last executing test programs: 1m14.950643132s ago: executing program 4 (id=192): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x5, @private1, 0x8}, @in6={0xa, 0x4e21, 0xb, @remote, 0x89d2}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}], 0x54) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="396400000000000025000000000000020000950000ca796690ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2a020400) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f0000000000), &(0x7f00000002c0)}) 1m14.027604108s ago: executing program 4 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="01002abd7000fddbdf250a00"], 0x24}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 1m12.995049393s ago: executing program 4 (id=199): mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x1f69f292e9e3968a, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000feffffff0a00000000000000060007000700000008000500", @ANYRES32=r1, @ANYBLOB="18000880"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca01020301090212000100000000090480"], 0x0) 1m12.860464565s ago: executing program 0 (id=201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_procfs(r4, &(0x7f0000000100)='fd\x00') getdents(r5, &(0x7f0000001180)=""/120, 0x78) ioctl$TCSETA(r3, 0x541e, &(0x7f0000000040)={0x1000, 0x4000, 0x6, 0x0, 0x0, "9aa2488b59e4db37"}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)=@newqdisc={0x9c, 0x24, 0x40bd8d0cdd7f47b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xfff2}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xbc, 0xc, 0x8, 0x0, 0x5, 0x10001, 0x2}}, {0x8, 0x2, [0x5, 0xfff8]}}, {{0x1c, 0x1, {0x0, 0x0, 0x5, 0xbfad, 0x2, 0xffffff76, 0x800, 0x4}}, {0xc, 0x2, [0xe, 0x2, 0x5, 0x8001]}}, {{0x1c, 0x1, {0x1, 0x0, 0x8, 0x9, 0x1133a6c199db8a3f, 0x3, 0x1, 0x4}}, {0xc, 0x2, [0x5, 0x5, 0x7, 0x212]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44004841}, 0x20000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000f100"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, &(0x7f0000000040), 0x0}, 0x20) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20002) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000380)={'\x00', 0x2d8c, 0x8, 0xfff7fffe, 0x1, 0x5}) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.810263662s ago: executing program 4 (id=205): mbind(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x4000, &(0x7f0000000000)=0x7, 0x80000001, 0x6) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) recvmmsg(r1, &(0x7f0000001900)=[{{&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/195, 0xc3}, {&(0x7f0000001280)=""/18, 0x12}, {&(0x7f00000012c0)=""/104, 0x68}], 0x4, &(0x7f0000001380)=""/118, 0x76}, 0x7}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001400)=""/104, 0x68}, {&(0x7f0000001480)=""/126, 0x7e}, {&(0x7f0000001500)=""/184, 0xb8}, {&(0x7f00000015c0)=""/208, 0xd0}, {&(0x7f00000016c0)=""/190, 0xbe}], 0x5, &(0x7f0000001800)=""/197, 0xc5}, 0x4}], 0x2, 0x2063, &(0x7f0000001980)) r2 = syz_open_dev$vcsu(&(0x7f00000019c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001a40)={&(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000001a80)={0x84, @local, 0x4e21, 0x2, 'nq\x00', 0x1, 0x8001, 0x56}, 0x2c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/power/wakeup_count', 0x6c0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d00)={0x6, 0x19, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x6c}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x95}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff97}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000001bc0)='GPL\x00', 0x66a0, 0x1000, &(0x7f0000001c00)=""/4096, 0x40f00, 0x27, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002c40)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000002c80)=[{0x1, 0x3, 0xa}, {0x2, 0x4, 0xc, 0x8}, {0x1, 0x2, 0x9, 0x8}, {0x1, 0x2, 0xb}, {0x4, 0x5, 0x6}, {0x5, 0x5, 0x8, 0x7}, {0x1, 0x5, 0x6, 0x3}, {0x4, 0x5, 0x4, 0x1}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000002dc0)={0x7, 'virt_wifi0\x00', {0x8}, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e00)) r6 = syz_io_uring_setup(0x72fa, &(0x7f0000002e40)={0x0, 0xa65b, 0x20000, 0x0, 0x370, 0x0, r2}, &(0x7f0000002ec0), &(0x7f0000002f00)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002f80), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x34, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xb, 0x889, @l2={'ib', 0x3a, 'wlan1\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_clone(0x901c0000, &(0x7f0000003080)="e7c1bffaffb350ce65453317c0d129f1244f330b8b7c46742d1f2e3904b54e291206aff4f68be0d5de59e7e7afb9e37216afe3347b7119182bef5b54a887bb497824bad0b0f14225ab6aa17d63b5a17eacae918566d10155f02de44e7e619c1a31227eb8d5a28e7e4935725ad02de5ce5dce618effe654115d335b6a24a44e857e27f9c6deadea0ea146048747edbc615c5d5944f0393c5641b6ab762a61017b13576c6c07df5488cb364a8a7ab42477c910ae8984a15d55575c3e650ae092ad18e5fc42a2f090236affc73c0793ae08b319ffd04591ff80ae074c5d7e462441b0ee98e3cb012b7ad837e17ff4835fe2446ddf35f14805f6", 0xf8, &(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200)="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") sched_setaffinity(r8, 0x8, &(0x7f0000004200)=0x87f) preadv2(r5, &(0x7f0000004600)=[{&(0x7f0000004240)=""/198, 0xc6}, {&(0x7f0000004340)=""/55, 0x37}, {&(0x7f0000004380)=""/146, 0x92}, {&(0x7f0000004440)=""/246, 0xf6}, {&(0x7f0000004540)=""/9, 0x9}, {&(0x7f0000004580)=""/53, 0x35}, {&(0x7f00000045c0)=""/35, 0x23}], 0x7, 0x6, 0x6, 0x1) alarm(0x8) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000004680)={0x5, 0x2, 0x3ba, 0x6, 0xdb, "c78599d62792b4ba24f6df30d1f25cb0fd0d4c", 0x56, 0x5}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000046c0)=0x1, 0x4) mount(&(0x7f0000004700)=@sr0, &(0x7f0000004740)='./file0\x00', &(0x7f0000004780)='affs\x00', 0x208002, &(0x7f00000047c0)='\x00') r9 = accept$ax25(r2, &(0x7f0000004800)={{0x3, @rose}, [@remote, @remote, @bcast, @rose, @null, @null, @rose, @default]}, &(0x7f0000004880)=0x48) accept4$ax25(r9, &(0x7f00000048c0)={{0x3, @default}, [@default, @rose, @bcast, @rose, @remote, @netrom, @bcast, @default]}, &(0x7f0000004940)=0x48, 0x80800) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$vbi(&(0x7f0000004980), 0x1, 0x2) r10 = syz_open_dev$dri(&(0x7f00000049c0), 0x0, 0x81) ioctl$DRM_IOCTL_MAP_BUFS(r10, 0xc0186419, &(0x7f0000006fc0)={0xa, &(0x7f0000004a00)=""/100, &(0x7f0000006ec0)=[{0x9, 0x1000, 0x5, &(0x7f0000004a80)=""/4096}, {0x9, 0x39, 0x4, &(0x7f0000005a80)=""/57}, {0x2, 0x1000, 0xffffff00, &(0x7f0000005ac0)=""/4096}, {0xcb, 0x69, 0x0, &(0x7f0000006ac0)=""/105}, {0x0, 0xd6, 0xffffff81, &(0x7f0000006b40)=""/214}, {0xc0, 0x46, 0x800, &(0x7f0000006c40)=""/70}, {0x4, 0x1a, 0xff, &(0x7f0000006cc0)=""/26}, {0x3, 0x54, 0xa6fc, &(0x7f0000006d00)=""/84}, {0x100, 0x52, 0xab76, &(0x7f0000006d80)=""/82}, {0x1, 0xb4, 0x7, &(0x7f0000006e00)=""/180}]}) 1m10.809461388s ago: executing program 4 (id=207): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x1, 0x3, 0xa, 0x8}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f00000000c0)='unconfined\x00', 0xb, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) read$midi(r0, 0x0, 0x34) 1m9.753688684s ago: executing program 4 (id=215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07600000000000010902240001001e0000090400000103000000092100000001220500090581030000000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8e0, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x1e, &(0x7f0000000440)={0x29, 0x8, 0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x0) accept4$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) userfaultfd(0x801) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x919502, 0x105) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(r2, &(0x7f0000000380)=0x24000000, r5, &(0x7f00000003c0)=0xcf00, 0x2, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="34000000030000000000000000000000020000000000000013000000000000002e2f93e488b465742e39d9611566732f62696e64"], 0x34) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) syz_usb_control_io(r0, 0x0, 0x0) 1m8.913140735s ago: executing program 0 (id=223): getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) read$FUSE(r1, &(0x7f000000fdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) (async) syz_fuse_handle_req(r1, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x0, 0x6, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0x0, r5, r3, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b1200680ad2001"], 0x20dc}}, 0x10) (async) setreuid(r0, r5) 1m8.414792607s ago: executing program 0 (id=224): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf250300000005000200810000000c00018008000100000c3dfe29377e022f52429b96502b50b3a8ab8a4e8ef67bf658ba15b02d9e317aa9167f20fffab06dc894f967acbcfd99c92a493c083165539c723a4ccb3489511841373aa03ce49501e93ff70e512e9e2a6a8ef206f1f02400d42e658898ddbd76eeccf22bab14721dfc08cef4907e4532946e591072963d1abaca01227e82592d4e4d6ea75336471ebec9688977749bafaf18580e950f95d7c08d52e493fbdcc2c557a6d46492765d0d9f9f3b9180660286d0c9fd672a7afbc69acbf5d3599c012994822edfba595afd62af5b25c1934b", @ANYRES32=r4, @ANYBLOB="0500050005000000"], 0x30}, 0x1, 0x0, 0x0, 0x200c8040}, 0x40) 1m8.178013045s ago: executing program 1 (id=226): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) writev(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="aade", 0x2}], 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, &(0x7f0000000180)="470fc7724cf3460f090fc799008000004392dfc7442400aa000000c74424020b000000ff2c24b99f0a00000f322e430fc71e0f070f21e246d9fb", 0x3a}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="0f01cfdeadf600f7172e650f79d00f01364b5dbaf80c66b81e61ed8c66efbafc0ced0f0179003e36660f38815000f26cba210066b888ff000066ef", 0x3b}], 0x1, 0x50, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="0f01cfdeadf600f7172e650f79d00f01364b5dbaf80c66b81e61ed8c66efbafc0ced0f0179003e36660f38815000f26cba210066b888ff000066ef", 0x3b}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) ptrace$getregset(0x4205, r1, 0x1, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x28}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000125bd7000fedbdf250f0000000500380001000000e136149d0d33dc35c2eb7d565305ac8652c1ca4fd2e25d78d69b307f2754c1689ff721625c9cf9a8d17d91dd39c136c070884aeac582f0ceea45f603e2cfb07fe2be4dfdef272c8081eaedaad87c5ef67b9074d3fb4e58b4585f38bdac032450dc65cbf2336d26a81554a7d7b5e5b97ac1fb05796d2240798aff4247255556a242898cd527874efe832ac1bcd66c57a85c08706e2089c1b668e8131b97881fa30c0a00000000000000cf1eca0a758518243f51b3cc666a3fb8a42e1f2314c77a"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000001) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000125bd7000fedbdf250f0000000500380001000000e136149d0d33dc35c2eb7d565305ac8652c1ca4fd2e25d78d69b307f2754c1689ff721625c9cf9a8d17d91dd39c136c070884aeac582f0ceea45f603e2cfb07fe2be4dfdef272c8081eaedaad87c5ef67b9074d3fb4e58b4585f38bdac032450dc65cbf2336d26a81554a7d7b5e5b97ac1fb05796d2240798aff4247255556a242898cd527874efe832ac1bcd66c57a85c08706e2089c1b668e8131b97881fa30c0a00000000000000cf1eca0a758518243f51b3cc666a3fb8a42e1f2314c77a"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x1000005, 0x50, r2, 0x0) 1m8.148105082s ago: executing program 0 (id=227): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x4012}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xf5, 0xb9, 0xc7, 0x8, 0x1943, 0x2257, 0x3107, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xb, 0x20, 0x0, [{{0x9, 0x4, 0x9e, 0x0, 0x1, 0xee, 0xa, 0xc, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) capset(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000140)={0x3, 0x8, 0x34f, 0xa58, 0x9, 0xfffff614}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sync() sync() sync() sync() sync() sync() sync() socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1m7.392499888s ago: executing program 1 (id=230): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000280)={0xd1}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x5, 0x9, 0x0, 0x78f}) bind$rds(r1, &(0x7f0000000200)={0x2, 0x1, @loopback}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12015002000000100e0bffff400001020301090224000101e1400609040000ff0301000b09210300810122640d4905810320001005f8"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 1m6.958645292s ago: executing program 3 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x81, 0x0, 0x20000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x8, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x1, 0x400000, {0xa, 0x0, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="326ebdccebfbfc000000000085100000060000001800000000000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept(r7, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6, r6, 0xffffff60}, 0xc) 1m6.683474727s ago: executing program 3 (id=232): syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301be"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040100802000000000000010902"], 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create(0xbcf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffd}) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_setup(0x833, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) fchmod(r6, 0xe5) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) 1m4.330832116s ago: executing program 1 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000080241024d564b"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000080241024d564b"]) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) 1m3.625848977s ago: executing program 1 (id=237): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x5, @private1, 0x8}, @in6={0xa, 0x4e21, 0xb, @remote, 0x89d2}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}], 0x54) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000031000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="396400000000000025000000000000020000950000ca796690ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2a020400) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f0000000000), &(0x7f00000002c0)}) 1m2.551429978s ago: executing program 1 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x48, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, 0x48}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x3, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_newvlan={0x70, 0x70, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7c}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2010}, 0x4000040) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000740)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) readv(0xffffffffffffffff, &(0x7f0000000180), 0x1000000000000128) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1m2.418913976s ago: executing program 1 (id=239): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x29) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @local}, 0xfffffffffffffd99) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x40) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x7f]}, 0x8, 0x81800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="160000001800000000000000", @ANYRES32=r3, @ANYBLOB="56e68111ce28c433efbc877028008c83eb00c7907a1e3ee0b032b832bf8767d23ad88fa5c550aa3198d1135cae9665e2adaa85e7a6ce98b899455a8c1c212ee022a61763b2df548d58938ba1d6d6d45614231a5ad4fb67badfaf718c7adda3af843fe8cb406cfcaaeec7f7c127f9257c77ddfaee653b6acdb2", @ANYRES64=r1], 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r4, 0x8931, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_names='virt_wifi0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = accept$alg(r5, 0x0, 0x0) r11 = dup(r10) write$FUSE_INIT(r11, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r11, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="c400000019000105000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000006000000000000000000000000000000000000875a917c0000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000c001c006c16a4b482c2"], 0xc4}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$MSR(&(0x7f0000000000), 0x10, 0x0) 1m0.819514378s ago: executing program 3 (id=242): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f000000c2c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="b09cb2f087cf128cf5fe4c07c7c42be814fda9c2", 0x14}], 0x1}}], 0x1, 0x401eb94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$usbfs(r2, &(0x7f0000000000)=""/161, 0xa1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000240)={0x2987, 0x800, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x5, 0x4) write(r0, &(0x7f0000000140)="509e698cbe50aa8c65c956c7308834beeace1744014e40adf64b4487257551a645035a66de9d24a166b27936bac25edfe178bc9dd6d28d10bcfbb58240bc7a65f4201bd75dc11d20cf61ca2a26cb16c555f9a35f63367fb9c464a86583a83bd4c83ae9ad92439e2b6bd343683eb147fefad2ebfb248549977ced6fcd9d426038ed3a57d62f966e740c3ba2dc58f83b3956d7461d8a86412329572136b57d154034cb923f21ab42e0b33efb758748637c90515efcc9cba6769ee636733e56da5b838ea41244e8f15f745a5b5814bffdd2dd5c38", 0xd3) 59.890385815s ago: executing program 3 (id=244): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$packet(0x11, 0x0, 0x300) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$alg(0x26, 0x5, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x93) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)}) 59.729367412s ago: executing program 3 (id=245): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f00000000c0)='unconfined\x00', 0xb, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) read$midi(r0, 0x0, 0x34) 54.569563209s ago: executing program 32 (id=215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07600000000000010902240001001e0000090400000103000000092100000001220500090581030000000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8e0, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x1e, &(0x7f0000000440)={0x29, 0x8, 0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x0) accept4$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) userfaultfd(0x801) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x919502, 0x105) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(r2, &(0x7f0000000380)=0x24000000, r5, &(0x7f00000003c0)=0xcf00, 0x2, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="34000000030000000000000000000000020000000000000013000000000000002e2f93e488b465742e39d9611566732f62696e64"], 0x34) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) syz_usb_control_io(r0, 0x0, 0x0) 53.072683377s ago: executing program 33 (id=227): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x4012}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xf5, 0xb9, 0xc7, 0x8, 0x1943, 0x2257, 0x3107, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xb, 0x20, 0x0, [{{0x9, 0x4, 0x9e, 0x0, 0x1, 0xee, 0xa, 0xc, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) capset(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000140)={0x3, 0x8, 0x34f, 0xa58, 0x9, 0xfffff614}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sync() sync() sync() sync() sync() sync() sync() socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 47.07095085s ago: executing program 34 (id=239): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x29) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @local}, 0xfffffffffffffd99) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f00000000c0)='unconfined\x00', 0xb, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) read$midi(r0, 0x0, 0x34) 4.694907538s ago: executing program 5 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_user\x00', 0x275a, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, r1, 0x0) (async, rerun: 64) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x0, 0x14, 0x1, "f7"}, 0x0, 0x0}) (rerun: 32) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) r6 = socket(0x848000000015, 0x805, 0x0) (rerun: 32) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) (async) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x19003}}], 0x48}, 0x4040) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf3f0a00000020000680080006000800000014000400fe8000000000000000000000000000bb48000180060001000200000005000200fe00000008000300ac141424060005004e22000008000300ac1414aa060001000a0000001400040000000000000000000000ffffac1414aa"], 0x7c}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) (async) sched_setaffinity(r9, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x91, 0xb2, 0x16, 0x10, 0xb95, 0x178a, 0xf7ba, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd7, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) 4.684799737s ago: executing program 8 (id=427): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x6, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x0, 0x615, 0x3, 0x7, 0x71, 0x7, '\x00', 0x7, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000040)='ocfs2\x00', 0x0, &(0x7f0000000000)=',\xdf\xd5~g\x9e\x9c<+\x8b\x80(\xa0\x99.