last executing test programs: 1m56.845045252s ago: executing program 3 (id=2027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0x200040000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="040f6ac0b21a1ef35e3dc600d87e06d689dd9221ea0dd713bdb284e5bd6272a62b9ba8095b91bb4f0df653599c6937de0c84acfd180877b79ae46231ac69c05875c782ec2873", 0x46, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="ef110798a315a143e641a61a8693ece84fde6846bb3a272e6b66c5252c10c856517c0abf580702ddd49a4fbdcd1b96d92ce55c1b7907b29decc8df710733ee321ebbcfdda1af70d7d1ed1649fb35d946419d38420b0d51d7f2187f888fa829343e4eb3f8ba62fccbecd619397f2519ae8ac40be5282f11cb48dd7f82cbc81b825440dc302b0f534fcd9ffd0fce95d809f744e555ba", 0x95, r8) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000013c0)=0x22, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x5}, 0x4) (async) close(r9) 1m39.274413692s ago: executing program 3 (id=2027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0x200040000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="040f6ac0b21a1ef35e3dc600d87e06d689dd9221ea0dd713bdb284e5bd6272a62b9ba8095b91bb4f0df653599c6937de0c84acfd180877b79ae46231ac69c05875c782ec2873", 0x46, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="ef110798a315a143e641a61a8693ece84fde6846bb3a272e6b66c5252c10c856517c0abf580702ddd49a4fbdcd1b96d92ce55c1b7907b29decc8df710733ee321ebbcfdda1af70d7d1ed1649fb35d946419d38420b0d51d7f2187f888fa829343e4eb3f8ba62fccbecd619397f2519ae8ac40be5282f11cb48dd7f82cbc81b825440dc302b0f534fcd9ffd0fce95d809f744e555ba", 0x95, r8) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000013c0)=0x22, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x5}, 0x4) (async) close(r9) 1m25.119280652s ago: executing program 3 (id=2027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0x200040000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="040f6ac0b21a1ef35e3dc600d87e06d689dd9221ea0dd713bdb284e5bd6272a62b9ba8095b91bb4f0df653599c6937de0c84acfd180877b79ae46231ac69c05875c782ec2873", 0x46, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="ef110798a315a143e641a61a8693ece84fde6846bb3a272e6b66c5252c10c856517c0abf580702ddd49a4fbdcd1b96d92ce55c1b7907b29decc8df710733ee321ebbcfdda1af70d7d1ed1649fb35d946419d38420b0d51d7f2187f888fa829343e4eb3f8ba62fccbecd619397f2519ae8ac40be5282f11cb48dd7f82cbc81b825440dc302b0f534fcd9ffd0fce95d809f744e555ba", 0x95, r8) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000013c0)=0x22, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x5}, 0x4) (async) close(r9) 1m3.984670747s ago: executing program 3 (id=2027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0x200040000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="040f6ac0b21a1ef35e3dc600d87e06d689dd9221ea0dd713bdb284e5bd6272a62b9ba8095b91bb4f0df653599c6937de0c84acfd180877b79ae46231ac69c05875c782ec2873", 0x46, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="ef110798a315a143e641a61a8693ece84fde6846bb3a272e6b66c5252c10c856517c0abf580702ddd49a4fbdcd1b96d92ce55c1b7907b29decc8df710733ee321ebbcfdda1af70d7d1ed1649fb35d946419d38420b0d51d7f2187f888fa829343e4eb3f8ba62fccbecd619397f2519ae8ac40be5282f11cb48dd7f82cbc81b825440dc302b0f534fcd9ffd0fce95d809f744e555ba", 0x95, r8) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000013c0)=0x22, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x5}, 0x4) (async) close(r9) 46.511909122s ago: executing program 3 (id=2027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0x200040000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="040f6ac0b21a1ef35e3dc600d87e06d689dd9221ea0dd713bdb284e5bd6272a62b9ba8095b91bb4f0df653599c6937de0c84acfd180877b79ae46231ac69c05875c782ec2873", 0x46, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="ef110798a315a143e641a61a8693ece84fde6846bb3a272e6b66c5252c10c856517c0abf580702ddd49a4fbdcd1b96d92ce55c1b7907b29decc8df710733ee321ebbcfdda1af70d7d1ed1649fb35d946419d38420b0d51d7f2187f888fa829343e4eb3f8ba62fccbecd619397f2519ae8ac40be5282f11cb48dd7f82cbc81b825440dc302b0f534fcd9ffd0fce95d809f744e555ba", 0x95, r8) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000013c0)=0x22, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x5}, 0x4) (async) close(r9) 16.646487189s ago: executing program 3 (id=2027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0x200040000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r7 = add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="040f6ac0b21a1ef35e3dc600d87e06d689dd9221ea0dd713bdb284e5bd6272a62b9ba8095b91bb4f0df653599c6937de0c84acfd180877b79ae46231ac69c05875c782ec2873", 0x46, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r7) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="ef110798a315a143e641a61a8693ece84fde6846bb3a272e6b66c5252c10c856517c0abf580702ddd49a4fbdcd1b96d92ce55c1b7907b29decc8df710733ee321ebbcfdda1af70d7d1ed1649fb35d946419d38420b0d51d7f2187f888fa829343e4eb3f8ba62fccbecd619397f2519ae8ac40be5282f11cb48dd7f82cbc81b825440dc302b0f534fcd9ffd0fce95d809f744e555ba", 0x95, r8) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000013c0)=0x22, 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x5}, 0x4) (async) close(r9) 7.89709468s ago: executing program 2 (id=2557): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000127126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)={{0x12, 0x1, 0x250, 0x6, 0x9c, 0x4e, 0x8, 0x525, 0xa4a0, 0x3e5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x9, 0x40, 0xef, [{{0x9, 0x4, 0x8c, 0x0, 0x1, 0xe9, 0xd5, 0x1c, 0x3, [], [{{0x9, 0x5, 0x7, 0x17, 0x8, 0x1, 0x6, 0x59}}]}}]}}]}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) 5.539095223s ago: executing program 4 (id=2560): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6", 0xbd}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="00fbf00306799b2f10e45e4d3abe3cbb6a7e8a36b2a8d04ab9bd0a23114f3c94ae0171984cb2fc205d7b2e70a157c5799f85f4ef3dd1563d3032cd33d88ac4555f573a8a63057b6ad7e631057f4b3cc6546abc341cc311e4f1b380e6bc477b0cd075e9ba0d7e83df3e30c3a3a1355f55fec9d3324d08c0c91e925def7ae1089e63ae7392a1dc1669bafa0116c04acb33f53d5efd8e0223bc910637f0be2c3033f8ab6a8193a9c8f5aa2d60ad6b83cd0d434c9382430463b80e2bf3ea7245fea2019782035fd79db1b3ecaeeb400986e197f5f071e5cf5b411539deb9d6948e89a064430909000000f373ea7259456123"], 0xf0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x0, 0xa, 0x97, "b77e49994a66221ce88135c64af529d3775722eca4126ceb9fd59d285c924e901fd432f44d39175af992de38db9d34d22a38a87e765a7023ccf7388a7aac212f1629629e2dfb5d80c62f5e25f261a325dafa854d303b364085d5d41b179ec7515eef4b6759d1f9dd087e9534708a6be56d113df8c053e48bc45fd1472c7590aefac1e146e29a6c0504eec562afac09fffb6aa8ae8b89d5"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x7fff, 0xffff, 0x5, 0x1ba9, 0x6, 0x0, 0x5, 0xfffffffd, 0x1, 0x3ff, 0x3, 0x2}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0xfffff6fb}, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcefb, 0x40, 0x1, {0x22, 0xfc5}}}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180300000000000000000000002020207b0af8ff00000000bda100000000000057010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.367812657s ago: executing program 0 (id=2561): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x40850) 5.26268248s ago: executing program 0 (id=2562): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, r7, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r7, 0x4aeea000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x400001}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000140)=0x1e) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r8) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300020000004a6c634992a62e12a5f40bcb765aca01007af4ee572929793767e03381b8fdc03fab"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r8, 0x81, 0x3, &(0x7f0000000480)="610300") 4.907273695s ago: executing program 4 (id=2564): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000030007a0a00fe000000000f14000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2105bd901128c7e0ec82770c8204a1deeed415561752f708ccfbd80b2bd6c72652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec865e160000000000004c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed425454b9a70cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200"/2759], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.833256324s ago: executing program 4 (id=2566): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141400010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000890"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.253414392s ago: executing program 2 (id=2567): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x32314d59, 0x1, @discrete={0xe, 0x6}}) syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20"], 0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="14", 0x1}, {&(0x7f0000000380)="21c5741a6d8ef804a1c59b401e5990077d19e5fc59120021a7fe2f7902f131746373376ba35a950f8e92e27d9cfcb1c70192b2f0f670d8c724ab54024a15b2c0b88dd4561b4a5a343fa2fcaaf8e6756519d9aeb0308afab97ade71e4becb38f92af4becf714d58133961183c2f390796822160dcb995ee4f66ffb790bbd713cb3e7e55364d3acfa4919287b879cc97e36b9db8efd599cefe395dec0b60cef1db23ce85717867ee0065ccbb34b9", 0xad}, {0x0}, {&(0x7f0000000100)="704950359c7c82491496b5f5e34a553a93919d09ba7492710c0c4ec573", 0x1d}, {&(0x7f0000001300)="c77320d1673630e3b6aac4f6f30f8625ef6bf58ebcc7e776de861740fa967027721f7e6d9fa6c75b673d7fa3549c49b95507822749b08eff92977746512014394a495ab4fba2b053510061b51e6bb5a457bdb3e5882aea7778e05d8e3f8f124ea9c36b7a9c7c62e338dea60274586e1a562817171a4578751cc5c9697ddabf3a9ae1a63b708a321706074aee826db65e33b716d346099764493345173b2a0152e7", 0xa1}], 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.950927689s ago: executing program 0 (id=2568): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc0000000109021200010000000009"], 