm="syz.6.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.034985][ T5926] m920x_read = error: -19 [ 846.084809][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 846.144628][T15674] team0: left allmulticast mode [ 846.163631][T15674] team0: left promiscuous mode [ 846.196628][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 846.216410][T15674] bridge0: port 1(team0) entered disabled state [ 846.261174][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 846.271816][ T5926] m920x_read = error: -19 [ 846.276187][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 846.314587][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 846.326207][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.348125][ T9] usb 1-1: Product: syz [ 846.377441][ T9] usb 1-1: Manufacturer: syz [ 846.396098][ T9] usb 1-1: SerialNumber: syz [ 846.444649][T12274] m920x_read = error: -19 [ 846.449699][T12274] dvb-usb: error -19 while querying for an remote control event. [ 846.617004][T15696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.634342][ T5926] m920x_read = error: -19 [ 846.700956][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 846.701566][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.752717][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.919523][T12274] m920x_read = error: -19 [ 846.930276][T12274] dvb-usb: error -19 while querying for an remote control event. [ 847.191484][ T5926] m920x_read = error: -19 [ 847.195940][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 847.610283][ T5926] m920x_read = error: -19 [ 847.614682][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 847.786601][ T5926] m920x_read = error: -19 [ 847.790992][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 847.921232][ T1846] usb 5-1: USB disconnect, device number 74 [ 848.050338][ T794] m920x_read = error: -19 [ 848.062277][ T794] dvb-usb: error -19 while querying for an remote control event. [ 848.273987][ T794] m920x_read = error: -19 [ 848.303860][ T794] dvb-usb: error -19 while querying for an remote control event. [ 848.480159][ T30] audit: type=1400 audit(2000001172.701:1708): avc: denied { getopt } for pid=15741 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 848.515478][ T794] m920x_read = error: -19 [ 848.531460][ T794] dvb-usb: error -19 while querying for an remote control event. [ 848.710273][ T794] m920x_read = error: -19 [ 848.716271][ T794] dvb-usb: error -19 while querying for an remote control event. [ 849.408332][ T794] m920x_read = error: -19 [ 849.431023][ T794] dvb-usb: error -19 while querying for an remote control event. [ 849.639794][T15765] netlink: 'syz.0.2511': attribute type 21 has an invalid length. [ 849.661051][ T5889] m920x_read = error: -19 [ 849.668135][T15770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2512'. [ 849.676710][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 849.697902][ T9] usb 1-1: USB disconnect, device number 34 [ 849.872247][ T5889] m920x_read = error: -19 [ 849.876625][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 850.073914][ T5889] m920x_read = error: -19 [ 850.095699][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 850.292083][ T5889] m920x_read = error: -19 [ 850.392865][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 850.436196][ T9599] block nbd0: Possible stuck request ffff888027060000: control (read@0,1024B). Runtime 120 seconds [ 850.447041][ T9599] block nbd0: Possible stuck request ffff888027060200: control (read@1024,1024B). Runtime 120 seconds [ 850.458114][ T9599] block nbd0: Possible stuck request ffff888027060400: control (read@2048,1024B). Runtime 120 seconds [ 850.491305][ T9599] block nbd0: Possible stuck request ffff888027060600: control (read@3072,1024B). Runtime 120 seconds [ 850.513363][T15798] FAULT_INJECTION: forcing a failure. [ 850.513363][T15798] name failslab, interval 1, probability 0, space 0, times 0 [ 850.526157][T15798] CPU: 0 UID: 0 PID: 15798 Comm: syz.4.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.526186][T15798] Tainted: [L]=SOFTLOCKUP [ 850.526192][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 850.526203][T15798] Call Trace: [ 850.526210][T15798] [ 850.526217][T15798] dump_stack_lvl+0x100/0x190 [ 850.526245][T15798] should_fail_ex.cold+0x5/0xa [ 850.526267][T15798] should_failslab+0xc2/0x120 [ 850.526291][T15798] __kvmalloc_node_noprof+0x101/0xac0 [ 850.526313][T15798] ? nft_pipapo_estimate+0x312/0x400 [ 850.526333][T15798] ? nf_tables_newset+0x2520/0x4250 [ 850.526361][T15798] ? nf_tables_newset+0x2520/0x4250 [ 850.526381][T15798] nf_tables_newset+0x2520/0x4250 [ 850.526419][T15798] ? __pfx_nf_tables_newset+0x10/0x10 [ 850.526444][T15798] ? __nla_validate_parse+0x3cd/0x28b0 [ 850.526461][T15798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 850.526489][T15798] ? __nla_validate_parse+0x1e7/0x28b0 [ 850.526526][T15798] ? __nla_parse+0x40/0x60 [ 850.526546][T15798] nfnetlink_rcv_batch+0x1418/0x2880 [ 850.526581][T15798] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 850.526601][T15798] ? lockdep_hardirqs_on+0x78/0x100 [ 850.526636][T15798] ? avc_has_perm_noaudit+0x145/0x3b0 [ 850.526688][T15798] ? __nla_parse+0x40/0x60 [ 850.526708][T15798] nfnetlink_rcv+0x3bd/0x440 [ 850.526728][T15798] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 850.526754][T15798] netlink_unicast+0x5aa/0x870 [ 850.526784][T15798] ? __pfx_netlink_unicast+0x10/0x10 [ 850.526812][T15798] ? __alloc_skb+0x220/0x410 [ 850.526840][T15798] netlink_sendmsg+0x8b0/0xda0 [ 850.526870][T15798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.526894][T15798] ? __might_fault+0xb0/0x140 [ 850.526923][T15798] ____sys_sendmsg+0xa54/0xc30 [ 850.526943][T15798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.526969][T15798] ? __lock_acquire+0x4a5/0x2630 [ 850.526990][T15798] ___sys_sendmsg+0x190/0x1e0 [ 850.527010][T15798] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.527041][T15798] ? find_held_lock+0x2b/0x80 [ 850.527081][T15798] __sys_sendmsg+0x170/0x220 [ 850.527105][T15798] ? __pfx___sys_sendmsg+0x10/0x10 [ 850.527138][T15798] ? rcu_is_watching+0x12/0xc0 [ 850.527167][T15798] do_syscall_64+0xc9/0xf80 [ 850.527191][T15798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.527209][T15798] RIP: 0033:0x7f0c5ed9aeb9 [ 850.527225][T15798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.527242][T15798] RSP: 002b:00007f0c5fcaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.527260][T15798] RAX: ffffffffffffffda RBX: 00007f0c5f016180 RCX: 00007f0c5ed9aeb9 [ 850.527272][T15798] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 850.527283][T15798] RBP: 00007f0c5fcaf090 R08: 0000000000000000 R09: 0000000000000000 [ 850.527293][T15798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.527303][T15798] R13: 00007f0c5f016218 R14: 00007f0c5f016180 R15: 00007ffe837e80a8 [ 850.527329][T15798] [ 850.823238][ T5889] m920x_read = error: -19 [ 850.827651][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 850.986797][ T794] m920x_read = error: -19 [ 850.991671][ T794] dvb-usb: error -19 while querying for an remote control event. [ 851.323099][T15805] netlink: 'syz.5.2517': attribute type 10 has an invalid length. [ 851.491523][ T794] m920x_read = error: -19 [ 851.495889][ T794] dvb-usb: error -19 while querying for an remote control event. [ 851.599795][T15804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.669444][ T794] m920x_read = error: -19 [ 851.673887][T15815] syz_tun: entered allmulticast mode [ 851.689190][T15815] dvmrp6: entered allmulticast mode [ 851.739026][T15816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.755181][ T794] dvb-usb: error -19 while querying for an remote control event. [ 851.834304][T12444] Bluetooth: hci5: command 0x0406 tx timeout [ 851.862906][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 852.023673][ T794] m920x_read = error: -19 [ 852.028418][ T794] dvb-usb: error -19 while querying for an remote control event. [ 852.064493][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 852.073218][ T9] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 852.092958][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 852.102973][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.112378][ T9] usb 7-1: Product: syz [ 852.116610][ T9] usb 7-1: Manufacturer: syz [ 852.122749][ T9] usb 7-1: SerialNumber: syz [ 852.291115][ T5860] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 852.428662][ T794] m920x_read = error: -19 [ 852.434160][ T794] dvb-usb: error -19 while querying for an remote control event. [ 852.634487][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 852.637917][ T794] m920x_read = error: -19 [ 852.649228][ T794] dvb-usb: error -19 while querying for an remote control event. [ 852.669499][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.682652][T15812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.704472][ T5860] usb 4-1: config 4 interface 0 has no altsetting 0 [ 852.774508][T15812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.776428][ T5860] usb 4-1: string descriptor 0 read error: -22 [ 852.799218][ T5860] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 852.806321][ T794] m920x_read = error: -19 [ 852.809641][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.820711][ T794] dvb-usb: error -19 while querying for an remote control event. [ 852.835660][ T5860] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 852.868186][ T5860] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.910508][ T5860] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 852.927542][ T5860] usb 4-1: media controller created [ 852.949994][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.005794][ T794] m920x_read = error: -19 [ 853.010339][ T794] dvb-usb: error -19 while querying for an remote control event. [ 853.101962][ T5860] zl10353_read_register: readreg error (reg=127, ret==0) [ 853.120464][T15835] 9p: Bad value for 'rfdno' [ 853.291636][ T794] m920x_read = error: -19 [ 853.318535][ T794] dvb-usb: error -19 while querying for an remote control event. [ 853.554020][T15842] netlink: 'syz.0.2528': attribute type 21 has an invalid length. [ 853.587529][ T794] m920x_read = error: -19 [ 853.696612][ T794] dvb-usb: error -19 while querying for an remote control event. [ 853.829431][ T5860] usb 4-1: USB disconnect, device number 66 [ 853.864241][ T5889] m920x_read = error: -19 [ 853.868651][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 853.882405][ T30] audit: type=1400 audit(2000001178.360:1709): avc: denied { setopt } for pid=15847 comm="syz.4.2529" lport=57993 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 853.934821][ T30] audit: type=1400 audit(2000001178.360:1710): avc: denied { getopt } for pid=15847 comm="syz.4.2529" lport=57993 