\xb51 1\'\xea\xc6\x89\xc7') ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TCSETA(r0, 0x4b6a, 0x0) 4.324423905s ago: executing program 5 (id=430): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000080)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xbd}}}, 0xb) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) syz_extract_tcp_res(&(0x7f0000000000), 0x40, 0x0) 4.32130548s ago: executing program 5 (id=432): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210400, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x9, 0x0, 0x0, 0xc}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14b76df2f622c3108134d6f848b1cafc878af9cace11201a000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf2552000000"], 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4000004) sendmsg$NL80211_CMD_SET_PMK(r4, 0x0, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14fbffff4100000125bd7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.32006267s ago: executing program 7 (id=433): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (fail_nth: 9) 4.319719246s ago: executing program 8 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = dup(r0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.649063637s ago: executing program 6 (id=435): ioperm(0x3, 0x4, 0x1000008) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x2, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000440)={0x0, 0x21, 0x85, {0x85, 0xa, "62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede97965f3de2587774d8029fa9d10b47e356249835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26171c2585465e3c686fd889c2e4d36a95cd81e8b475156cc3a12565e97e3efb3b2cdf4c339a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) futex_waitv(&(0x7f0000000b40)=[{0x2, 0x0, 0xc88fe88ae74166b1}], 0x1, 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x504) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x7, 0x5, 0x6, 0x6, @tick=0xa, {0x5, 0x2}, {0xd, 0x7}, @result={0x4, 0x8}}, {0x6, 0x5, 0x1, 0x40, @time={0x7fffffff, 0x6}, {0x0, 0x5}, {0x2, 0x40}, @ext={0x6b, &(0x7f0000000000)="2f69f9e5468cad406d9b9cff3337e4a46423a16bbd78cd4743cce059e6311e9cc9c04c29fd2f39715951933030c1488d0d1ba8b31aa78ffc167ed9ffc010168c189d0863179ef316dd4aef48e2366aa34977573ecfe962bfa0503d522db73f6fca6327a76813706c775248"}}, {0x0, 0x2, 0x2e, 0xc, @time={0x9, 0x5}, {0x3, 0x9}, {0x8, 0x2f}, @raw8={"8387d70067913acfc0d716a6"}}, {0xfe, 0x40, 0x3, 0x7, @time={0x8, 0x401}, {0x1, 0xf0}, {0xbd}, @note={0x81, 0xd, 0x3, 0x1, 0xff}}, {0xef, 0x1, 0x8, 0x5, @time={0x5, 0x2}, {0x9, 0xff}, {0xe, 0x7}, @addr={0xfa, 0xb}}, {0x9, 0x6, 0x5, 0x4, @tick=0x5, {0x6, 0x4}, {0x6, 0xfb}, @raw32={[0xe, 0x6e, 0x7]}}], 0xa8) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x28, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES16=0x0, @ANYBLOB="7d4d8f7cb9922f63a1815626cacda65887c3333c91138c63acbb7f52af29f0ba453906211989c272bee8a451acb748b32f342364fe6174f62a3c8fe375bb01fd6baa8d9d9a6e6dd6960749cb3e81f9d894153151af5dea503452c2eee909552c483a459a8701474cec67caea813fc3dd1f980c2d4e9da08cf869b7c3d0bf0d76d47a0d91c6faa5f746b1d4f0c80c62868b566574cc1598f9ecd48fa295a143a4bdd19037143cd4325b949d17fe4dc425035cb9a3a3fa234ca2de2ac3b1a575329a35509770a0e9660b8917"], 0x528}}, 0xc000) 3.578358367s ago: executing program 8 (id=437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x5, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002c0001000000000000000000040100800c0009"], 0x114}], 0x1}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0xff}, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, r5, 0x0, 0x9, &(0x7f0000000200)='/dev/kvm\x00'}, 0x30) syz_usb_connect(0x0, 0x6b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a24010200050201f408240703040001a530112406060405080004000500ba725989050924030506030501f909240702020005cbad092403060101"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 3.529312181s ago: executing program 7 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x340, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884800000000000000000000000000000000000000000000000000000000000000006285604c02ea06fffc020000000000000000000000000000fe88000000000000000000000000010189000e40650000000308000000000000050200000401bf0738000000020c7f050009000000000000000180000000000000020000000000000007000000000000000400000000000000070000000000000000000000000000210804040820040020010000000000000000000000000001fc020000000000000000000000000001fe880000000000000000000000000101fe80000000000000000000000000001b5c0c014400000000fc00000000000000000000000000000120010000000000000000000000000000fe8000000000000000000000000000aafc00000000000000000000000000000100000000000000000000000000000000200100000000000000000000000000023a08021000000000fe8000000000000000000000000000aafe880000000000000000000000000101fe8000000000000000000000000000bbfe8000000000000000000000000000bb330e010c00000000fe80000000000000000000000000000eff020000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001fc000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000004e204e20", @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28200, 0x0) dup(r1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xc) lseek(r0, 0x400006, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000001c001880060002400000000008060340000000000800014000000000240002801400018008000100ac14dbed08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0xffffffff, 0x1, 0x2088, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x870be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.436846159s ago: executing program 5 (id=439): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000400f0bd8f05000000000000800000000005000000000000001f5bb59c071f525d390b74372e2f2768f1760fffffffff5db645557c14d00608259844af76eb8e8fdcd62dbb15485b8df603f3d9a856b472db2777ad2cbb77af506398dc3474fae2a0bea7b732ef196ccac632d0f7f4cdda4b5011c700"/136, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0x80045500, &(0x7f0000000580)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110e00000000f0ffffffffffffff0000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, 0x0) 3.062766254s ago: executing program 7 (id=440): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x28) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103", @ANYRES16=0x0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd9, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) accept(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000000000000000000000000000fc1600"], 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000006100), 0x0, 0x4000) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d786874f1d1f2669e6c7c2eff00000000000000012000"}, 0x3c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket(0x10, 0x3, 0x0) 2.97657828s ago: executing program 5 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.89675836s ago: executing program 5 (id=442): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) (async) eventfd(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="8fced07ad08828f27b6ea5ef0a53079548dfbe771d201edbcf4aa1287d331f9c284720fe525bb1f7101e"], 0x0) (async) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="8fced07ad08828f27b6ea5ef0a53079548dfbe771d201edbcf4aa1287d331f9c284720fe525bb1f7101e"], 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) (async) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000306010200000000000000000a00000105000100070000000900020073797a31"], 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) socket$alg(0x26, 0x5, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) io_uring_setup(0x3873, &(0x7f00000004c0)={0x0, 0x8940, 0x800, 0x2, 0x70}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045009, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(0x0, r4, 0x0) keyctl$session_to_parent(0x12) iopl(0x3) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, 0x0, &(0x7f0000002140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.822690767s ago: executing program 2 (id=446): r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) 1.821409057s ago: executing program 2 (id=447): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2c0}}, 0x4048010) flock(0xffffffffffffffff, 0x5) flock(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="080100001f0001000000000000000000f500008014000300fc010000000000000000000000000000080001000800000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb030000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a00000000000000003079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc350000000"], 0x108}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000012c0)={0x1, 0x1000, 0x0, 'queue0\x00', 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r7, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x101a001, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.619456231s ago: executing program 7 (id=448): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (fail_nth: 10) 1.594200137s ago: executing program 2 (id=449): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) 1.530554771s ago: executing program 6 (id=450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xb, 0x81, 0x7, 0xadbc, 0x3, 0x3, 0xffffffff, 0x1c4, 0x38, 0x74, 0x7f, 0x4, 0x20, 0x4, 0x8, 0x1, 0x6}, [{0x7, 0x10000, 0x5, 0x8, 0x6, 0x3, 0x8, 0x10}, {0x70000007, 0x4, 0x8, 0x5, 0x10000, 0x400, 0x230, 0x6}, {0x6, 0x2, 0x6, 0x10, 0x1, 0x7000, 0x10, 0x6}, {0x1, 0x401, 0xafa, 0xbb, 0x7, 0x0, 0x10, 0x7}], "5b2c95e601b8d60a166798e3096dadca7d1d5f417532a32b8307d809502f642a4f344fdb8861c3a5714d1a6b472302ce7f45d3101a42eb5eb91515448191dba2de6e78139f456314c97872d61728", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x806) write$P9_RWRITE(r1, &(0x7f0000000880)={0xb, 0x77, 0x1, 0x8}, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x684f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x365}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a80), 0x40, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000bc0)=0xe8) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r7, &(0x7f0000000c00)='./file0\x00') sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x45}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x801) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000d80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004810) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001040)={r5, 0x4, 0xd76b24f, 0x10}) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000001080)=0x1, &(0x7f00000010c0)=0x4) r12 = open(&(0x7f0000001100)='./file0\x00', 0x101000, 0x24) write$nci(r12, &(0x7f0000001140)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0xe, {0x1, 0xd, 0xf9, 0x6, 0x64, 0x40, 0xd, 0x1ff, 0x17, "e4080856106fec6f916cc9093f76d402173d93ae9bfaf4"}}, 0x28) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001180)={'bridge0\x00', 0x4000}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r11) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001240)={'syztnl1\x00', r6, 0x2f, 0x6, 0x6, 0x6, 0x8a, @mcast1, @remote, 0x7, 0x7, 0x1, 0x7}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r13, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40200100}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x118, r14, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x118}}, 0x4000800) ioctl$SNDRV_PCM_IOCTL_REWIND(r12, 0x40084146, &(0x7f00000014c0)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='afs_flock_ev\x00', r11, 0x0, 0x7}, 0x18) r16 = fcntl$getown(r1, 0x9) sched_rr_get_interval(r16, &(0x7f0000001580)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000015c0)=0x1000) 1.526687395s ago: executing program 2 (id=451): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000480)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000380)={0x0, 0x11, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000040)={r6, 0x11, 0x6, @local}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x1}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r0, &(0x7f0000000300)) r7 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setfsgid(0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0x3, 0x7, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2284, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x0, 'batadv0\x00', {0xd}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 1.418138224s ago: executing program 6 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.082755073s ago: executing program 8 (id=453): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fe0000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x8a441, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, r4}}, 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x5460, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) 1.072712245s ago: executing program 6 (id=454): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.039721767s ago: executing program 8 (id=455): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x5, @private1, 0x8}, @in6={0xa, 0x4e21, 0xb, @remote, 0x89d2}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}], 0x54) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="396400000000000025000000000000020000950000ca796690ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2a020400) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f0000000000), &(0x7f00000002c0)}) 427.364918ms ago: executing program 7 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4040, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 426.954753ms ago: executing program 2 (id=457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xab, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xf}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000000c0), 0x4f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000a2000/0x4000)=nil, &(0x7f00004fc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x70, 0x10}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000e1ffffff00000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac141400000000000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000fc02000000000000000000000000000000000000020000000a"], 0xa0}}, 0x20040000) 248.29267ms ago: executing program 7 (id=458): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xeb, 0x0, 0xe}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x402) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x7, 0x80000000, @fr_pvc=0x0}}) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x1c1301) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = inotify_init1(0x0) r9 = dup(r8) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000180)) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4048aecb, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC=r2]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 118.516279ms ago: executing program 8 (id=459): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@local, 0x308b}) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276d1a5d6"], 0x0) (rerun: 64) syz_usb_control_io$uac1(r1, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x3, 0xb1, {0xb1, 0xd, "0f14c858608defaec67b10df9c1bdfa463fc77d56af548e15e0555d127c29c52a6b5701d787556fe9e02d55a867ff3205f77ff11975f53e19fbad50786afe1fb8decd9668b5bc7d67833ba4e77091b46c1c6f3ceb7346ea4702a2348c4230f5265b6890a8b274841223bcfb60a8d4a3bec1c64f3fe9278c88c06d2df8c380ec5365c57723cf19981bb47dac91861ebfe452d9316b27b8cf0307f59a415225545e9d9bab84da48df694599470368e0b"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xf, 0x53, "62257a95f01a58b437f279f6c15770b775d35746953b34c771310ca78902727763b9bd57b94857e393140815866fcc670d0df64785ecf9ed2cbf659d2b933e762e026184c62598a5b88a04f46b9b42f1a77f8a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xa, 0xf, 0x1, 0x2, 0x200, 0x9, 0x3b9b, 0x8, 0xc, 0x4, 0x2, 0x8}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 62.686784ms ago: executing program 6 (id=460): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket(0x11, 0x7, 0x8) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) writev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000000c0)="fa9839af50d050c40ee753a39cde6b6bf324f34c0c22406bba8500e9a8642baf2b4cab537bdd64d78427b900987cab65421b903ea35249d0f6c273571836435ece846a4f10d91c3c2c7a9f", 0x4b}, {&(0x7f0000000200)="cdd4eebb024a6fcee73f8862ba91740b6415c34f922e7c037d3566529ba95fe117f68e09aa244255edd8e0f5393d54a3d530aab90fdb1210c5976f3e07374161ecd499f0e3bc6ebaee3bc9b5ee5c5e56d9af028ecbb86f7305951a73fec538f2d2175354f7cb80fe8764fb510695f15841058b01a3fae81dfdb39649509963b96a2e29cedb715b43cfd01696ae2068bd0d538e32fee39906077eeaa1c8af5f10dfd28bf039", 0xa5}, {&(0x7f0000000400)="4397687207d7ec4026fbe0b28ee41b0d142063b38ded34c25810bc13b2e69be0c5c10f5ae08398ab9a0de213e3259c70f5a68e6863aadf55bac0431edda3b42762ffbff668475f74cf7679ae9506788cd7b98d054afe2cb3a6a781412fca81248e9287e07176e96e005d3a2255fdafafc0849168ee6f98042eaedbcfd860ed9299d6b54643ba34eed7ce69", 0x8b}], 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rt_tgsigqueueinfo(0x0, 0x0, 0x9, &(0x7f0000000140)={0x39, 0xffffffff, 0x4}) (async) r5 = dup2(r0, r0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00000500", 0x4) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'macvlan1\x00', 0x10}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd0880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xc5ed0f95e1363f41, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.653731ms ago: executing program 6 (id=461): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) unshare(0x22000600) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async, rerun: 64) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d3, 0x0, 0xfffffffffffffffd, 0x3}) (async, rerun: 64) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="66640dbc5ec43e998c3916bd83be50b53dfaefac74d3d496c80ab43b7c0502301c4453b2210acd189082", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x7ff}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 0s ago: executing program 2 (id=462): syz_open_dev$vcsu(&(0x7f0000000040), 0x3b5, 0x20480) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): e [ 346.308909][ T6869] bridge_slave_0: entered allmulticast mode [ 346.315238][ T6869] bridge_slave_0: entered promiscuous mode [ 346.331424][ T6860] team0: Port device team_slave_0 added [ 346.349931][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.357285][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.364658][ T6869] bridge_slave_1: entered allmulticast mode [ 346.370985][ T6869] bridge_slave_1: entered promiscuous mode [ 346.376890][ T972] m920x_read = error: -19 [ 346.381228][ T972] dvb-usb: error -19 while querying for an remote control event. [ 346.397775][ T6860] team0: Port device team_slave_1 added [ 346.417961][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.445847][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.455499][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.462472][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.488611][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.500419][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.508127][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.516512][ T6851] bridge_slave_0: entered allmulticast mode [ 346.522839][ T6851] bridge_slave_0: entered promiscuous mode [ 346.531013][ T1087] bridge_slave_1: left allmulticast mode [ 346.536802][ T1087] bridge_slave_1: left promiscuous mode [ 346.542451][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.550597][ T1087] bridge_slave_0: left allmulticast mode [ 346.556460][ T6257] m920x_read = error: -19 [ 346.557167][ T1087] bridge_slave_0: left promiscuous mode [ 346.560765][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 346.576760][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.666583][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.676252][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.685984][ T1087] bond0 (unregistering): Released all slaves [ 346.715673][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.718732][ T6257] m920x_read = error: -19 [ 346.722616][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.722638][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.765647][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 346.782366][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.789720][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.797009][ T6851] bridge_slave_1: entered allmulticast mode [ 346.803297][ T6851] bridge_slave_1: entered promiscuous mode [ 346.814521][ T6869] team0: Port device team_slave_0 added [ 346.831131][ T6860] hsr_slave_0: entered promiscuous mode [ 346.837573][ T6860] hsr_slave_1: entered promiscuous mode [ 346.843525][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.851938][ T6860] Cannot create hsr debugfs directory [ 346.860432][ T6869] team0: Port device team_slave_1 added [ 346.887984][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.895217][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.921460][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.934078][ T6257] m920x_read = error: -19 [ 346.934080][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.935319][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.940076][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 346.981807][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.991436][ T29] audit: type=1400 audit(1735498140.905:983): avc: denied { read } for pid=6920 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.020404][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.046726][ T29] audit: type=1400 audit(1735498140.905:984): avc: denied { open } for pid=6920 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.072321][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.088228][ T29] audit: type=1400 audit(1735498140.905:985): avc: denied { getattr } for pid=6920 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.113820][ T29] audit: type=1400 audit(1735498140.995:986): avc: denied { write } for pid=6919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.137028][ T972] m920x_read = error: -19 [ 347.141369][ T972] dvb-usb: error -19 while querying for an remote control event. [ 347.149481][ T29] audit: type=1400 audit(1735498140.995:987): avc: denied { add_name } for pid=6919 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.172712][ T29] audit: type=1400 audit(1735498140.995:988): avc: denied { create } for pid=6919 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.195077][ T29] audit: type=1400 audit(1735498140.995:989): avc: denied { write } for pid=6919 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3186 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.221200][ T29] audit: type=1400 audit(1735498141.005:990): avc: denied { append } for pid=6919 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3186 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.246020][ T29] audit: type=1400 audit(1735498141.045:991): avc: denied { remove_name } for pid=6930 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3186 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.270059][ T29] audit: type=1400 audit(1735498141.045:992): avc: denied { unlink } for pid=6930 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3186 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.296128][ T6842] veth0_vlan: entered promiscuous mode [ 347.304459][ T972] m920x_read = error: -19 [ 347.308820][ T972] dvb-usb: error -19 while querying for an remote control event. [ 347.321166][ T6851] team0: Port device team_slave_0 added [ 347.328563][ T6851] team0: Port device team_slave_1 added [ 347.344246][ T1087] hsr_slave_0: left promiscuous mode [ 347.349900][ T1087] hsr_slave_1: left promiscuous mode [ 347.355893][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.363649][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.371372][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.379213][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.387555][ T1087] veth1_macvtap: left promiscuous mode [ 347.393056][ T1087] veth0_macvtap: left promiscuous mode [ 347.398583][ T5848] Bluetooth: hci7: command tx timeout [ 347.398739][ T1087] veth1_vlan: left promiscuous mode [ 347.409672][ T1087] veth0_vlan: left promiscuous mode [ 347.462471][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 347.472392][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 347.483968][ T972] m920x_read = error: -19 [ 347.488352][ T972] dvb-usb: error -19 while querying for an remote control event. [ 347.522234][ T6869] hsr_slave_0: entered promiscuous mode [ 347.533088][ T6869] hsr_slave_1: entered promiscuous mode [ 347.539569][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.547318][ T6869] Cannot create hsr debugfs directory [ 347.560902][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.567952][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.594479][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.618589][ T6842] veth1_vlan: entered promiscuous mode [ 347.630766][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.645842][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.677730][ T6257] m920x_read = error: -19 [ 347.682101][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 347.692498][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.773221][ T6851] hsr_slave_0: entered promiscuous mode [ 347.780646][ T6851] hsr_slave_1: entered promiscuous mode [ 347.789616][ T6851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.797661][ T6851] Cannot create hsr debugfs directory [ 347.817064][ T6937] netlink: 'syz.2.256': attribute type 5 has an invalid length. [ 347.843034][ T6842] veth0_macvtap: entered promiscuous mode [ 347.850061][ T6860] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 347.854434][ T6257] m920x_read = error: -19 [ 347.868227][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 347.889153][ T6842] veth1_macvtap: entered promiscuous mode [ 347.897991][ T6860] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.921595][ T6860] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.950943][ T6860] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.026306][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.038816][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.048892][ T972] m920x_read = error: -19 [ 348.053232][ T972] dvb-usb: error -19 while querying for an remote control event. [ 348.061484][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.072238][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.082876][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.093471][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.103497][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.114280][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.124949][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.143591][ T6869] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 348.158548][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.172250][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.185454][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.197766][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.209265][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.220022][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.223981][ T6257] m920x_read = error: -19 [ 348.237714][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 348.239973][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.260698][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.294374][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.310846][ T6869] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 348.338441][ T6869] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 348.353877][ T5848] Bluetooth: hci8: command tx timeout [ 348.379635][ T6842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.406670][ T972] m920x_read = error: -19 [ 348.411056][ T972] dvb-usb: error -19 while querying for an remote control event. [ 348.421215][ T6842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.430292][ T6842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.443411][ T6842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.455213][ T6869] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 348.519628][ T6851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.552146][ T6851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.594379][ T9] m920x_read = error: -19 [ 348.598753][ T9] dvb-usb: error -19 while querying for an remote control event. [ 348.616763][ T6851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.644208][ T6851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.667992][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.750597][ T6973] capability: warning: `syz.2.258' uses deprecated v2 capabilities in a way that may be insecure [ 348.761493][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.769837][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.793776][ T972] m920x_read = error: -19 [ 348.798448][ T972] dvb-usb: error -19 while querying for an remote control event. [ 348.802861][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.821253][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.832177][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.839741][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.853942][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.879013][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.886167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.896812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.903908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.917601][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.924736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.018592][ T9] m920x_read = error: -19 [ 349.022962][ T9] dvb-usb: error -19 while querying for an remote control event. [ 349.031711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.038824][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.095291][ T6869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.125229][ T6985] FAULT_INJECTION: forcing a failure. [ 349.125229][ T6985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.138560][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.2.259 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 349.149151][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.159206][ T6985] Call Trace: [ 349.162477][ T6985] [ 349.165404][ T6985] dump_stack_lvl+0x16c/0x1f0 [ 349.170093][ T6985] should_fail_ex+0x497/0x5b0 [ 349.174779][ T6985] _copy_from_user+0x2e/0xd0 [ 349.179379][ T6985] copy_msghdr_from_user+0x99/0x160 [ 349.184577][ T6985] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 349.190384][ T6985] ? rcu_is_watching+0x12/0xc0 [ 349.195155][ T6985] ___sys_sendmsg+0xff/0x1e0 [ 349.199738][ T6985] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.204936][ T6985] ? __pfx_lock_release+0x10/0x10 [ 349.209962][ T6985] ? trace_lock_acquire+0x14e/0x1f0 [ 349.215164][ T6985] ? vfs_write+0xa9b/0x1150 [ 349.219667][ T6985] ? __fget_files+0x206/0x3a0 [ 349.224430][ T6985] __sys_sendmsg+0x16e/0x220 [ 349.229045][ T6985] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.232317][ T6869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.234158][ T6985] ? rcu_is_watching+0x12/0xc0 [ 349.234187][ T6985] ? rcu_is_watching+0x12/0xc0 [ 349.234208][ T6985] do_syscall_64+0xcd/0x250 [ 349.234232][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.234255][ T6985] RIP: 0033:0x7fd995785d29 [ 349.234270][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.256763][ T6860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.258555][ T6985] RSP: 002b:00007fd996654038 EFLAGS: 00000246 [ 349.264574][ T6860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.268815][ T6985] ORIG_RAX: 000000000000002e [ 349.319736][ T6985] RAX: ffffffffffffffda RBX: 00007fd995976160 RCX: 00007fd995785d29 [ 349.327711][ T6985] RDX: 0000000004048040 RSI: 0000000020000300 RDI: 0000000000000006 [ 349.335687][ T6985] RBP: 00007fd996654090 R08: 0000000000000000 R09: 0000000000000000 [ 349.343649][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.351604][ T6985] R13: 0000000000000000 R14: 00007fd995976160 R15: 00007ffe7e400b38 [ 349.359568][ T6985] [ 349.365149][ T5893] m920x_read = error: -19 [ 349.369505][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 349.457910][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.474955][ T5848] Bluetooth: hci7: command tx timeout [ 349.488909][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.525385][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.532513][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.545545][ T972] m920x_read = error: -19 [ 349.549932][ T972] dvb-usb: error -19 while querying for an remote control event. [ 349.576557][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.583684][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.709973][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.733767][ T6257] m920x_read = error: -19 [ 349.738312][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 349.782055][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.260'. [ 349.792033][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.260'. [ 349.840645][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.930723][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.983644][ T6257] m920x_read = error: -19 [ 349.999406][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 350.100983][ T6869] veth0_vlan: entered promiscuous mode [ 350.138494][ T6869] veth1_vlan: entered promiscuous mode [ 350.176986][ T6257] m920x_read = error: -19 [ 350.186616][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 350.212733][ T6860] veth0_vlan: entered promiscuous mode [ 350.239417][ T6851] veth0_vlan: entered promiscuous mode [ 350.249659][ T6851] veth1_vlan: entered promiscuous mode [ 350.267938][ T6851] veth0_macvtap: entered promiscuous mode [ 350.290750][ T6869] veth0_macvtap: entered promiscuous mode [ 350.313644][ T6851] veth1_macvtap: entered promiscuous mode [ 350.321244][ T6869] veth1_macvtap: entered promiscuous mode [ 350.336689][ T6860] veth1_vlan: entered promiscuous mode [ 350.350731][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.363944][ T8] m920x_read = error: -19 [ 350.368459][ T8] dvb-usb: error -19 while querying for an remote control event. [ 350.384684][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.405640][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.472052][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.513767][ T5847] Bluetooth: hci8: command tx timeout [ 350.543593][ T6257] m920x_read = error: -19 [ 350.547987][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 350.583550][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.594344][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.605874][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.617751][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.627923][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.638655][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.649574][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.657819][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.668529][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.679030][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.689668][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.699704][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.710278][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.720130][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.732051][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.732196][ T972] m920x_read = error: -19 [ 350.741903][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.741916][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.741938][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.741948][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.756867][ T972] dvb-usb: error -19 while querying for an remote control event. [ 350.766912][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 350.778066][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.812853][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.826216][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.836792][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.848302][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.858832][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.869371][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.879354][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.889853][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.899785][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.910591][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.921624][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.929160][ T972] m920x_read = error: -19 [ 350.935041][ T972] dvb-usb: error -19 while querying for an remote control event. [ 350.952772][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.963392][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 350.968980][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.982319][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.982365][ T8] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 350.995191][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.002044][ T8] usb 3-1: config 0 has no interface number 0 [ 351.011544][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.017861][ T8] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x6 has invalid maxpacket 17407, setting to 1024 [ 351.028946][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.039052][ T8] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1024 [ 351.059828][ T8] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 351.070059][ T8] usb 3-1: config 0 interface 126 has no altsetting 0 [ 