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)={0x40, 0x31, 0x76, {0x76, 0x5, "e140c0517daefd3c01ace4fff8b21878bd3d03f54fe0f06085e16c0d16aa7553a4dcad8291feb14c0680b49e0930ece1474efb891a1c9bcbb39401613bfb7b920615bf1dba7fadedab4a2fca34d37c9430261aa65e393666bc32a0e248a5d8fe175cdab8b96a103aae5c5b46daba010b1e5738a9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "4ec5d35f04b4aba9b1b1dee34c6de2616676ca5cf3ff6871d57a0078501765ebe1f0984bac360266edbaaab4d7307bf3b5dbb1d8d3450f1ad021fec3181c4c0828ddbb2ed08d854723"}}}, &(0x7f0000000240)={0x34, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1], &(0x7f0000000140)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0xbf, {0xbd, "ccf7dede5ac80d24609f4504926175492996e1eec079066bd527dc4d3a317fba87d2faee59f1c982c8b5ddbefeb470ddb65ee2bce866b9ed03950bac641e7d134f576e53d81cc4cab8638c4ffbf3944c6f03b9667efbdbd4c6e78cbac2f007744868130ee85b9eba455bd583f8723c3113cc17363673e447e6d77b127ca21e9ed71bd869db6ae3cc8b2d58a38c7d74e4316414392a931f1b3d1c16e7ba61438170c21f0ef494ed84688b07827c7a7a765d571ce719564f52591c4531be"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xdf}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000900)=ANY=[], 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x86}}) 3.950554057s ago: executing program 1 (id=2569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = semget$private(0x0, 0x0, 0x587) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r6], 0x108}}, 0x0) semop(r4, &(0x7f0000000240)=[{0x4, 0x4, 0x460f613af7347e4b}, {0x4, 0x0, 0x38c652153765b23a}], 0x2) close(0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r7]) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x4, 0x100000}, 0x20) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) 3.906687277s ago: executing program 1 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000079, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x61900, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10) faccessat(r3, &(0x7f0000000400)='./file0\x00', 0x1cc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1006, &(0x7f0000000880)=""/4102, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/347], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x2004810) 3.733062133s ago: executing program 4 (id=2571): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000079, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x61900, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10) faccessat(r3, &(0x7f0000000400)='./file0\x00', 0x1cc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d14"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1006, &(0x7f0000000880)=""/4102, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/349], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x2004810) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) 2.650556263s ago: executing program 1 (id=2572): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x40850) 2.577846574s ago: executing program 4 (id=2573): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) flock(r0, 0x2) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0xd385, 0x6, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000880)=@mgmt_frame=@probe_response={{{}, {0x4}, @device_a, @device_a, @from_mac=@device_b, {0x0, 0x30}}, 0x0, @default, 0x1, @val={0x0, 0xc, @random="a0c37d1328428475af645159"}, @void, @val={0x3, 0x1, 0x6a}, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x3, 0x0, {0x8, 0x803, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8, 0x1ff, 0x40}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x8}}, [{0xdd, 0xf3, "e58981adbb493c5789585557e89c6faabf78c33ea22db1f050f60b094d1d5855db6df0ce91ace82739fd5bd6962cbde4d7fb4040d0ebaf8beb11cc551c9316eb0e42e1f00887a37ec61cbc65bf183e92a6029e50c1895f3a9b2136308666f2ed2438ea15ce6c772a5a4f54962a5bbf13673aaa16b17e0e87a0c08ed96fb606e5da162fdd77423ed96e21ce117ad877ab12f73661b91ea409b6f3c09fbe38b0cf99283e63650c2073077681c009c2eef48ddddfcbd55675ef47f44244119fa6271a502e9fef63428b03bd206ad6ad55a8e45d972845472ae45c5287dce7b399119065811a2167e34bb18ecae8579b484bbe8dbf"}]}, 0x157) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='napi_poll\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @random="ca31b4a0213a", {0x0, 0x8}}, @random="a34f640c3b3d0d1fbce99b8f59d38a192665ca786f57b6b1b5d3f8233caf538281902184820a6cd21e9e17df5681b6b30fc885a3224519444b162ed0722029c4d81e588498acab45636b6c7364818872c95fbb33c50a9bef0f13f9241fe91497a34daadbe12d191c2c7fd1df39dd995b729665ac6020749a8d8c21ba575b8f089ebb3812be206e5cb6992e2105d570d852e69b04bc92b6aa95dfe41f56fc39ab8118b773911470ddb1927d5fae146ee4aca6e4b395511880b4d6d02b13d3e356d9a61d877c6e813501532c2be813d396f50c9c87fee69fb7d60fa34de2aaf84206af08fe62"}, 0xfd) 2.523707162s ago: executing program 0 (id=2574): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb02", 0xcb}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="00fbf00306799b2f10e45e4d3abe3cbb6a7e8a36b2a8d04ab9bd0a23114f3c94ae0171984cb2fc205d7b2e70a157c5799f85f4ef3dd1563d3032cd33d88ac4555f573a8a63057b6ad7e631057f4b3cc6546abc341cc311e4f1b380e6bc477b0cd075e9ba0d7e83df3e30c3a3a1355f55fec9d3324d08c0c91e925def7ae1089e63ae7392a1dc1669bafa0116c04acb33f53d5efd8e0223bc910637f0be2c3033f8ab6a8193a9c8f5aa2d60ad6b83cd0d434c9382430463b80e2bf3ea7245fea2019782035fd79db1b3ecaeeb400986e197f5f071e5cf5b411539deb9d6948e89a064430909000000f373ea7259456123"], 0xf0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x0, 0xa, 0x97, "b77e49994a66221ce88135c64af529d3775722eca4126ceb9fd59d285c924e901fd432f44d39175af992de38db9d34d22a38a87e765a7023ccf7388a7aac212f1629629e2dfb5d80c62f5e25f261a325dafa854d303b364085d5d41b179ec7515eef4b6759d1f9dd087e9534708a6be56d113df8c053e48bc45fd1472c7590aefac1e146e29a6c0504eec562afac09fffb6aa8ae8b89d5"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x7fff, 0xffff, 0x5, 0x1ba9, 0x6, 0x0, 0x5, 0xfffffffd, 0x1, 0x3ff, 0x3, 0x2}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0xfffff6fb}, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000c00)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcefb, 0x40, 0x1, {0x22, 0xfc5}}}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180300000000000000000000002020207b0af8ff00000000bda100000000000057010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.521698124s ago: executing program 1 (id=2575): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, r0, 0xffffffffffffffff, 0x4, 0x8, 0x2, "2bc830181b8ad5c610b0c58c7f7c281de1bfc4b59d8fd39edc7f4aa4786d921e4ab920d756997e44175ed0b931ad297f1bc3e0251666f4694be3208569bbfc", 0x17}, 0x60) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r3, r4, 0x0, 0x7) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x20040040) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000340)={0x2, 0x396348cc}) r8 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0xc) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) ioctl$VIDIOC_S_AUDOUT(r8, 0x40345632, &(0x7f00000003c0)={0x4, "919b04a8f109adaf2c4860e344f3b683b63a6ab4d6cb0909114c9a2fb8ba20c1", 0x3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x178}) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000440)={0x5, 0x1e, 0x3, 0x2, "44042a12ec3ad9a1d6ca4d10b9355b72c91e30c9ef51cfc0197f8ee0f86ce8df"}) ioctl(r3, 0x6, &(0x7f0000000480)="900ad03b7f8990bc0aaf0fba64afdeed9646ab28aba30191482d98e1d413fe45be4a314bb4ee60e8378c57ca855a78879d9c1d3d172aa4ad2f5d45e89137ef47e868c4ed925c88a8f3f8ecf2bea6d1ea61a47ec8c513639dd3d70ffcd4418b4abbdcff8a87f1c68a191915f11d359f791a90ca3dbf7355f46c209874b72fef7e9d40b1fe7793e4ecaf4f76ecc2e7125e499cb01828c1") syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000540)={0x2, 0x1, 0x1, 0xc, 0x3, 0x19, 0x3, "24d0986a64be4cf0240c1da7887ab68629bb1add", "eee82df669b23b81b11131f923e262d9c46c2f02"}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000580)) ioperm(0xffffffffffffffff, 0xfffffffffffffff9, 0x7) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f00000005c0)={0x0, 0x0, 0x102, 0x0, {0x401, 0x8, 0x5, 0x10}}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x50, r8, 0x10000000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000600)=0x4f) close_range(r9, r2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r6, 0x908, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xb1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x200d, 0x0) 2.515905229s ago: executing program 2 (id=2576): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x18000000}, 0x50) 2.428886976s ago: executing program 2 (id=2577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) sendfile(r1, 0xffffffffffffffff, 0x0, 0x50a) link(0x0, &(0x7f0000000100)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socket$kcm(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000180)}, 0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x3f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x3}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x4, @empty, 0x0, 0x800000}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) 2.375898324s ago: executing program 1 (id=2578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400"], 0xc8}, 0x1, 0x0, 0x600000000000000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) 1.480527243s ago: executing program 2 (id=2579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300fa08000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.477609682s ago: executing program 1 (id=2580): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0], 0x119) unshare(0x68040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x7, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x61, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x2000000000002}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121003, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x15, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000100), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x48000) ioctl$SG_GET_NUM_WAITING(r8, 