last executing test programs: 12m29.820946086s ago: executing program 4 (id=261): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000180)='net/netfilter\x00') sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x4) flock(r5, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0xf500, 0x7, 0x7, 0x100000000000006, 0xfffffffc}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x204450, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r7, &(0x7f0000001880)=""/4108, 0x100c) 12m25.591657797s ago: executing program 4 (id=267): socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) fsopen(&(0x7f0000000380)='cgroup2\x00', 0x0) 12m23.229214168s ago: executing program 4 (id=275): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6ca53c117fe6cfe5, {0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x6, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xfffffffd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x5, 0x2, 0x10000, 0x0, 0x91, 0x6, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd51, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x7ffffffd, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x5, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x82, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x7af7, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109"}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x174}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf25110000002c000380080002008338000008000100010100000800030000000080080002000000000008"], 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 12m19.110162495s ago: executing program 4 (id=283): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) creat(0x0, 0x3a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 12m17.410686176s ago: executing program 4 (id=290): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 12m15.452747868s ago: executing program 4 (id=295): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000020c0)=0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000002040)='net/snmp6\x00') gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) 11m59.879918329s ago: executing program 32 (id=295): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000020c0)=0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000002040)='net/snmp6\x00') gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) 4m33.777725416s ago: executing program 1 (id=1582): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1008088, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8001}}]}}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x25, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@mcast2, @in6=@initdev}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000002180)=0xe8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m33.64786537s ago: executing program 1 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(0xfffffffffffffffc, 0xffffff81, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040)=0x4, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = creat(0x0, 0x6a) close(r1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$nl_route(0x10, 0x3, 0x0) 4m32.86435311s ago: executing program 1 (id=1585): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000004b680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r4 = dup2(r2, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) 4m32.50255296s ago: executing program 1 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000004c0)={r10, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r12, 0x8b22, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r11, 0x0, 0xffffffffffffffff}) r14 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r14, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0xffffffff, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) r15 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r15, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r13, 0xc008644e, &(0x7f0000000180)={0x3}) 4m30.134926793s ago: executing program 1 (id=1602): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000003000), 0x201, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) lsm_set_self_attr(0x69, &(0x7f0000001000)={0x6d, 0x1000000ff, 0x7c, 0x5c, "a04b6975f7476d110be72d6b9458f3dfe66ff756a2d3b4063a1092c93b7bd3e132161ff30d4d53a9082f051f25ef6b308e817a04f22e70e298e63693596ddab0fe7f34cc02ad044d0c6e435576727f858e21241272308b5e47000000"}, 0x7c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$netlink(0x10, 0x3, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) readv(r0, &(0x7f0000003e40)=[{&(0x7f0000002dc0)=""/63, 0x3f}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 4m28.921194325s ago: executing program 1 (id=1609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [""]}, 0x14}}, 0x20000081) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x8c0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r5}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xfffffffffffffcbf, 0x0}}, 0x10) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 4m28.195790456s ago: executing program 33 (id=1609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [""]}, 0x14}}, 0x20000081) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x8c0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r5}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xfffffffffffffcbf, 0x0}}, 0x10) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 13.924871645s ago: executing program 2 (id=2287): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r4 = dup2(r2, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) 13.708510901s ago: executing program 6 (id=2290): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x80802, 0x89) write$binfmt_misc(r1, &(0x7f00000002c0)="d178d92c924389e2d46672a3e6a856da4668b57f19ceb21074d8ed01dfaaa832ee9b273e156aadf0f97962dfca83f60f954627da586aa625c2ddbafcbaa36569b24814019671d0a54becedcafab6582eef830a11e6b5a0a722e7f695c97cd0d59f2b511be3851ba2f44e3479ca45b2686bf05c72cc3b3ae80dc75c174d00e0a741262ffbae19f96bd3f8ff3619b7d4731f7f1318ef4b35063d4c1231e7d2c7bf18fd351a7103fecfd2bac1c33e", 0xad) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_setup(0x400, &(0x7f0000000200)=0x0) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 12.640004334s ago: executing program 6 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="141000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000000000000000000000001100"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x6b, 0x8c, 0x1}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000001c0)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 11.73972955s ago: executing program 5 (id=2293): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x4, 0x800) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000380)={0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000300)=[{&(0x7f0000002700)=""/4095, 0xfff}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x11a}, 0x20) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000707010000f8ffffffb702000008000000b70300000000000800000000cb0000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7}, 0x94) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x5, 0x0, 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) 10.648396028s ago: executing program 2 (id=2294): socket$nl_route(0x10, 0x3, 0x0) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x1, 0x8, 0x5, &(0x7f0000000340)={0x22, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 10.592042689s ago: executing program 0 (id=2295): unshare(0x8040480) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xa, r0, 0x0, 0x28, 0x800, 0x0, 0x0, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, 0x0, 0x0, 0x1, 0x0, 0x3, r0}]) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000100)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000000140)={0x200, 0x1, r3}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r0, 0xc0086444, &(0x7f0000000000)={r3}) 10.355510935s ago: executing program 5 (id=2296): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000700)={0x23, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x1cc) close_range(r0, 0xffffffffffffffff, 0x0) 9.714650052s ago: executing program 5 (id=2299): wait4(0x0, 0x0, 0x1000000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1f, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) exit(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0x800}) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.643079593s ago: executing program 0 (id=2300): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4800) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100feffffff000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000000000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.48897414s ago: executing program 0 (id=2301): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x2, 0x9, 0xb588, 0x4, 0x7, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0x70, 0x8, 0x4002, 0x0, 0x99, 0x4, 0x9, 0x0, 0x9, 0x9, 0x7, 0xc, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x80007, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x9, 0x0, 0x9, 0x6, 0x10000, 0x3, 0x7, 0x0, 0x5, 0x0, 0xf, 0x8, 0x1, 0x31c, 0xf, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xaf, 0x1, 0xecc4, 0x8, 0x2558, 0x8000, 0xb647, 0xffffff80, 0x200, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x3, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x4, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0xfffffffc, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xf, 0x0, 0x80000000]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getgroups(0x1, &(0x7f0000000040)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="60dc43e9c27bb827fafed6a2e58c5c2ae7eecc34377c55d4f0348f30e31a30b6a67cbd8cfc478cbf4dd54dc43005e79a07424cf7f41e8bd4a48ee7e2d4263286dfcbc4be3a10b47b79a34e5b9a534c65c3f877446aaab780e4aee128e28a350674d6bc3152833ad10adeac90605f5ff1d31240dbb76c2e7951ebca260d77ac230e4d915b0e0e40dd3926b604b6155aaf9f359bd9e0812d1f216af81f6a2a6500e718555eb30fdbad1e50e1118f497b21ef98c20dca2dc8399e94afbe2dee9036ebeb6ebf3baf04d0f5f5470f8c8b586c", 0xd0, 0xfffffffffffffff9) keyctl$clear(0x7, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300}, 0x0, 0x20, 0xb05, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xec, 0x7, 0x7, 0x140, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) ioctl$TCSETS(r7, 0x40384708, &(0x7f00000000c0)={0x8, 0x1, 0x80, 0x3f, 0xe, "3e2a7ac84775d72417cc0200"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$kcm(0xa, 0x1, 0x106) 7.911649693s ago: executing program 0 (id=2302): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r2, &(0x7f000004b680)=""/102392, 0x18ff8) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x222180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.674080207s ago: executing program 3 (id=2303): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000013000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000004001a80"], 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000180)={0x20071026, r4}, 0x0) 6.261243279s ago: executing program 5 (id=2304): socket$nl_route(0x10, 0x3, 0x0) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x8, 0x5, &(0x7f0000000340)={0x22, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 6.219296237s ago: executing program 2 (id=2305): socket$nl_route(0x10, 0x3, 0x0) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x8, 0x5, &(0x7f0000000340)={0x22, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 6.09723132s ago: executing program 0 (id=2306): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) dup2(r4, r4) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) 6.053979942s ago: executing program 6 (id=2307): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x2, 0x9, 0xb588, 0x4, 0x7, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0x70, 0x8, 0x4002, 0x0, 0x99, 0x4, 0x9, 0x0, 0x9, 0x9, 0x7, 0xc, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x80007, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x9, 0x0, 0x9, 0x6, 0x10000, 0x3, 0x7, 0x0, 0x5, 0x0, 0xf, 0x8, 0x1, 0x31c, 0xf, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xaf, 0x1, 0xecc4, 0x8, 0x2558, 0x8000, 0xb647, 0xffffff80, 0x200, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x3, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x4, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0xfffffffc, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xf, 0x0, 0x80000000]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getgroups(0x1, &(0x7f0000000040)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="60dc43e9c27bb827fafed6a2e58c5c2ae7eecc34377c55d4f0348f30e31a30b6a67cbd8cfc478cbf4dd54dc43005e79a07424cf7f41e8bd4a48ee7e2d4263286dfcbc4be3a10b47b79a34e5b9a534c65c3f877446aaab780e4aee128e28a350674d6bc3152833ad10adeac90605f5ff1d31240dbb76c2e7951ebca260d77ac230e4d915b0e0e40dd3926b604b6155aaf9f359bd9e0812d1f216af81f6a2a6500e718555eb30fdbad1e50e1118f497b21ef98c20dca2dc8399e94afbe2dee9036ebeb6ebf3baf04d0f5f5470f8c8b586c", 0xd0, 0xfffffffffffffff9) keyctl$clear(0x7, r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300}, 0x0, 0x20, 0xb05, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xec, 0x7, 0x7, 0x140, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x40384708, &(0x7f00000000c0)={0x8, 0x1, 0x80, 0x3f, 0xe, "3e2a7ac84775d72417cc0200"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$kcm(0xa, 0x1, 0x106) 5.989049168s ago: executing program 3 (id=2308): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec", 0xc}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x5}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r7, 0x0, 0x2) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 4.994872637s ago: executing program 3 (id=2309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @nested_amd_stgi={0x17e, 0x10}], 0x30}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000000)) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdc, 0x0, 0x0, 0x1000, 0x81, 0x0, 0x0, 0x20}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r4, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0x35a, 0x0, r4}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x7e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x20000, 0xe, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x4b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b, 0x0, r4}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x0, 0x20013, 0xb4, 0x9, 0x1000, 0xcf, 0x3, 0x865e, 0x7ffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x3, 0x5, 0x5], 0x0, 0x1019c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.721714918s ago: executing program 3 (id=2310): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000"], 0x0) r1 = syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000f00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x110, 0x0, 0xfa, 0xa6, 0xff}, 0x0, 0x0, 0x6, [{0x14, &(0x7f0000000b00)=@string={0x14, 0x3, "32b2f010a2551c3fc90826aa318632ace912"}}, {0xf, &(0x7f0000000b40)=@string={0xf, 0x3, "97b48a502a4d69c8db49f3ada8"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0x8e, &(0x7f0000000c80)=@string={0x8e, 0x3, "3392a406b3ee85d4c2f550a356a7178286aceaeeb8d4ec48265637fb5dfdbc3a132f8daac34724a67beea417f57fc4f8d29259d73e00641a2766b568b222a80a0c25250102ca8b877175613928850b7a1a498c6fedd007e6547805230ec5b9b7bd9da987c0a3096449bf0f7d1870606c66e33dc1e9f02dfe4afa87dde283538cbeac5577067c000000000000"}}, {0xb7, &(0x7f0000000d40)=@string={0xb7, 0x3, "5305a5739a5adb0689567cf1b58907ac5d767e90077349a77c27c163111b37d97af94a15086c71556995a22f277114c0e50ede9e15a88763e47817e7f54b97e0171e094e6171853252e5715a3c2e70b661857e517486802a0d3837a88e4628353dcf71ad6d5bcf26b548ab16b61be8da4e7d5b82d20ddd20a5db3488c2700fbb6b7058e423fe9b7bce1cf01a94854e0784dc7f3252638dd190705d9c758a92985ed74dec3e8bf4338ebf9185a992debf305d088dee"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) openat$cgroup_int(r5, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x8a001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000680)={0x28, 0x7, r8, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfffffffffffffffe}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000e00)={0x44, 0x0, &(0x7f0000000c40)={0x0, 0xa, 0xfffffd69}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.572315479s ago: executing program 6 (id=2311): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15e, 0x0, &(0x7f0000000480)="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", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffe0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 2.797862967s ago: executing program 0 (id=2312): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x2, 0x9, 0xb588, 0x4, 0x7, 0x3, 0x7, 0x7, 0x80000000, 0x200, 0x9, 0x4, 0x70, 0x8, 0x4002, 0x0, 0x99, 0x4, 0x9, 0x0, 0x9, 0x9, 0x7, 0xc, 0x800, 0x6, 0xfa2, 0x4, 0x7, 0x40, 0x7fffffff, 0xd, 0x6, 0x2f0, 0x1, 0x2, 0x9, 0x7, 0xc6432d, 0x7, 0x4, 0x4, 0x3ff, 0xf, 0x7ff, 0x8, 0xfffff67e, 0x4, 0x6, 0xffffffff, 0x6, 0x6, 0x3bc9, 0x7ff, 0x80007, 0x80000000, 0x0, 0x1fd, 0x1ff, 0x8, 0x7ff, 0x6, 0x7, 0x3ca5, 0x5, 0x40, 0x9, 0x0, 0x9, 0x6, 0x10000, 0x3, 0x7, 0x0, 0x5, 0x0, 0xf, 0x8, 0x1, 0x31c, 0xf, 0x9, 0x80000000, 0x6, 0x2, 0xffff4ff8, 0xa29, 0x2, 0xaf, 0x1, 0xecc4, 0x8, 0x2558, 0x8000, 0xb647, 0xffffff80, 0x200, 0x9, 0x2, 0x8, 0x3, 0x80000, 0x3, 0xd4, 0x80000000, 0x2, 0x800, 0x8000, 0x9, 0x4, 0x1, 0x400, 0x9, 0x7, 0x73e1, 0xfffffffc, 0x3, 0x6, 0x80000005, 0x7, 0x3, 0x401, 0x100, 0x0, 0xf, 0x0, 0x80000000]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getgroups(0x1, &(0x7f0000000040)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="60dc43e9c27bb827fafed6a2e58c5c2ae7eecc34377c55d4f0348f30e31a30b6a67cbd8cfc478cbf4dd54dc43005e79a07424cf7f41e8bd4a48ee7e2d4263286dfcbc4be3a10b47b79a34e5b9a534c65c3f877446aaab780e4aee128e28a350674d6bc3152833ad10adeac90605f5ff1d31240dbb76c2e7951ebca260d77ac230e4d915b0e0e40dd3926b604b6155aaf9f359bd9e0812d1f216af81f6a2a6500e718555eb30fdbad1e50e1118f497b21ef98c20dca2dc8399e94afbe2dee9036ebeb6ebf3baf04d0f5f5470f8c8b586c", 0xd0, 0xfffffffffffffff9) keyctl$clear(0x7, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300}, 0x0, 0x20, 0xb05, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xec, 0x7, 0x7, 0x140, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) ioctl$TCSETS(r7, 0x40384708, &(0x7f00000000c0)={0x8, 0x1, 0x80, 0x3f, 0xe, "3e2a7ac84775d72417cc0200"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$kcm(0xa, 0x1, 0x106) 2.658066004s ago: executing program 2 (id=2313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) restart_syscall() r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) 2.369256442s ago: executing program 6 (id=2314): sched_setattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x42, 0x4f) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x4, 0x0, 0x204}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x80, 0x2e, 0x4, 0x0, 0x0, 0x6}) r4 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9}}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000100)={r1, 0x0, 0x64, 0x6}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = creat(&(0x7f0000000140)='.