351.078186][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.089256][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.099364][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.099411][ T972] m920x_read = error: -19 [ 351.110009][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.114247][ T972] dvb-usb: error -19 while querying for an remote control event. [ 351.125706][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.132435][ T8] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 351.142463][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.151265][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.151286][ T8] usb 3-1: Product: syz [ 351.165992][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.192300][ T6869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.206318][ T8] usb 3-1: Manufacturer: syz [ 351.209312][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.265'. [ 351.210990][ T8] usb 3-1: SerialNumber: syz [ 351.219956][ T6869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.231211][ T8] usb 3-1: config 0 descriptor?? [ 351.235484][ T6869] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.239412][ T7059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.247318][ T6869] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.254636][ T7059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.272610][ T7065] netlink: 72 bytes leftover after parsing attributes in process `syz.5.265'. [ 351.273181][ T6851] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.290556][ T6257] m920x_read = error: -19 [ 351.290664][ T6851] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.294959][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 351.315481][ T6851] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.324690][ T6851] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.390120][ T6860] veth0_macvtap: entered promiscuous mode [ 351.409670][ T6860] veth1_macvtap: entered promiscuous mode [ 351.419804][ T3880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.428296][ T3880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.434458][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.447664][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.451366][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.467066][ T5893] m920x_read = error: -19 [ 351.467705][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.471502][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 351.491752][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.502392][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.512412][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.522901][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.532826][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.543940][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.554243][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.566056][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.575927][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.586555][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.596481][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.607039][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.617619][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.625507][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 351.653496][ T5893] m920x_read = error: -19 [ 351.658039][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 351.670791][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.681532][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.691527][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.702035][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.711951][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.722574][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.732843][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.743549][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.753715][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.764356][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.774845][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.785603][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.786095][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 351.796053][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.811235][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.822008][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.822528][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 80, using maximum allowed: 30 [ 351.840682][ T5893] m920x_read = error: -19 [ 351.845125][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 351.853133][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.862210][ T6860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.871392][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.875745][ T6860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.889981][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.891064][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 351.898233][ T6860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.908604][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 80 [ 351.916422][ T6860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.931555][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 351.950103][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.960127][ T9] usb 6-1: Product: syz [ 351.964567][ T9] usb 6-1: Manufacturer: syz [ 351.969172][ T9] usb 6-1: SerialNumber: syz [ 351.975982][ T9] usb 6-1: config 0 descriptor?? [ 351.979282][ T3880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.989226][ T3880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.003795][ T5893] m920x_read = error: -19 [ 352.008221][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 352.040883][ T3880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.077928][ T3880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.100472][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.108578][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.174442][ T972] m920x_read = error: -19 [ 352.179577][ T972] dvb-usb: error -19 while querying for an remote control event. [ 352.273614][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 352.273635][ T29] audit: type=1400 audit(1735498146.185:998): avc: denied { write } for pid=7085 comm="syz.8.252" lport=51227 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 352.323406][ T969] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 352.325672][ T29] audit: type=1400 audit(1735498146.245:999): avc: denied { setopt } for pid=7085 comm="syz.8.252" lport=51227 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 352.427839][ T29] audit: type=1400 audit(1735498146.345:1000): avc: denied { getopt } for pid=7084 comm="syz.7.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.454540][ T972] m920x_read = error: -19 [ 352.459025][ T972] dvb-usb: error -19 while querying for an remote control event. [ 352.504356][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 352.511046][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.522725][ T969] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 352.532454][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.544707][ T969] usb 7-1: config 0 descriptor?? [ 352.604863][ T5804] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 352.612455][ T5847] Bluetooth: hci8: command tx timeout [ 352.624429][ T972] m920x_read = error: -19 [ 352.628858][ T972] dvb-usb: error -19 while querying for an remote control event. [ 352.796611][ T7115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.881208][ T972] m920x_read = error: -19 [ 352.881617][ T972] dvb-usb: error -19 while querying for an remote control event. [ 352.936021][ T5804] usb 9-1: Using ep0 maxpacket: 16 [ 353.037556][ T9] m920x_read = error: -19 [ 353.037572][ T9] dvb-usb: error -19 while querying for an remote control event. [ 353.042164][ T5804] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.042200][ T5804] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 353.042221][ T5804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 353.042259][ T5804] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.152741][ T5804] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 353.152770][ T5804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.152787][ T5804] usb 9-1: Product: syz [ 353.152800][ T5804] usb 9-1: Manufacturer: syz [ 353.152813][ T5804] usb 9-1: SerialNumber: syz [ 353.193275][ T5893] m920x_read = error: -19 [ 353.193292][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 353.194623][ T5804] usb 9-1: config 0 descriptor?? [ 353.248858][ T8] ir_usb 3-1:0.126: IR Dongle converter detected [ 353.249787][ T8] usb 3-1: IRDA class descriptor not found, device not bound [ 353.260969][ T8] usb 3-1: USB disconnect, device number 10 [ 353.280139][ T7121] syz.6.249: attempt to access beyond end of device [ 353.280139][ T7121] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 353.280328][ T7121] syz.6.249: attempt to access beyond end of device [ 353.280328][ T7121] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 353.280368][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 353.280467][ T7121] syz.6.249: attempt to access beyond end of device [ 353.280467][ T7121] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 353.280498][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 353.280814][ T7121] syz.6.249: attempt to access beyond end of device [ 353.280814][ T7121] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 353.280906][ T7121] syz.6.249: attempt to access beyond end of device [ 353.280906][ T7121] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 353.280950][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 353.281007][ T7121] syz.6.249: attempt to access beyond end of device [ 353.281007][ T7121] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 353.281036][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 353.281243][ T7121] syz.6.249: attempt to access beyond end of device [ 353.281243][ T7121] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 353.281363][ T7121] syz.6.249: attempt to access beyond end of device [ 353.281363][ T7121] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 353.281394][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 353.281444][ T7121] syz.6.249: attempt to access beyond end of device [ 353.281444][ T7121] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 353.281488][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 353.281652][ T7121] syz.6.249: attempt to access beyond end of device [ 353.281652][ T7121] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 353.281751][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 353.281813][ T7121] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 353.281828][ T7121] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 353.366719][ T5893] m920x_read = error: -19 [ 353.366737][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 353.399867][ T5804] rc_core: IR keymap rc-xbox-dvd not found [ 353.399882][ T5804] Registered IR keymap rc-empty [ 353.400301][ T5804] rc rc1: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1 [ 353.400924][ T5804] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc1/input12 [ 353.559971][ T6257] m920x_read = error: -19 [ 353.560123][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 353.569160][ T7135] QAT: failed to copy from user. [ 353.719211][ T29] audit: type=1400 audit(1735498147.455:1001): avc: denied { bind } for pid=7129 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 353.719248][ T29] audit: type=1400 audit(1735498147.455:1002): avc: denied { name_bind } for pid=7129 comm="syz.2.268" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 353.719274][ T29] audit: type=1400 audit(1735498147.455:1003): avc: denied { node_bind } for pid=7129 comm="syz.2.268" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 353.719330][ T29] audit: type=1400 audit(1735498147.465:1004): avc: denied { listen } for pid=7129 comm="syz.2.268" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 353.719356][ T29] audit: type=1400 audit(1735498147.475:1005): avc: denied { accept } for pid=7129 comm="syz.2.268" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 353.732213][ T6257] m920x_read = error: -19 [ 353.732235][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 353.905661][ T969] usbhid 7-1:0.0: can't add hid device: -71 [ 353.905728][ T969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 353.909811][ T969] usb 7-1: USB disconnect, device number 2 [ 353.933621][ T5893] m920x_read = error: -19 [ 354.215615][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 354.383228][ T5893] m920x_read = error: -19 [ 354.387598][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 354.395483][ T8] usb 9-1: USB disconnect, device number 2 [ 354.401274][ C0] xbox_remote 9-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 354.521144][ T7145] warning: `syz.8.270' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 354.718191][ T7115] tty tty34: ldisc open failed (-12), clearing slot 33 [ 354.725350][ T5893] m920x_read = error: -19 [ 354.729770][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 354.773884][ T29] audit: type=1400 audit(1735498148.506:1006): avc: denied { mount } for pid=7141 comm="syz.8.270" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 354.805178][ T6257] usb 6-1: USB disconnect, device number 2 [ 354.895328][ T5893] m920x_read = error: -19 [ 354.900984][ T29] audit: type=1326 audit(1735498148.816:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x0 [ 354.915647][ T7155] xt_CONNSECMARK: invalid mode: 0 [ 354.924518][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 355.244703][ T9] m920x_read = error: -19 [ 355.258861][ T9] dvb-usb: error -19 while querying for an remote control event. [ 355.294980][ T7159] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 355.326857][ T7155] wireguard0: entered promiscuous mode [ 355.339499][ T7155] wireguard0: entered allmulticast mode [ 355.425068][ T972] m920x_read = error: -19 [ 355.432196][ T972] dvb-usb: error -19 while querying for an remote control event. [ 355.573167][ T969] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.715968][ T8] m920x_read = error: -19 [ 355.720334][ T8] dvb-usb: error -19 while querying for an remote control event. [ 355.763835][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 355.780786][ T969] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.792677][ T969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 355.818182][ T969] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 355.834303][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.844415][ T969] usb 6-1: config 0 descriptor?? [ 355.886584][ T8] m920x_read = error: -19 [ 355.890998][ T8] dvb-usb: error -19 while querying for an remote control event. [ 356.083010][ T8] m920x_read = error: -19 [ 356.087470][ T8] dvb-usb: error -19 while querying for an remote control event. [ 356.152974][ T5931] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 356.262956][ T8] m920x_read = error: -19 [ 356.268546][ T8] dvb-usb: error -19 while querying for an remote control event. [ 356.502999][ T6257] m920x_read = error: -19 [ 356.507416][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 356.552970][ T972] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 356.573924][ T5931] usb 9-1: config 0 has an invalid interface number: 222 but max is 0 [ 356.583088][ T5931] usb 9-1: config 0 has no interface number 0 [ 356.589205][ T5931] usb 9-1: config 0 interface 222 has no altsetting 0 [ 356.654508][ T5931] usb 9-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=2f.08 [ 356.664147][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.672548][ T969] usbhid 6-1:0.0: can't add hid device: -71 [ 356.678981][ T969] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 356.687630][ T5931] usb 9-1: Product: syz [ 356.691814][ T5931] usb 9-1: Manufacturer: syz [ 356.692926][ T6257] m920x_read = error: -19 [ 356.697830][ T969] usb 6-1: USB disconnect, device number 3 [ 356.702251][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 356.706699][ T5931] usb 9-1: SerialNumber: syz [ 356.721288][ T5931] usb 9-1: config 0 descriptor?? [ 357.005157][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.024306][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.036562][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.051326][ T972] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 357.060664][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.075209][ T972] usb 3-1: config 0 descriptor?? [ 357.163291][ T5893] m920x_read = error: -19 [ 357.167755][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.334478][ T6257] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 357.343492][ T5893] m920x_read = error: -19 [ 357.347986][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.510094][ T5931] usb 9-1: USB disconnect, device number 3 [ 357.570066][ T5893] m920x_read = error: -19 [ 357.574567][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 357.586961][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.594647][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.603090][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.610624][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.618457][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.625918][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.633397][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.640875][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.648361][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.655813][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.663255][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.671131][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.671468][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 357.671479][ T29] audit: type=1400 audit(1735498151.586:1017): avc: denied { write } for pid=7216 comm="syz.6.288" path="socket:[16601]" dev="sockfs" ino=16601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 357.678700][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.716367][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.724201][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.731636][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.739128][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.746708][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.754398][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.761872][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.771577][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.779329][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.787063][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.795003][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.802637][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.810679][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.822625][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.848556][ T7222] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 357.935604][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.949010][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.957225][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.965153][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.973149][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.981163][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.989229][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 