0x227d, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000700)={{0xffffffffffffffff, 0x2, 0x8, 0x1, 0x1}, 0x4, 0xfffffffe, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x7, 0x2, 0x3}) 1.413508115s ago: executing program 0 (id=2581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = semget$private(0x0, 0x0, 0x587) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r6], 0x108}}, 0x0) semop(r4, &(0x7f0000000240)=[{0x4, 0x4, 0x460f613af7347e4b}, {0x4, 0x0, 0x38c652153765b23a}], 0x2) close(0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r7]) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x4, 0x100000}, 0x20) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) 1.262678198s ago: executing program 0 (id=2582): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000079, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x61900, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10) faccessat(r3, &(0x7f0000000400)='./file0\x00', 0x1cc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1006, &(0x7f0000000880)=""/4102, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/347], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x2004810) 641.131628ms ago: executing program 4 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000000000000079, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x61900, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10) faccessat(r3, &(0x7f0000000400)='./file0\x00', 0x1cc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1006, &(0x7f0000000880)=""/4102, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/349], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x2004810) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) 0s ago: executing program 2 (id=2584): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc0000000109021200010000000009"], 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f00000001c0)={0x40, 0x31, 0x76, {0x76, 0x5, "e140c0517daefd3c01ace4fff8b21878bd3d03f54fe0f06085e16c0d16aa7553a4dcad8291feb14c0680b49e0930ece1474efb891a1c9bcbb39401613bfb7b920615bf1dba7fadedab4a2fca34d37c9430261aa65e393666bc32a0e248a5d8fe175cdab8b96a103aae5c5b46daba010b1e5738a9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "4ec5d35f04b4aba9b1b1dee34c6de2616676ca5cf3ff6871d57a0078501765ebe1f0984bac360266edbaaab4d7307bf3b5dbb1d8d3450f1ad021fec3181c4c0828ddbb2ed08d854723"}}}, &(0x7f0000000240)={0x34, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1], &(0x7f0000000140)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0xbf, {0xbd, "ccf7dede5ac80d24609f4504926175492996e1eec079066bd527dc4d3a317fba87d2faee59f1c982c8b5ddbefeb470ddb65ee2bce866b9ed03950bac641e7d134f576e53d81cc4cab8638c4ffbf3944c6f03b9667efbdbd4c6e78cbac2f007744868130ee85b9eba455bd583f8723c3113cc17363673e447e6d77b127ca21e9ed71bd869db6ae3cc8b2d58a38c7d74e4316414392a931f1b3d1c16e7ba61438170c21f0ef494ed84688b07827c7a7a765d571ce719564f52591c4531be"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xdf}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000900)=ANY=[], 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x86}}) kernel console output (not intermixed with test programs): ile querying for an remote control event. [ 669.333987][ T5868] m920x_read = error: -19 [ 669.882278][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 669.921871][T13333] No such timeout policy "syz1" [ 670.050359][ T5839] m920x_read = error: -19 [ 670.054736][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 670.165261][T13354] overlayfs: failed to clone upperpath [ 670.191426][T13355] netlink: 'syz.0.2058': attribute type 32 has an invalid length. [ 670.207038][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 670.218513][T13355] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 670.250665][ T5839] m920x_read = error: -19 [ 670.255236][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 670.297944][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.319523][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.343820][T13259] bridge_slave_0: entered allmulticast mode [ 670.359845][T13259] bridge_slave_0: entered promiscuous mode [ 670.395748][ T6695] hsr_slave_0: left promiscuous mode [ 670.405612][ T6695] hsr_slave_1: left promiscuous mode [ 670.421781][ T5839] m920x_read = error: -19 [ 670.426211][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 670.444513][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.462627][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.476961][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.484864][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.538152][ T6695] veth1_macvtap: left promiscuous mode [ 670.546620][ T6695] veth0_macvtap: left promiscuous mode [ 670.558657][ T6695] veth1_vlan: left promiscuous mode [ 670.565550][ T6695] veth0_vlan: left promiscuous mode [ 670.620477][ T5839] m920x_read = error: -19 [ 670.625664][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 670.800438][ T5839] m920x_read = error: -19 [ 670.804805][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 670.920811][T13260] Bluetooth: hci3: command tx timeout [ 671.291787][ T5839] m920x_read = error: -19 [ 671.299946][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 671.608424][ T5839] m920x_read = error: -19 [ 671.625959][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 672.130730][ T5839] m920x_read = error: -19 [ 672.139307][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 672.791563][T13395] netlink: 'syz.4.2069': attribute type 32 has an invalid length. [ 672.800926][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 672.875042][ T5839] m920x_read = error: -19 [ 672.882831][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 673.000769][T13260] Bluetooth: hci3: command tx timeout [ 673.050359][ T5839] m920x_read = error: -19 [ 673.054738][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 673.191414][T13408] netlink: 'syz.0.2072': attribute type 1 has an invalid length. [ 673.221986][ T5839] m920x_read = error: -19 [ 673.244560][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 673.889603][ T6695] team0 (unregistering): Port device team_slave_1 removed [ 673.934199][ T6695] team0 (unregistering): Port device team_slave_0 removed [ 673.981229][ T5839] m920x_read = error: -19 [ 673.987978][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 674.040725][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2077'. [ 674.160388][ T5839] m920x_read = error: -19 [ 674.167281][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 674.275849][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.283493][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.290952][T13259] bridge_slave_1: entered allmulticast mode [ 674.297876][T13259] bridge_slave_1: entered promiscuous mode [ 674.316961][T13395] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 674.336130][T13395] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 674.340502][ T5839] m920x_read = error: -19 [ 674.367380][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 674.377111][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.406157][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.425773][ T30] audit: type=1800 audit(1747668100.992:2430): pid=13425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2078" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 674.527278][T13259] team0: Port device team_slave_0 added [ 674.541086][ T5839] m920x_read = error: -19 [ 674.545737][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 674.642795][T13259] team0: Port device team_slave_1 added [ 674.692962][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.720651][ T5839] m920x_read = error: -19 [ 674.725417][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 674.787441][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.970303][ T5839] m920x_read = error: -19 [ 675.165880][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 675.174631][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.201119][ T6695] IPVS: stop unused estimator thread 0... [ 675.237879][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.239537][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2081'. [ 675.259557][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.287274][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.330637][ T5839] m920x_read = error: -19 [ 675.335441][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 675.351812][T13259] hsr_slave_0: entered promiscuous mode [ 675.357950][T13259] hsr_slave_1: entered promiscuous mode [ 675.365137][T13259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.376999][T13259] Cannot create hsr debugfs directory [ 675.500527][ T5839] m920x_read = error: -19 [ 675.504908][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 676.771662][ T5839] m920x_read = error: -19 [ 676.776040][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 676.944580][ T5839] m920x_read = error: -19 [ 676.958591][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 676.976490][T13461] netlink: 'syz.1.2088': attribute type 32 has an invalid length. [ 676.987997][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 677.022753][T13461] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 677.223397][ T5839] m920x_read = error: -19 [ 677.230065][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 677.335638][T13471] overlayfs: failed to clone upperpath [ 677.390369][ T5839] m920x_read = error: -19 [ 677.404193][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 