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 854.072204][ T5889] m920x_read = error: -19 [ 854.077779][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 854.806757][ T5926] m920x_read = error: -19 [ 854.811135][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 855.023172][ T5889] m920x_read = error: -19 [ 855.034025][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 855.045578][ T9] usb 7-1: reset high-speed USB device number 51 using dummy_hcd [ 855.457068][ T5889] m920x_read = error: -19 [ 855.461451][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 855.474295][ T9] usb 7-1: device reset changed ep0 maxpacket size! [ 855.538982][ T9] usb 7-1: USB disconnect, device number 51 [ 856.047077][ T5889] m920x_read = error: -19 [ 856.051459][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 856.282340][ T794] m920x_read = error: -19 [ 856.286708][ T794] dvb-usb: error -19 while querying for an remote control event. [ 856.306336][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 856.463335][ T794] m920x_read = error: -19 [ 856.467685][ T794] dvb-usb: error -19 while querying for an remote control event. [ 856.471840][T15882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.491014][T15882] netlink: 'syz.5.2538': attribute type 10 has an invalid length. [ 856.523702][T15883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.534040][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 856.557006][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 856.600173][ T9] usb 7-1: config 0 has no interface number 0 [ 856.635816][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 856.663071][ T5889] m920x_read = error: -19 [ 856.667461][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 856.681166][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 856.683027][T12444] Bluetooth: hci6: command 0x0406 tx timeout [ 856.726668][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 856.777200][ T5860] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 856.808761][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 856.833020][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 856.856107][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.879068][ T9] usb 7-1: config 0 descriptor?? [ 856.892630][ T5889] m920x_read = error: -19 [ 856.895476][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 856.899066][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 856.948693][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 856.955929][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 856.965541][ T5860] usb 5-1: config 4 interface 0 has no altsetting 0 [ 857.084938][ T794] m920x_read = error: -19 [ 857.101277][ T794] dvb-usb: error -19 while querying for an remote control event. [ 857.156060][ T5860] usb 5-1: string descriptor 0 read error: -22 [ 857.163162][ T5860] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 857.174604][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.187186][ T794] usb 7-1: USB disconnect, device number 52 [ 857.198857][ T794] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 857.204854][ T5860] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 857.249196][ T5860] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 857.263817][ T5889] m920x_read = error: -19 [ 857.265387][ T5860] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 857.268416][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 857.276220][ T5860] usb 5-1: media controller created [ 857.315425][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.358450][ T1846] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 858.351802][ T794] m920x_read = error: -19 [ 858.370961][ T5860] zl10353_read_register: readreg error (reg=127, ret==0) [ 858.378859][T15894] netlink: 'syz.5.2542': attribute type 1 has an invalid length. [ 858.439252][ T794] dvb-usb: error -19 while querying for an remote control event. [ 858.443073][ T5860] usb 5-1: USB disconnect, device number 75 [ 858.457098][ T1846] usb 1-1: Using ep0 maxpacket: 8 [ 858.489483][ T1846] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 858.519983][ T1846] usb 1-1: config 0 has no interface number 0 [ 858.533221][ T1846] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 858.552146][ T1846] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 858.570144][ T1846] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 858.585931][ T1846] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 858.604410][ T1846] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 858.614035][ T1846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.624476][ T1846] usb 1-1: config 0 descriptor?? [ 858.635004][ T794] m920x_read = error: -19 [ 858.635078][ T1846] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 858.644118][ T794] dvb-usb: error -19 while querying for an remote control event. [ 858.777490][ T1846] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 858.834558][ T794] m920x_read = error: -19 [ 858.838936][ T794] dvb-usb: error -19 while querying for an remote control event. [ 859.035331][ T794] m920x_read = error: -19 [ 859.044062][ T1846] usb 7-1: Using ep0 maxpacket: 32 [ 859.069666][ T1846] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 859.073654][ T794] dvb-usb: error -19 while querying for an remote control event. [ 859.078416][ T1846] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 859.078442][ T1846] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 859.078462][ T1846] usb 7-1: config 1 has no interface number 0 [ 859.078544][ T1846] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.078570][ T1846] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 859.078607][ T1846] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 859.078629][ T1846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.088167][ T1846] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 859.377502][ T794] m920x_read = error: -19 [ 859.384325][ T794] dvb-usb: error -19 while querying for an remote control event. [ 859.765686][ T1846] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 859.890224][ T794] m920x_read = error: -19 [ 859.900748][ T794] dvb-usb: error -19 while querying for an remote control event. [ 860.048052][ T9883] usb 1-1: USB disconnect, device number 35 [ 860.063500][ T794] m920x_read = error: -19 [ 860.066971][ T9883] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 860.122666][ T794] dvb-usb: error -19 while querying for an remote control event. [ 860.151740][ T794] usb 7-1: USB disconnect, device number 53 [ 860.181501][ T794] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 860.202911][ T30] audit: type=1400 audit(2000001185.017:1711): avc: denied { write } for pid=15909 comm="syz.4.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 860.225497][T15912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 860.232026][T15912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 860.252935][ T1846] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 860.284228][T15912] vhci_hcd vhci_hcd.0: Device attached [ 860.292218][ T5926] m920x_read = error: -19 [ 860.301486][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 860.406094][ T1846] usb 4-1: device descriptor read/64, error -71 [ 860.463796][ T794] m920x_read = error: -19 [ 860.468200][ T794] dvb-usb: error -19 while querying for an remote control event. [ 860.500965][T15921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.520364][ T9883] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 860.568243][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 860.615978][ T5860] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 860.634882][ T794] m920x_read = error: -19 [ 860.639354][ T794] dvb-usb: error -19 while querying for an remote control event. [ 860.645911][ T1846] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 860.713148][ T9] usb 1-1: config 0 has no interfaces? [ 860.720023][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 860.729626][ T9] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 860.737905][ T9] usb 1-1: Manufacturer: syz [ 860.744575][ T9] usb 1-1: config 0 descriptor?? [ 860.759680][ T5860] usb 5-1: config 0 has no interfaces? [ 860.765335][ T5860] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 860.774638][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.782905][ T1846] usb 4-1: device descriptor read/64, error -71 [ 860.793091][ T5860] usb 5-1: config 0 descriptor?? [ 860.806148][ T794] m920x_read = error: -19 [ 860.817359][ T794] dvb-usb: error -19 while querying for an remote control event. [ 860.892385][ T1846] usb usb4-port1: attempt power cycle [ 860.987270][ T794] m920x_read = error: -19 [ 860.991643][ T794] dvb-usb: error -19 while querying for an remote control event. [ 861.014307][ T5860] usb 5-1: USB disconnect, device number 76 [ 861.022020][T15917] vivid-000: disconnect [ 861.031157][T15913] usb 33-1: recv xbuf, 0 [ 861.033314][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.044825][T15196] vhci_hcd vhci_hcd.0: stop threads [ 861.046338][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.062905][T15196] vhci_hcd vhci_hcd.0: release socket [ 861.072132][T15196] vhci_hcd vhci_hcd.0: disconnect device [ 861.110934][ T9883] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 861.159610][ T794] m920x_read = error: -19 [ 861.165844][ T794] dvb-usb: error -19 while querying for an remote control event. [ 861.219316][T15930] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2555'. [ 861.228853][ T1846] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 861.238185][T15930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2555'. [ 861.263826][ T1846] usb 4-1: device descriptor read/8, error -71 [ 861.331866][ T5926] m920x_read = error: -19 [ 861.336623][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 861.425441][ T794] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 861.510477][ T5926] m920x_read = error: -19 [ 861.516859][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 861.606288][ T794] usb 7-1: Using ep0 maxpacket: 8 [ 861.641634][ T794] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 861.689992][ T794] usb 7-1: config 0 has no interface number 0 [ 861.709519][ T5926] m920x_read = error: -19 [ 861.750064][ T794] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.766988][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 861.771947][ T1846] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 861.791682][ T794] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 861.804272][ T794] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 861.818254][ T794] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 861.834540][ T1846] usb 4-1: device descriptor read/8, error -71 [ 861.834889][ T794] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 