357.996859][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.004420][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.012779][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.020318][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.028176][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.035865][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.043484][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.050888][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.058408][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 358.066880][ T8] m920x_read = error: -19 [ 358.071252][ T8] dvb-usb: error -19 while querying for an remote control event. [ 358.080706][ T5893] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 358.090880][ T6257] usb 8-1: Using ep0 maxpacket: 16 [ 358.098630][ T6257] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.109651][ T6257] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 358.124243][ T6257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.136008][ T6257] usb 8-1: config 0 descriptor?? [ 358.242885][ T5893] m920x_read = error: -19 [ 358.247666][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 358.354153][ T7211] bio_check_eod: 2 callbacks suppressed [ 358.354165][ T7211] syz.7.286: attempt to access beyond end of device [ 358.354165][ T7211] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 358.372743][ T7211] syz.7.286: attempt to access beyond end of device [ 358.372743][ T7211] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 358.385646][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 358.395293][ T7211] syz.7.286: attempt to access beyond end of device [ 358.395293][ T7211] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 358.408148][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 358.417951][ T7211] syz.7.286: attempt to access beyond end of device [ 358.417951][ T7211] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 358.434169][ T7211] syz.7.286: attempt to access beyond end of device [ 358.434169][ T7211] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 358.447133][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 358.456768][ T7211] syz.7.286: attempt to access beyond end of device [ 358.456768][ T7211] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 358.469699][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 358.479450][ T7211] syz.7.286: attempt to access beyond end of device [ 358.479450][ T7211] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 358.492280][ T7211] syz.7.286: attempt to access beyond end of device [ 358.492280][ T7211] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 358.505200][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 358.514880][ T7211] syz.7.286: attempt to access beyond end of device [ 358.514880][ T7211] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 358.528162][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 358.538258][ T7211] syz.7.286: attempt to access beyond end of device [ 358.538258][ T7211] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 358.551181][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 358.560761][ T7211] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 358.570255][ T7211] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 358.584517][ T5893] m920x_read = error: -19 [ 358.592186][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 358.655181][ T6257] usbhid 8-1:0.0: can't add hid device: -71 [ 358.667883][ T6257] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 358.693722][ T6257] usb 8-1: USB disconnect, device number 2 [ 358.701512][ T7229] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 358.892582][ T5892] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 358.906910][ T5804] m920x_read = error: -19 [ 358.956201][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 358.956395][ T29] audit: type=1400 audit(1735498152.766:1018): avc: denied { write } for pid=7230 comm="syz.6.292" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 359.158468][ T5804] m920x_read = error: -19 [ 359.165364][ T972] usbhid 3-1:0.0: can't add hid device: -71 [ 359.177701][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 359.190949][ T972] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 359.213191][ T5892] usb 6-1: Invalid ep0 maxpacket: 32 [ 359.217990][ T972] usb 3-1: USB disconnect, device number 11 [ 359.387267][ T5892] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 359.529112][ T5893] m920x_read = error: -19 [ 359.533650][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 359.702928][ T5892] usb 6-1: Invalid ep0 maxpacket: 32 [ 359.715870][ T5892] usb usb6-port1: attempt power cycle [ 359.991542][ T972] m920x_read = error: -19 [ 359.995961][ T972] dvb-usb: error -19 while querying for an remote control event. [ 360.139106][ T29] audit: type=1400 audit(1735498154.056:1019): avc: denied { ioctl } for pid=7254 comm="syz.6.299" path="socket:[16708]" dev="sockfs" ino=16708 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 360.163961][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.236839][ T7258] NILFS (loop8): device size too small [ 360.481593][ T972] m920x_read = error: -19 [ 360.486589][ T972] dvb-usb: error -19 while querying for an remote control event. [ 360.488722][ T5892] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 360.501886][ T5931] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 360.532718][ T5892] usb 6-1: Invalid ep0 maxpacket: 32 [ 360.613732][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 360.632978][ T5804] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 360.662345][ T5892] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 360.662499][ T972] m920x_read = error: -19 [ 360.670902][ T5931] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.676012][ T972] dvb-usb: error -19 while querying for an remote control event. [ 360.687787][ T5931] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 360.703508][ T5892] usb 6-1: Invalid ep0 maxpacket: 32 [ 360.709040][ T5892] usb usb6-port1: unable to enumerate USB device [ 360.716867][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.726518][ T5931] usb 8-1: config 0 descriptor?? [ 360.734321][ T5931] pwc: Askey VC010 type 2 USB webcam detected. [ 360.783458][ T5804] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 360.794458][ T5804] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.805696][ T5804] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.814794][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.822896][ T5804] usb 7-1: Product: syz [ 360.827054][ T5804] usb 7-1: Manufacturer: syz [ 360.831620][ T5804] usb 7-1: SerialNumber: syz [ 360.852347][ T972] m920x_read = error: -19 [ 360.856801][ T972] dvb-usb: error -19 while querying for an remote control event. [ 360.864615][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 361.032356][ T8] m920x_read = error: -19 [ 361.036748][ T8] dvb-usb: error -19 while querying for an remote control event. [ 361.045069][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 361.050376][ T7255] mmap: syz.6.299 (7255) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 361.063832][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.072282][ T5893] usb 3-1: config 255 has an invalid interface number: 1 but max is 0 [ 361.080532][ T5893] usb 3-1: config 255 has no interface number 0 [ 361.087227][ T5893] usb 3-1: config 255 interface 1 has no altsetting 0 [ 361.101595][ T5804] cdc_ncm 7-1:1.0: bind() failure [ 361.108364][ T5804] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 361.115206][ T5804] cdc_ncm 7-1:1.1: bind() failure [ 361.122798][ T5804] usb 7-1: USB disconnect, device number 3 [ 361.129691][ T5893] usb 3-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=9c.b0 [ 361.138797][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.142150][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 361.146996][ T5893] usb 3-1: Product: syz [ 361.155597][ T5931] pwc: recv_control_msg error -32 req 02 val 2700 [ 361.157652][ T5893] usb 3-1: Manufacturer: syz [ 361.157672][ T5893] usb 3-1: SerialNumber: syz [ 361.171639][ T5931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 361.184547][ T5931] pwc: recv_control_msg error -32 req 04 val 1000 [ 361.192450][ T5931] pwc: recv_control_msg error -32 req 04 val 1300 [ 361.202963][ T9] m920x_read = error: -19 [ 361.207349][ T9] dvb-usb: error -19 while querying for an remote control event. [ 361.232223][ T972] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 361.382412][ T9] m920x_read = error: -19 [ 361.386966][ T9] dvb-usb: error -19 while querying for an remote control event. [ 361.399983][ T5931] pwc: recv_control_msg error -71 req 02 val 2000 [ 361.406853][ T5931] pwc: recv_control_msg error -71 req 02 val 2100 [ 361.413686][ T5931] pwc: recv_control_msg error -71 req 04 val 1500 [ 361.414867][ T972] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 361.420398][ T5931] pwc: recv_control_msg error -71 req 02 val 2500 [ 361.431046][ T972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.436229][ T5931] pwc: recv_control_msg error -71 req 02 val 2400 [ 361.446558][ T972] usb 9-1: Product: syz [ 361.453690][ T5931] pwc: recv_control_msg error -71 req 02 val 2600 [ 361.454526][ T972] usb 9-1: Manufacturer: syz [ 361.461096][ T5931] pwc: recv_control_msg error -71 req 02 val 2900 [ 361.473418][ T972] usb 9-1: SerialNumber: syz [ 361.476606][ T5931] pwc: recv_control_msg error -71 req 02 val 2800 [ 361.481586][ T972] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.485138][ T5931] pwc: recv_control_msg error -71 req 04 val 1100 [ 361.501301][ T5931] pwc: recv_control_msg error -71 req 04 val 1200 [ 361.505636][ T9] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 361.519010][ T5804] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 361.523442][ T5931] pwc: Registered as video103. [ 361.534502][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input13 [ 361.552422][ T972] m920x_read = error: -19 [ 361.556476][ T5931] usb 8-1: USB disconnect, device number 3 [ 361.567818][ T972] dvb-usb: error -19 while querying for an remote control event. [ 361.596772][ T5893] xsens_mt 3-1:255.1: xsens_mt converter detected [ 361.612428][ T5893] usb 3-1: xsens_mt converter now attached to ttyUSB0 [ 361.627542][ T5893] usb 3-1: USB disconnect, device number 12 [ 361.639994][ T5893] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 361.648713][ T5893] xsens_mt 3-1:255.1: device disconnected [ 361.672278][ T5804] usb 7-1: Using ep0 maxpacket: 8 [ 361.679366][ T5804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.692211][ T5804] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 361.708261][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.730037][ T5804] usb 7-1: config 0 descriptor?? [ 361.735329][ T6257] m920x_read = error: -19 [ 361.739815][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 361.743286][ T29] audit: type=1400 audit(1735498155.666:1020): avc: denied { create } for pid=7289 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 361.753481][ T5804] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 361.815670][ T29] audit: type=1400 audit(1735498155.736:1021): avc: denied { setcurrent } for pid=7294 comm="syz.5.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 361.903713][ T5893] m920x_read = error: -19 [ 361.908243][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 361.970010][ T7299] netem: incorrect ge model size [ 361.975164][ T7299] netem: change failed [ 362.019793][ T29] audit: type=1400 audit(1735498155.936:1022): avc: denied { bind } for pid=7301 comm="syz.5.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.040910][ T29] audit: type=1400 audit(1735498155.956:1023): avc: denied { map } for pid=7301 comm="syz.5.308" path="socket:[16857]" dev="sockfs" ino=16857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.073011][ T5893] m920x_read = error: -19 [ 362.078926][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 362.090137][ T29] audit: type=1400 audit(1735498155.956:1024): avc: denied { read } for pid=7301 comm="syz.5.308" path="socket:[16857]" dev="sockfs" ino=16857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.141014][ T5931] usb 9-1: USB disconnect, device number 4 [ 362.261100][ T6257] m920x_read = error: -19 [ 362.265654][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 362.292364][ T969] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 362.442097][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 362.442330][ T6257] m920x_read = error: -19 [ 362.451908][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 362.463313][ T969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.473770][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.479108][ T7315] netlink: 48 bytes leftover after parsing attributes in process `syz.7.311'. [ 362.485136][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.495256][ T7315] tipc: Invalid UDP bearer configuration [ 362.504397][ T969] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 362.504431][ T7315] tipc: Enabling of bearer rejected, failed to enable media [ 362.510081][ T969] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.545699][ T969] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.555734][ T969] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.572282][ T969] usb 6-1: Manufacturer: syz [ 362.579282][ T969] usb 6-1: config 0 descriptor?? [ 362.622222][ T5893] m920x_read = error: -19 [ 362.626622][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 362.752757][ T9] usb 9-1: Service connection timeout for: 256 [ 362.759311][ T9] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 362.770330][ T9] ath9k_htc: Failed to initialize the device [ 362.787881][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.797985][ T5931] usb 9-1: ath9k_htc: USB layer deinitialized [ 362.798168][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.813073][ T5893] m920x_read = error: -19 [ 362.817471][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 362.822752][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.843112][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.861575][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.872401][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c342c00: rx timeout, send abort [ 362.876617][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.882036][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c342c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.890859][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.912582][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.921067][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.929950][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.992591][ T969] rc_core: IR keymap rc-hauppauge not found [ 362.998591][ T969] Registered IR keymap rc-empty [ 363.004476][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 363.012120][ T5804] m920x_read = error: -19 [ 363.016463][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 363.032025][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 363.062417][ T969] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 363.110853][ T969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input14 [ 363.147521][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.5.319'. [ 363.156586][ T7354] netlink: 264 bytes leftover after parsing attributes in process `syz.5.319'. [ 363.165953][ T7354] netlink: 64 bytes leftover after parsing attributes in process `syz.5.319'. [ 363.176754][ T5847] Bluetooth: hci7: Invalid connection link type handle 0x00c9 [ 363.203467][ T5804] m920x_read = error: -19 [ 363.207977][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 363.251484][ T6257] usb 7-1: USB disconnect, device number 4 [ 363.443541][ T5804] m920x_read = error: -19 [ 363.448130][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 363.554015][ T29] audit: type=1400 audit(1735498157.467:1025): avc: denied { read } for pid=7368 comm="syz.2.321" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 363.585780][ T7354] syz.5.319 (7354): drop_caches: 2 [ 363.591720][ T7354] syz.5.319 (7354): drop_caches: 2 [ 363.598553][ T29] audit: type=1400 audit(1735498157.487:1026): avc: denied { bind } for pid=7368 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.598583][ T29] audit: type=1400 audit(1735498157.497:1027): avc: denied { append } for pid=7368 comm="syz.2.321" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 363.598610][ T29] audit: type=1400 audit(1735498157.497:1028): avc: denied { ioctl } for pid=7368 comm="syz.2.321" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 363.631998][ T5804] m920x_read = error: -19 [ 363.647508][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.648804][ T5931] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 363.818666][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 363.825518][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 363.851977][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 363.861135][ T7379] overlayfs: failed to resolve './file1': -2 [ 364.229271][ T5804] m920x_read = error: -19 [ 364.234097][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 364.261349][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.540004][ T6257] m920x_read = error: -19 [ 364.544502][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 364.579897][ T7381] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 364.594689][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.603282][ T29] audit: type=1400 audit(1735498158.517:1029): avc: denied { write } for pid=7380 comm="syz.6.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 364.622748][ T7390] 9pnet_fd: Insufficient options for proto=fd [ 364.626447][ T5931] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 364.638104][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.646245][ T5931] usb 9-1: Product: syz [ 364.647802][ T29] audit: type=1400 audit(1735498158.567:1030): avc: denied { read } for pid=7388 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.650395][ T5931] usb 9-1: Manufacturer: syz [ 364.675609][ T5931] usb 9-1: SerialNumber: syz [ 364.682547][ T5931] usb 9-1: config 0 descriptor?? [ 364.690550][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.697867][ T29] audit: type=1400 audit(1735498158.597:1031): avc: denied { read } for pid=7380 comm="syz.6.325" path="socket:[16061]" dev="sockfs" ino=16061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 364.721713][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.721888][ T6257] m920x_read = error: -19 [ 364.741790][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 364.741887][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.782260][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.856860][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.882219][ T969] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 364.901919][ T6257] m920x_read = error: -19 [ 364.903044][ T969] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 364.906346][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 364.915603][ T969] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 365.326845][ T5931] hso 9-1:0.0: Failed to find INT IN ep [ 365.332810][ T5931] usb-storage 9-1:0.0: USB Mass Storage device detected [ 365.340087][ T969] usb 6-1: USB disconnect, device number 8 [ 365.348213][ T6257] m920x_read = error: -19 [ 365.352646][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 365.416571][ T5931] usb 9-1: USB disconnect, device number 5 [ 365.511823][ T9] m920x_read = error: -19 [ 365.518341][ T9] dvb-usb: error -19 while querying for an remote control event. [ 365.685580][ T9] m920x_read = error: -19 [ 365.697789][ T29] audit: type=1400 audit(1735498159.607:1032): avc: denied { sqpoll } for pid=7413 comm="syz.7.