677.448478][T13259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 677.466656][T13259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 677.483097][T13259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 677.494582][T13259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.533821][T13485] tipc: Started in network mode [ 677.538767][T13485] tipc: Node identity ac14140f, cluster identity 4711 [ 677.547118][T13485] tipc: New replicast peer: 255.255.255.255 [ 677.555210][T13485] tipc: Enabled bearer , priority 10 [ 677.565130][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 677.580514][ T5839] m920x_read = error: -19 [ 677.587031][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 677.636892][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.658394][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.674993][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.682178][ T6695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.706377][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.713587][ T6694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.760997][ T5839] m920x_read = error: -19 [ 677.769721][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 677.950297][ T5839] m920x_read = error: -19 [ 677.957232][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 677.996477][ T30] audit: type=1400 audit(1747668104.562:2431): avc: denied { map } for pid=13490 comm="syz.0.2095" path="socket:[38977]" dev="sockfs" ino=38977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 678.115057][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.191028][T13259] veth0_vlan: entered promiscuous mode [ 678.230569][ T5839] m920x_read = error: -19 [ 678.235369][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 678.242260][T13259] veth1_vlan: entered promiscuous mode [ 678.291766][T13259] veth0_macvtap: entered promiscuous mode [ 678.432920][ T5839] m920x_read = error: -19 [ 678.438200][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 679.079767][ T5839] m920x_read = error: -19 [ 679.089468][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 679.099609][ T5913] tipc: Node number set to 2886997007 [ 679.119833][T13259] veth1_macvtap: entered promiscuous mode [ 679.536156][T13509] netlink: 'syz.1.2100': attribute type 32 has an invalid length. [ 679.557954][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 679.635794][T13509] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 679.732179][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.780350][ T5913] m920x_read = error: -19 [ 679.785034][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 679.797066][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.838927][T13259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.857795][T13259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.876208][T13259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.032909][ T5913] m920x_read = error: -19 [ 680.037592][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 680.048790][T13259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.780294][ T5913] m920x_read = error: -19 [ 680.784676][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 680.973657][ T5913] m920x_read = error: -19 [ 680.978185][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 681.582029][ T5913] m920x_read = error: -19 [ 681.586413][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 681.612922][ T6694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.627623][ T6694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.692411][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.699708][T13547] xt_CT: No such helper "syz1" [ 681.709018][T13547] netlink: 'syz.4.2111': attribute type 5 has an invalid length. [ 681.712398][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.733337][T13550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 681.744183][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2110'. [ 681.760302][ T5913] m920x_read = error: -19 [ 681.765775][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 681.773853][T13550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 681.789490][ T30] audit: type=1326 audit(1747668108.342:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.1.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7fc00000 [ 681.831406][T13550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'. [ 681.877367][ T30] audit: type=1400 audit(1747668108.442:2433): avc: denied { mounton } for pid=13259 comm="syz-executor" path="/root/syzkaller.Pg6j03/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 681.925744][T13556] tipc: Started in network mode [ 681.928154][ T30] audit: type=1400 audit(1747668108.492:2434): avc: denied { mounton } for pid=13259 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 681.956075][ T5839] m920x_read = error: -19 [ 681.960683][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 681.968783][T13556] tipc: Node identity ac14140f, cluster identity 4711 [ 681.977408][T13556] tipc: New replicast peer: 255.255.255.255 [ 681.984266][T13556] tipc: Enabled bearer , priority 10 [ 681.991676][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2113'. [ 682.133355][ T5839] m920x_read = error: -19 [ 682.137705][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 682.562292][ T5839] m920x_read = error: -19 [ 682.596811][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 682.953605][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 682.992829][ T5839] m920x_read = error: -19 [ 683.010793][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 683.102077][ T5839] tipc: Node number set to 2886997007 [ 683.127958][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.136405][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.146572][T13572] bridge0: entered allmulticast mode [ 683.168888][T13572] bridge_slave_1: left allmulticast mode [ 683.180376][ T5839] m920x_read = error: -19 [ 683.187850][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 683.195639][T13572] bridge_slave_1: left promiscuous mode [ 683.195850][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.211513][T13572] bridge_slave_0: left allmulticast mode [ 683.222322][T13572] bridge_slave_0: left promiscuous mode [ 683.228163][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.360317][ T5839] m920x_read = error: -19 [ 683.364764][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 684.068770][ T5839] m920x_read = error: -19 [ 684.080668][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 684.185471][T13583] 9pnet_fd: Insufficient options for proto=fd [ 684.240737][ T5868] m920x_read = error: -19 [ 684.245112][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 684.410359][ T5868] m920x_read = error: -19 [ 684.414811][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 684.580286][ T5868] m920x_read = error: -19 [ 684.584652][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 684.748916][ T5868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5868 comm=kworker/1:4 [ 684.765544][ T5839] m920x_read = error: -19 [ 684.773584][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 684.784839][T13594] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 685.014492][ T5839] m920x_read = error: -19 [ 685.019240][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 685.076860][ T30] audit: type=1326 audit(1747668111.642:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 685.431217][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.437630][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.545732][ T5839] m920x_read = error: -19 [ 685.556509][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 685.833360][ T5839] m920x_read = error: -19 [ 685.838018][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 686.003125][ T5839] m920x_read = error: -19 [ 686.007502][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 686.137525][T13623] can: request_module (can-proto-0) failed. [ 686.251381][ T1202] m920x_read = error: -19 [ 686.255730][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 686.369307][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.450345][ T1202] m920x_read = error: -19 [ 686.454724][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 686.481729][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.545545][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 686.555207][T13635] overlayfs: missing 'lowerdir' [ 686.615799][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.630317][ T5839] m920x_read = error: -19 [ 686.634700][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 686.803955][ T5839] m920x_read = error: -19 [ 686.814310][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 686.836752][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.867571][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.880011][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.893667][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.904027][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.916509][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.972438][T13646] lo speed is unknown, defaulting to 1000 [ 687.010379][ T1202] m920x_read = error: -19 [ 687.014833][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 687.023305][ T36] bridge_slave_1: left allmulticast mode [ 687.029050][ T36] bridge_slave_1: left promiscuous mode [ 687.041021][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.056501][ T36] bridge_slave_0: left allmulticast mode [ 687.063806][ T36] bridge_slave_0: left promiscuous mode [ 687.069613][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.200353][ T1202] m920x_read = error: -19 [ 687.205086][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 