\x02\x00', 0x181) write$P9_RVERSION(r10, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYBLOB="814c8d"], 0x13) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYRESOCT=r0, @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.169918769s ago: executing program 6 (id=2315): socket$nl_route(0x10, 0x3, 0x0) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x1, 0x8, 0x5, &(0x7f0000000340)={0x22, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 1.258699175s ago: executing program 2 (id=2316): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r3, &(0x7f000004b680)=""/102392, 0x18ff8) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x222180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r7 = dup2(r5, r5) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.219301343s ago: executing program 5 (id=2317): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r2, &(0x7f000004b680)=""/102392, 0x18ff8) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x222180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 259.937943ms ago: executing program 2 (id=2318): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="141000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000000000000000000000001100"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000fc0)=""/140, 0x6b, 0x8c, 0x1}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000001c0)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 259.333734ms ago: executing program 3 (id=2319): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec", 0xc}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x5}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r7, 0x0, 0x2) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 158.809192ms ago: executing program 5 (id=2320): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xa, 0x0, 0x4, 0x5, 0x4, 0xffffffffffffffff}) syz_open_procfs(r1, &(0x7f0000000200)='net/unix\x00') setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="400b0e554e064f3fc381424a73347e25a1e884cb1870cbd056f9e1f660fc22faaa48f27a1037d7ce5ceb1875085ba3f79846dd3454900bee0b267d56def832272e5c7128407bfd834660c14002f651e2571b4edd7f1325aa01c7ae60fdcfc9b26b02fff1cd40b766f52c3f1171651e65e921"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000006c0)={r4, 0x1, 0x6, @local}, 0x10) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) 0s ago: executing program 3 (id=2321): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0xb874, 0xc40) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) socket$igmp6(0xa, 0x3, 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x5, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x0, 0xc7, 0xb0, 0x8903, 0xa, 0xc, 0xfffffffffffff04d, 0x10002, 0x81, 0xbba, 0x0, 0x4000000006, 0x3, 0x100, 0x8000000004, 0x2, 0x21, 0xffffffffffffffff, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x2, 0xb, 0x8000000000000000, 0x6, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x1000000000000000, 0x5, 0xc0, 0x7, 0x3, 0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xa5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1783873668.559:867): avc: denied { bind } for pid=13200 comm="syz.5.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 755.448974][T10497] Bluetooth: hci2: unexpected event for opcode 0x203d [ 755.466647][T13208] @0Ù: renamed from virt_wifi0 (while UP) [ 755.695969][ T9] usb 4-1: USB disconnect, device number 40 [ 758.065360][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 758.252281][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 758.293132][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.303420][ T30] audit: type=1400 audit(1783873671.579:868): avc: denied { read append } for pid=13253 comm="syz.2.1905" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 758.341334][ T9] usb 1-1: Product: syz [ 758.355215][ T9] usb 1-1: Manufacturer: syz [ 758.372011][ T9] usb 1-1: SerialNumber: syz [ 758.372029][T13254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.411924][ T30] audit: type=1400 audit(1783873671.579:869): avc: denied { open } for pid=13253 comm="syz.2.1905" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 758.425401][T13254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 758.438563][ T9] usb 1-1: config 0 descriptor?? [ 758.447909][ T30] audit: type=1400 audit(1783873671.659:870): avc: denied { map } for pid=13256 comm="syz.3.1906" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 758.476703][T13260] FAULT_INJECTION: forcing a failure. [ 758.476703][T13260] name failslab, interval 1, probability 0, space 0, times 0 [ 758.478313][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 758.515347][T13260] CPU: 0 UID: 0 PID: 13260 Comm: syz.6.1908 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.515377][T13260] Tainted: [L]=SOFTLOCKUP [ 758.515383][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 758.515393][T13260] Call Trace: [ 758.515400][T13260] [ 758.515407][T13260] dump_stack_lvl+0x100/0x190 [ 758.515434][T13260] should_fail_ex.cold+0x5/0xa [ 758.515457][T13260] should_failslab+0xc2/0x120 [ 758.515478][T13260] __kmalloc_cache_noprof+0x91/0x6c0 [ 758.515505][T13260] ? sctp_auth_shkey_create+0x9e/0x210 [ 758.515529][T13260] sctp_auth_shkey_create+0x9e/0x210 [ 758.515549][T13260] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 758.515574][T13260] sctp_association_new+0x19ab/0x2990 [ 758.515603][T13260] sctp_connect_new_asoc+0x1a8/0x770 [ 758.515628][T13260] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 758.515652][T13260] ? selinux_sctp_bind_connect+0xe0/0x230 [ 758.515682][T13260] sctp_sendmsg+0x1743/0x22e0 [ 758.515716][T13260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 758.515737][T13260] ? sock_has_perm+0x25a/0x2f0 [ 758.515757][T13260] ? __pfx_sock_has_perm+0x10/0x10 [ 758.515786][T13260] ? __might_fault+0xc5/0x140 [ 758.515819][T13260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 758.515844][T13260] inet_sendmsg+0x11c/0x140 [ 758.515864][T13260] __sys_sendto+0x453/0x4e0 [ 758.515891][T13260] ? __pfx_inet_sendmsg+0x10/0x10 [ 758.515909][T13260] ? __pfx___sys_sendto+0x10/0x10 [ 758.515943][T13260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 758.515981][T13260] ? ksys_write+0x1ac/0x250 [ 758.516006][T13260] ? __pfx_ksys_write+0x10/0x10 [ 758.516034][T13260] __x64_sys_sendto+0xe0/0x1c0 [ 758.516059][T13260] ? do_syscall_64+0x90/0x870 [ 758.516085][T13260] ? lockdep_hardirqs_on+0x78/0x100 [ 758.516110][T13260] do_syscall_64+0x115/0x870 [ 758.516134][T13260] ? clear_bhb_loop+0x40/0x90 [ 758.516161][T13260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.516179][T13260] RIP: 0033:0x7f21e279de59 [ 758.516195][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.516211][T13260] RSP: 002b:00007f21e36ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.516228][T13260] RAX: ffffffffffffffda RBX: 00007f21e2a25fa0 RCX: 00007f21e279de59 [ 758.516239][T13260] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 758.516249][T13260] RBP: 00007f21e36ae090 R08: 0000200000000100 R09: 000000000000001c [ 758.516259][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.516269][T13260] R13: 00007f21e2a26038 R14: 00007f21e2a25fa0 R15: 00007ffcfff2a948 [ 758.516294][T13260] [ 758.518846][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 758.913457][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 758.925078][ T9] usb 1-1: media controller created [ 758.946763][T13246] siw: device registration error -23 [ 758.960158][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 759.094277][T13269] dvb-usb: bulk message failed: -22 (7/0) [ 759.244900][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.404173][T13254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.463666][T13254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 760.294952][T13254] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 760.300934][T13254] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 760.313700][ T9] DVB: Unable to find symbol mt352_attach() [ 760.328690][T13254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 760.337323][T13254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 760.345734][T13254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 760.414767][T10497] Bluetooth: hci2: command 0x0406 tx timeout [ 760.426717][ T9] DVB: Unable to find symbol nxt6000_attach() [ 760.460052][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 760.500166][ T30] audit: type=1400 audit(1783873673.769:871): avc: denied { listen } for pid=13276 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 760.572227][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input71 [ 760.623898][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 760.819760][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 760.853420][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 761.825334][T10497] Bluetooth: hci3: command 0x0406 tx timeout [ 761.865059][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 761.917688][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 761.924042][ T5703] dvb-usb: error while querying for an remote control event. [ 761.957437][ T9] usb 1-1: USB disconnect, device number 35 [ 762.032630][ T30] audit: type=1400 audit(1783873675.329:872): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 762.308391][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 762.332394][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 762.341389][T10497] Bluetooth: hci0: command 0x0c1a tx timeout [ 762.377517][T13299] tipc: Enabling of bearer rejected, failed to enable media [ 762.389159][T13299] overlayfs: failed to resolve './file1/file0': -2 [ 763.044583][T10497] Bluetooth: hci2: command 0x0406 tx timeout [ 763.360911][ T30] audit: type=1400 audit(1783873676.649:873): avc: denied { ioctl } for pid=13310 comm="syz.5.1920" path="socket:[36075]" dev="sockfs" ino=36075 ioctlcmd=0x4b48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 763.478839][ T30] audit: type=1400 audit(1783873676.649:874): avc: denied { getopt } for pid=13310 comm="syz.5.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 763.852069][T10497] Bluetooth: hci3: command 0x0406 tx timeout [ 763.948239][ T30] audit: type=1400 audit(1783873677.219:875): avc: denied { ioctl } for pid=13310 comm="syz.5.1920" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 764.392960][T13323] blktrace: Concurrent blktraces are not allowed on loop10 [ 764.417122][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 764.423479][T10497] Bluetooth: hci0: command 0x0c1a tx timeout [ 764.648636][T13329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.182594][ T5703] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 765.202152][ T804] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 765.389583][ T804] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 765.401547][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.410312][ T804] usb 3-1: Product: syz [ 765.413091][ T5703] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 765.414986][ T804] usb 3-1: Manufacturer: syz [ 765.480521][ T804] usb 3-1: SerialNumber: syz [ 765.503918][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.511169][ T804] usb 3-1: config 0 descriptor?? [ 765.549875][ T804] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 765.574969][T13346] fuse: Bad value for 'fd' [ 765.579558][ T5703] usb 4-1: Product: syz [ 765.597943][ T5703] usb 4-1: Manufacturer: syz [ 765.603855][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 765.613338][ T5703] usb 4-1: SerialNumber: syz [ 765.646452][ T804] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 765.673287][ T804] usb 3-1: media controller created [ 765.676412][ T5703] usb 4-1: config 0 descriptor?? [ 765.734418][ T5703] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 765.749791][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 765.767708][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.995581][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 766.079044][T13352] dvb-usb: bulk message failed: -22 (7/0) [ 766.287916][T13354] siw: device registration error -23 [ 766.307972][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 766.422117][T13355] dvb-usb: bulk message failed: -22 (7/0) [ 766.479820][ T5703] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 766.655357][T10497] Bluetooth: hci0: command 0x0c1a tx timeout [ 768.075377][ T5703] usb 4-1: media controller created [ 768.097522][ T804] DVB: Unable to find symbol mt352_attach() [ 768.119845][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.476381][T13361] binder: Unknown parameter '8' [ 768.558478][ T30] audit: type=1400 audit(1783873681.769:876): avc: denied { remount } for pid=13359 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 768.655159][ T5703] DVB: Unable to find symbol mt352_attach() [ 768.674031][ T804] DVB: Unable to find symbol nxt6000_attach() [ 768.716184][ T804] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 769.199575][ T804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 769.219818][ T5703] DVB: Unable to find symbol nxt6000_attach() [ 769.225923][ T5703] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 769.247416][ T804] dvb-usb: schedule remote query interval to 1000 msecs. [ 769.252991][T13373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 770.066721][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 770.127953][ T5703] dvb-usb: schedule remote query interval to 1000 msecs. [ 770.135194][ T804] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 770.168357][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 770.216501][ T804] dvb-usb: bulk message failed: -22 (7/0) [ 770.223730][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 770.233712][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 770.251985][ T5703] usb 4-1: USB disconnect, device number 41 [ 770.269325][ T804] dvb-usb: bulk message failed: -22 (7/0) [ 771.262291][ T6932] dvb-usb: bulk message failed: -22 (7/0) [ 771.269043][ T30] audit: type=1400 audit(1783873684.559:877): avc: denied { map } for pid=13386 comm="syz.2.1940" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 771.296585][ T804] usb 3-1: USB disconnect, device number 32 [ 771.338940][ T6932] dvb-usb: error while querying for an remote control event. [ 771.569478][T13403] coredump: 1362(syz.2.1940): Core dump to core aborted: cannot preserve file permissions [ 771.600500][T13402] FAULT_INJECTION: forcing a failure. [ 771.600500][T13402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.640174][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 771.692144][T13402] CPU: 1 UID: 0 PID: 13402 Comm: syz.3.