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 365.697923][ T9] dvb-usb: error -19 while querying for an remote control event. [ 365.883104][ T5804] m920x_read = error: -19 [ 365.889006][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 366.073901][ T5804] m920x_read = error: -19 [ 366.075084][ T29] audit: type=1326 audit(1735498159.987:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 366.092275][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 366.140227][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.332'. [ 366.149263][ T29] audit: type=1326 audit(1735498159.987:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 366.344524][ T6257] m920x_read = error: -19 [ 366.351270][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 366.721769][ T7443] syzkaller0: entered promiscuous mode [ 366.727304][ T7443] syzkaller0: entered allmulticast mode [ 366.785774][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 366.808325][ T6257] m920x_read = error: -19 [ 366.825874][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 366.983189][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 366.990325][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 367.001410][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.012338][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.020532][ T9] usb 6-1: Product: syz [ 367.026156][ T5893] m920x_read = error: -19 [ 367.034974][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 367.067734][ T9] usb 6-1: Manufacturer: syz [ 367.078877][ T9] usb 6-1: SerialNumber: syz [ 367.177234][ T7472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7472 comm=syz.2.340 [ 367.211614][ T5893] m920x_read = error: -19 [ 367.217648][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 367.343814][ T9] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 367.683414][ T5893] m920x_read = error: -19 [ 367.687836][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 367.695663][ T9] usb 6-1: found format II with max.bitrate = 13, frame size=0 [ 367.703505][ T9] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 367.753335][ T9] usb 6-1: USB disconnect, device number 9 [ 368.140874][ T5893] m920x_read = error: -19 [ 368.176279][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 368.229946][ T7490] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 368.401280][ T5893] m920x_read = error: -19 [ 368.405681][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 368.943477][ T5804] m920x_read = error: -19 [ 368.948271][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 369.089191][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 369.089210][ T29] audit: type=1400 audit(1735498162.997:1099): avc: denied { validate_trans } for pid=7502 comm="syz.6.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 369.120452][ T5893] m920x_read = error: -19 [ 369.154620][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 369.190891][ T7507] netlink: 'syz.5.347': attribute type 1 has an invalid length. [ 369.233131][ T6877] udevd[6877]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.273318][ T7507] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.347'. [ 369.289906][ T29] audit: type=1400 audit(1735498163.117:1100): avc: denied { append } for pid=7508 comm="syz.2.348" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 369.371378][ T9] m920x_read = error: -19 [ 369.375879][ T9] dvb-usb: error -19 while querying for an remote control event. [ 369.406962][ T29] audit: type=1400 audit(1735498163.257:1101): avc: denied { connect } for pid=7512 comm="syz.6.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 369.562644][ T5893] m920x_read = error: -19 [ 369.633120][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 369.890420][ T5893] m920x_read = error: -19 [ 369.922381][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.353'. [ 369.949181][ T7535] xt_ecn: cannot match TCP bits for non-tcp packets [ 369.983131][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 369.990523][ T29] audit: type=1400 audit(1735498163.897:1102): avc: denied { append } for pid=7540 comm="syz.2.355" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.040886][ T29] audit: type=1400 audit(1735498163.947:1103): avc: denied { write } for pid=7542 comm="syz.2.356" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 370.064301][ T7543] binder: 7542:7543 ioctl c0306201 0 returned -14 [ 370.182989][ T29] audit: type=1400 audit(1735498164.037:1104): avc: denied { write } for pid=7548 comm="syz.5.358" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 370.211504][ T5893] m920x_read = error: -19 [ 370.215936][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 370.221188][ T29] audit: type=1400 audit(1735498164.037:1105): avc: denied { open } for pid=7548 comm="syz.5.358" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 370.279243][ T29] audit: type=1400 audit(1735498164.177:1106): avc: denied { read } for pid=7545 comm="syz.6.357" path="socket:[17179]" dev="sockfs" ino=17179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.357707][ T7550] netlink: 'syz.2.356': attribute type 10 has an invalid length. [ 370.369563][ T7550] team0: Port device wlan1 added [ 370.379774][ T7553] netlink: 48 bytes leftover after parsing attributes in process `syz.5.358'. [ 370.391215][ T9] m920x_read = error: -19 [ 370.395724][ T9] dvb-usb: error -19 while querying for an remote control event. [ 370.521268][ T5931] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 370.581696][ T9] m920x_read = error: -19 [ 370.591843][ T9] dvb-usb: error -19 while querying for an remote control event. [ 370.675567][ T5931] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 370.710246][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.773008][ T46] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 370.795013][ T5931] usb 7-1: Product: syz [ 370.799326][ T5931] usb 7-1: Manufacturer: syz [ 370.799391][ T9] m920x_read = error: -19 [ 370.808490][ T5931] usb 7-1: SerialNumber: syz [ 370.816944][ T9] dvb-usb: error -19 while querying for an remote control event. [ 370.832261][ T5931] usb 7-1: config 0 descriptor?? [ 371.148932][ T5893] m920x_read = error: -19 [ 371.153410][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 371.230869][ T5931] ch341 7-1:0.0: ch341-uart converter detected [ 371.321183][ T5893] m920x_read = error: -19 [ 371.326301][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 371.328532][ T46] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 371.343736][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.352702][ T46] usb 8-1: Product: syz [ 371.356963][ T46] usb 8-1: Manufacturer: syz [ 371.361942][ T46] usb 8-1: SerialNumber: syz [ 371.367902][ T46] usb 8-1: config 0 descriptor?? [ 371.492371][ T5893] m920x_read = error: -19 [ 371.496806][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 371.541049][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 371.578244][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.586940][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.606427][ T46] usb 8-1: ignoring: probably an ADSL modem [ 371.661601][ T5893] m920x_read = error: -19 [ 371.666086][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 371.711022][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 371.717470][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 371.726105][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 371.736812][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 371.749416][ T9] usb 3-1: config 1 has no interface number 0 [ 371.759579][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.773919][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 371.790522][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 371.802252][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.815110][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 371.831023][ T5893] m920x_read = error: -19 [ 371.836015][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 372.011088][ T5893] m920x_read = error: -19 [ 372.015562][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 372.017527][ T7587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'. [ 372.032597][ T46] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 372.055580][ T7587] fuse: Bad value for 'group_id' [ 372.059414][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.364'. [ 372.065751][ T7587] fuse: Bad value for 'group_id' [ 372.079287][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 372.180947][ T9] m920x_read = error: -19 [ 372.185373][ T9] dvb-usb: error -19 while querying for an remote control event. [ 372.238780][ T9] usb 8-1: USB disconnect, device number 4 [ 372.271165][ T5931] usb 7-1: failed to receive control message: -110 [ 372.279538][ T5931] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 372.297629][ T5931] usb 3-1: USB disconnect, device number 13 [ 372.313591][ T5931] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 372.351003][ T5893] m920x_read = error: -19 [ 372.357710][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 372.522967][ T9] m920x_read = error: -19 [ 372.527394][ T9] dvb-usb: error -19 while querying for an remote control event. [ 372.691774][ T9] m920x_read = error: -19 [ 372.696209][ T9] dvb-usb: error -19 while querying for an remote control event. [ 372.861156][ T9] m920x_read = error: -19 [ 372.876954][ T9] dvb-usb: error -19 while querying for an remote control event. [ 372.895795][ T29] audit: type=1400 audit(1735498166.808:1107): avc: denied { write } for pid=7632 comm="syz.2.368" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 373.070942][ T5804] m920x_read = error: -19 [ 373.083803][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 373.146038][ T5931] usb 7-1: USB disconnect, device number 5 [ 373.152798][ T5931] ch341 7-1:0.0: device disconnected [ 373.177506][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.372'. [ 373.190978][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 373.216231][ T29] audit: type=1326 audit(1735498167.128:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.5.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d3585d29 code=0x0 [ 373.260834][ T5804] m920x_read = error: -19 [ 373.276695][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 373.360761][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 373.372069][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.390817][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.413646][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 373.435570][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.461015][ T9] usb 3-1: config 0 descriptor?? [ 373.471651][ T5804] m920x_read = error: -19 [ 373.480808][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 373.654809][ T5804] m920x_read = error: -19 [ 373.659218][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 374.121582][ T7683] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.138022][ T7683] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 374.146397][ T5931] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 374.158466][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 374.158481][ T29] audit: type=1400 audit(1735498168.048:1110): avc: denied { mounton } for pid=7634 comm="syz.2.369" path="/proc/322/task" dev="proc" ino=17401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 374.322776][ T5893] m920x_read = error: -19 [ 374.327148][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 374.348101][ T5931] usb 9-1: config 90 interface 0 has no altsetting 0 [ 374.450457][ T5931] usb 9-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=65.9e [ 374.451296][ T9] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 374.470607][ T9] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 374.472237][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.478419][ T9] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 374.497173][ T9] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 374.509488][ T9] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 374.520617][ T9] savu 0003:1E7D:2D5A.0007: unbalanced collection at end of report description [ 374.523395][ T5931] usb 9-1: Product: syz [ 374.529837][ T9] savu 0003:1E7D:2D5A.0007: parse failed [ 374.535605][ T5931] usb 9-1: Manufacturer: syz [ 374.539515][ T9] savu 0003:1E7D:2D5A.0007: probe with driver savu failed with error -22 [ 374.544874][ T5931] usb 9-1: SerialNumber: syz [ 374.555042][ T6257] m920x_read = error: -19 [ 374.562635][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 374.698865][ T9] usb 3-1: USB disconnect, device number 14 [ 374.737707][ T5804] m920x_read = error: -19 [ 374.742478][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 374.761265][ T5893] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 374.794548][ T29] audit: type=1400 audit(1735498168.708:1111): avc: denied { execute } for pid=7690 comm="syz.7.379" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 374.843048][ T5804] usb 9-1: USB disconnect, device number 6 [ 374.900663][ T972] m920x_read = error: -19 [ 374.905134][ T972] dvb-usb: error -19 while querying for an remote control event. [ 374.931639][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 374.943030][ T5893] usb 7-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 374.957394][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.980911][ T5893] usb 7-1: config 0 descriptor?? [ 374.988284][ T7665] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 375.014091][ T29] audit: type=1400 audit(1735498168.928:1112): avc: denied { open } for pid=7705 comm="syz.2.383" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 375.080836][ T5804] m920x_read = error: -19 [ 375.089304][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 375.276488][ T5804] m920x_read = error: -19 [ 375.281203][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 375.440667][ T5804] m920x_read = error: -19 [ 375.446513][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 375.476904][ T5893] nzxt-smart2 0003:1E71:2011.0008: hidraw0: USB HID v0.00 Device [HID 1e71:2011] on usb-dummy_hcd.6-1/input0 [ 375.550639][ T969] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 375.718851][ T969] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 375.743240][ T5893] m920x_read = error: -19 [ 375.755470][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 375.775769][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.790736][ T46] IPVS: starting estimator thread 0... [ 375.814166][ T7718] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 375.828272][ T46] usb 7-1: USB disconnect, device number 6 [ 375.846153][ T969] usb 3-1: Product: syz [ 375.854692][ T29] audit: type=1400 audit(1735498169.758:1113): avc: denied { relabelto } for pid=7717 comm="syz.7.387" name="32" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 375.900674][ T969] usb 3-1: Manufacturer: syz [ 375.907339][ T969] usb 3-1: SerialNumber: syz [ 375.921450][ T7716] IPVS: using max 72 ests per chain, 172800 per kthread [ 375.931011][ T5893] m920x_read = error: -19 [ 375.937271][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 375.948928][ T969] usb 3-1: config 0 descriptor?? [ 375.969728][ T969] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 375.983516][ T29] audit: type=1400 audit(1735498169.758:1114): avc: denied { associate } for pid=7717 comm="syz.7.387" name="32" dev="tmpfs" ino=177 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 376.021489][ T7725] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.121044][ T5893] m920x_read = error: -19 [ 376.125496][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 376.146411][ T29] audit: type=1400 audit(1735498169.768:1115): avc: denied { write } for pid=6860 comm="syz-executor" name="32" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 376.179039][ T29] audit: type=1400 audit(1735498169.768:1116): avc: denied { remove_name } for pid=6860 comm="syz-executor" name="cgroup" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 376.183989][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.390'. [ 376.206010][ T29] audit: type=1400 audit(1735498169.768:1117): avc: denied { rmdir } for pid=6860 comm="syz-executor" name="32" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 376.308546][ T5893] m920x_read = error: -19 [ 376.336368][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 376.590342][ T5893] m920x_read = error: -19 [ 376.601093][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 376.739848][ T969] gspca_sunplus: reg_r err -71 [ 376.761194][ T969] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 376.761241][ T5893] m920x_read = error: -19 [ 376.770489][ T46] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 376.791885][ T969] usb 3-1: USB disconnect, device number 15 [ 376.820435][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 376.896821][ T29] audit: type=1400 audit(1735498170.798:1118): avc: denied { getopt } for pid=7733 comm="syz.7.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 376.992538][ T29] audit: type=1400 audit(1735498170.898:1119): avc: denied { write } for pid=7747 comm="syz.6.