861.850390][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.860722][ T794] usb 7-1: config 0 descriptor?? [ 861.871347][ T794] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 861.930545][ T5926] m920x_read = error: -19 [ 861.934888][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 861.948362][T15938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.961974][T15938] netlink: 'syz.4.2557': attribute type 10 has an invalid length. [ 861.977081][T15938] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.987220][T15938] bond0: (slave team0): Enslaving as an active interface with an up link [ 862.036119][ T1846] usb usb4-port1: unable to enumerate USB device [ 862.091938][ T5926] m920x_read = error: -19 [ 862.157687][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 862.169554][ T794] usb 7-1: USB disconnect, device number 54 [ 862.169641][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 862.176232][T15928] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19 [ 862.329037][ T794] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 862.349578][ T5926] m920x_read = error: -19 [ 862.353974][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 862.520527][ T5926] m920x_read = error: -19 [ 862.524891][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 862.996027][ T794] m920x_read = error: -19 [ 863.000810][ T794] dvb-usb: error -19 while querying for an remote control event. [ 863.096592][T15911] vivid-000: reconnect [ 863.105829][ T794] usb 1-1: USB disconnect, device number 36 [ 863.159091][ T5926] m920x_read = error: -19 [ 863.167664][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 863.330831][ T794] m920x_read = error: -19 [ 863.550613][ T794] dvb-usb: error -19 while querying for an remote control event. [ 863.578391][ T5926] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 863.724770][ T794] m920x_read = error: -19 [ 863.867650][ T794] dvb-usb: error -19 while querying for an remote control event. [ 863.875579][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 863.927759][ T5926] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 864.032800][ T5926] usb 7-1: config 0 has no interface number 0 [ 864.104240][ T794] m920x_read = error: -19 [ 864.141331][ T794] dvb-usb: error -19 while querying for an remote control event. [ 864.199178][ T5926] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.404819][ T5926] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 864.416877][ T5926] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 864.461641][ T5926] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 864.491886][ T5926] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 864.512467][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.540136][ T24] m920x_read = error: -19 [ 864.546517][ T5926] usb 7-1: config 0 descriptor?? [ 864.558309][ T24] dvb-usb: error -19 while querying for an remote control event. [ 864.574702][ T5926] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 864.809844][ T794] m920x_read = error: -19 [ 864.865864][ T794] dvb-usb: error -19 while querying for an remote control event. [ 864.950866][ T1846] usb 7-1: USB disconnect, device number 55 [ 865.009588][ T1846] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 865.158193][ T794] m920x_read = error: -19 [ 865.171485][ T794] dvb-usb: error -19 while querying for an remote control event. [ 865.277410][T15982] netlink: 'syz.3.2565': attribute type 10 has an invalid length. [ 865.650287][T15982] macvlan0: entered promiscuous mode [ 865.670516][ T5926] m920x_read = error: -19 [ 865.676576][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 865.742163][T15984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.806624][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 865.844609][T12274] m920x_read = error: -19 [ 865.849043][T12274] dvb-usb: error -19 while querying for an remote control event. [ 866.009767][T12274] m920x_read = error: -19 [ 866.031640][T12274] dvb-usb: error -19 while querying for an remote control event. [ 866.078799][ T24] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 866.131683][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.900151][ T794] m920x_read = error: -19 [ 866.904648][ T794] dvb-usb: error -19 while querying for an remote control event. [ 866.912512][ T24] usb 6-1: Product: syz [ 866.916676][ T24] usb 6-1: Manufacturer: syz [ 866.921580][ T24] usb 6-1: SerialNumber: syz [ 866.972035][T15990] binder: 15989:15990 ioctl c02464bb 200000000080 returned -22 [ 866.980593][T15990] loop9: detected capacity change from 0 to 7 [ 866.987273][T15990] buffer_io_error: 6 callbacks suppressed [ 866.987284][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.000913][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.008785][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.016810][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.024612][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.032454][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.040262][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.048062][T15990] ldm_validate_partition_table(): Disk read failed. [ 867.054665][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.062449][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.070271][T15990] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.078100][T15990] Dev loop9: unable to read RDB block 0 [ 