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.692171][T13402] Tainted: [L]=SOFTLOCKUP [ 771.692177][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 771.692186][T13402] Call Trace: [ 771.692192][T13402] [ 771.692198][T13402] dump_stack_lvl+0x100/0x190 [ 771.692221][T13402] should_fail_ex.cold+0x5/0xa [ 771.692241][T13402] _copy_from_user+0x2e/0xd0 [ 771.692261][T13402] do_handle_open+0xeb/0xf20 [ 771.692280][T13402] ? __fget_files+0x21f/0x3d0 [ 771.692305][T13402] ? __pfx_do_handle_open+0x10/0x10 [ 771.692328][T13402] ? ksys_write+0x1ac/0x250 [ 771.692356][T13402] ? do_syscall_64+0x115/0x870 [ 771.692379][T13402] do_syscall_64+0x115/0x870 [ 771.692402][T13402] ? clear_bhb_loop+0x40/0x90 [ 771.692422][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.692438][T13402] RIP: 0033:0x7f558419de59 [ 771.692451][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.692465][T13402] RSP: 002b:00007f55850fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 771.692480][T13402] RAX: ffffffffffffffda RBX: 00007f5584425fa0 RCX: 00007f558419de59 [ 771.692489][T13402] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 771.692497][T13402] RBP: 00007f55850fc090 R08: 0000000000000000 R09: 0000000000000000 [ 771.692505][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.692513][T13402] R13: 00007f5584426038 R14: 00007f5584425fa0 R15: 00007fffbfec4bb8 [ 771.692532][T13402] [ 771.863887][ T804] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 771.932276][T13405] overlay: Unknown parameter 'fowner>00000000000000000000' [ 772.162746][ T30] audit: type=1400 audit(1783873685.459:878): avc: denied { connect } for pid=13408 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 772.245850][ T30] audit: type=1400 audit(1783873685.499:879): avc: denied { read } for pid=13408 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 772.358772][T13411] lo speed is unknown, defaulting to 1000 [ 772.503607][ T6932] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 772.516090][T13419] sctp: [Deprecated]: syz.6.1942 (pid 13419) Use of int in max_burst socket option. [ 772.516090][T13419] Use struct sctp_assoc_value instead [ 772.660700][ T187] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 772.667081][ T6932] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 772.680503][ T6932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.689958][ T6932] usb 3-1: Product: syz [ 772.694328][ T6932] usb 3-1: Manufacturer: syz [ 772.698968][ T6932] usb 3-1: SerialNumber: syz [ 772.721352][ T6932] usb 3-1: config 0 descriptor?? [ 772.740310][ T6932] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 773.014612][ T187] usb 1-1: device descriptor read/64, error -71 [ 773.909700][T13424] blktrace: Concurrent blktraces are not allowed on loop10 [ 774.050269][ T6932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 774.060731][ T187] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 774.492051][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.942353][ T6932] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 774.966587][ T6932] usb 3-1: media controller created [ 774.985053][ T6932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 775.034798][ T6932] DVB: Unable to find symbol mt352_attach() [ 775.077507][ T6932] DVB: Unable to find symbol nxt6000_attach() [ 775.083933][ T6932] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 775.099367][ T6932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74 [ 775.113716][ T187] usb 1-1: device descriptor read/64, error -71 [ 775.118333][ T6932] dvb-usb: schedule remote query interval to 1000 msecs. [ 775.862831][ T187] usb usb1-port1: attempt power cycle [ 776.090773][ T6932] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 776.154382][ T6932] dvb-usb: bulk message failed: -22 (7/0) [ 776.169097][ T6932] dvb-usb: bulk message failed: -22 (7/0) [ 776.200979][ T6932] usb 3-1: USB disconnect, device number 33 [ 776.311949][ T30] audit: type=1400 audit(1783873689.599:880): avc: denied { read } for pid=13432 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 776.374593][ T6932] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 776.503093][T13447] FAULT_INJECTION: forcing a failure. [ 776.503093][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 776.519224][T13447] CPU: 0 UID: 0 PID: 13447 Comm: syz.0.1956 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.519256][T13447] Tainted: [L]=SOFTLOCKUP [ 776.519262][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 776.519271][T13447] Call Trace: [ 776.519277][T13447] [ 776.519284][T13447] dump_stack_lvl+0x100/0x190 [ 776.519311][T13447] should_fail_ex.cold+0x5/0xa [ 776.519334][T13447] should_failslab+0xc2/0x120 [ 776.519356][T13447] __kvmalloc_node_noprof+0x116/0x970 [ 776.519377][T13447] ? bpf_test_run_xdp_live+0x13a/0x760 [ 776.519404][T13447] bpf_test_run_xdp_live+0x13a/0x760 [ 776.519429][T13447] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 776.519452][T13447] ? __pfx_exp_funnel_lock+0x10/0x10 [ 776.519476][T13447] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 776.519497][T13447] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 776.519532][T13447] ? 0xffffffffa0208540 [ 776.519547][T13447] ? 0xffffffffa0208540 [ 776.519562][T13447] ? 0xffffffffa0208540 [ 776.519574][T13447] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 776.519597][T13447] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 776.519629][T13447] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 776.519661][T13447] ? fput+0x79/0x100 [ 776.519679][T13447] ? __bpf_prog_get+0x97/0x2a0 [ 776.519700][T13447] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 776.519724][T13447] __sys_bpf+0x2a12/0x4e80 [ 776.519748][T13447] ? __lock_acquire+0x49f/0x1a40 [ 776.519775][T13447] ? __pfx___sys_bpf+0x10/0x10 [ 776.519802][T13447] ? __lock_acquire+0x49f/0x1a40 [ 776.519827][T13447] ? __lock_acquire+0x49f/0x1a40 [ 776.519848][T13447] ? lock_acquire+0x1b9/0x370 [ 776.519889][T13447] ? taprio_dequeue+0x166/0x5f0 [ 776.519907][T13447] ? kvm_sched_clock_read+0x11/0x20 [ 776.519931][T13447] ? sched_clock+0x38/0x60 [ 776.519962][T13447] ? __irq_exit_rcu+0x162/0x210 [ 776.519982][T13447] ? lockdep_softirqs_on+0xad/0x120 [ 776.520012][T13447] ? handle_softirqs+0x835/0x9b0 [ 776.520034][T13447] ? __x64_sys_bpf+0xce/0x140 [ 776.520047][T13447] __x64_sys_bpf+0xce/0x140 [ 776.520062][T13447] ? do_syscall_64+0x90/0x870 [ 776.520086][T13447] do_syscall_64+0x115/0x870 [ 776.520108][T13447] ? clear_bhb_loop+0x40/0x90 [ 776.520128][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.520144][T13447] RIP: 0033:0x7fde0559de59 [ 776.520157][T13447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.520177][T13447] RSP: 002b:00007fde063b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 776.520193][T13447] RAX: ffffffffffffffda RBX: 00007fde05825fa0 RCX: 00007fde0559de59 [ 776.520204][T13447] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 776.520213][T13447] RBP: 00007fde063b3090 R08: 0000000000000000 R09: 0000000000000000 [ 776.520223][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.520232][T13447] R13: 00007fde05826038 R14: 00007fde05825fa0 R15: 00007ffdbcfe96d8 [ 776.520254][T13447] [ 778.914722][T13473] blktrace: Concurrent blktraces are not allowed on loop10 [ 779.188946][T13474] blktrace: Concurrent blktraces are not allowed on loop12 [ 779.454307][ T30] audit: type=1400 audit(1783873692.749:881): avc: denied { ioctl } for pid=13475 comm="syz.3.1964" path="socket:[36347]" dev="sockfs" ino=36347 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 779.526137][T13478] usb usb8: usbfs: process 13478 (syz.5.1965) did not claim interface 0 before use [ 779.677723][ T30] audit: type=1400 audit(1783873692.969:882): avc: denied { bind } for pid=13479 comm="syz.5.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 779.719045][T13483] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 779.731107][T13483] block device autoloading is deprecated and will be removed. [ 780.092458][ T187] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 780.101086][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 780.145828][T13497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13497 comm=syz.3.1974 [ 780.290537][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 780.589781][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.614956][ T187] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 780.775099][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.825067][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.931203][ T187] usb 7-1: Product: syz [ 781.001714][ T187] usb 7-1: Manufacturer: syz [ 781.006931][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 781.060246][ T187] usb 7-1: SerialNumber: syz [ 781.083676][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 781.185338][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.277697][ T187] usb 7-1: config 0 descriptor?? [ 781.291454][ T9] usb 1-1: config 0 descriptor?? [ 781.309881][ T187] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 781.443520][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 781.719268][ T187] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 781.735946][T13507] siw: device registration error -23 [ 781.753637][T13507] dvb-usb: bulk message failed: -22 (7/0) [ 781.823064][ T187] usb 7-1: media controller created [ 782.203025][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 782.324614][ T9] nzxt-smart2 0003:1E71:2009.0009: item fetching failed at offset 0/5 [ 782.430128][ T9] nzxt-smart2 0003:1E71:2009.0009: probe with driver nzxt-smart2 failed with error -22 [ 782.596316][ T9] usb 1-1: USB disconnect, device number 39 [ 783.164571][ T187] DVB: Unable to find symbol mt352_attach() [ 783.324969][T13512] blktrace: Concurrent blktraces are not allowed on loop10 [ 783.361516][ T187] DVB: Unable to find symbol nxt6000_attach() [ 783.379670][ T187] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 783.414181][T13529] FAULT_INJECTION: forcing a failure. [ 783.414181][T13529] name failslab, interval 1, probability 0, space 0, times 0 [ 783.434556][ T187] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input76 [ 783.477681][ T187] dvb-usb: schedule remote query interval to 1000 msecs. [ 783.492098][ T187] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 783.492947][T13529] CPU: 1 UID: 0 PID: 13529 Comm: syz.3.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.492970][T13529] Tainted: [L]=SOFTLOCKUP [ 783.492976][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 783.492985][T13529] Call Trace: [ 783.492990][T13529] [ 783.492995][T13529] dump_stack_lvl+0x100/0x190 [ 783.493020][T13529] should_fail_ex.cold+0x5/0xa [ 783.493039][T13529] should_failslab+0xc2/0x120 [ 783.493058][T13529] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 783.493077][T13529] ? __get_vm_area_node+0x101/0x330 [ 783.493099][T13529] __get_vm_area_node+0x101/0x330 [ 783.493119][T13529] __vmalloc_node_range_noprof+0x228/0x1630 [ 783.493139][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 783.493156][T13529] ? find_held_lock+0x2b/0x80 [ 783.493182][T13529] ? __lock_acquire+0x49f/0x1a40 [ 783.493201][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 783.493224][T13529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 783.493247][T13529] ? find_held_lock+0x2b/0x80 [ 783.493267][T13529] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 783.493282][T13529] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 783.493300][T13529] ? avc_has_perm_noaudit+0x145/0x3b0 [ 783.493316][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 783.493332][T13529] __vmalloc_node_noprof+0xad/0xf0 [ 783.493351][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 783.493370][T13529] __vmalloc_noprof+0xa3/0x120 [ 783.493388][T13529] ? __pfx___vmalloc_noprof+0x10/0x10 [ 783.493409][T13529] ? rcu_is_watching+0x12/0xc0 [ 783.493429][T13529] ? cap_capable+0x107/0x430 [ 783.493447][T13529] bpf_prog_alloc_no_stats+0x59/0x630 [ 783.493464][T13529] ? security_capable+0x80/0x260 [ 783.493482][T13529] bpf_prog_alloc+0x3b/0x200 [ 783.493497][T13529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.493515][T13529] bpf_prog_load+0x4a9/0x2fa0 [ 783.493541][T13529] ? __pfx_bpf_prog_load+0x10/0x10 [ 783.493563][T13529] ? avc_has_perm_noaudit+0x145/0x3b0 [ 783.493596][T13529] __sys_bpf+0x18dc/0x4e80 [ 783.493624][T13529] ? __pfx___sys_bpf+0x10/0x10 [ 783.493645][T13529] ? find_held_lock+0x2b/0x80 [ 783.493665][T13529] ? get_pid_task+0xfc/0x250 [ 783.493686][T13529] ? get_pid_task+0xfc/0x250 [ 783.493713][T13529] ? find_held_lock+0x2b/0x80 [ 783.493738][T13529] ? rcu_read_lock_any_held+0x6a/0xa0 [ 783.493760][T13529] ? find_held_lock+0x2b/0x80 [ 783.493779][T13529] ? ksys_write+0x190/0x250 [ 783.493799][T13529] ? ksys_write+0x190/0x250 [ 783.493834][T13529] ? fput+0x79/0x100 [ 783.493853][T13529] ? __x64_sys_bpf+0xce/0x140 [ 783.493866][T13529] __x64_sys_bpf+0xce/0x140 [ 783.493880][T13529] ? do_syscall_64+0x90/0x870 [ 783.493903][T13529] do_syscall_64+0x115/0x870 [ 783.493923][T13529] ? clear_bhb_loop+0x40/0x90 [ 783.493942][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.493957][T13529] RIP: 0033:0x7f558419de59 [ 783.493970][T13529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.493984][T13529] RSP: 002b:00007f55850fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.494000][T13529] RAX: ffffffffffffffda RBX: 00007f5584425fa0 RCX: 00007f558419de59 [ 783.494010][T13529] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 783.494019][T13529] RBP: 00007f55850fc090 R08: 0000000000000000 R09: 0000000000000000 [ 783.494028][T13529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.494036][T13529] R13: 00007f5584426038 R14: 00007f5584425fa0 R15: 00007fffbfec4bb8 [ 783.494057][T13529] [ 783.496343][T13529] syz.3.1978: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 783.523887][ T187] dvb-usb: bulk message failed: -22 (7/0) [ 783.568771][T13534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=13534 comm=syz.5.1981 [ 783.615266][T13529] ,cpuset= [ 783.900693][T13534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13534 comm=syz.5.1981 [ 783.907731][ T187] dvb-usb: bulk message failed: -22 (7/0) [ 783.957839][ T30] audit: type=1400 audit(1783873697.209:883): avc: denied { write } for pid=13503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.010039][ T187] usb 7-1: USB disconnect, device number 7 [ 784.057606][T13534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13534 comm=syz.5.1981 [ 784.085061][ T30] audit: type=1400 audit(1783873697.369:884): avc: denied { write } for pid=13545 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.140662][T13549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13549 comm=syz.5.1981 [ 784.170849][T13549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13549 comm=syz.5.1981 [ 784.196511][T13529] /,mems_allowed=0-1 [ 784.215902][T13529] CPU: 0 UID: 0 PID: 13529 Comm: syz.3.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.215927][T13529] Tainted: [L]=SOFTLOCKUP [ 784.215931][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 784.215937][T13529] Call Trace: [ 784.215941][T13529] [ 784.215945][T13529] dump_stack_lvl+0x100/0x190 [ 784.215962][T13529] warn_alloc.cold+0x94/0xa8 [ 784.215974][T13529] ? __pfx_warn_alloc+0x10/0x10 [ 784.215989][T13529] ? __kasan_kmalloc+0x8a/0xb0 [ 784.216006][T13529] ? __get_vm_area_node+0x208/0x330 [ 784.216022][T13529] __vmalloc_node_range_noprof+0xccd/0x1630 [ 784.216037][T13529] ? find_held_lock+0x2b/0x80 [ 784.216053][T13529] ? __lock_acquire+0x49f/0x1a40 [ 784.216066][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 784.216083][T13529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 784.216104][T13529] ? find_held_lock+0x2b/0x80 [ 784.216127][T13529] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 784.216144][T13529] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 784.216164][T13529] ? avc_has_perm_noaudit+0x145/0x3b0 [ 784.216180][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 784.216192][T13529] __vmalloc_node_noprof+0xad/0xf0 [ 784.216206][T13529] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 784.216219][T13529] __vmalloc_noprof+0xa3/0x120 [ 784.216233][T13529] ? __pfx___vmalloc_noprof+0x10/0x10 [ 784.216249][T13529] ? rcu_is_watching+0x12/0xc0 [ 784.216265][T13529] ? cap_capable+0x107/0x430 [ 784.216277][T13529] bpf_prog_alloc_no_stats+0x59/0x630 [ 784.216289][T13529] ? security_capable+0x80/0x260 [ 784.216302][T13529] bpf_prog_alloc+0x3b/0x200 [ 784.216313][T13529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.216325][T13529] bpf_prog_load+0x4a9/0x2fa0 [ 784.216345][T13529] ? __pfx_bpf_prog_load+0x10/0x10 [ 784.216360][T13529] ? avc_has_perm_noaudit+0x145/0x3b0 [ 784.216382][T13529] __sys_bpf+0x18dc/0x4e80 [ 784.216402][T13529] ? __pfx___sys_bpf+0x10/0x10 [ 784.216418][T13529] ? find_held_lock+0x2b/0x80 [ 784.216432][T13529] ? get_pid_task+0xfc/0x250 [ 784.216447][T13529] ? get_pid_task+0xfc/0x250 [ 784.216466][T13529] ? find_held_lock+0x2b/0x80 [ 784.216484][T13529] ? rcu_read_lock_any_held+0x6a/0xa0 [ 784.216499][T13529] ? find_held_lock+0x2b/0x80 [ 784.216514][T13529] ? ksys_write+0x190/0x250 [ 784.216528][T13529] ? ksys_write+0x190/0x250 [ 784.216552][T13529] ? fput+0x79/0x100 [ 784.216565][T13529] ? __x64_sys_bpf+0xce/0x140 [ 784.216574][T13529] __x64_sys_bpf+0xce/0x140 [ 784.216584][T13529] ? do_syscall_64+0x90/0x870 [ 784.216600][T13529] do_syscall_64+0x115/0x870 [ 784.216615][T13529] ? clear_bhb_loop+0x40/0x90 [ 784.216628][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.216638][T13529] RIP: 0033:0x7f558419de59 [ 784.216648][T13529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.216658][T13529] RSP: 002b:00007f55850fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.216668][T13529] RAX: ffffffffffffffda RBX: 00007f5584425fa0 RCX: 00007f558419de59 [ 784.216675][T13529] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 784.216681][T13529] RBP: 00007f55850fc090 R08: 0000000000000000 R09: 0000000000000000 [ 784.216687][T13529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.216693][T13529] R13: 00007f5584426038 R14: 00007f5584425fa0 R15: 00007fffbfec4bb8 [ 784.216706][T13529] [ 784.216789][T13529] Mem-Info: [ 784.273322][T13534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13534 comm=syz.5.1981 [ 784.603136][ T30] audit: type=1400 audit(1783873697.849:885): avc: denied { ioctl } for pid=13533 comm="syz.5.1981" path="socket:[36522]" dev="sockfs" ino=36522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 784.689414][T13529] active_anon:19273 inactive_anon:0 isolated_anon:0 [ 784.689414][T13529] active_file:0 inactive_file:70509 isolated_file:0 [ 784.689414][T13529] unevictable:768 dirty:261 writeback:0 [ 784.689414][T13529] slab_reclaimable:12102 slab_unreclaimable:102241 [ 784.689414][T13529] mapped:40870 shmem:8061 pagetables:1629 [ 784.689414][T13529] sec_pagetables:0 bounce:0 [ 784.689414][T13529] kernel_misc_reclaimable:0 [ 784.689414][T13529] free:1265510 free_pcp:8721 free_cma:0 [ 784.817140][ T187] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 784.940392][T13529] Node 0 active_anon:77092kB inactive_anon:0kB active_file:0kB inactive_file:281844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166980kB dirty:1044kB writeback:0kB shmem:30708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13244kB pagetables:6460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 785.038329][T13529] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 785.111395][ T30] audit: type=1400 audit(1783873698.399:886): avc: denied { write } for pid=13550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.127474][T13529] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.226240][T13529] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 785.232013][T13529] Node 0 DMA32 free:1101404kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76992kB inactive_anon:0kB active_file:0kB inactive_file:281844kB unevictable:1536kB writepending:1044kB zspages:0kB present:3129332kB managed:2532332kB mlocked:0kB bounce:0kB free_pcp:36656kB local_pcp:20484kB free_cma:0kB [ 785.301673][ T30] audit: type=1400 audit(1783873698.589:887): avc: denied { write } for pid=13569 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.302615][T13529] lowmem_reserve[]: 0 0 0 0 0 [ 785.362230][T13529] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.456722][T13529] lowmem_reserve[]: 0 0 0 0 0 [ 785.479501][T13529] Node 1 Normal free:3946412kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.519093][T13529] lowmem_reserve[]: 0 0 0 0 0 [ 785.528525][T13529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 785.544789][T13529] Node 0 DMA32: 1*4kB (M) 961*8kB (M) 1111*16kB (UM) 521*32kB (UME) 517*64kB (UME) 334*128kB (UM) 196*256kB (UM) 93*512kB (UM) 33*1024kB (UM) 8*2048kB (UM) 204*4096kB (UME) = 1101532kB [ 785.564729][T13529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 785.581356][T13529] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 7*16kB (UM) 3*32kB (UM) 11*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3946412kB [ 785.600333][T13529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.611567][T13529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.621632][T13529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.637882][T13529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.649218][T13529] 78564 total pagecache pages [ 785.657537][T13529] 0 pages in swap cache [ 785.663428][T13529] Free swap = 124996kB [ 785.670315][T13529] Total swap = 124996kB [ 785.680084][T13529] 2097051 pages RAM [ 785.688151][T13529] 0 pages HighMem/MovableOnly [ 785.698369][T13529] 432257 pages reserved [ 785.705422][T13529] 0 pages cma reserved [ 786.541974][T10286] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 786.725718][T10286] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 786.751197][T10286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.784460][T10286] usb 4-1: Product: syz [ 786.799447][T10286] usb 4-1: Manufacturer: syz [ 786.816478][T10286] usb 4-1: SerialNumber: syz [ 786.837414][T10286] usb 4-1: config 0 descriptor?? [ 786.866756][T10286] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 786.895979][T10286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 786.905729][ T187] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 786.929197][T10286] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 786.996340][T10286] usb 4-1: media controller created [ 787.035665][T10286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 787.149211][T13583] siw: device registration error -23 [ 787.157119][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 787.262524][ T804] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 787.456751][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 787.502216][ T804] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 787.524948][ T30] audit: type=1400 audit(1783873700.819:888): avc: denied { mounton } for pid=13585 comm="syz.6.1991" path="/59/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 787.564754][ T804] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 787.596610][ T187] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 787.617998][ T804] usb 1-1: config 1 interface 0 has no altsetting 1 [ 787.635799][ T804] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 787.684217][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.718315][ T804] usb 1-1: Product: syz [ 787.758106][ T804] usb 1-1: Manufacturer: syz [ 787.789398][ T804] usb 1-1: SerialNumber: syz [ 788.190537][ T804] smsusb:smsusb_probe: board id=8, interface number 0 [ 788.261672][ T804] smsusb:smsusb_probe: Device initialized with return code -19 [ 788.520536][T10286] DVB: Unable to find symbol mt352_attach() [ 789.257534][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.269919][ T187] usb 6-1: Product: syz [ 789.273610][ T804] usb 1-1: USB disconnect, device number 40 [ 789.274476][ T187] usb 6-1: Manufacturer: syz [ 789.286086][ T187] usb 6-1: SerialNumber: syz [ 789.295678][ T187] usb 6-1: config 0 descriptor?? [ 789.308818][ T187] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 789.323858][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.336814][ T187] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 789.347912][ T187] usb 6-1: media controller created [ 789.372817][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.424071][ T187] DVB: Unable to find symbol mt352_attach() [ 789.460423][ T187] DVB: Unable to find symbol nxt6000_attach() [ 789.470422][ T187] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 789.490278][T10286] DVB: Unable to find symbol nxt6000_attach() [ 789.496365][T10286] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 789.854983][ T187] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input77 [ 789.869082][T10286] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 789.888173][ T187] dvb-usb: schedule remote query interval to 1000 msecs. [ 789.899543][T10286] dvb-usb: schedule remote query interval to 1000 msecs. [ 789.913254][T10286] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 789.923888][ T187] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 789.936149][T10286] dvb-usb: bulk message failed: -22 (7/0) [ 789.943809][ T187] dvb-usb: bulk message failed: -22 (7/0) [ 789.950962][T10286] dvb-usb: bulk message failed: -22 (7/0) [ 789.957150][ T187] dvb-usb: bulk message failed: -22 (7/0) [ 789.976618][T10286] usb 4-1: USB disconnect, device number 42 [ 790.017291][ T804] usb 6-1: USB disconnect, device number 35 [ 790.485930][T10286] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 790.490237][ T804] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 790.708443][T13622] blktrace: Concurrent blktraces are not allowed on loop12 [ 792.152036][T10286] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 792.315664][T10286] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 792.344584][T10286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.400935][T10286] usb 4-1: Product: syz [ 792.425493][T10286] usb 4-1: Manufacturer: syz [ 792.437567][T10286] usb 4-1: SerialNumber: syz [ 792.451282][T10286] usb 4-1: config 0 descriptor?? [ 792.468239][T10286] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 792.492119][ T6932] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 792.517797][T10286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 792.569859][T10286] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 792.602465][T10286] usb 4-1: media controller created [ 792.679973][ T6932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.691436][T10286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 792.714658][ T6932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 792.741811][ T6932] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 792.787185][ T6932] usb 1-1: config 1 interface 0 has no altsetting 1 [ 792.826707][ T6932] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 792.872386][ T6932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.898378][ T6932] usb 1-1: Product: syz [ 792.916417][ T6932] usb 1-1: Manufacturer: syz [ 792.929682][ T6932] usb 1-1: SerialNumber: syz [ 792.968617][ T6932] smsusb:smsusb_probe: board id=8, interface number 0 [ 793.034048][T10286] DVB: Unable to find symbol mt352_attach() [ 793.161935][T10286] DVB: Unable to find symbol nxt6000_attach() [ 793.168038][T10286] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 793.216654][ T6932] smsusb:smsusb_probe: Device initialized with return code -19 [ 793.425621][T10286] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 793.461879][ T5703] usb 1-1: USB disconnect, device number 41 [ 793.551527][T13656] blktrace: Concurrent blktraces are not allowed on loop4 [ 793.582366][T10286] dvb-usb: schedule remote query interval to 1000 msecs. [ 793.613801][T10286] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 793.633038][T10286] dvb-usb: bulk message failed: -22 (7/0) [ 793.638796][T10286] dvb-usb: bulk message failed: -22 (7/0) [ 793.670265][T10287] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 793.692157][T10286] usb 4-1: USB disconnect, device number 43 [ 793.773933][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 793.864499][T10286] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 793.932332][ T9] usb 7-1: device descriptor read/64, error -71 [ 793.955161][T10287] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 793.964928][T10287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.973851][T10287] usb 6-1: Product: syz [ 793.978024][T10287] usb 6-1: Manufacturer: syz [ 793.982761][T10287] usb 6-1: SerialNumber: syz [ 793.991400][T10287] usb 6-1: config 0 descriptor?? [ 794.108622][T10287] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 794.125893][T10287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.239845][T13664] lo speed is unknown, defaulting to 1000 [ 794.986383][T10287] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 794.996840][T10287] usb 6-1: media controller created [ 795.095954][T10286] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 795.103908][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 795.469986][T13669] siw: device registration error -23 [ 795.480656][T13669] dvb-usb: bulk message failed: -22 (7/0) [ 797.185931][T13677] netlink: 'syz.2.2016': attribute type 32 has an invalid length. [ 797.588520][ T5626] Bluetooth: hci3: connection err: -111 [ 797.658950][T10287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.752117][T10287] DVB: Unable to find symbol mt352_attach() [ 797.832264][T10287] DVB: Unable to find symbol nxt6000_attach() [ 797.839012][T10287] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 797.876007][T10287] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 797.892490][T13690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.930567][T10287] dvb-usb: schedule remote query interval to 1000 msecs. [ 797.937628][T10287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 797.948237][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 797.953967][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 798.002420][T10287] usb 6-1: USB disconnect, device number 36 [ 798.248388][T10287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 798.936894][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 798.958600][ T30] audit: type=1400 audit(1783873712.249:889): avc: denied { execute } for pid=13701 comm="syz.6.2023" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 799.163899][ T6215] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 799.286976][ T30] audit: type=1400 audit(1783873712.579:890): avc: denied { append } for pid=13715 comm="syz.0.2025" name="usbmon2" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 799.355992][ T6215] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 799.365496][ T6215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.383454][ T6215] usb 3-1: Product: syz [ 799.392698][ T6215] usb 3-1: Manufacturer: syz [ 799.401701][ T6215] usb 3-1: SerialNumber: syz [ 799.416460][ T6215] usb 3-1: config 0 descriptor?? [ 799.436962][ T6215] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 799.452960][ T6215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 799.474957][ T6215] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 799.501997][ T804] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 799.533874][ T6215] usb 3-1: media controller created [ 799.563006][ T6215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 799.591445][T13731] syz.5.2029 (13731): drop_caches: 4 [ 799.856018][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'. [ 799.922647][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 799.926833][T10287] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 800.859311][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.649396][ T804] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.660720][ T804] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 801.669892][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.677925][ T804] usb 4-1: Product: syz [ 801.682161][ T804] usb 4-1: Manufacturer: syz [ 801.686768][ T804] usb 4-1: SerialNumber: syz [ 801.699604][T10287] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 801.702160][ T804] usb 4-1: config 0 descriptor?? [ 801.730607][ T6215] DVB: Unable to find symbol mt352_attach() [ 801.770592][ T6215] DVB: Unable to find symbol nxt6000_attach() [ 801.771129][T10287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.780193][ T6215] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 801.810213][ T6215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 801.846796][ T6215] dvb-usb: schedule remote query interval to 1000 msecs. [ 801.868714][T10287] usb 7-1: Product: syz [ 801.869651][ T6215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 801.888778][T10287] usb 7-1: Manufacturer: syz [ 801.903060][ T6215] dvb-usb: bulk message failed: -22 (7/0) [ 801.907512][T10287] usb 7-1: SerialNumber: syz [ 801.921997][ T6215] dvb-usb: bulk message failed: -22 (7/0) [ 801.953074][ T6215] usb 3-1: USB disconnect, device number 34 [ 801.964300][T10287] usb 7-1: config 0 descriptor?? [ 802.013514][T10287] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 802.074076][T10287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 802.087025][T13738] kvm: kvm [13737]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 802.089244][T13724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.098172][T10287] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 802.125016][T10287] usb 7-1: media controller created [ 802.141051][ T6215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 802.149293][T10287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 802.153403][T13724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.167102][ T1167] nci: nci_rx_work: unknown MT 0x5 [ 802.411440][T13745] siw: device registration error -23 [ 803.153493][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.583293][ T9] usb 4-1: USB disconnect, device number 45 [ 803.598114][ T30] audit: type=1400 audit(1783873716.889:891): avc: denied { execute } for pid=13748 comm="syz.0.2034" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 803.689405][ T1167] Bluetooth: (null): Invalid header checksum [ 803.707737][T10287] DVB: Unable to find symbol mt352_attach() [ 803.807509][T10287] DVB: Unable to find symbol nxt6000_attach() [ 803.816529][T10244] Bluetooth: (null): Invalid header checksum [ 803.829486][T10287] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 803.936267][T10287] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input82 [ 803.965990][ T1167] Bluetooth: (null): Invalid header checksum [ 803.974323][T10287] dvb-usb: schedule remote query interval to 1000 msecs. [ 803.982130][T10287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 803.984054][T13764] blktrace: Concurrent blktraces are not allowed on loop12 [ 804.001332][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 804.007050][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 804.023762][T10287] usb 7-1: USB disconnect, device number 10 [ 804.972297][T13738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.414220][T10287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 806.671415][ T30] audit: type=1400 audit(1783873719.149:892): avc: denied { write } for pid=13771 comm="syz.3.