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 377.030617][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 377.039132][ T46] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 377.223403][ T5893] m920x_read = error: -19 [ 377.229984][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 377.240776][ T46] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.251031][ T46] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.264431][ T46] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 377.273660][ T46] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 377.283013][ T46] usb 9-1: Product: syz [ 377.287202][ T46] usb 9-1: Manufacturer: syz [ 377.296150][ T46] usb 9-1: SerialNumber: syz [ 377.329448][ T46] usb 9-1: config 0 descriptor?? [ 377.585800][ T5804] m920x_read = error: -19 [ 377.592771][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 377.770325][ T5893] m920x_read = error: -19 [ 377.775331][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 378.453850][ T9] m920x_read = error: -19 [ 378.459355][ T9] dvb-usb: error -19 while querying for an remote control event. [ 378.770109][ T5893] m920x_read = error: -19 [ 378.774571][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 378.817869][ T5931] usb 9-1: USB disconnect, device number 7 [ 378.851374][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857770][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.940221][ T9] m920x_read = error: -19 [ 378.945217][ T9] dvb-usb: error -19 while querying for an remote control event. [ 379.110406][ T9] m920x_read = error: -19 [ 379.114858][ T9] dvb-usb: error -19 while querying for an remote control event. [ 379.261863][ T29] kauditd_printk_skb: 2638 callbacks suppressed [ 379.261892][ T29] audit: type=1326 audit(1735498173.018:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.332654][ T29] audit: type=1326 audit(1735498173.028:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.360243][ T5931] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 379.369751][ T29] audit: type=1326 audit(1735498173.028:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.392788][ T29] audit: type=1326 audit(1735498173.028:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.417085][ T29] audit: type=1326 audit(1735498173.028:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.440264][ T29] audit: type=1326 audit(1735498173.028:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.464056][ T29] audit: type=1326 audit(1735498173.028:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.487150][ T5804] m920x_read = error: -19 [ 379.491563][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 379.499433][ T29] audit: type=1326 audit(1735498173.028:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.523065][ T29] audit: type=1326 audit(1735498173.028:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.540094][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 379.546294][ T29] audit: type=1326 audit(1735498173.028:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b518592b code=0x50000 [ 379.554716][ T5931] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 379.602226][ T5931] usb 3-1: config 0 has no interface number 0 [ 379.617472][ T5931] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 379.634931][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.647218][ T5931] usb 3-1: Product: syz [ 379.655630][ T5931] usb 3-1: Manufacturer: syz [ 379.660028][ T9] m920x_read = error: -19 [ 379.663393][ T5931] usb 3-1: SerialNumber: syz [ 379.664587][ T9] dvb-usb: error -19 while querying for an remote control event. [ 379.676738][ T5931] usb 3-1: config 0 descriptor?? [ 379.699639][ T5931] asix 3-1:0.251: probe with driver asix failed with error -22 [ 379.834796][ T9] m920x_read = error: -19 [ 379.839252][ T9] dvb-usb: error -19 while querying for an remote control event. [ 379.889279][ T9] usb 3-1: USB disconnect, device number 16 [ 380.020165][ T5893] m920x_read = error: -19 [ 380.024766][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 380.100049][ T5931] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 380.189972][ T9] m920x_read = error: -19 [ 380.194377][ T9] dvb-usb: error -19 while querying for an remote control event. [ 380.249937][ T5804] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 380.252707][ T5931] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.269630][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.287941][ T5931] usb 9-1: Product: syz [ 380.293202][ T5931] usb 9-1: Manufacturer: syz [ 380.297820][ T5931] usb 9-1: SerialNumber: syz [ 380.312239][ T5931] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 380.338877][ T969] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 380.360716][ T9] m920x_read = error: -19 [ 380.365729][ T9] dvb-usb: error -19 while querying for an remote control event. [ 380.414104][ T5804] usb 7-1: Using ep0 maxpacket: 16 [ 380.428760][ T5804] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 380.441224][ T5804] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 380.456061][ T5804] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 380.484905][ T5804] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 380.497682][ T5804] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 380.507543][ T5804] usb 7-1: config 0 has no interface number 0 [ 380.517503][ T5804] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 380.529038][ T5804] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 380.539819][ T5893] m920x_read = error: -19 [ 380.544276][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 380.555357][ T5804] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.565619][ T5804] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.580282][ T5804] usb 7-1: config 0 interface 125 has no altsetting 0 [ 380.602605][ T5804] usb 7-1: config 0 interface 125 has no altsetting 2 [ 380.623720][ T5804] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 380.634555][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.645570][ T5804] usb 7-1: Product: syz [ 380.650383][ T5804] usb 7-1: Manufacturer: syz [ 380.659303][ T5804] usb 7-1: SerialNumber: syz [ 380.673539][ T5804] usb 7-1: config 0 descriptor?? [ 380.686147][ T5804] usb 7-1: selecting invalid altsetting 2 [ 380.719975][ T6257] m920x_read = error: -19 [ 380.724456][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 380.894072][ T6257] m920x_read = error: -19 [ 380.898498][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 381.099943][ T6257] m920x_read = error: -19 [ 381.104360][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 381.298970][ T5893] m920x_read = error: -19 [ 381.303415][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 381.389862][ T969] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 381.407887][ C0] usb 7-1: async_complete: urb error -71 [ 381.413620][ C0] usb 7-1: async_complete: urb error -71 [ 381.469913][ T6257] m920x_read = error: -19 [ 381.474349][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 381.521026][ T5804] get_1284_register: usb error -71 [ 381.526712][ T969] ath9k_htc: Failed to initialize the device [ 381.580870][ T969] usb 9-1: ath9k_htc: USB layer deinitialized [ 381.583282][ T5804] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 381.651799][ T5893] m920x_read = error: -19 [ 381.656234][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 381.678947][ T5804] usb 7-1: USB disconnect, device number 7 [ 381.839871][ T5893] m920x_read = error: -19 [ 381.844287][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 381.863493][ T7836] FAULT_INJECTION: forcing a failure. [ 381.863493][ T7836] name failslab, interval 1, probability 0, space 0, times 1 [ 381.876617][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.2.419 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 381.887207][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.897272][ T7836] Call Trace: [ 381.900578][ T7836] [ 381.903523][ T7836] dump_stack_lvl+0x16c/0x1f0 [ 381.908212][ T7836] should_fail_ex+0x497/0x5b0 [ 381.912893][ T7836] ? fs_reclaim_acquire+0xae/0x150 [ 381.918004][ T7836] should_failslab+0xc2/0x120 [ 381.922679][ T7836] __kmalloc_noprof+0xcb/0x510 [ 381.927966][ T7836] ethnl_default_doit+0x213/0xba0 [ 381.932991][ T7836] ? __nla_parse+0x40/0x60 [ 381.937408][ T7836] ? __pfx_ethnl_default_doit+0x10/0x10 [ 381.942949][ T7836] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 381.950329][ T7836] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 381.957718][ T7836] genl_family_rcv_msg_doit+0x202/0x2f0 [ 381.963302][ T7836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.969373][ T7836] ? genl_get_cmd+0x195/0x580 [ 381.974062][ T7836] ? __local_bh_enable_ip+0xa4/0x120 [ 381.979354][ T7836] ? __dev_queue_xmit+0x89b/0x43e0 [ 381.984467][ T7836] ? __radix_tree_lookup+0x21f/0x2c0 [ 381.989765][ T7836] genl_rcv_msg+0x565/0x800 [ 381.994263][ T7836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.999269][ T7836] ? __pfx___dev_queue_xmit+0x10/0x10 [ 382.004631][ T7836] ? __pfx_ethnl_default_doit+0x10/0x10 [ 382.010169][ T7836] netlink_rcv_skb+0x16b/0x440 [ 382.014926][ T7836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.019938][ T7836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.025218][ T7836] ? down_read+0xc9/0x330 [ 382.029539][ T7836] ? __pfx_down_read+0x10/0x10 [ 382.034292][ T7836] ? rcu_is_watching+0x12/0xc0 [ 382.039047][ T7836] genl_rcv+0x28/0x40 [ 382.043018][ T7836] netlink_unicast+0x53c/0x7f0 [ 382.047773][ T7836] ? __pfx_netlink_unicast+0x10/0x10 [ 382.053052][ T7836] netlink_sendmsg+0x8b8/0xd70 [ 382.057825][ T7836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.063128][ T7836] ____sys_sendmsg+0xaaf/0xc90 [ 382.067903][ T7836] ? copy_msghdr_from_user+0x10b/0x160 [ 382.073382][ T7836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.078697][ T7836] ? rcu_is_watching+0x12/0xc0 [ 382.083470][ T7836] ? lock_release+0x4e2/0x6f0 [ 382.088139][ T7836] ? get_pid_task+0xfc/0x250 [ 382.092722][ T7836] ___sys_sendmsg+0x135/0x1e0 [ 382.097383][ T7836] ? get_pid_task+0x35/0x250 [ 382.101958][ T7836] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.107141][ T7836] ? lock_release+0x4e2/0x6f0 [ 382.111823][ T7836] ? __pfx_lock_release+0x10/0x10 [ 382.116836][ T7836] ? trace_lock_acquire+0x14e/0x1f0 [ 382.122044][ T7836] ? __fget_files+0x206/0x3a0 [ 382.126707][ T7836] __sys_sendmsg+0x16e/0x220 [ 382.131319][ T7836] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.136421][ T7836] ? rcu_is_watching+0x12/0xc0 [ 382.141174][ T7836] ? rcu_is_watching+0x12/0xc0 [ 382.145929][ T7836] do_syscall_64+0xcd/0x250 [ 382.150425][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.156311][ T7836] RIP: 0033:0x7fd995785d29 [ 382.160716][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.180309][ T7836] RSP: 002b:00007fd996654038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.188716][ T7836] RAX: ffffffffffffffda RBX: 00007fd995976160 RCX: 00007fd995785d29 [ 382.196672][ T7836] RDX: 0000000004048040 RSI: 0000000020000300 RDI: 0000000000000006 [ 382.204639][ T7836] RBP: 00007fd996654090 R08: 0000000000000000 R09: 0000000000000000 [ 382.212611][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.220565][ T7836] R13: 0000000000000000 R14: 00007fd995976160 R15: 00007ffe7e400b38 [ 382.228530][ T7836] [ 382.232893][ T5893] m920x_read = error: -19 [ 382.237249][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 382.399706][ T6257] m920x_read = error: -19 [ 382.404129][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 382.572103][ T6257] m920x_read = error: -19 [ 382.598962][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 382.770719][ T5893] m920x_read = error: -19 [ 382.775989][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 383.066559][ T7848] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 383.073512][ T7848] PKCS7: Only support pkcs7_signedData type [ 383.260031][ T6257] m920x_read = error: -19 [ 383.279848][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 383.372876][ T5893] usb 9-1: USB disconnect, device number 8 [ 383.463114][ T6257] m920x_read = error: -19 [ 383.488590][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 383.513394][ T7867] (syz.8.427,7867,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "~g<+(.1 1'Ɖ" or missing value [ 383.537857][ T7867] (syz.8.427,7867,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 383.638422][ T7886] overlayfs: failed to resolve 'fkill [ 383.638422][ T7886] N': -2 [ 383.689764][ T6257] m920x_read = error: -19 [ 383.694208][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 383.772246][ T7894] team_slave_0: entered promiscuous mode [ 383.778004][ T7894] team_slave_1: entered promiscuous mode [ 383.786587][ T7894] netlink: 'syz.8.434': attribute type 10 has an invalid length. [ 383.794606][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.8.434'. [ 383.862778][ T7896] FAULT_INJECTION: forcing a failure. [ 383.862778][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 383.875606][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.7.433 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 383.886197][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.896251][ T7896] Call Trace: [ 383.899527][ T7896] [ 383.902451][ T7896] dump_stack_lvl+0x16c/0x1f0 [ 383.907135][ T7896] should_fail_ex+0x497/0x5b0 [ 383.911816][ T7896] ? fs_reclaim_acquire+0xae/0x150 [ 383.916951][ T7896] should_failslab+0xc2/0x120 [ 383.921633][ T7896] __kmalloc_noprof+0xcb/0x510 [ 383.926397][ T7896] ethnl_default_doit+0x213/0xba0 [ 383.931422][ T7896] ? __nla_parse+0x40/0x60 [ 383.935837][ T7896] ? __pfx_ethnl_default_doit+0x10/0x10 [ 383.941379][ T7896] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 383.948752][ T7896] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 383.956132][ T7896] genl_family_rcv_msg_doit+0x202/0x2f0 [ 383.961685][ T7896] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 383.967759][ T7896] ? genl_get_cmd+0x195/0x580 [ 383.972441][ T7896] ? __local_bh_enable_ip+0x107/0x120 [ 383.977814][ T7896] ? __dev_queue_xmit+0x89b/0x43e0 [ 383.982931][ T7896] ? __radix_tree_lookup+0x21f/0x2c0 [ 383.988241][ T7896] genl_rcv_msg+0x565/0x800 [ 383.992760][ T7896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.997803][ T7896] ? __pfx___dev_queue_xmit+0x10/0x10 [ 384.003202][ T7896] ? __pfx_ethnl_default_doit+0x10/0x10 [ 384.008766][ T7896] netlink_rcv_skb+0x16b/0x440 [ 384.013544][ T7896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.018571][ T7896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.023869][ T7896] ? down_read+0xc9/0x330 [ 384.028983][ T7896] ? __pfx_down_read+0x10/0x10 [ 384.033750][ T7896] ? rcu_is_watching+0x12/0xc0 [ 384.038523][ T7896] genl_rcv+0x28/0x40 [ 384.042512][ T7896] netlink_unicast+0x53c/0x7f0 [ 384.047282][ T7896] ? __pfx_netlink_unicast+0x10/0x10 [ 384.052573][ T7896] netlink_sendmsg+0x8b8/0xd70 [ 384.057361][ T7896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.062657][ T7896] ____sys_sendmsg+0xaaf/0xc90 [ 384.067423][ T7896] ? copy_msghdr_from_user+0x10b/0x160 [ 384.072878][ T7896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.078167][ T7896] ? trace_contention_end.constprop.0+0x10c/0x170 [ 384.084588][ T7896] ___sys_sendmsg+0x135/0x1e0 [ 384.089256][ T7896] ? lock_release+0x4e2/0x6f0 [ 384.093932][ T7896] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.099126][ T7896] ? trace_lock_acquire+0x14e/0x1f0 [ 384.104339][ T7896] ? rcu_is_watching+0x12/0xc0 [ 384.109134][ T7896] ? __pfx_lock_release+0x10/0x10 [ 384.114169][ T7896] ? trace_lock_acquire+0x14e/0x1f0 [ 384.119381][ T7896] ? __fget_files+0x206/0x3a0 [ 384.124059][ T7896] __sys_sendmsg+0x16e/0x220 [ 384.128650][ T7896] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.133764][ T7896] ? rcu_is_watching+0x12/0xc0 [ 384.138539][ T7896] ? rcu_is_watching+0x12/0xc0 [ 384.143329][ T7896] do_syscall_64+0xcd/0x250 [ 384.147843][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.153739][ T7896] RIP: 0033:0x7f48b5185d29 [ 384.158148][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.177749][ T7896] RSP: 002b:00007f48b2ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.186161][ T7896] RAX: ffffffffffffffda RBX: 00007f48b5376160 RCX: 00007f48b5185d29 [ 384.194127][ T7896] RDX: 0000000004048040 RSI: 0000000020000300 RDI: 0000000000000006 [ 384.202089][ T7896] RBP: 00007f48b2ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.210052][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.218018][ T7896] R13: 0000000000000000 R14: 00007f48b5376160 R15: 00007ffda6b9e1d8 [ 384.225994][ T7896] [ 384.229059][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.243275][ T6257] m920x_read = error: -19 [ 384.247688][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 384.264132][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.271418][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.279207][ T7897] bridge0: entered allmulticast mode [ 384.390847][ T7894] team0: entered promiscuous mode [ 384.397245][ T7894] team0: entered allmulticast mode [ 384.402759][ T7894] team_slave_0: entered allmulticast mode [ 384.408616][ T7894] team_slave_1: entered allmulticast mode [ 384.415136][ T7894] bridge0: port 3(team0) entered blocking state [ 384.421561][ T7894] bridge0: port 3(team0) entered disabled state [ 384.430171][ T7894] bridge0: port 3(team0) entered blocking state [ 384.436649][ T7894] bridge0: port 3(team0) entered forwarding state [ 384.449195][ T5804] m920x_read = error: -19 [ 384.453753][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 384.546812][ T7904] netlink: 244 bytes leftover after parsing attributes in process `syz.8.437'. [ 384.700296][ T29] kauditd_printk_skb: 11810 callbacks suppressed [ 384.700322][ T29] audit: type=1400 audit(1735498178.619:15578): avc: denied { listen } for pid=7906 comm="syz.7.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 384.726927][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.726974][ T6257] m920x_read = error: -19 [ 384.726987][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 384.746507][ T969] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 384.755327][ T7909] netlink: 'syz.7.438': attribute type 2 has an invalid length. [ 384.986448][ T5804] m920x_read = error: -19 [ 384.995908][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 385.035048][ T7913] netlink: 96 bytes leftover after parsing attributes in process `syz.5.439'. [ 385.056719][ T7913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3601 sclass=netlink_route_socket pid=7913 comm=syz.5.439 [ 385.069513][ T6257] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 385.069565][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 385.109664][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 385.151318][ T969] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 385.163674][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 385.170143][ T972] m920x_read = error: -19 [ 385.174882][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.179419][ T972] dvb-usb: error -19 while querying for an remote control event. [ 385.188966][ T969] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 385.210105][ T969] usb 7-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00 [ 385.219178][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.239809][ T969] usb 7-1: config 0 descriptor?? [ 385.252575][ T6257] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 385.262942][ T6257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.271459][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 385.281531][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 385.290580][ T9] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 385.298753][ T9] usb 9-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 385.313245][ T6257] usb 3-1: Product: syz [ 385.317422][ T6257] usb 3-1: Manufacturer: syz [ 385.322216][ T5804] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 385.334932][ T6257] usb 3-1: SerialNumber: syz [ 385.336322][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.348275][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.356088][ T9] usb 9-1: config 4 has an invalid descriptor of length 64, skipping remainder of the config [ 385.369845][ T5893] m920x_read = error: -19 [ 385.374213][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 385.401628][ T9] usb 9-1: config 4 has no interface number 0 [ 385.408388][ T6257] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 385.431834][ T9] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 385.447991][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.458291][ T5893] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 385.491251][ T9] usb 9-1: Product: syz [ 385.495473][ T9] usb 9-1: Manufacturer: syz [ 385.500298][ T5804] usb 8-1: Using ep0 maxpacket: 16 [ 385.515946][ T5804] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.531044][ T9] usb 9-1: SerialNumber: syz [ 385.536076][ T5804] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 385.550519][ T6257] m920x_read = error: -19 [ 385.555554][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 385.572853][ T5804] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 385.574133][ T29] audit: type=1400 audit(1735498179.489:15579): avc: denied { search } for pid=5484 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=18103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 385.619564][ T46] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 385.636640][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.646389][ T5804] usb 8-1: config 