867.083993][T15990] loop9: unable to read partition table [ 867.089687][T15990] loop9: partition table beyond EOD, truncated [ 867.095882][T15990] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 867.095882][T15990] ) failed (rc=-5) [ 867.109354][ T794] m920x_read = error: -19 [ 867.134466][ T794] dvb-usb: error -19 while querying for an remote control event. [ 867.145853][ T24] usb 6-1: config 0 descriptor?? [ 867.175451][T12444] Bluetooth: hci10: urb ffff88802da6ba00 submission failed (2) [ 867.340304][ T5926] m920x_read = error: -19 [ 867.347408][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 867.435303][ T24] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 867.502348][ T31] INFO: task syz.2.2047:13509 blocked for more than 143 seconds. [ 867.756839][ T31] Tainted: G L syzkaller #0 [ 867.773359][ T5860] usb 6-1: USB disconnect, device number 18 [ 867.777960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 867.797794][ T794] m920x_read = error: -19 [ 867.805183][ T31] task:syz.2.2047 state:D stack:26568 pid:13509 tgid:13505 ppid:5806 task_flags:0x400140 flags:0x00080002 [ 867.819211][ T794] dvb-usb: error -19 while querying for an remote control event. [ 867.825612][ T31] Call Trace: [ 867.830230][ T31] [ 867.833165][ T31] ? __schedule+0xf65/0x5e10 [ 867.837924][ T31] __schedule+0xfe4/0x5e10 [ 867.842367][ T31] ? __lock_acquire+0x4a5/0x2630 [ 867.847776][ T31] ? __pfx___schedule+0x10/0x10 [ 867.852642][ T31] ? find_held_lock+0x2b/0x80 [ 867.858005][ T31] ? schedule+0x2bf/0x390 [ 867.863028][ T31] schedule+0xdd/0x390 [ 867.868674][ T31] schedule_preempt_disabled+0x13/0x30 [ 867.874766][ T31] __mutex_lock+0xc9a/0x1b90 [ 867.879391][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 867.885292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 867.890309][ T31] ? net_generic+0xea/0x2a0 [ 867.894866][ T31] ? net_generic+0xea/0x2a0 [ 867.899397][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 867.905146][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 867.910686][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 867.916453][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 867.920864][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 867.922559][ T31] ? bpf_lsm_capable+0x9/0x10 [ 867.929739][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 867.932282][ T31] ? security_capable+0x80/0x260 [ 867.940595][ T24] usb 7-1: config 0 has no interface number 0 [ 867.955566][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 867.955572][ T31] genl_rcv_msg+0x560/0x800 [ 867.955604][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.969991][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 867.971898][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 867.983996][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 116, changing to 10 [ 867.988855][ T31] ? __lock_acquire+0x4a5/0x2630 [ 867.994059][ T794] m920x_read = error: -19 [ 868.005390][ T31] netlink_rcv_skb+0x159/0x420 [ 868.010316][ T794] dvb-usb: error -19 while querying for an remote control event. [ 868.014645][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.019260][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 868.027324][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 868.037148][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 868.045938][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 868.116179][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.120891][ T31] genl_rcv+0x28/0x40 [ 868.138231][ T31] netlink_unicast+0x5aa/0x870 [ 868.139434][ T24] usb 7-1: config 0 descriptor?? [ 868.151732][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 868.157522][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 868.172729][ T31] netlink_sendmsg+0x8b0/0xda0 [ 868.179657][ T5926] m920x_read = error: -19 [ 868.184015][ T5926] dvb-usb: error -19 while querying for an remote control event. [ 868.199994][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.205333][ T31] ? __might_fault+0xb0/0x140 [ 868.223806][ T31] ____sys_sendmsg+0xa54/0xc30 [ 868.230518][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 868.236450][ T31] ? __pfx___futex_wait+0x10/0x10 [ 868.241498][ T31] ___sys_sendmsg+0x190/0x1e0 [ 868.246336][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 868.253163][ T31] ? __perf_event_task_sched_in+0x27a/0xa10 [ 868.259167][ T31] ? find_held_lock+0x2b/0x80 [ 868.263923][ T31] __sys_sendmsg+0x170/0x220 [ 868.268525][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 868.273815][ T31] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 868.279813][ T31] do_syscall_64+0xc9/0xf80 [ 868.284422][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.290312][ T31] RIP: 0033:0x7fe89459aeb9 [ 868.294806][ T31] RSP: 002b:00007fe895411028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.303244][ T31] RAX: ffffffffffffffda RBX: 00007fe894816090 RCX: 00007fe89459aeb9 [ 868.328225][ T31] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 000000000000000b [ 868.342923][ T31] RBP: 00007fe894608c1f R08: 0000000000000000 R09: 0000000000000000 [ 868.349502][ T24] m920x_read = error: -19 [ 868.351814][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.358881][ T24] dvb-usb: error -19 while querying for an remote control event. [ 868.363599][ T31] R13: 00007fe894816128 R14: 00007fe894816090 R15: 00007ffdc9fb5f88 [ 868.379269][ T31] [ 868.382488][ T31] INFO: task