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.706441][T13790] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 808.368090][T10287] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 808.536685][T10287] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 808.560280][T10287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.586715][T10287] usb 3-1: Product: syz [ 808.591245][T10287] usb 3-1: Manufacturer: syz [ 808.598842][T10287] usb 3-1: SerialNumber: syz [ 808.623855][T10287] usb 3-1: config 0 descriptor?? [ 808.647664][T10287] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 808.674676][T10287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.687328][T10287] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 808.699966][T10287] usb 3-1: media controller created [ 808.716277][T13801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2047'. [ 808.730731][T10287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.754733][T13800] IPVS: lc: FWM 3 0x00000003 - no destination available [ 808.775955][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 808.791542][T13800] IPVS: lc: FWM 3 0x00000003 - no destination available [ 808.810523][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 808.849426][T10287] DVB: Unable to find symbol mt352_attach() [ 808.886990][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 809.067054][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 809.176561][T10287] DVB: Unable to find symbol nxt6000_attach() [ 809.194871][T10287] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 809.228067][ T9] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 809.260930][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.287656][T10287] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input83 [ 809.315269][ T9] usb 6-1: Product: syz [ 809.335888][ T9] usb 6-1: Manufacturer: syz [ 809.358858][ T9] usb 6-1: SerialNumber: syz [ 809.424650][T10287] dvb-usb: schedule remote query interval to 1000 msecs. [ 809.433957][ T9] usb 6-1: config 0 descriptor?? [ 809.451424][T10287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 809.472308][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 809.500550][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 809.551482][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.564553][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 809.605483][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 810.008670][T13814] siw: device registration error -23 [ 810.032934][T13814] dvb-usb: bulk message failed: -22 (7/0) [ 810.671911][ T9] usb 6-1: media controller created [ 810.779123][T10287] dvb-usb: bulk message failed: -22 (7/0) [ 811.874472][T10287] dvb-usb: error while querying for an remote control event. [ 812.002956][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.127853][ T6932] usb 3-1: USB disconnect, device number 35 [ 812.185712][ T9] DVB: Unable to find symbol mt352_attach() [ 812.320806][ T9] DVB: Unable to find symbol nxt6000_attach() [ 812.336717][ T6932] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 812.339065][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 812.705910][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input84 [ 812.807012][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 812.862165][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 813.099595][ T6932] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 813.152288][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 813.477682][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 813.498657][ T9] usb 6-1: USB disconnect, device number 37 [ 813.531540][ T6932] usb 3-1: device descriptor read/64, error -71 [ 813.776972][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 813.800373][T13829] blktrace: Concurrent blktraces are not allowed on loop6 [ 813.852540][ T6932] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 813.931111][T13838] overlayfs: missing 'lowerdir' [ 814.121935][ T6932] usb 3-1: device descriptor read/64, error -71 [ 814.156964][T13838] geneve2: entered promiscuous mode [ 814.180591][T13838] geneve2: entered allmulticast mode [ 815.082836][ T6932] usb usb3-port1: attempt power cycle [ 815.109400][T13850] kAFS: No cell specified [ 815.183594][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2058'. [ 815.442058][ T6215] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 815.612480][ T6215] usb 6-1: Using ep0 maxpacket: 16 [ 815.681331][ T6215] usb 6-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 815.691105][ T6215] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 815.705802][ T6215] usb 6-1: Product: syz [ 815.710056][ T6215] usb 6-1: SerialNumber: syz [ 815.725296][ T6215] usb 6-1: config 0 descriptor?? [ 815.748235][ T6215] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 815.764154][ T6215] usb 6-1: Detected FT2232C/D [ 817.745903][ T6215] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 817.779719][ T6215] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 817.790655][ T30] audit: type=1400 audit(1783873731.069:893): avc: denied { map } for pid=13859 comm="syz.6.2062" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 817.830174][ T6215] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 817.956327][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 818.032224][ T5738] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 818.112210][ T5703] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 818.498132][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 818.536012][ T5738] usb 3-1: unable to get BOS descriptor or descriptor too short [ 818.693759][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.772439][ T5703] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 818.789871][ T5738] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 818.847892][ T9] usb 1-1: Product: syz [ 818.870093][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.882091][ T5738] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 818.897807][ T9] usb 1-1: Manufacturer: syz [ 818.956940][ T5703] usb 4-1: Product: syz [ 818.988692][ T5703] usb 4-1: Manufacturer: syz [ 819.003413][ T5738] usb 3-1: config 1 interface 0 has no altsetting 1 [ 819.032095][ T9] usb 1-1: SerialNumber: syz [ 819.045143][ T5703] usb 4-1: SerialNumber: syz [ 819.097752][ T9] usb 1-1: config 0 descriptor?? [ 819.239051][ T6215] usb 6-1: USB disconnect, device number 38 [ 819.265511][ T5703] usb 4-1: config 0 descriptor?? [ 819.639539][ T30] audit: type=1400 audit(1783873731.109:894): avc: denied { call } for pid=13859 comm="syz.6.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 819.639985][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 819.682045][ T30] audit: type=1400 audit(1783873731.109:895): avc: denied { transfer } for pid=13859 comm="syz.6.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 819.694589][ T5703] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 819.741137][ T6215] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 819.751918][ T6215] ftdi_sio 6-1:0.0: device disconnected [ 819.804731][ T5738] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 819.965842][T13873] siw: device registration error -23 [ 819.988321][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 820.098048][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 821.360168][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.369415][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.378632][ T5738] usb 3-1: Product: syz [ 821.384658][ T5738] usb 3-1: Manufacturer: syz [ 821.393999][ T5738] usb 3-1: SerialNumber: syz [ 821.401633][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.478143][ T5738] usb 3-1: can't set config #1, error -71 [ 821.486204][ T5703] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 821.496154][ T5738] usb 3-1: USB disconnect, device number 39 [ 821.504403][ T5703] usb 4-1: media controller created [ 821.509607][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 821.518814][ T9] usb 1-1: media controller created [ 821.565924][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.672748][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.797188][ T5703] DVB: Unable to find symbol mt352_attach() [ 822.292193][ T5703] DVB: Unable to find symbol nxt6000_attach() [ 822.310310][ T9] DVB: Unable to find symbol mt352_attach() [ 822.357274][ T5703] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 822.447384][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input85 [ 822.468217][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2069'. [ 822.535654][ T5703] dvb-usb: schedule remote query interval to 1000 msecs. [ 822.604039][ T9] DVB: Unable to find symbol nxt6000_attach() [ 822.652323][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 822.677248][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 822.775604][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 822.800595][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 822.816953][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 822.836606][ T5703] usb 4-1: USB disconnect, device number 46 [ 822.850023][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 822.858635][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 822.870498][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 822.888935][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 822.930267][ T9] usb 1-1: USB disconnect, device number 42 [ 823.079687][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 823.168041][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 823.537838][ T5703] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 823.881391][ T5703] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 823.975231][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.989267][ T5703] usb 4-1: Product: syz [ 824.046505][ T5703] usb 4-1: Manufacturer: syz [ 824.076745][ T5703] usb 4-1: SerialNumber: syz [ 824.168366][ T5703] usb 4-1: config 0 descriptor?? [ 824.284815][ T5703] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 824.299130][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 824.312118][ T6932] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 824.340077][ T5703] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 824.391171][ T5703] usb 4-1: media controller created [ 824.415970][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.431942][ T5730] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 824.495961][ T6932] usb 7-1: unable to get BOS descriptor or descriptor too short [ 824.527100][ T6932] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 824.569910][ T6932] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 824.584644][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 824.605830][ T5730] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 824.631380][ T6932] usb 7-1: config 1 interface 0 has no altsetting 1 [ 824.631734][ T5703] DVB: Unable to find symbol mt352_attach() [ 824.644623][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.644648][ T5730] usb 1-1: Product: syz [ 824.644663][ T5730] usb 1-1: Manufacturer: syz [ 824.644677][ T5730] usb 1-1: SerialNumber: syz [ 824.665437][ T5730] usb 1-1: config 0 descriptor?? [ 824.824048][ T6932] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 824.843365][ T6932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.882013][ T5703] DVB: Unable to find symbol nxt6000_attach() [ 824.882719][ T5730] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 824.888110][ T5703] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 824.912012][ T6932] usb 7-1: Product: syz [ 824.918914][ T6932] usb 7-1: Manufacturer: syz [ 824.923884][ T6932] usb 7-1: SerialNumber: syz [ 824.931769][ T5730] dvb-usb: bulk message failed: -22 (4/0) [ 824.939078][ T5738] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 824.941322][ T6932] smsusb:smsusb_probe: board id=8, interface number 0 [ 824.953739][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 824.967066][ T5730] dvb-usb: bulk message failed: -22 (5/0) [ 824.973360][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 825.010540][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.020958][ T5730] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 825.029960][ T5730] usb 1-1: media controller created [ 825.038751][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input87 [ 825.098272][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 825.171615][T13925] dvb-usb: bulk message failed: -22 (7/0) [ 825.257926][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.279115][ T6932] smsusb:smsusb_probe: Device initialized with return code -19 [ 825.414024][ T5730] usb 1-1: selecting invalid altsetting 3 [ 825.445703][ T5730] ttusb2: set interface to alts=3 failed [ 825.726560][ T5730] DVB: Unable to find symbol tda10086_attach() [ 825.745985][ T5730] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 825.758760][ T5730] dvb-usb: bulk message failed: -22 (4/0) [ 825.765400][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 825.778448][ T5730] dvb-usb: bulk message failed: -22 (5/0) [ 825.790052][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 825.803283][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 825.931644][ T5730] usb 7-1: USB disconnect, device number 11 [ 825.988984][ T5738] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 826.403486][ T5703] dvb-usb: schedule remote query interval to 1000 msecs. [ 826.412888][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.440900][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 826.453649][ T5738] usb 3-1: Product: syz [ 826.467352][ T5738] usb 3-1: Manufacturer: syz [ 826.486784][ T5738] usb 3-1: SerialNumber: syz [ 826.494524][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 826.541929][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 826.549633][ T5738] usb 3-1: config 0 descriptor?? [ 826.635342][T12849] usb 4-1: USB disconnect, device number 47 [ 826.659238][ T5738] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 827.073386][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 827.220071][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 827.341991][ T5703] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 828.410540][ T5738] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 828.475392][ T5738] usb 3-1: media controller created [ 828.596648][ T5703] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 828.606204][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.642261][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.673452][ T5703] usb 6-1: Product: syz [ 828.700514][ T5703] usb 6-1: Manufacturer: syz [ 828.720865][ T5703] usb 6-1: SerialNumber: syz [ 828.772319][ T5703] usb 6-1: config 0 descriptor?? [ 828.828297][ T5703] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 828.850842][T12849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 828.850909][ T5738] DVB: Unable to find symbol mt352_attach() [ 828.889648][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 828.896895][ T6215] usb 1-1: USB disconnect, device number 43 [ 828.936234][ T5738] DVB: Unable to find symbol nxt6000_attach() [ 828.943100][ T5738] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 828.985934][ T5703] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 829.008977][ T5703] usb 6-1: media controller created [ 829.058109][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.100668][ T5738] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input88 [ 829.258687][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 829.341254][ T5738] dvb-usb: schedule remote query interval to 1000 msecs. [ 829.342710][ T6215] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 829.355567][ T5738] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 829.479074][T13956] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check. [ 829.780425][ T5738] dvb-usb: bulk message failed: -22 (7/0) [ 829.799252][T13955] dvb-usb: bulk message failed: -22 (7/0) [ 830.612386][ T5738] dvb-usb: bulk message failed: -22 (7/0) [ 830.821399][ T187] dvb-usb: bulk message failed: -22 (7/0) [ 830.831915][ T187] dvb-usb: error while querying for an remote control event. [ 830.935999][ T5738] usb 3-1: USB disconnect, device number 40 [ 831.057062][ T5703] DVB: Unable to find symbol mt352_attach() [ 831.243798][ T5703] DVB: Unable to find symbol nxt6000_attach() [ 831.252382][ T5738] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 831.301942][ T5703] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 831.482602][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input89 [ 831.586575][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2090'. [ 831.612702][ T6215] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 831.614442][ T5703] dvb-usb: schedule remote query interval to 1000 msecs. [ 831.737975][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 831.921973][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 832.061777][ T6215] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 832.108624][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 832.122389][ T5703] usb 6-1: USB disconnect, device number 39 [ 832.167806][ T6215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.266727][ T6215] usb 4-1: Product: syz [ 832.288222][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 832.291973][ T6215] usb 4-1: Manufacturer: syz [ 832.329331][ T6215] usb 4-1: SerialNumber: syz [ 832.367446][ T6215] usb 4-1: config 0 descriptor?? [ 832.391402][ T6215] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 832.435268][ T6215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.476972][ T6215] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 832.514940][ T6215] usb 4-1: media controller created [ 832.572608][ T6215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.791410][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 832.876243][T13979] dvb-usb: bulk message failed: -22 (7/0) [ 834.576375][ T6215] DVB: Unable to find symbol mt352_attach() [ 834.639485][ T6215] DVB: Unable to find symbol nxt6000_attach() [ 834.648976][ T6215] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 834.663670][ T6215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input90 [ 834.699792][ T6215] dvb-usb: schedule remote query interval to 1000 msecs. [ 834.751977][ T6215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 834.816216][ T6215] dvb-usb: bulk message failed: -22 (7/0) [ 834.868739][ T6215] dvb-usb: bulk message failed: -22 (7/0) [ 834.869411][ T5738] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 835.307026][ T6215] usb 4-1: USB disconnect, device