0 descriptor?? [ 385.657692][ T969] nzxt-smart2 0003:1E71:2006.0009: unknown main item tag 0x6 [ 385.666377][ T969] nzxt-smart2 0003:1E71:2006.0009: item fetching failed at offset 7/133 [ 385.682518][ T5931] usb 3-1: USB disconnect, device number 17 [ 385.719171][ T969] nzxt-smart2 0003:1E71:2006.0009: probe with driver nzxt-smart2 failed with error -22 [ 385.759372][ T46] usb 6-1: device descriptor read/64, error -71 [ 385.770002][ T6257] m920x_read = error: -19 [ 385.774424][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 385.802282][ T29] audit: type=1326 audit(1735498179.719:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 385.826448][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.843912][ T29] audit: type=1326 audit(1735498179.719:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 385.884748][ T29] audit: type=1326 audit(1735498179.719:15582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 385.905624][ T969] usb 7-1: USB disconnect, device number 8 [ 385.925806][ T5804] usbhid 8-1:0.0: can't add hid device: -71 [ 385.939312][ T5804] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 385.950923][ T6257] m920x_read = error: -19 [ 385.955320][ T6257] dvb-usb: error -19 while querying for an remote control event. [ 385.968226][ T5804] usb 8-1: USB disconnect, device number 5 [ 385.975666][ T29] audit: type=1326 audit(1735498179.719:15583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 385.999962][ T29] audit: type=1326 audit(1735498179.719:15584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd995785d29 code=0x7ffc0000 [ 386.012524][ T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 386.041997][ T29] audit: type=1326 audit(1735498179.719:15585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd995787c47 code=0x7ffc0000 [ 386.080111][ T29] audit: type=1326 audit(1735498179.719:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd995787bbc code=0x7ffc0000 [ 386.081961][ T9] usb 9-1: Found UVC 0.02 device syz (04f2:b746) [ 386.103799][ T29] audit: type=1326 audit(1735498179.719:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd995787af4 code=0x7ffc0000 [ 386.126124][ T9] usb 9-1: No valid video chain found. [ 386.139370][ T972] m920x_read = error: -19 [ 386.145422][ T972] dvb-usb: error -19 while querying for an remote control event. [ 386.164386][ T9] usb 9-1: USB disconnect, device number 9 [ 386.198788][ T7960] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 386.210683][ T7960] CUSE: unknown device info "3ܟ,̘" [ 386.216576][ T7960] CUSE: DEVNAME unspecified [ 386.311782][ T5804] m920x_read = error: -19 [ 386.316675][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 386.491943][ T9] m920x_read = error: -19 [ 386.500675][ T9] dvb-usb: error -19 while querying for an remote control event. [ 386.512020][ T5893] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 386.518986][ T5893] ath9k_htc: Failed to initialize the device [ 386.536092][ T5931] usb 3-1: ath9k_htc: USB layer deinitialized [ 386.637559][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.644909][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.710959][ T5804] m920x_read = error: -19 [ 386.715358][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 386.949225][ T5804] m920x_read = error: -19 [ 386.957659][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 387.179194][ T5893] m920x_read = error: -19 [ 387.183575][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 387.351739][ T5893] m920x_read = error: -19 [ 387.356313][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 387.623764][ T5893] m920x_read = error: -19 [ 387.628220][ T5893] dvb-usb: error -19 while querying for an remote control event. [ 387.645424][ T7993] xt_ecn: cannot match TCP bits for non-tcp packets [ 387.646203][ T7992] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 387.669059][ T7992] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 387.789877][ T5804] m920x_read = error: -19 [ 387.984829][ T5804] dvb-usb: error -19 while querying for an remote control event. [ 388.115348][ T8003] program syz.7.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.128902][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 493.135878][ C1] rcu: 0-...!: (1 GPs behind) idle=e31c/1/0x4000000000000000 softirq=25630/25661 fqs=0 [ 493.145602][ C1] rcu: (detected by 1, t=10502 jiffies, g=17253, q=435 ncpus=2) [ 493.153325][ C1] Sending NMI from CPU 1 to CPUs 0: [ 493.153348][ C0] NMI backtrace for cpu 0 [ 493.153358][ C0] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 493.153374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 493.153382][ C0] RIP: 0010:do_raw_spin_lock+0x109/0x2c0 [ 493.153406][ C0] Code: b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 68 01 00 00 8b 53 08 65 8b 05 3b a4 8c 7e 39 c2 0f 84 35 01 00 00 <48> 89 df be 04 00 00 00 c7 44 24 28 00 00 00 00 e8 72 94 85 00 be [ 493.153420][ C0] RSP: 0018:ffffc90000007c48 EFLAGS: 00000086 [ 493.153433][ C0] RAX: 0000000000000000 RBX: ffffffff9a9cfb40 RCX: ffffffff84a579b9 [ 493.153443][ C0] RDX: 00000000ffffffff RSI: ffffffff8bd1ed20 RDI: ffffffff9a9cfb44 [ 493.153453][ C0] RBP: 1ffff92000000f8a R08: 0000000000000000 R09: fffffbfff20be6ca [ 493.153462][ C0] R10: ffffffff905f3657 R11: 00000000000a4001 R12: ffffffff9a9cfb48 [ 493.153472][ C0] R13: ffffffff9a9cfb50 R14: 1ffff92000000fa4 R15: ffffffff9a9cfb38 [ 493.153482][ C0] FS: 0000555558a95500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 493.153498][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.153508][ C0] CR2: 000000110c3abd56 CR3: 0000000033cf0000 CR4: 00000000003526f0 [ 493.153518][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.153526][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 493.153536][ C0] Call Trace: [ 493.153542][ C0] [ 493.153547][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 493.153564][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 493.153578][ C0] ? nmi_handle+0x1ac/0x5d0 [ 493.153594][ C0] ? do_raw_spin_lock+0x109/0x2c0 [ 493.153611][ C0] ? default_do_nmi+0x6a/0x160 [ 493.153626][ C0] ? exc_nmi+0x170/0x1e0 [ 493.153639][ C0] ? end_repeat_nmi+0xf/0x53 [ 493.153659][ C0] ? debug_object_activate+0x149/0x4a0 [ 493.153676][ C0] ? do_raw_spin_lock+0x109/0x2c0 [ 493.153693][ C0] ? do_raw_spin_lock+0x109/0x2c0 [ 493.153711][ C0] ? do_raw_spin_lock+0x109/0x2c0 [ 493.153727][ C0] [ 493.153732][ C0] [ 493.153737][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.153753][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 493.153768][ C0] ? debug_object_activate+0x149/0x4a0 [ 493.153783][ C0] ? lock_acquire+0x2f/0xb0 [ 493.153797][ C0] ? debug_object_activate+0x149/0x4a0 [ 493.153812][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 493.153828][ C0] ? debug_object_activate+0x149/0x4a0 [ 493.153842][ C0] debug_object_activate+0x149/0x4a0 [ 493.153857][ C0] ? advance_sched+0x679/0xc60 [ 493.153872][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 493.153888][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 493.153905][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.153923][ C0] ? __pfx_advance_sched+0x10/0x10 [ 493.153937][ C0] enqueue_hrtimer+0x25/0x3c0 [ 493.153956][ C0] __hrtimer_run_queues+0x903/0xae0 [ 493.153975][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 493.153993][ C0] ? read_tsc+0x9/0x20 [ 493.154012][ C0] hrtimer_interrupt+0x392/0x8e0 [ 493.154034][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 493.154051][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 493.154068][ C0] [ 493.154073][ C0] [ 493.154077][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.154096][ C0] RIP: 0010:page_table_check_set+0x22/0x9c0 [ 493.154114][ C0] Code: 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 49 89 f4 55 48 bd ff ff ff ff ff ff 0f 00 53 48 89 fb 48 83 ec 18 88 54 24 17 d9 b9 91 ff 48 89 de 48 89 ef e8 3e bc 91 ff 48 39 dd 72 22 e8 [ 493.154126][ C0] RSP: 0018:ffffc900034e76d8 EFLAGS: 00000296 [ 493.154138][ C0] RAX: 0000000000000000 RBX: 000000000006bcf9 RCX: ffffffff82087b20 [ 493.154147][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000006bcf9 [ 493.154156][ C0] RBP: 000fffffffffffff R08: 0000000000000007 R09: 0000000000000000 [ 493.154165][ C0] R10: 0000000000000002 R11: 00000000000a4001 R12: 0000000000000001 [ 493.154174][ C0] R13: ffff888035b7f500 R14: dffffc0000000000 R15: 1ffff9200069cee7 [ 493.154186][ C0] ? __page_table_check_ptes_set+0x2b0/0x3e0 [ 493.154204][ C0] ? page_table_check_set+0x8ee/0x9c0 [ 493.154221][ C0] __page_table_check_ptes_set+0x2d0/0x3e0 [ 493.154238][ C0] ? vm_normal_page+0x13c/0x2b0 [ 493.154252][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 493.154268][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.154285][ C0] ? copy_page_range+0xd0b/0x5790 [ 493.154301][ C0] copy_page_range+0x209a/0x5790 [ 493.154322][ C0] ? mas_destroy+0x5ba/0x9e0 [ 493.154352][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 493.154367][ C0] ? rcu_is_watching+0x12/0xc0 [ 493.154385][ C0] ? lock_release+0x4e2/0x6f0 [ 493.154400][ C0] ? __pfx_lock_release+0x10/0x10 [ 493.154415][ C0] ? lock_acquire+0x2f/0xb0 [ 493.154429][ C0] ? copy_process+0x7e41/0x8e50 [ 493.154449][ C0] ? down_write+0x14e/0x200 [ 493.154468][ C0] ? up_write+0x1b2/0x520 [ 493.154484][ C0] ? anon_vma_name+0x75/0x100 [ 493.154503][ C0] copy_process+0x7ef3/0x8e50 [ 493.154528][ C0] ? __pfx_copy_process+0x10/0x10 [ 493.154545][ C0] ? ___pte_offset_map+0x42/0x540 [ 493.154565][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 493.154580][ C0] ? lock_acquire+0x2f/0xb0 [ 493.154594][ C0] ? __handle_mm_fault+0xdfa/0x2a40 [ 493.154612][ C0] ? __handle_mm_fault+0x4b3/0x2a40 [ 493.154629][ C0] kernel_clone+0xfd/0x960 [ 493.154646][ C0] ? lock_vma_under_rcu+0x6b9/0x980 [ 493.154661][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 493.154678][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 493.154697][ C0] ? __pfx_lock_release+0x10/0x10 [ 493.154714][ C0] __do_sys_clone+0xba/0x100 [ 493.154731][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 493.154752][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 493.154767][ C0] ? rcu_is_watching+0x12/0xc0 [ 493.154785][ C0] do_syscall_64+0xcd/0x250 [ 493.154803][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.154821][ C0] RIP: 0033:0x7fd99577c593 [ 493.154833][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 493.154846][ C0] RSP: 002b:00007ffe7e400dc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 493.154860][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd99577c593 [ 493.154869][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 493.154878][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 493.154887][ C0] R10: 0000555558a957d0 R11: 0000000000000246 R12: 0000000000000000 [ 493.154896][ C0] R13: 000000000005ebe3 R14: 00007ffe7e400f50 R15: 0000000000000073 [ 493.154910][ C0] [ 493.155344][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g17253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 493.815271][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 493.825233][ C1] rcu: RCU grace-period kthread stack dump: [ 493.831112][ C1] task:rcu_preempt state:R running task stack:28472 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 493.842858][ C1] Call Trace: [ 493.846127][ C1] [ 493.849051][ C1] __schedule+0xe58/0x5ad0 [ 493.853470][ C1] ? trace_irq_enable.constprop.0+0xea/0x140 [ 493.859447][ C1] ? __pfx___schedule+0x10/0x10 [ 493.864298][ C1] ? lock_release+0x4e2/0x6f0 [ 493.868970][ C1] ? schedule+0x298/0x350 [ 493.873293][ C1] ? __pfx_lock_release+0x10/0x10 [ 493.878333][ C1] ? schedule+0x1fd/0x350 [ 493.882655][ C1] ? lock_acquire+0x2f/0xb0 [ 493.887150][ C1] ? schedule+0x1fd/0x350 [ 493.891478][ C1] schedule+0xe7/0x350 [ 493.895541][ C1] schedule_timeout+0x124/0x280 [ 493.900390][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 493.905755][ C1] ? __pfx_process_timeout+0x10/0x10 [ 493.911043][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 493.916846][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 493.922302][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 493.927079][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 493.932359][ C1] ? rcu_gp_init+0xc82/0x1630 [ 493.937032][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 493.942249][ C1] rcu_gp_kthread+0x271/0x380 [ 493.946935][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 493.952131][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 493.957330][ C1] ? __kthread_parkme+0x148/0x220 [ 493.962368][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 493.967567][ C1] kthread+0x2c1/0x3a0 [ 493.971630][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.976822][ C1] ? __pfx_kthread+0x10/0x10 [ 493.981411][ C1] ret_from_fork+0x45/0x80 [ 493.985819][ C1] ? __pfx_kthread+0x10/0x10 [ 493.990410][ C1] ret_from_fork_asm+0x1a/0x30 [ 493.995195][ C1] [ 493.998203][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 494.004514][ C1] CPU: 1 UID: 0 PID: 8003 Comm: syz.7.458 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 494.015094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 494.025138][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 494.030507][ C1] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 bf c2 69 7e <65> 8b 05 c0 c2 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 494.050108][ C1] RSP: 0018:ffffc9000466f638 EFLAGS: 00000202 [ 494.056180][ C1] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffffff818e2187 [ 494.064165][ C1] RDX: ffff88806d1ec880 RSI: 0000000000000000 RDI: 0000000000000005 [ 494.072136][ C1] RBP: ffffc9000466f710 R08: 0000000000000005 R09: 0000000000000000 [ 494.080102][ C1] R10: 0000000000000001 R11: 00000000000a4001 R12: 1ffff920008cdecc [ 494.088067][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888028e9c6f8 [ 494.096027][ C1] FS: 00007f48b5ef76c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 494.104951][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.111527][ C1] CR2: 00007ffda6b9db98 CR3: 0000000035c08000 CR4: 00000000003526f0 [ 494.119494][ C1] Call Trace: [ 494.122768][ C1] [ 494.125605][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 494.131933][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 494.137127][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 494.142586][ C1] ? timekeeping_advance+0x72e/0xa90 [ 494.147864][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 494.153495][ C1] ? notifier_call_chain+0x36c/0x410 [ 494.158780][ C1] ? __asan_memcpy+0x3c/0x60 [ 494.163367][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 494.168658][ C1] ? rcu_is_watching+0x12/0xc0 [ 494.173420][ C1] ? update_process_times+0x178/0x2d0 [ 494.178784][ C1] ? __pfx_update_process_times+0x10/0x10 [ 494.184495][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 494.189951][ C1] ? update_wall_time+0x1c/0x40 [ 494.194795][ C1] ? tick_nohz_handler+0x376/0x530 [ 494.199906][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 494.205364][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 494.210736][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 494.216449][ C1] ? read_tsc+0x9/0x20 [ 494.220517][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 494.225627][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 494.231779][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 494.237583][ C1] [ 494.240503][ C1] [ 494.243424][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.249581][ C1] ? smp_call_function_single+0x1d7/0x580 [ 494.255298][ C1] ? write_comp_data+0x11/0x90 [ 494.260062][ C1] smp_call_function_single+0x1d7/0x580 [ 494.265608][ C1] ? __pfx___loaded_vmcs_clear+0x10/0x10 [ 494.271236][ C1] ? __pfx_smp_call_function_single+0x10/0x10 [ 494.277303][ C1] ? __pfx___loaded_vmcs_clear+0x10/0x10 [ 494.282934][ C1] ? rcu_is_watching+0x12/0xc0 [ 494.287696][ C1] ? lock_release+0x4e2/0x6f0 [ 494.292367][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 494.297565][ C1] vmx_vcpu_load_vmcs+0x2e2/0x850 [ 494.302587][ C1] ? lock_release+0x4e2/0x6f0 [ 494.307256][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 494.312451][ C1] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 494.317995][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 494.323190][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 494.328386][ C1] vmx_vcpu_load+0xdc/0x2c0 [ 494.332889][ C1] kvm_arch_vcpu_load+0x1da/0x980 [ 494.337910][ C1] ? __kernel_text_address+0xd/0x40 [ 494.343102][ C1] ? unwind_get_return_address+0x59/0xa0 [ 494.348731][ C1] ? arch_stack_walk+0xa7/0x100 [ 494.353577][ C1] vcpu_load+0x52/0x90 [ 494.357636][ C1] kvm_arch_vcpu_ioctl+0x111/0x5070 [ 494.362837][ C1] ? stack_trace_save+0x95/0xd0 [ 494.367691][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 494.373059][ C1] ? format_decode+0x2d4/0xba0 [ 494.377816][ C1] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 494.383458][ C1] ? __pfx_format_decode+0x10/0x10 [ 494.388561][ C1] ? number+0x8d9/0xb80 [ 494.392708][ C1] ? kasan_save_stack+0x42/0x60 [ 494.397553][ C1] ? kasan_save_stack+0x33/0x60 [ 494.402398][ C1] ? kasan_save_track+0x14/0x30 [ 494.407240][ C1] ? kasan_save_free_info+0x3b/0x60 [ 494.412439][ C1] ? __kasan_slab_free+0x51/0x70 [ 494.417372][ C1] ? kfree+0x14f/0x4b0 [ 494.421435][ C1] ? tomoyo_path_number_perm+0x46d/0x590 [ 494.427059][ C1] ? security_file_ioctl+0x9b/0x240 [ 494.432254][ C1] ? __x64_sys_ioctl+0xb7/0x200 [ 494.437126][ C1] ? do_syscall_64+0xcd/0x250 [ 494.441802][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.447875][ C1] ? __mutex_trylock_common+0xea/0x250 [ 494.453337][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 494.459225][ C1] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 494.464157][ C1] ? rcu_is_watching+0x12/0xc0 [ 494.468938][ C1] ? trace_contention_end+0xee/0x140 [ 494.474221][ C1] ? __mutex_lock+0x1cc/0xa60 [ 494.478897][ C1] ? rcu_is_watching+0x12/0xc0 [ 494.483663][ C1] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 494.488595][ C1] ? tomoyo_path_number_perm+0x298/0x590 [ 494.494225][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 494.499250][ C1] ? tomoyo_path_number_perm+0x190/0x590 [ 494.504877][ C1] ? kvm_vcpu_ioctl+0x9e6/0x1520 [ 494.509806][ C1] kvm_vcpu_ioctl+0x9e6/0x1520 [ 494.514565][ C1] ? do_vfs_ioctl+0x513/0x1990 [ 494.519327][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 494.524526][ C1] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 494.531027][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 494.537875][ C1] ? __pfx_lock_release+0x10/0x10 [ 494.542900][ C1] ? __fget_files+0x40/0x3a0 [ 494.547486][ C1] ? selinux_file_ioctl+0x180/0x270 [ 494.552681][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 494.557793][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 494.562985][ C1] __x64_sys_ioctl+0x190/0x200 [ 494.567752][ C1] do_syscall_64+0xcd/0x250 [ 494.572257][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.578167][ C1] RIP: 0033:0x7f48b5185d29 [ 494.582575][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.602179][ C1] RSP: 002b:00007f48b5ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.610588][ C1] RAX: ffffffffffffffda RBX: 00007f48b5375fa0 RCX: 00007f48b5185d29 [ 494.618553][ C1] RDX: 00000000200001c0 RSI: 000000004048aecb RDI: 000000000000000d [ 494.626513][ C1] RBP: 00007f48b5201b08 R08: 0000000000000000 R09: 0000000000000000 [ 494.634476][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.642456][ C1] R13: 0000000000000000 R14: 00007f48b5375fa0 R15: 00007ffda6b9e1d8 [ 494.650429][ C1]