687.747542][ T30] audit: type=1326 audit(1747668114.292:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1618e969 code=0x7fc00000 [ 687.789590][ T1202] m920x_read = error: -19 [ 687.805870][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 687.835655][T13654] 9pnet_fd: Insufficient options for proto=fd [ 688.017864][ T1202] m920x_read = error: -19 [ 688.027657][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 688.222369][ T1202] m920x_read = error: -19 [ 688.226750][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 688.544699][ T1202] m920x_read = error: -19 [ 688.549520][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 688.743593][ T5839] m920x_read = error: -19 [ 688.748075][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 688.797153][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.810536][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.825454][ T36] bond0 (unregistering): Released all slaves [ 688.923643][ T1202] m920x_read = error: -19 [ 688.928019][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 689.003913][T13260] Bluetooth: hci3: command tx timeout [ 689.102395][ T1202] m920x_read = error: -19 [ 689.143519][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 689.330368][ T5839] m920x_read = error: -19 [ 689.343708][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 689.444385][T13646] chnl_net:caif_netlink_parms(): no params data found [ 689.501813][ T36] hsr_slave_0: left promiscuous mode [ 689.507804][ T36] hsr_slave_1: left promiscuous mode [ 689.514123][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.521792][ T5839] m920x_read = error: -19 [ 689.526125][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 689.534245][T13692] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2151'. [ 689.536221][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.551341][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.558807][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.578224][ T36] veth1_macvtap: left promiscuous mode [ 689.584111][ T36] veth0_macvtap: left promiscuous mode [ 689.589732][ T36] veth1_vlan: left promiscuous mode [ 689.595218][ T36] veth0_vlan: left promiscuous mode [ 689.702372][ T5839] m920x_read = error: -19 [ 689.706723][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 689.870535][ T5839] m920x_read = error: -19 [ 689.881758][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 689.976629][ T36] team0 (unregistering): Port device team_slave_1 removed [ 690.009331][ T36] team0 (unregistering): Port device team_slave_0 removed [ 690.050599][ T5839] m920x_read = error: -19 [ 690.055064][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 690.164199][ T30] audit: type=1326 audit(1747668116.712:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7fc00000 [ 690.224450][ T5839] m920x_read = error: -19 [ 690.242665][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 690.422414][ T5839] m920x_read = error: -19 [ 690.426775][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 690.610342][ T5868] m920x_read = error: -19 [ 690.614738][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 691.150737][T13260] Bluetooth: hci3: command tx timeout [ 691.161470][ T30] audit: type=1326 audit(1747668117.722:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13694 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 691.187019][ T5839] m920x_read = error: -19 [ 691.194631][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 691.309518][ T30] audit: type=1400 audit(1747668117.872:2439): avc: denied { watch } for pid=13718 comm="syz.2.2158" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 691.442827][ T1202] m920x_read = error: -19 [ 691.450558][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 691.616363][ T1202] m920x_read = error: -19 [ 692.061391][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 692.409748][ T5839] m920x_read = error: -19 [ 692.905212][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 693.160443][T13260] Bluetooth: hci3: command tx timeout [ 693.179380][ T1202] m920x_read = error: -19 [ 693.184484][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 693.239980][T13723] tipc: Enabling of bearer rejected, already enabled [ 694.189705][ T1202] m920x_read = error: -19 [ 694.194326][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 694.266727][ T30] audit: type=1326 audit(1747668120.832:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x0 [ 694.302099][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.322330][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.339375][T13646] bridge_slave_0: entered allmulticast mode [ 694.355127][T13646] bridge_slave_0: entered promiscuous mode [ 694.360378][ T1202] m920x_read = error: -19 [ 694.363405][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.366137][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 694.372577][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.372720][T13646] bridge_slave_1: entered allmulticast mode [ 694.374425][T13646] bridge_slave_1: entered promiscuous mode [ 694.455601][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.478104][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.523022][T13646] team0: Port device team_slave_0 added [ 694.544697][T13646] team0: Port device team_slave_1 added [ 694.570445][ T1202] m920x_read = error: -19 [ 694.574838][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 694.585349][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.594391][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.624572][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.639002][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.648135][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.675121][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.764083][ T1202] m920x_read = error: -19 [ 694.768480][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 694.817581][T13646] hsr_slave_0: entered promiscuous mode [ 694.825337][T13646] hsr_slave_1: entered promiscuous mode [ 694.837409][T13646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.848368][T13646] Cannot create hsr debugfs directory [ 694.931777][ T1202] m920x_read = error: -19 [ 694.936116][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 695.086449][ T30] audit: type=1326 audit(1747668121.652:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799698e969 code=0x7fc00000 [ 695.124247][ T1202] m920x_read = error: -19 [ 695.129181][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 695.191967][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.230100][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 695.239879][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 695.248976][T13260] Bluetooth: hci3: command tx timeout [ 695.262148][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.283537][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 695.290271][ T1202] m920x_read = error: -19 [ 695.306986][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 695.327476][T13762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.379829][T13646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 695.397158][T13646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 695.408223][T13646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 695.417176][T13646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 695.477066][T13646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.481023][ T5839] m920x_read = error: -19 [ 695.494473][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 695.502483][T13646] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.514480][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.521600][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.536438][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.543553][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.660537][ T5839] m920x_read = error: -19 [ 695.664904][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 695.705546][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.742432][T13646] veth0_vlan: entered promiscuous mode [ 695.753628][ T30] audit: type=1326 audit(1747668122.322:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.4.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1618e969 code=0x7fc00000 [ 695.779057][T13646] veth1_vlan: entered promiscuous mode [ 695.808561][T13646] veth0_macvtap: entered promiscuous mode [ 695.825021][T13646] veth1_macvtap: entered promiscuous mode [ 695.831965][ T5839] m920x_read = error: -19 [ 695.836308][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 695.857528][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.881758][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.894239][T13646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.903562][T13646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.912465][T13646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.921298][T13646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.985032][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 696.446312][ T5839] m920x_read = error: -19 [ 696.452699][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 696.627895][ T1202] m920x_read = error: -19 [ 696.638675][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 696.676380][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.223097][ T1202] m920x_read = error: -19 [ 697.223250][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.227476][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 697.437601][ T1202] m920x_read = error: -19 [ 697.446907][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 697.477383][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.664192][ T5839] m920x_read = error: -19 [ 697.948016][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.972185][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 697.985206][ T30] audit: type=1400 audit(1747668124.552:2443): avc: denied { mount } for pid=13784 comm="syz.1.2177" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 698.170422][ T1202] m920x_read = error: -19 [ 698.174829][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 698.263684][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 698.273655][T13800] 9pnet_fd: Insufficient options for proto=fd [ 698.373541][ T1202] m920x_read = error: -19 [ 698.377920][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 698.474223][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2179'. [ 698.512445][T13801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'. [ 698.540528][ T5839] m920x_read = error: -19 [ 698.544953][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 698.560424][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2179'. [ 698.576313][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2179'. [ 698.710306][ T5839] m920x_read = error: -19 [ 698.714742][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 698.890624][ T5839] m920x_read = error: -19 [ 698.924100][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 699.065134][ T30] audit: type=1326 audit(1747668125.632:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="syz.4.