number 48 [ 835.487199][ T5738] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 835.584274][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.638930][ T5738] usb 1-1: Product: syz [ 835.656716][ T5738] usb 1-1: Manufacturer: syz [ 835.686385][ T5738] usb 1-1: SerialNumber: syz [ 835.716678][ T6215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 835.794810][ T5738] usb 1-1: config 0 descriptor?? [ 836.021175][ T5738] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 836.105009][T14001] blktrace: Concurrent blktraces are not allowed on loop4 [ 836.297560][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 836.345430][ T5738] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 836.380422][ T5738] usb 1-1: media controller created [ 836.499080][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.608792][T14006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14006 comm=syz.2.2100 [ 836.686332][T14006] lo: entered allmulticast mode [ 836.815406][ T5738] DVB: Unable to find symbol mt352_attach() [ 836.880599][T14013] FAULT_INJECTION: forcing a failure. [ 836.880599][T14013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.944345][T14013] CPU: 1 UID: 0 PID: 14013 Comm: syz.3.2102 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.944380][T14013] Tainted: [L]=SOFTLOCKUP [ 836.944386][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 836.944395][T14013] Call Trace: [ 836.944402][T14013] [ 836.944409][T14013] dump_stack_lvl+0x100/0x190 [ 836.944435][T14013] should_fail_ex.cold+0x5/0xa [ 836.944455][T14013] _copy_from_user+0x2e/0xd0 [ 836.944476][T14013] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 836.944505][T14013] ? rcu_is_watching+0x12/0xc0 [ 836.944530][T14013] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 836.944552][T14013] ? trace_kmalloc+0xeb/0x110 [ 836.944570][T14013] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 836.944592][T14013] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 836.944612][T14013] ? trace_kmem_cache_alloc+0xdd/0x100 [ 836.944630][T14013] ? __kasan_slab_alloc+0x89/0x90 [ 836.944648][T14013] ? __alloc_skb+0x185/0x710 [ 836.944675][T14013] ip_generic_getfrag+0x172/0x270 [ 836.944701][T14013] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 836.944724][T14013] ? __asan_memset+0x23/0x50 [ 836.944749][T14013] ? __alloc_skb+0x4e9/0x710 [ 836.944772][T14013] ? __alloc_skb+0x5b7/0x710 [ 836.944798][T14013] raw6_getfrag+0x235/0x2a0 [ 836.944824][T14013] __ip6_append_data+0x387f/0x4bd0 [ 836.944857][T14013] ? __pfx_raw6_getfrag+0x10/0x10 [ 836.944888][T14013] ? __pfx___ip6_append_data+0x10/0x10 [ 836.944915][T14013] ? __pfx_ip6_mtu+0x10/0x10 [ 836.944937][T14013] ? ip6_setup_cork+0x5be/0x14c0 [ 836.944965][T14013] ip6_append_data+0x10b/0x410 [ 836.944992][T14013] ? __pfx_raw6_getfrag+0x10/0x10 [ 836.945016][T14013] rawv6_sendmsg+0x169c/0x4420 [ 836.945040][T14013] ? find_held_lock+0x2b/0x80 [ 836.945072][T14013] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 836.945111][T14013] ? __pfx_sock_has_perm+0x10/0x10 [ 836.945148][T14013] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 836.945173][T14013] ? inet_sendmsg+0x11c/0x140 [ 836.945190][T14013] inet_sendmsg+0x11c/0x140 [ 836.945208][T14013] sock_write_iter+0x4ea/0x5b0 [ 836.945229][T14013] ? __pfx_inet_sendmsg+0x10/0x10 [ 836.945245][T14013] ? __pfx_sock_write_iter+0x10/0x10 [ 836.945274][T14013] ? __pfx___file_has_perm+0x10/0x10 [ 836.945299][T14013] do_iter_readv_writev+0x6f7/0x930 [ 836.945325][T14013] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 836.945345][T14013] ? selinux_file_permission+0x8f/0x6d0 [ 836.945377][T14013] ? bpf_lsm_file_permission+0x9/0x10 [ 836.945400][T14013] ? security_file_permission+0x76/0x210 [ 836.945426][T14013] ? rw_verify_area+0xce/0x6d0 [ 836.945449][T14013] vfs_writev+0x360/0xdd0 [ 836.945478][T14013] ? __pfx_vfs_writev+0x10/0x10 [ 836.945502][T14013] ? rcu_read_lock_any_held+0x6a/0xa0 [ 836.945540][T14013] ? __fget_files+0x21f/0x3d0 [ 836.945571][T14013] ? do_writev+0x28a/0x340 [ 836.945592][T14013] do_writev+0x28a/0x340 [ 836.945614][T14013] ? __pfx_do_writev+0x10/0x10 [ 836.945642][T14013] do_syscall_64+0x115/0x870 [ 836.945667][T14013] ? clear_bhb_loop+0x40/0x90 [ 836.945688][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.945705][T14013] RIP: 0033:0x7f558419de59 [ 836.945720][T14013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.945735][T14013] RSP: 002b:00007f55850fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 836.945752][T14013] RAX: ffffffffffffffda RBX: 00007f5584425fa0 RCX: 00007f558419de59 [ 836.945764][T14013] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 836.945774][T14013] RBP: 00007f55850fc090 R08: 0000000000000000 R09: 0000000000000000 [ 836.945784][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.945795][T14013] R13: 00007f5584426038 R14: 00007f5584425fa0 R15: 00007fffbfec4bb8 [ 836.945817][T14013] [ 837.330459][ T5738] DVB: Unable to find symbol nxt6000_attach() [ 837.478026][ T5738] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 837.559739][ T5738] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input91 [ 837.753966][ T5738] dvb-usb: schedule remote query interval to 1000 msecs. [ 838.031292][T14027] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 838.455680][T14029] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 838.721376][ T5738] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 838.751992][ T5738] dvb-usb: bulk message failed: -22 (7/0) [ 838.764370][ T5738] dvb-usb: bulk message failed: -22 (7/0) [ 838.991355][ T5738] usb 1-1: USB disconnect, device number 44 [ 839.356085][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'. [ 839.442657][ T5738] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 841.695723][T14058] blktrace: Concurrent blktraces are not allowed on loop12 [ 843.621984][ T6932] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 843.836437][ T6932] usb 1-1: Using ep0 maxpacket: 32 [ 844.006457][ T6932] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 844.022352][ T6932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.041953][ T6932] usb 1-1: Product: syz [ 844.047161][ T6932] usb 1-1: Manufacturer: syz [ 844.094301][ T6932] usb 1-1: SerialNumber: syz [ 844.909545][ T6932] usb 1-1: config 0 descriptor?? [ 844.937036][ T6932] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 844.993108][ T6932] dvb-usb: bulk message failed: -22 (4/0) [ 845.023846][ T6932] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 845.063551][ T6932] dvb-usb: bulk message failed: -22 (5/0) [ 845.087439][ T6932] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 845.125985][ T6932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.147558][T14072] dvb-usb: bulk message failed: -22 (7/0) [ 845.170344][T14072] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 845.182255][ T6932] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 845.207325][ T6932] usb 1-1: media controller created [ 845.222124][T14072] ttusb2: i2c transfer failed. [ 845.284204][ T6932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 845.376151][ T6932] usb 1-1: selecting invalid altsetting 3 [ 845.403477][ T6932] ttusb2: set interface to alts=3 failed [ 845.595396][ T6932] DVB: Unable to find symbol tda10086_attach() [ 845.652894][ T6932] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 845.703388][ T6932] dvb-usb: bulk message failed: -22 (4/0) [ 845.732652][ T6932] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 845.789164][ T6932] dvb-usb: bulk message failed: -22 (5/0) [ 845.848261][ T6932] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 845.891243][ T6932] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 846.219489][ T6932] usb 1-1: USB disconnect, device number 45 [ 846.439135][ T6932] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 848.637842][T14106] syzkaller0: entered promiscuous mode [ 848.643443][T14106] syzkaller0: entered allmulticast mode [ 848.860831][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'. [ 849.128702][T14117] FAULT_INJECTION: forcing a failure. [ 849.128702][T14117] name failslab, interval 1, probability 0, space 0, times 0 [ 849.132178][T14118] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 849.165866][T14117] CPU: 1 UID: 0 PID: 14117 Comm: syz.0.2130 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.165902][T14117] Tainted: [L]=SOFTLOCKUP [ 849.165909][T14117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 849.165919][T14117] Call Trace: [ 849.165926][T14117] [ 849.165933][T14117] dump_stack_lvl+0x100/0x190 [ 849.165961][T14117] should_fail_ex.cold+0x5/0xa [ 849.165984][T14117] should_failslab+0xc2/0x120 [ 849.166004][T14117] kmem_cache_alloc_noprof+0x91/0x6a0 [ 849.166023][T14117] ? do_getname_kernel+0x5d/0x250 [ 849.166047][T14117] do_getname_kernel+0x5d/0x250 [ 849.166069][T14117] kern_path+0x1f/0x50 [ 849.166094][T14117] lookup_bdev+0xd8/0x280 [ 849.166115][T14117] ? __pfx_lookup_bdev+0x10/0x10 [ 849.166137][T14117] ? __asan_memcpy+0x3c/0x60 [ 849.166166][T14117] resume_store+0x1d6/0x460 [ 849.166192][T14117] ? __pfx_resume_store+0x10/0x10 [ 849.166222][T14117] ? find_held_lock+0x2b/0x80 [ 849.166247][T14117] ? sysfs_file_kobj+0xe4/0x290 [ 849.166274][T14117] ? sysfs_file_kobj+0xe4/0x290 [ 849.166297][T14117] ? __pfx_resume_store+0x10/0x10 [ 849.166319][T14117] kobj_attr_store+0x58/0x80 [ 849.166339][T14117] ? __pfx_kobj_attr_store+0x10/0x10 [ 849.166357][T14117] sysfs_kf_write+0xf2/0x150 [ 849.166383][T14117] kernfs_fop_write_iter+0x3e0/0x5f0 [ 849.166403][T14117] ? __pfx_sysfs_kf_write+0x10/0x10 [ 849.166428][T14117] vfs_write+0x6ac/0x1050 [ 849.166453][T14117] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 849.166476][T14117] ? __pfx_vfs_write+0x10/0x10 [ 849.166516][T14117] ksys_write+0x12a/0x250 [ 849.166541][T14117] ? __pfx_ksys_write+0x10/0x10 [ 849.166573][T14117] do_syscall_64+0x115/0x870 [ 849.166599][T14117] ? clear_bhb_loop+0x40/0x90 [ 849.166622][T14117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.166640][T14117] RIP: 0033:0x7fde0559de59 [ 849.166657][T14117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.166674][T14117] RSP: 002b:00007fde063b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.166693][T14117] RAX: ffffffffffffffda RBX: 00007fde05825fa0 RCX: 00007fde0559de59 [ 849.166704][T14117] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 849.166715][T14117] RBP: 00007fde063b3090 R08: 0000000000000000 R09: 0000000000000000 [ 849.166726][T14117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.166736][T14117] R13: 00007fde05826038 R14: 00007fde05825fa0 R15: 00007ffdbcfe96d8 [ 849.166761][T14117] [ 849.566591][ T30] audit: type=1400 audit(1783873762.849:896): avc: denied { setopt } for pid=14114 comm="syz.5.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 850.002061][ T5730] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 850.338442][T14129] blktrace: Concurrent blktraces are not allowed on loop0 [ 850.498271][ T5730] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 850.544610][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.589274][ T5730] usb 4-1: Product: syz [ 850.613309][ T5730] usb 4-1: Manufacturer: syz [ 850.642415][ T5730] usb 4-1: SerialNumber: syz [ 850.677410][ T5730] usb 4-1: config 0 descriptor?? [ 850.823014][ T5730] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 850.823920][T14134] blktrace: Concurrent blktraces are not allowed on loop10 [ 851.051690][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 851.227045][T14135] siw: device registration error -23 [ 851.256441][T14135] dvb-usb: bulk message failed: -22 (7/0) [ 852.967763][ T5730] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 852.982098][ T5730] usb 4-1: media controller created [ 853.000572][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.316302][ T5730] DVB: Unable to find symbol mt352_attach() [ 853.617309][ T5626] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 853.645532][T14145] blktrace: Concurrent blktraces are not allowed on loop0 [ 853.934794][ T5730] DVB: Unable to find symbol nxt6000_attach() [ 853.964615][ T5730] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 854.153491][ T5730] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input92 [ 854.185838][ T5730] dvb-usb: schedule remote query interval to 1000 msecs. [ 854.225184][ T5730] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 855.095751][ T5730] dvb-usb: bulk message failed: -22 (7/0) [ 855.147493][ T5730] dvb-usb: bulk message failed: -22 (7/0) [ 855.220803][ T5730] usb 4-1: USB disconnect, device number 49 [ 855.419659][T14163] syzkaller0: entered promiscuous mode [ 855.450145][T14163] syzkaller0: entered allmulticast mode [ 855.469690][ T5730] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 855.683110][T14168] blktrace: Concurrent blktraces are not allowed on loop10 [ 855.906667][ T30] audit: type=1400 audit(1783873769.199:897): avc: denied { connect } for pid=14171 comm="syz.3.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 855.932302][T12849] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 856.085885][ T30] audit: type=1326 audit(1783873769.379:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558419de59 code=0x7ffc0000 [ 856.152100][T12849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 856.171128][T12849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 856.215838][T12849] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 856.246214][ T30] audit: type=1326 audit(1783873769.379:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558419de59 code=0x7ffc0000 [ 856.289921][T12849] usb 3-1: config 1 interface 0 has no altsetting 1 [ 856.319248][T12849] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 856.348734][T12849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.380527][ T30] audit: type=1326 audit(1783873769.409:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.415179][T12849] usb 3-1: Product: syz [ 856.426772][T12849] usb 3-1: Manufacturer: syz [ 856.439172][T12849] usb 3-1: SerialNumber: syz [ 856.459171][T12849] smsusb:smsusb_probe: board id=8, interface number 0 [ 856.486343][ T30] audit: type=1326 audit(1783873769.409:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.516461][ T30] audit: type=1326 audit(1783873769.409:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.546640][ T30] audit: type=1326 audit(1783873769.409:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.650104][ T30] audit: type=1326 audit(1783873769.409:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.712266][T12849] smsusb:smsusb_probe: Device initialized with return code -19 [ 856.796439][ T30] audit: type=1326 audit(1783873769.409:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.923483][ T30] audit: type=1326 audit(1783873769.409:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14171 comm="syz.3.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f558419daeb code=0x7ffc0000 [ 856.960989][T14182] blktrace: Concurrent blktraces are not allowed on loop0 [ 857.015459][ T5738] usb 3-1: USB disconnect, device number 41 [ 857.706031][ T5626] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 857.716576][ T5626] Bluetooth: hci5: Injecting HCI hardware error event [ 857.725516][ T5626] Bluetooth: hci5: hardware error 0x00 [ 858.507431][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2150'. [ 858.728747][T14186] blktrace: Concurrent blktraces are not allowed on loop10 [ 858.955131][T14190] blktrace: Concurrent blktraces are not allowed on loop6 [ 859.895778][ T5626] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 860.807017][T14216] lo speed is unknown, defaulting to 1000 [ 863.373492][T14236] blktrace: Concurrent blktraces are not allowed on loop10 [ 863.409681][T14225] blktrace: Concurrent blktraces are not allowed on loop0 [ 863.632076][ T5738] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 863.687217][T14234] lo: entered allmulticast mode [ 863.712506][T14231] lo: left allmulticast mode [ 863.872820][ T5738] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 863.889076][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 864.186688][T14245] lo speed is unknown, defaulting to 1000 [ 864.721216][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.721799][T14248] blktrace: Concurrent blktraces are not allowed on loop0 [ 864.776562][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 864.814537][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 864.854343][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.098520][T14251] blktrace: Concurrent blktraces are not allowed on loop12 [ 865.121693][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.192666][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 865.244328][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.264879][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.280188][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 865.290344][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.309871][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.345129][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 865.578216][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 865.822256][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 865.834447][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 866.045879][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 866.056785][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 866.826905][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 866.838738][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 