syz.1.2072:13600 blocked for more than 144 seconds. [ 868.428113][ T31] Tainted: G L syzkaller #0 [ 868.434932][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 868.445797][ T31] task:syz.1.2072 state:D stack:28264 pid:13600 tgid:13598 ppid:5808 task_flags:0x400140 flags:0x00080002 [ 868.456155][ T24] usb 7-1: USB disconnect, device number 56 [ 868.457932][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 868.470079][T15995] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19 [ 868.478332][ T31] Call Trace: [ 868.479666][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 868.481687][ T31] [ 868.491777][ T31] ? __schedule+0xf65/0x5e10 [ 868.496619][ T31] __schedule+0xfe4/0x5e10 [ 868.501283][ T31] ? __lock_acquire+0x4a5/0x2630 [ 868.506593][ T31] ? __kmalloc_noprof+0x347/0x9c0 [ 868.511859][ T31] ? __pfx___schedule+0x10/0x10 [ 868.516765][ T31] ? find_held_lock+0x2b/0x80 [ 868.521804][ T31] ? schedule+0x2bf/0x390 [ 868.526192][ T31] schedule+0xdd/0x390 [ 868.532572][ T31] schedule_preempt_disabled+0x13/0x30 [ 868.538090][ T31] __mutex_lock+0xc9a/0x1b90 [ 868.543645][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 868.549627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 868.554712][ T31] ? net_generic+0xea/0x2a0 [ 868.564014][ T31] ? net_generic+0xea/0x2a0 [ 868.568581][T12274] m920x_read = error: -19 [ 868.568602][T12274] dvb-usb: error -19 while querying for an remote control event. [ 868.573426][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 868.586786][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 868.592662][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 868.598478][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 868.604609][ T31] ? bpf_lsm_capable+0x9/0x10 [ 868.609783][ T31] ? security_capable+0x80/0x260 [ 868.614787][ T31] genl_rcv_msg+0x560/0x800 [ 868.619621][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.628217][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 868.634376][ T31] ? __lock_acquire+0x4a5/0x2630 [ 868.641596][ T31] netlink_rcv_skb+0x159/0x420 [ 868.652882][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.658954][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 868.664510][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 868.669866][ T31] genl_rcv+0x28/0x40 [ 868.674191][ T31] netlink_unicast+0x5aa/0x870 [ 868.678971][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 868.684339][ T31] netlink_sendmsg+0x8b0/0xda0 [ 868.689108][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.694540][ T31] ? __might_fault+0xb0/0x140 [ 868.699213][ T31] ____sys_sendmsg+0xa54/0xc30 [ 868.703985][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 868.709257][ T31] ? __pfx___futex_wait+0x10/0x10 [ 868.715333][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 868.720630][ T31] ___sys_sendmsg+0x190/0x1e0 [ 868.725392][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 868.730591][ T31] ? find_held_lock+0x2b/0x80 [ 868.735574][ T31] __sys_sendmsg+0x170/0x220 [ 868.740065][T12274] m920x_read = error: -19 [ 868.741006][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 868.744777][T12274] dvb-usb: error -19 while querying for an remote control event. [ 868.749536][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 868.749576][ T31] do_syscall_64+0xc9/0xf80 [ 868.749600][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.749619][ T31] RIP: 0033:0x7fa96dd9aeb9 [ 868.749634][ T31] RSP: 002b:00007fa96ec9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.749655][ T31] RAX: ffffffffffffffda RBX: 00007fa96e016090 RCX: 00007fa96dd9aeb9 [ 868.749669][ T31] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 000000000000000b [ 868.749681][ T31] RBP: 00007fa96de08c1f R08: 0000000000000000 R09: 0000000000000000 [ 868.749693][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.749704][ T31] R13: 00007fa96e016128 R14: 00007fa96e016090 R15: 00007ffe45e21388 [ 868.749730][ T31] [ 868.828846][ T31] [ 868.828846][ T31] Showing all locks held in the system: [ 868.837207][ T31] 1 lock held by khungtaskd/31: [ 868.842058][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 868.853836][ T31] 2 locks held by kworker/u8:3/50: [ 868.859964][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 868.875080][ T31] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b6f/0x5e10 [ 868.883894][ T31] 2 locks held by getty/5568: [ 868.888556][ T31] #0: ffff88814d2160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 868.898328][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 868.908464][ T31] 1 lock held by udevd/13272: [ 868.913387][ T31] #0: ffff888141fa2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 868.922907][T12274] m920x_read = error: -19 [ 868.927127][ T31] 2 locks held by syz.4.2042/13493: [ 868.927232][T12274] dvb-usb: error -19 while querying for an remote control event. [ 868.933714][ T31] #0: ffffffff904a0490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 868.951592][ T31] #1: ffffffff8ea48648 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 868.961781][ T31] 2 locks held by syz.2.2047/13509: [ 868.966952][ T31] #0: ffffffff904a0490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 868.975264][ T31] #1: ffffffff8ea48648 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 868.985567][ T31] 2 locks held by syz.1.2072/13600: [ 868.990780][ T31] #0: ffffffff904a0490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 