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1618e969 code=0x7fc00000 [ 699.129705][ T5839] m920x_read = error: -19 [ 699.160584][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 699.320393][ T5839] m920x_read = error: -19 [ 699.325249][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 699.812902][ T30] audit: type=1326 audit(1747668126.372:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13808 comm="syz.2.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 699.936609][ T5839] m920x_read = error: -19 [ 699.948621][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 700.300646][ T5839] m920x_read = error: -19 [ 700.305030][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 700.379131][T13828] netlink: 'syz.0.2190': attribute type 32 has an invalid length. [ 700.388258][T13829] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2189'. [ 700.431187][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2190'. [ 700.455247][T13828] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 700.627303][ T5839] m920x_read = error: -19 [ 700.631818][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 700.790836][ T1202] m920x_read = error: -19 [ 700.798569][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 701.345935][ T1202] m920x_read = error: -19 [ 701.350429][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 701.811585][ T1202] m920x_read = error: -19 [ 701.816013][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 701.980397][ T1202] m920x_read = error: -19 [ 701.985041][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 702.207429][ T1202] m920x_read = error: -19 [ 702.212555][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 702.480474][ T5839] m920x_read = error: -19 [ 702.491729][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 702.741518][ T5839] m920x_read = error: -19 [ 702.766739][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 703.362116][ T30] audit: type=1326 audit(1747668129.932:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13854 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7fc00000 [ 703.387471][ T5839] m920x_read = error: -19 [ 703.395185][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 703.450107][T13862] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 703.510843][T13862] overlay: ./file0 is not a directory [ 703.525495][ T971] kernel write not supported for file bpf-map (pid: 971 comm: kworker/0:2) [ 703.584764][ T5839] m920x_read = error: -19 [ 703.589344][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 703.637477][ T30] audit: type=1400 audit(1747668130.202:2447): avc: denied { listen } for pid=13863 comm="syz.4.2202" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 703.726580][T13875] netlink: 'syz.1.2205': attribute type 32 has an invalid length. [ 703.737806][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 703.760294][ T5839] m920x_read = error: -19 [ 703.764664][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 703.823216][ T3479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.864678][T13875] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 703.930333][ T5839] m920x_read = error: -19 [ 703.935304][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 704.045261][ T3479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.110340][ T5868] m920x_read = error: -19 [ 704.114842][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 704.148451][ T5839] libceph: connect (1)[c::]:6789 error -13 [ 704.174898][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 704.209059][T13891] ceph: No mds server is up or the cluster is laggy [ 704.243711][ T3479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.310576][ T5839] m920x_read = error: -19 [ 704.321575][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 704.510304][ T5839] m920x_read = error: -19 [ 704.514791][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 704.572279][T13902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2212'. [ 704.757105][ T5839] m920x_read = error: -19 [ 704.788666][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 704.829179][ T3479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.070546][ T5839] m920x_read = error: -19 [ 705.075076][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 705.121685][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.151744][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.162455][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.173156][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.173463][ T3479] bridge_slave_1: left allmulticast mode [ 705.195302][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 705.198304][ T3479] bridge_slave_1: left promiscuous mode [ 705.212707][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.246646][T13913] sctp: [Deprecated]: syz.1.2214 (pid 13913) Use of int in max_burst socket option. [ 705.246646][T13913] Use struct sctp_assoc_value instead [ 705.270593][ T3479] bridge_slave_0: left allmulticast mode [ 705.276320][ T3479] bridge_slave_0: left promiscuous mode [ 705.328373][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.338013][ T1202] m920x_read = error: -19 [ 705.342525][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 705.397345][T13922] x_tables: duplicate underflow at hook 2 [ 705.510335][ T1202] m920x_read = error: -19 [ 705.514797][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 705.556677][T13928] netlink: 'syz.0.2219': attribute type 32 has an invalid length. [ 705.572255][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 705.690277][ T1202] m920x_read = error: -19 [ 705.694709][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 705.776543][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.787589][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.797374][ T3479] bond0 (unregistering): Released all slaves [ 705.817086][T13928] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 705.860539][ T5839] m920x_read = error: -19 [ 705.879778][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 705.892925][T13909] lo speed is unknown, defaulting to 1000 [ 706.080418][ T5839] m920x_read = error: -19 [ 706.085330][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 706.251939][ T3479] hsr_slave_0: left promiscuous mode [ 706.258265][ T3479] hsr_slave_1: left promiscuous mode [ 706.264849][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.272477][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.304659][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.318227][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.378295][ T3479] veth1_macvtap: left promiscuous mode [ 706.388189][ T5839] m920x_read = error: -19 [ 706.393855][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 706.402136][ T3479] veth0_macvtap: left promiscuous mode [ 706.407718][ T3479] veth1_vlan: left promiscuous mode [ 706.431243][ T3479] veth0_vlan: left promiscuous mode [ 707.155965][ T5839] m920x_read = error: -19 [ 707.165662][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 707.240407][ T5825] Bluetooth: hci3: command tx timeout [ 707.325753][T13951] xt_cluster: node mask cannot exceed total number of nodes [ 707.334677][ T5839] m920x_read = error: -19 [ 707.339035][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 707.500294][ T5839] m920x_read = error: -19 [ 707.506372][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 707.983956][ T5839] m920x_read = error: -19 [ 707.988433][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 708.150421][ T5839] m920x_read = error: -19 [ 708.154907][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 708.330548][ T5839] m920x_read = error: -19 [ 708.334922][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 708.567477][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2230'. [ 708.570307][ T5839] m920x_read = error: -19 [ 708.592050][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 708.606527][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 708.611233][T13977] netlink: 'syz.4.2232': attribute type 32 has an invalid length. [ 708.640986][ T30] audit: type=1400 audit(1747668135.202:2448): avc: denied { setopt } for pid=13967 comm="syz.1.