866.917026][ T5738] usb 4-1: unable to read config index 6 descriptor/start: -71 [ 866.941613][ T5738] usb 4-1: can't read configurations, error -71 [ 868.683959][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 868.683984][ T30] audit: type=1400 audit(1783873781.899:932): avc: denied { remount } for pid=14279 comm="syz.6.2172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 868.860786][T14271] blktrace: Concurrent blktraces are not allowed on loop6 [ 869.261876][T14292] blktrace: Concurrent blktraces are not allowed on loop4 [ 871.562365][T14313] FAULT_INJECTION: forcing a failure. [ 871.562365][T14313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.601262][T14313] CPU: 1 UID: 0 PID: 14313 Comm: syz.2.2181 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.601290][T14313] Tainted: [L]=SOFTLOCKUP [ 871.601296][T14313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 871.601306][T14313] Call Trace: [ 871.601312][T14313] [ 871.601319][T14313] dump_stack_lvl+0x100/0x190 [ 871.601345][T14313] should_fail_ex.cold+0x5/0xa [ 871.601367][T14313] _copy_from_user+0x2e/0xd0 [ 871.601389][T14313] copy_mount_options+0x76/0x190 [ 871.601415][T14313] __x64_sys_mount+0x1ab/0x310 [ 871.601436][T14313] ? __pfx___x64_sys_mount+0x10/0x10 [ 871.601462][T14313] do_syscall_64+0x115/0x870 [ 871.601487][T14313] ? clear_bhb_loop+0x40/0x90 [ 871.601514][T14313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.601532][T14313] RIP: 0033:0x7fef7659de59 [ 871.601548][T14313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.601564][T14313] RSP: 002b:00007fef7746b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 871.601583][T14313] RAX: ffffffffffffffda RBX: 00007fef76825fa0 RCX: 00007fef7659de59 [ 871.601594][T14313] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 871.601605][T14313] RBP: 00007fef7746b090 R08: 0000200000000040 R09: 0000000000000000 [ 871.601616][T14313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.601627][T14313] R13: 00007fef76826038 R14: 00007fef76825fa0 R15: 00007ffd078a7c98 [ 871.601648][T14313] [ 872.392433][T14329] FAULT_INJECTION: forcing a failure. [ 872.392433][T14329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.466823][T14329] CPU: 1 UID: 0 PID: 14329 Comm: syz.2.2187 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.466856][T14329] Tainted: [L]=SOFTLOCKUP [ 872.466863][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 872.466873][T14329] Call Trace: [ 872.466880][T14329] [ 872.466888][T14329] dump_stack_lvl+0x100/0x190 [ 872.466916][T14329] should_fail_ex.cold+0x5/0xa [ 872.466939][T14329] _copy_from_user+0x2e/0xd0 [ 872.466961][T14329] copy_msghdr_from_user+0x9f/0x4c0 [ 872.466988][T14329] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 872.467025][T14329] ___sys_sendmsg+0x106/0x1e0 [ 872.467050][T14329] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.467072][T14329] ? __lock_acquire+0x49f/0x1a40 [ 872.467093][T14329] ? get_pid_task+0x106/0x250 [ 872.467144][T14329] __sys_sendmsg+0x160/0x210 [ 872.467164][T14329] ? __pfx___sys_sendmsg+0x10/0x10 [ 872.467195][T14329] do_syscall_64+0x115/0x870 [ 872.467220][T14329] ? clear_bhb_loop+0x40/0x90 [ 872.467241][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.467259][T14329] RIP: 0033:0x7fef7659de59 [ 872.467275][T14329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.467291][T14329] RSP: 002b:00007fef7746b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.467309][T14329] RAX: ffffffffffffffda RBX: 00007fef76825fa0 RCX: 00007fef7659de59 [ 872.467320][T14329] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 872.467331][T14329] RBP: 00007fef7746b090 R08: 0000000000000000 R09: 0000000000000000 [ 872.467341][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.467352][T14329] R13: 00007fef76826038 R14: 00007fef76825fa0 R15: 00007ffd078a7c98 [ 872.467376][T14329] [ 874.461988][ T5738] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 875.472910][ T30] audit: type=1400 audit(1783873788.769:933): avc: denied { getopt } for pid=14361 comm="syz.5.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 875.532296][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 875.557099][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.589961][ T5738] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 875.658758][T14368] FAULT_INJECTION: forcing a failure. [ 875.658758][T14368] name failslab, interval 1, probability 0, space 0, times 0 [ 875.671398][T14368] CPU: 0 UID: 0 PID: 14368 Comm: syz.3.2196 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.671428][T14368] Tainted: [L]=SOFTLOCKUP [ 875.671434][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 875.671446][T14368] Call Trace: [ 875.671452][T14368] [ 875.671459][T14368] dump_stack_lvl+0x100/0x190 [ 875.671487][T14368] should_fail_ex.cold+0x5/0xa [ 875.671510][T14368] should_failslab+0xc2/0x120 [ 875.671538][T14368] kmem_cache_alloc_noprof+0x91/0x6a0 [ 875.671557][T14368] ? prepare_creds+0x2c/0x950 [ 875.671582][T14368] prepare_creds+0x2c/0x950 [ 875.671603][T14368] __sys_setresuid+0x458/0x1280 [ 875.671629][T14368] do_syscall_64+0x115/0x870 [ 875.671655][T14368] ? clear_bhb_loop+0x40/0x90 [ 875.671678][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.671696][T14368] RIP: 0033:0x7f558419de59 [ 875.671713][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.671730][T14368] RSP: 002b:00007f55850fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 875.671748][T14368] RAX: ffffffffffffffda RBX: 00007f5584425fa0 RCX: 00007f558419de59 [ 875.671759][T14368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 875.671769][T14368] RBP: 00007f55850fc090 R08: 0000000000000000 R09: 0000000000000000 [ 875.671780][T14368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.671791][T14368] R13: 00007f5584426038 R14: 00007f5584425fa0 R15: 00007fffbfec4bb8 [ 875.671815][T14368] [ 876.307266][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2195'. [ 876.451926][ T5738] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 876.505164][T14382] lo speed is unknown, defaulting to 1000 [ 876.837587][ T30] audit: type=1400 audit(1783873790.099:934): avc: denied { getopt } for pid=14376 comm="syz.6.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 877.424565][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.434182][ T5738] usb 3-1: Product: syz [ 877.438787][ T5738] usb 3-1: Manufacturer: syz [ 877.443868][ T5738] usb 3-1: SerialNumber: syz [ 877.908499][ T5738] usb 3-1: config 0 descriptor?? [ 877.914472][ T5738] usb 3-1: can't set config #0, error -71 [ 877.923503][ T5738] usb 3-1: USB disconnect, device number 42 [ 880.334934][ T5626] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 883.313817][T14441] blktrace: Concurrent blktraces are not allowed on loop10 [ 883.882060][T12849] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 884.035171][T12849] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 884.080663][T12849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.101231][T14446] blktrace: Concurrent blktraces are not allowed on loop4 [ 884.156670][T12849] usb 4-1: Product: syz [ 884.185321][T12849] usb 4-1: Manufacturer: syz [ 884.202599][T12849] usb 4-1: SerialNumber: syz [ 884.231503][T14450] qnx4: no qnx4 filesystem (no root dir). [ 884.231629][T12849] usb 4-1: config 0 descriptor?? [ 884.287298][T12849] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 884.445849][ T5626] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 884.458694][ T5626] Bluetooth: hci0: Injecting HCI hardware error event [ 884.468240][T14191] Bluetooth: hci0: hardware error 0x00 [ 884.490675][T12849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 884.836231][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 885.675558][T14457] dvb-usb: bulk message failed: -22 (7/0) [ 886.491936][T14191] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 886.993390][T12849] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 887.003244][T12849] usb 4-1: media controller created [ 887.061470][T12849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.498031][T12849] DVB: Unable to find symbol mt352_attach() [ 887.577900][T12849] DVB: Unable to find symbol nxt6000_attach() [ 887.757629][T14473] lo speed is unknown, defaulting to 1000 [ 888.414428][ T30] audit: type=1400 audit(1783873800.939:935): avc: denied { write } for pid=14466 comm="syz.5.2221" path="socket:[40802]" dev="sockfs" ino=40802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 888.451879][T12849] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 888.509976][T12849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input94 [ 888.579688][T12849] dvb-usb: schedule remote query interval to 1000 msecs. [ 888.616705][T12849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 888.649592][T12849] dvb-usb: bulk message failed: -22 (7/0) [ 888.680528][T12849] dvb-usb: bulk message failed: -22 (7/0) [ 888.734921][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 888.774389][T12849] usb 4-1: USB disconnect, device number 52 [ 888.904652][ T9] usb 3-1: device descriptor read/64, error -71 [ 889.094570][T12849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 889.176469][T14494] fuse: Unknown parameter '0x0000000000000005' [ 889.409896][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 889.552075][ T9] usb 3-1: device descriptor read/64, error -71 [ 889.677980][ T9] usb usb3-port1: attempt power cycle [ 890.642111][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 890.723047][ T9] usb 3-1: device descriptor read/8, error -71 [ 890.902848][T14191] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 890.982076][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 891.073255][ T9] usb 3-1: device descriptor read/8, error -71 [ 891.258069][T14530] fuse: Unknown parameter '0x0000000000000005' [ 891.413352][ T9] usb usb3-port1: unable to enumerate USB device [ 891.851177][T14529] blktrace: Concurrent blktraces are not allowed on loop0 [ 892.112078][ T6932] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 892.312232][ T6932] usb 7-1: Using ep0 maxpacket: 32 [ 892.408130][ T6932] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.466753][ T6932] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.482375][ T6932] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 892.491633][ T6932] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 892.500869][ T6932] usb 7-1: Product: syz [ 892.515196][ T6932] usb 7-1: Manufacturer: syz [ 892.612542][ T6932] usb 7-1: SerialNumber: syz [ 893.669727][T14550] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 893.926398][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2245'. [ 893.962120][ T6932] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input95 [ 893.997683][T14191] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 894.443992][ T30] audit: type=1400 audit(1783873807.739:936): avc: denied { mount } for pid=14535 comm="syz.6.2241" name="/" dev="hugetlbfs" ino=39802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 894.445013][T14536] hugetlbfs: Bad value 't' for mount option 'size' [ 894.445013][T14536] [ 894.596382][ T30] audit: type=1400 audit(1783873807.739:937): avc: denied { remount } for pid=14535 comm="syz.6.2241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 894.972081][T14191] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 894.984770][T14191] Bluetooth: hci2: Injecting HCI hardware error event [ 894.997166][ T5626] Bluetooth: hci2: hardware error 0x00 [ 895.895753][ T9] usb 7-1: USB disconnect, device number 12 [ 896.728609][ T9] appletouch 7-1:1.0: input: appletouch disconnected [ 896.797247][T14580] fuse: Unknown parameter '0x0000000000000005' [ 896.982279][ T30] audit: type=1400 audit(1783873810.279:938): avc: denied { unmount } for pid=12025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 897.762966][ T30] audit: type=1400 audit(1783873811.019:939): avc: denied { accept } for pid=14581 comm="syz.5.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 897.793706][ T5626] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 898.872962][T14599] blktrace: Concurrent blktraces are not allowed on loop12 [ 899.662082][T14606] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 902.222540][T12849] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 902.642793][T12849] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 902.652066][T12849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.660459][T12849] usb 3-1: Product: syz [ 902.666334][T12849] usb 3-1: Manufacturer: syz [ 902.670949][T12849] usb 3-1: SerialNumber: syz [ 902.698361][T12849] usb 3-1: config 0 descriptor?? [ 902.706022][T12849] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 902.717429][T12849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.727363][T12849] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 902.736950][T12849] usb 3-1: media controller created [ 902.926224][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2265'. [ 903.236242][T12849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.915312][T14642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'. [ 904.950723][T14642] dvb-usb: bulk message failed: -22 (7/0) [ 905.815359][ T30] audit: type=1400 audit(1783873819.109:940): avc: denied { read } for pid=14644 comm="syz.5.2270" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 905.927667][T14643] blktrace: Concurrent blktraces are not allowed on loop6 [ 907.479396][T12849] DVB: Unable to find symbol mt352_attach() [ 907.874470][T12849] DVB: Unable to find symbol nxt6000_attach() [ 907.896172][T12849] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 907.947956][T12849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input96 [ 908.023416][T12849] dvb-usb: schedule remote query interval to 1000 msecs. [ 908.051485][T12849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 908.083561][T12849] dvb-usb: bulk message failed: -22 (7/0) [ 908.089858][T12849] dvb-usb: bulk message failed: -22 (7/0) [ 908.122003][T12849] usb 3-1: USB disconnect, device number 47 [ 908.721714][T14653] blktrace: Concurrent blktraces are not allowed on loop0 [ 908.737654][T12849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 909.052099][T14661] blktrace: Concurrent blktraces are not allowed on loop12 [ 909.263215][ T6932] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 909.431969][ T6932] usb 1-1: Using ep0 maxpacket: 8 [ 909.466470][ T6932] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 909.487721][T14671] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 909.515829][ T6932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 909.561925][ T6932] usb 1-1: Product: syz [ 909.582302][ T6932] usb 1-1: Manufacturer: syz [ 909.605251][ T6932] usb 1-1: SerialNumber: syz [ 909.610109][T14675] usb usb8: usbfs: process 14675 (syz.6.2278) did not claim interface 0 before use [ 909.633722][ T6932] usb 1-1: config 0 descriptor?? [ 909.644135][ T6932] gspca_main: sq905-2.14.0 probing 2770:9120 [ 910.162306][ T6932] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 910.245566][ T6932] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 911.375369][ T6215] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 912.638410][ T6215] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 912.663279][T14700] blktrace: Concurrent blktraces are not allowed on loop12 [ 912.695992][ T6215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.740130][ T6215] usb 6-1: Product: syz [ 912.764951][ T6215] usb 6-1: Manufacturer: syz [ 912.791366][T12849] usb 1-1: USB disconnect, device number 46 [ 912.801386][ T6215] usb 6-1: SerialNumber: syz [ 912.838152][ T6215] usb 6-1: config 0 descriptor?? [ 912.917354][ T6215] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 913.229056][T14713] blktrace: Concurrent blktraces are not allowed on loop6 [ 913.506385][T14712] blktrace: Concurrent blktraces are not allowed on loop4 [ 913.528616][ T6215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 913.593895][ T6215] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 913.654285][ T6215] usb 6-1: media controller created [ 913.721558][T14724] dvb-usb: bulk message failed: -22 (7/0) [ 913.796562][T14716] syzkaller0: entered promiscuous mode [ 913.823643][T14716] syzkaller0: entered allmulticast mode [ 913.845853][ T6215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 914.898612][ T6215] DVB: Unable to find symbol mt352_attach() [ 915.926294][T14737] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 915.946000][ T6215] DVB: Unable to find symbol nxt6000_attach() [ 915.952470][ T6215] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 915.965841][ T6215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input97 [ 915.979354][ T6215] dvb-usb: schedule remote query interval to 1000 msecs. [ 915.986985][ T6215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 915.997298][ T6215] dvb-usb: bulk message failed: -22 (7/0) [ 916.003576][ T6215] dvb-usb: bulk message failed: -22 (7/0) [ 916.314610][ T6215] usb 6-1: USB disconnect, device number 40 [ 916.794090][ T6215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 916.914128][ T804] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 917.101754][ T804] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 917.120541][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.138702][ T804] usb 3-1: Product: syz [ 917.150403][ T804] usb 3-1: Manufacturer: syz [ 917.162271][ T804] usb 3-1: SerialNumber: syz [ 917.178844][ T804] usb 3-1: config 0 descriptor?? [ 917.198138][ T804] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 917.220768][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 917.243719][ T804] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 917.268150][ T804] usb 3-1: media controller created [ 917.298920][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 917.538632][T14765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.356986][ T804] DVB: Unable to find symbol mt352_attach() [ 918.631708][T14767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'. [ 918.648836][T14767] dvb-usb: bulk message failed: -22 (7/0) [ 919.389930][ T804] DVB: Unable to find symbol nxt6000_attach() [ 919.446733][ T804] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 919.621338][ T804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input98 [ 919.833208][T14774] blktrace: Concurrent blktraces are not allowed on loop0 [ 920.114045][ T804] dvb-usb: schedule remote query interval to 1000 msecs. [ 920.147408][ T804] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 920.179965][ T804] dvb-usb: bulk message failed: -22 (7/0) [ 920.205655][ T804] dvb-usb: bulk message failed: -22 (7/0) [ 920.304463][ T9] usb 3-1: USB disconnect, device number 48 [ 920.552568][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 920.692001][ T5703] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 921.841330][ T5703] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 921.851269][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.860798][ T5703] usb 6-1: Product: syz [ 921.866227][ T5703] usb 6-1: Manufacturer: syz [ 921.871220][ T5703] usb 6-1: SerialNumber: syz [ 921.884101][ T5703] usb 6-1: config 0 descriptor?? [ 922.859632][ T5703] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 922.871424][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 922.955203][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 922.968948][ T5703] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 923.699363][ T5738] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 923.708237][ T5703] usb 6-1: media controller created [ 923.734368][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 923.760549][T14795] dvb-usb: bulk message failed: -22 (7/0) [ 923.872282][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 923.886402][ T9] usb 3-1: device descriptor read/all, error -71 [ 923.911311][ T5738] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.944794][T14799] netlink: 'syz.6.2311': attribute type 15 has an invalid length. [ 923.953287][ T5738] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.975309][ T5738] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 923.976725][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2311'. [ 923.991949][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.015753][ T5738] usb 4-1: Product: syz [ 924.015789][ T5738] usb 4-1: Manufacturer: syz [ 924.015818][ T5738] usb 4-1: SerialNumber: syz [ 924.023441][ T5738] usb 4-1: config 0 descriptor?? [ 924.023811][ T5703] DVB: Unable to find symbol mt352_attach() [ 924.099660][ T5703] DVB: Unable to find symbol nxt6000_attach() [ 924.152170][ T5703] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 924.206402][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input99 [ 924.235591][ T5703] dvb-usb: schedule remote query interval to 1000 msecs. [ 924.253776][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 924.281961][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 924.296440][ T5703] dvb-usb: bulk message failed: -22 (7/0) [ 924.337678][ T5703] usb 6-1: USB disconnect, device number 41 [ 925.709149][ T5703] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 925.761940][ T187] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 925.999585][T14819] blktrace: Concurrent blktraces are not allowed on loop10 [ 926.013742][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 926.022679][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.124519][T14814] blktrace: Concurrent blktraces are not allowed on loop4 [ 926.185811][ T187] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 926.196465][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.283181][ T804] usb 4-1: USB disconnect, device number 53 [ 926.335502][ T187] usb 7-1: Product: syz [ 926.399488][ T187] usb 7-1: Manufacturer: syz [ 926.439202][ T187] usb 7-1: SerialNumber: syz [ 926.474201][ T187] usb 7-1: config 0 descriptor?? [ 926.500973][ T187] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 926.747297][ T30] audit: type=1400 audit(1783873840.039:941): avc: denied { append } for pid=14831 comm="syz.3.2321" name="sg0" dev="devtmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 926.880088][T14835] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 926.931990][ T6215] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 927.081983][ T804] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 927.184003][ T6215] usb 6-1: Using ep0 maxpacket: 32 [ 927.204190][ T6215] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 927.224519][ T6215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.256788][ T6215] usb 6-1: Product: syz [ 927.274142][ T6215] usb 6-1: Manufacturer: syz [ 927.297469][ T6215] usb 6-1: SerialNumber: syz [ 927.334237][ T804] usb 4-1: config 0 has no interfaces? [ 927.346614][ T6215] usb 6-1: config 0 descriptor?? [ 927.365657][ T804] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.415793][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.451267][ T804] usb 4-1: config 0 descriptor?? [ 927.853585][ T6215] airspy 6-1:0.0: Board ID: 00 [ 927.860888][ T6215] airspy 6-1:0.0: Firmware version: [ 1031.831789][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1031.838767][ C1] rcu: 0-...!: (1 GPs behind) idle=c094/1/0x4000000000000000 softirq=71806/71807 fqs=21 [ 1031.849518][ C1] rcu: (detected by 1, t=10506 jiffies, g=85681, q=384 ncpus=2) [ 1031.857237][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1031.857264][ C0] NMI backtrace for cpu 0 [ 1031.857279][ C0] CPU: 0 UID: 0 PID: 14812 Comm: syz.6.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.857299][ C0] Tainted: [L]=SOFTLOCKUP [ 1031.857304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1031.857313][ C0] RIP: 0010:find_held_lock+0x0/0x80 [ 1031.857338][ C0] Code: 91 89 c2 48 c7 c6 c2 3b 06 91 48 c7 c7 03 d5 17 8e e9 e4 4e 3d ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 41 89 d6 41 55 49 89 cd 41 54 49 89 f4 55 8d 6a ff 48 63 c5 [ 1031.857351][ C0] RSP: 0018:ffffc90000007e30 EFLAGS: 00000006 [ 1031.857364][ C0] RAX: 0000000000000000 RBX: ffff8880b8428418 RCX: ffffc90000007e44 [ 1031.857373][ C0] RDX: 0000000000000005 RSI: ffff8880b8428418 RDI: ffff888032f20000 [ 1031.857382][ C0] RBP: ffffffff81f5913b R08: 0000000000000001 R09: 0000000000000000 [ 1031.857391][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888032f20000 [ 1031.857400][ C0] R13: ffffffff89c6f9a0 R14: 0000000000000083 R15: 0000000000000005 [ 1031.857409][ C0] FS: 00007f21e36ae6c0(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 1031.857423][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.857433][ C0] CR2: 00007fde06391ff8 CR3: 000000002333a000 CR4: 00000000003526f0 [ 1031.857442][ C0] Call Trace: [ 1031.857448][ C0] [ 1031.857457][ C0] lock_release+0xdb/0x310 [ 1031.857476][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 1031.857496][ C0] __hrtimer_run_queues+0x37b/0x9c0 [ 1031.857518][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1031.857541][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1031.857561][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1031.857580][ C0] [ 1031.857584][ C0] [ 1031.857589][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1031.857605][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 1031.857624][ C0] Code: ff ff ff ff 65 0f c1 15 19 65 aa 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 7c 3f 03 00 c3 cc cc cc cc 31 c0 [ 1031.857636][ C0] RSP: 0018:ffffc90005277bb0 EFLAGS: 00000292 [ 1031.857648][ C0] RAX: 0000000000000001 RBX: ffffffff8ea97840 RCX: 0000000000000001 [ 1031.857657][ C0] RDX: 0000000000000046 RSI: ffffffff8e17d521 RDI: ffffffff8c400f80 [ 1031.857665][ C0] RBP: ffff888032f20000 R08: 0000000000000005 R09: 0000000000000000 [ 1031.857674][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 1031.857682][ C0] R13: 0000000000000246 R14: ffff888032f20c18 R15: 0000000000000003 [ 1031.857696][ C0] ? balance_push+0x288/0x5b0 [ 1031.857713][ C0] text_poke+0x8e/0xc0 [ 1031.857734][ C0] smp_text_poke_batch_finish+0x6b5/0xc60 [ 1031.857750][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1031.857764][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1031.857781][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1031.857795][ C0] jump_label_update+0x37a/0x550 [ 1031.857810][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 1031.857825][ C0] static_key_enable+0x1a/0x20 [ 1031.857839][ C0] sched_core_get+0x8a/0xa0 [ 1031.857854][ C0] sched_core_share_pid+0x406/0x9d0 [ 1031.857873][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1031.857888][ C0] ? cap_task_prctl+0x104/0xa50 [ 1031.857904][ C0] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1031.857924][ C0] ? static_key_count+0x5a/0x70 [ 1031.857936][ C0] ? security_task_prctl+0x11c/0x160 [ 1031.857951][ C0] __do_sys_prctl+0x67b/0x2270 [ 1031.857965][ C0] ? __pfx___do_sys_prctl+0x10/0x10 [ 1031.857980][ C0] do_syscall_64+0x115/0x870 [ 1031.857999][ C0] ? clear_bhb_loop+0x40/0x90 [ 1031.858014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.858028][ C0] RIP: 0033:0x7f21e279de59 [ 1031.858040][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.858052][ C0] RSP: 002b:00007f21e36ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1031.858064][ C0] RAX: ffffffffffffffda RBX: 00007f21e2a25fa0 RCX: 00007f21e279de59 [ 1031.858073][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 1031.858081][ C0] RBP: 00007f21e2833e6f R08: 0000000000000000 R09: 0000000000000000 [ 1031.858090][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1031.858098][ C0] R13: 00007f21e2a26038 R14: 00007f21e2a25fa0 R15: 00007ffcfff2a948 [ 1031.858111][ C0] [ 1031.858259][ C1] rcu: rcu_preempt kthread starved for 10300 jiffies! g85681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1032.302759][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1032.312716][ C1] rcu: RCU grace-period kthread stack dump: [ 1032.318589][ C1] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1032.332073][ C1] Call Trace: [ 1032.335342][ C1] [ 1032.338267][ C1] __schedule+0x125c/0x6730 [ 1032.342786][ C1] ? __pfx___schedule+0x10/0x10 [ 1032.347632][ C1] ? find_held_lock+0x2b/0x80 [ 1032.352307][ C1] ? schedule+0x225/0x2c0 [ 1032.356637][ C1] schedule+0xdd/0x2c0 [ 1032.360700][ C1] schedule_timeout+0x127/0x280 [ 1032.365543][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1032.370910][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1032.376197][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1032.381996][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1032.387449][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1032.392212][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1032.397495][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1032.402428][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1032.407625][ C1] rcu_gp_kthread+0x179/0x230 [ 1032.412291][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1032.417480][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1032.423286][ C1] ? __kthread_parkme+0x18c/0x230 [ 1032.428311][ C1] ? kthread+0x13a/0x450 [ 1032.432552][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1032.437741][ C1] kthread+0x370/0x450 [ 1032.441809][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.446399][ C1] ret_from_fork+0x72b/0xd50 [ 1032.450985][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.456090][ C1] ? __switch_to+0x800/0x10f0 [ 1032.460764][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.465352][ C1] ret_from_fork_asm+0x1a/0x30 [ 1032.470133][ C1] [ 1032.473155][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1032.479492][ C1] CPU: 1 UID: 0 PID: 13214 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.490702][ C1] Tainted: [L]=SOFTLOCKUP [ 1032.495032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1032.505114][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 1032.511136][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 1032.517831][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 c9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 1032.537460][ C1] RSP: 0018:ffffc90004d66820 EFLAGS: 00000293 [ 1032.543532][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd45bd [ 1032.551493][ C1] RDX: ffff8880292b8000 RSI: ffffffff81fd4597 RDI: ffff8880292b8000 [ 1032.559453][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1032.567412][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1032.575371][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1032.583331][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 1032.592250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.598823][ C1] CR2: 0000001b2f00cff8 CR3: 000000008129d000 CR4: 00000000003526f0 [ 1032.606789][ C1] Call Trace: [ 1032.610057][ C1] [ 1032.612982][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 1032.618353][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1032.623550][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1032.629876][ C1] ? lock_acquire+0x1b9/0x370 [ 1032.634550][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1032.639747][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 1032.645112][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1032.650222][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1032.655328][ C1] ? page_table_check_clear+0x480/0x8f0 [ 1032.660870][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 1032.666843][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1032.672387][ C1] ? find_held_lock+0x2b/0x80 [ 1032.677062][ C1] ptep_clear_flush+0x148/0x170 [ 1032.681907][ C1] page_vma_mkclean_one.constprop.0+0x3a2/0x7b0 [ 1032.688149][ C1] ? __pfx_page_vma_mkclean_one.constprop.0+0x10/0x10 [ 1032.694926][ C1] page_mkclean_one+0x1cd/0x2b0 [ 1032.699776][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1032.705147][ C1] ? __pfx___might_resched+0x10/0x10 [ 1032.710431][ C1] __rmap_walk_file+0x383/0x680 [ 1032.715283][ C1] rmap_walk_file+0x1d8/0x2a0 [ 1032.719961][ C1] folio_mkclean+0x2af/0x4e0 [ 1032.724546][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 1032.729655][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1032.735022][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 1032.740653][ C1] folio_clear_dirty_for_io+0x1ba/0x960 [ 1032.746194][ C1] mpage_submit_folio+0x84/0x330 [ 1032.751130][ C1] mpage_process_page_bufs+0x473/0x8d0 [ 1032.756587][ C1] mpage_prepare_extent_to_map+0xb50/0x1920 [ 1032.762485][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1032.768827][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 1032.774022][ C1] ? ext4_init_io_end+0x24/0x170 [ 1032.778964][ C1] ext4_do_writepages+0x9f9/0x3ed0 [ 1032.784088][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1032.789641][ C1] ? ext4_writepages+0x347/0x750 [ 1032.794577][ C1] ext4_writepages+0x347/0x750 [ 1032.799339][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 1032.804620][ C1] ? lapic_next_event+0x10/0x20 [ 1032.809472][ C1] ? do_writepages+0x4b5/0x600 [ 1032.814225][ C1] ? do_writepages+0x4b5/0x600 [ 1032.818983][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 1032.824269][ C1] do_writepages+0x278/0x600 [ 1032.828854][ C1] ? __pfx_do_writepages+0x10/0x10 [ 1032.833966][ C1] __writeback_single_inode+0x164/0x1300 [ 1032.839596][ C1] ? find_held_lock+0x2b/0x80 [ 1032.844272][ C1] ? __pfx___writeback_single_inode+0x10/0x10 [ 1032.850335][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1032.855536][ C1] writeback_sb_inodes+0x766/0x1c50 [ 1032.860743][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1032.866400][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1032.871251][ C1] ? move_expired_inodes+0x5ea/0x8f0 [ 1032.876536][ C1] __writeback_inodes_wb+0xf8/0x2d0 [ 1032.881737][ C1] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1032.887540][ C1] ? queue_io+0x287/0x530 [ 1032.891865][ C1] wb_writeback+0x6f6/0xb50 [ 1032.896371][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 1032.901396][ C1] ? get_nr_inodes+0x100/0x150 [ 1032.906159][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.911353][ C1] wb_workfn+0x93f/0xc80 [ 1032.915597][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1032.921399][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 1032.926172][ C1] ? rcu_is_watching+0x12/0xc0 [ 1032.930935][ C1] process_one_work+0xa23/0x1940 [ 1032.935876][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1032.941245][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 1032.946007][ C1] worker_thread+0x5ef/0xe50 [ 1032.950595][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1032.955698][ C1] ? kthread+0x13a/0x450 [ 1032.959938][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1032.965040][ C1] kthread+0x370/0x450 [ 1032.969104][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.973694][ C1] ret_from_fork+0x72b/0xd50 [ 1032.978281][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.983389][ C1] ? __switch_to+0x800/0x10f0 [ 1032.988065][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.992657][ C1] ret_from_fork_asm+0x1a/0x30 [ 1032.997430][ C1]