868.998965][ T31] #1: ffffffff8ea48648 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 869.009007][ T31] 2 locks held by syz.7.2105/13773: [ 869.014188][ T31] #0: ffffffff904a0490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 869.022427][ T31] #1: ffffffff8ea48648 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 869.033735][ T31] 2 locks held by syz.8.2115/13819: [ 869.039000][ T31] #0: ffffffff904a0490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 869.047207][ T31] #1: ffffffff8ea48648 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 869.057256][ T31] [ 869.059562][ T31] ============================================= [ 869.059562][ T31] [ 869.069563][ T31] NMI backtrace for cpu 1 [ 869.069576][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 869.069592][ T31] Tainted: [L]=SOFTLOCKUP [ 869.069596][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 869.069603][ T31] Call Trace: [ 869.069607][ T31] [ 869.069612][ T31] dump_stack_lvl+0x100/0x190 [ 869.069631][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 869.069648][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 869.069662][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 869.069681][ T31] sys_info+0x141/0x190 [ 869.069694][ T31] watchdog+0xcc3/0xfe0 [ 869.069715][ T31] ? __pfx_watchdog+0x10/0x10 [ 869.069732][ T31] ? __kthread_parkme+0x18c/0x230 [ 869.069750][ T31] ? __pfx_watchdog+0x10/0x10 [ 869.069768][ T31] ? __pfx_watchdog+0x10/0x10 [ 869.069783][ T31] kthread+0x3b3/0x730 [ 869.069796][ T31] ? __pfx_kthread+0x10/0x10 [ 869.069807][ T31] ? ret_from_fork+0x79/0xaf0 [ 869.069820][ T31] ? ret_from_fork+0x79/0xaf0 [ 869.069832][ T31] ? rcu_is_watching+0x12/0xc0 [ 869.069848][ T31] ? __pfx_kthread+0x10/0x10 [ 869.069860][ T31] ret_from_fork+0x754/0xaf0 [ 869.069873][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 869.069888][ T31] ? __switch_to+0x7b9/0x10c0 [ 869.069904][ T31] ? __pfx_kthread+0x10/0x10 [ 869.069917][ T31] ret_from_fork_asm+0x1a/0x30 [ 869.069936][ T31] [ 869.069943][ T31] Sending NMI from CPU 1 to CPUs 0: [ 869.215622][ C0] NMI backtrace for cpu 0 [ 869.215640][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.215658][ C0] Tainted: [L]=SOFTLOCKUP [ 869.215663][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 869.215671][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 869.215690][ C0] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 9e 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 869.215702][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 869.215715][ C0] RAX: 0000000004754575 RBX: ffffffff8e297ac0 RCX: ffffffff8b76e4b5 [ 869.215724][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45fd1 RDI: ffffffff8bfa38a0 [ 869.215732][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 869.215741][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 869.215750][ C0] R13: 0000000000000000 R14: ffffffff90b74ed0 R15: 0000000000000000 [ 869.215758][ C0] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 869.215772][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.215781][ C0] CR2: 0000561b4c552168 CR3: 000000007bd49000 CR4: 00000000003526f0 [ 869.215790][ C0] Call Trace: [ 869.215795][ C0] [ 869.215799][ C0] default_idle+0x9/0x10 [ 869.215815][ C0] default_idle_call+0x6c/0xb0 [ 869.215830][ C0] do_idle+0x35b/0x4b0 [ 869.215850][ C0] ? __pfx_do_idle+0x10/0x10 [ 869.215872][ C0] cpu_startup_entry+0x4f/0x60 [ 869.215890][ C0] rest_init+0x251/0x260 [ 869.215906][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 869.215921][ C0] start_kernel+0x47a/0x480 [ 869.215934][ C0] x86_64_start_reservations+0x24/0x30 [ 869.215948][ C0] x86_64_start_kernel+0x122/0x130 [ 869.215962][ C0] common_startup_64+0x13e/0x148 [ 869.215984][ C0] [ 869.217799][T12274] m920x_read = error: -19 [ 869.226026][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 869.226046][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 869.226069][ T31] Tainted: [L]=SOFTLOCKUP [ 869.226075][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 869.226085][ T31] Call Trace: [ 869.226092][ T31] [ 869.226099][ T31] dump_stack_lvl+0x100/0x190 [ 869.226126][ T31] vpanic+0x20d/0x630 [ 869.226143][ T31] panic+0xd1/0xd1 [ 869.226156][ T31] ? __pfx_panic+0x10/0x10 [ 869.226173][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 869.226197][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 869.226219][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 869.226241][ T31] ? watchdog.cold+0x198/0x1ca [ 869.226258][ T31] ? watchdog+0xcd3/0xfe0 [ 869.226282][ T31] watchdog.cold+0x1a9/0x1ca [ 869.226305][ T31] ? __pfx_watchdog+0x10/0x10 [ 869.226329][ T31] ? __kthread_parkme+0x18c/0x230 [ 869.226358][ T31] ? __pfx_watchdog+0x10/0x10 [ 869.226381][ T31] ? __pfx_watchdog+0x10/0x10 [ 869.226402][ T31] kthread+0x3b3/0x730 [ 869.226420][ T31] ? __pfx_kthread+0x10/0x10 [ 869.226435][ T31] ? ret_from_fork+0x79/0xaf0 [ 869.226453][ T31] ? ret_from_fork+0x79/0xaf0 [ 869.226471][ T31] ? rcu_is_watching+0x12/0xc0 [ 869.226491][ T31] ? __pfx_kthread+0x10/0x10 [ 869.226509][ T31] ret_from_fork+0x754/0xaf0 [ 869.226528][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 869.226547][ T31] ? __switch_to+0x7b9/0x10c0 [ 869.226569][ T31] ? __pfx_kthread+0x10/0x10 [ 869.226586][ T31] ret_from_fork_asm+0x1a/0x30 [ 869.226611][ T31] [ 869.231205][ T31] Kernel Offset: disabled