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 708.663545][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 708.674369][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 708.752083][ T5839] m920x_read = error: -19 [ 708.756462][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 708.921169][ T5839] m920x_read = error: -19 [ 708.925543][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 709.060800][T13977] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 709.092688][ T5839] m920x_read = error: -19 [ 709.118360][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 709.290356][ T5868] m920x_read = error: -19 [ 709.294883][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 709.320370][ T5825] Bluetooth: hci3: command tx timeout [ 709.328863][T13909] chnl_net:caif_netlink_parms(): no params data found [ 709.854908][ T5868] m920x_read = error: -19 [ 709.859288][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 709.882827][T13909] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.890098][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.897880][T13909] bridge_slave_0: entered allmulticast mode [ 709.905488][T13909] bridge_slave_0: entered promiscuous mode [ 709.929121][T13909] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.940523][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.947853][T13909] bridge_slave_1: entered allmulticast mode [ 709.959261][T13909] bridge_slave_1: entered promiscuous mode [ 710.089146][ T1202] m920x_read = error: -19 [ 710.093593][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 710.152983][T13909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.260416][ T5868] m920x_read = error: -19 [ 710.267931][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 710.530668][ T5868] m920x_read = error: -19 [ 710.547917][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 710.567070][T13909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.627181][T13909] team0: Port device team_slave_0 added [ 710.644770][T13909] team0: Port device team_slave_1 added [ 710.745420][ T5868] m920x_read = error: -19 [ 710.750887][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 711.238451][T13909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.247094][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.298839][T13909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.353096][T13909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.361885][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.398766][T13909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.420250][ T5825] Bluetooth: hci3: command tx timeout [ 711.462994][ T5868] m920x_read = error: -19 [ 711.467370][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 711.504722][T13909] hsr_slave_0: entered promiscuous mode [ 711.511344][T13909] hsr_slave_1: entered promiscuous mode [ 711.517522][T13909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.526491][T13909] Cannot create hsr debugfs directory [ 711.631117][ T5868] m920x_read = error: -19 [ 711.635536][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 711.800685][ T5868] m920x_read = error: -19 [ 711.808339][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 711.828945][T13909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 711.839234][T13909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 711.848269][T13909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 711.860484][T13909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 711.914089][T13909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.935087][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.947417][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.954614][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.968011][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.975162][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.982661][ T1202] m920x_read = error: -19 [ 711.987020][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 712.150276][ T5868] m920x_read = error: -19 [ 712.154660][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 712.330482][ T5868] m920x_read = error: -19 [ 712.334863][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 712.375197][T13909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.414277][T13909] veth0_vlan: entered promiscuous mode [ 712.516678][T14033] netlink: 'syz.0.2245': attribute type 32 has an invalid length. [ 712.525702][ T5868] m920x_read = error: -19 [ 712.530053][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 712.539807][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 712.559479][T14033] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 712.878712][ T5868] m920x_read = error: -19 [ 712.885260][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 713.021146][T13909] veth1_vlan: entered promiscuous mode [ 713.050737][ T5868] m920x_read = error: -19 [ 713.056632][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 713.068314][T13909] veth0_macvtap: entered promiscuous mode [ 713.078693][T13909] veth1_macvtap: entered promiscuous mode [ 713.089725][T14045] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 713.101569][T13909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.119965][T13909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.133915][T14045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.145792][T13909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.159190][T13909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.168487][T13909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.181561][T13909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.230307][ T5868] m920x_read = error: -19 [ 713.235371][T14045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.245539][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 713.364471][ T6695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.385150][ T6695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.480980][ T5825] Bluetooth: hci3: command tx timeout [ 713.515789][ T1202] m920x_read = error: -19 [ 713.520724][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 713.551545][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.569691][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.086392][ T5868] m920x_read = error: -19 [ 714.106249][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 714.390277][ T5868] m920x_read = error: -19 [ 714.394762][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 715.156687][ T5868] m920x_read = error: -19 [ 715.206163][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 715.400708][ T5868] m920x_read = error: -19 [ 715.405467][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 715.947538][ T5868] m920x_read = error: -19 [ 715.957255][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 716.089157][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2254'. [ 716.118210][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2254'. [ 716.230617][ T5868] m920x_read = error: -19 [ 716.235318][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 716.874080][ T5868] m920x_read = error: -19 [ 716.878460][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 717.050746][ T5868] m920x_read = error: -19 [ 717.074328][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 717.260370][ T5839] m920x_read = error: -19 [ 717.264815][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 717.281370][T14086] tipc: Enabled bearer , priority 0 [ 717.440244][ T5839] m920x_read = error: -19 [ 717.909964][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 717.959354][ T3527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.081338][ T5868] m920x_read = error: -19 [ 718.086243][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 718.250587][ T5868] m920x_read = error: -19 [ 718.254945][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 718.402077][ T5871] tipc: Node number set to 2886997007 [ 718.422050][ T5868] m920x_read = error: -19 [ 718.426431][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 718.591669][ T5868] m920x_read = error: -19 [ 718.596033][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 718.777031][ T5868] m920x_read = error: -19 [ 718.786695][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 719.075923][ T5868] m920x_read = error: -19 [ 719.083784][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 719.523712][ T5868] m920x_read = error: -19 [ 719.530849][ T3527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.537210][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 719.789319][ T5839] m920x_read = error: -19 [ 719.796988][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 720.027304][ T5839] m920x_read = error: -19 [ 720.032316][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 720.065535][T13260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 720.077639][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 720.088103][T13260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 720.536961][ T5868] m920x_read = error: -19 [ 720.544780][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 720.562650][T13260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 720.571891][T13260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 720.579472][T13260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 720.606415][ T3527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.666608][T14116] lo speed is unknown, defaulting to 1000 [ 720.720773][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'. [ 720.737823][ T3527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.778058][T14127] 9pnet_fd: Insufficient options for proto=fd [ 720.786747][T14127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26145 sclass=netlink_route_socket pid=14127 comm=syz.4.2270 [ 720.802854][ T5868] m920x_read = error: -19 [ 720.807218][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 720.822549][T14123] lo speed is unknown, defaulting to 1000 [ 720.970261][ T5868] m920x_read = error: -19 [ 720.974639][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 721.187713][ T5868] m920x_read = error: -19 [ 721.192498][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 721.237064][ T3527] bridge_slave_1: left allmulticast mode [ 721.244222][ T3527] bridge_slave_1: left promiscuous mode [ 721.250056][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.262167][ T3527] bridge_slave_0: left allmulticast mode [ 722.161486][ T5868] m920x_read = error: -19 [ 722.165926][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 722.173940][ T3527] bridge_slave_0: left promiscuous mode [ 722.180351][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.387779][ T5868] m920x_read = error: -19 [ 722.392249][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 722.563592][ T1202] m920x_read = error: -19 [ 722.568177][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 722.602412][T13260] Bluetooth: hci3: command tx timeout [ 722.753444][ T1202] m920x_read = error: -19 [ 722.757820][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 722.930325][ T1202] m920x_read = error: -19 [ 722.934704][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 723.044711][ T30] audit: type=1400 audit(1747668149.572:2449): avc: denied { connect } for pid=14160 comm="syz.4.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 723.188075][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.198326][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.208455][ T3527] bond0 (unregistering): Released all slaves [ 723.220678][ T1202] m920x_read = error: -19 [ 723.225074][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 723.279273][T14150] tipc: Enabling of bearer rejected, already enabled [ 723.287375][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 723.341837][T14155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2282'. [ 723.398186][ T1202] m920x_read = error: -19 [ 723.413102][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 724.077280][T14116] chnl_net:caif_netlink_parms(): no params data found [ 724.240262][ T1202] m920x_read = error: -19 [ 724.249232][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 724.430953][ T1202] m920x_read = error: -19 [ 724.523978][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 724.691341][T13260] Bluetooth: hci3: command tx timeout [ 724.799534][ T1202] m920x_read = error: -19 [ 724.803989][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 724.984220][ T1202] m920x_read = error: -19 [ 724.988579][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 725.170420][ T1202] m920x_read = error: -19 [ 725.174782][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 725.183287][T14194] lo speed is unknown, defaulting to 1000 [ 725.184072][T14116] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.198217][T14116] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.207448][T14116] bridge_slave_0: entered allmulticast mode [ 725.215699][T14116] bridge_slave_0: entered promiscuous mode [ 725.227389][T14116] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.235290][T14116] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.243178][T14116] bridge_slave_1: entered allmulticast mode [ 725.251629][T14116] bridge_slave_1: entered promiscuous mode [ 725.268085][ T3527] hsr_slave_0: left promiscuous mode [ 725.278594][ T3527] hsr_slave_1: left promiscuous mode [ 725.284698][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.292613][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.304933][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.313806][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.338770][ T3527] veth1_macvtap: left promiscuous mode [ 725.345308][ T1202] m920x_read = error: -19 [ 725.349631][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 725.359330][ T3527] veth0_macvtap: left promiscuous mode [ 725.365609][ T3527] veth1_vlan: left promiscuous mode [ 725.373284][ T3527] veth0_vlan: left promiscuous mode [ 725.530692][ T1202] m920x_read = error: -19 [ 725.535957][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 725.780623][ T1202] m920x_read = error: -19 [ 725.784977][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 726.050960][ T1202] m920x_read = error: -19 [ 726.061867][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 726.086652][T14210] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2297'. [ 726.214043][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 726.360557][ T1202] m920x_read = error: -19 [ 726.364935][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 726.697086][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 726.993466][T13260] Bluetooth: hci3: command tx timeout [ 727.000509][ T1202] m920x_read = error: -19 [ 727.002286][T14221] overlayfs: failed to clone upperpath [ 727.022215][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 727.192557][T14224] netlink: 'syz.2.2300': attribute type 32 has an invalid length. [ 727.207446][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 727.260302][ T1202] m920x_read = error: -19 [ 727.265101][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 727.548051][ T1202] m920x_read = error: -19 [ 727.567388][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 727.588964][T14224] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 728.079379][T14116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.089842][ T1202] m920x_read = error: -19 [ 728.092287][T14116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.103893][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 728.219489][T14116] team0: Port device team_slave_0 added [ 728.233839][T14116] team0: Port device team_slave_1 added [ 728.280657][ T1202] m920x_read = error: -19 [ 728.285008][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 728.340815][T14116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.348813][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.377041][T14116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.392157][T14116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.399324][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.426269][T14116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.460412][ T1202] m920x_read = error: -19 [ 728.464785][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 728.489366][T14116] hsr_slave_0: entered promiscuous mode [ 728.496619][T14116] hsr_slave_1: entered promiscuous mode [ 728.513391][T14116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.521875][T14116] Cannot create hsr debugfs directory [ 728.623851][T14249] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2308'. [ 728.636078][ T1202] m920x_read = error: -19 [ 728.652939][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 728.860314][ T1202] m920x_read = error: -19 [ 728.864692][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 729.050708][ T1202] m920x_read = error: -19 [ 729.374748][T13260] Bluetooth: hci3: command tx timeout [ 729.381288][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 729.609689][ T1202] m920x_read = error: -19 [ 729.614145][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 729.800656][ T1202] m920x_read = error: -19 [ 729.805040][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 729.915274][T14273] tipc: Enabling of bearer rejected, already enabled [ 729.930736][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2314'. [ 729.990667][ T1202] m920x_read = error: -19 [ 730.020580][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 730.467407][T14116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 730.563499][ T5839] m920x_read = error: -19 [ 730.567879][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 730.591643][T14116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 730.638476][T14116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 730.659188][T14116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 730.680795][T14276] lo speed is unknown, defaulting to 1000 [ 730.770397][ T5839] m920x_read = error: -19 [ 730.774991][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 730.948084][T14286] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2321'. [ 730.960264][ T5839] m920x_read = error: -19 [ 730.964950][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 730.986285][T14116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.059154][T14116] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.095624][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.102750][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.140165][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.147284][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.157273][ T5868] m920x_read = error: -19 [ 731.167362][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 731.437434][ T5839] m920x_read = error: -19 [ 731.441920][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 731.567949][T14298] rdma_rxe: rxe_newlink: failed to add lo [ 732.244102][ T5839] m920x_read = error: -19 [ 732.265680][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 732.790410][ T5839] m920x_read = error: -19 [ 732.800388][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 733.215599][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 733.230522][T14319] xt_connbytes: Forcing CT accounting to be enabled [ 733.237314][T14319] --map-set only usable from mangle table [ 733.246062][ T5913] m920x_read = error: -19 [ 733.250923][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 733.430554][ T5913] m920x_read = error: -19 [ 733.471154][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 733.497684][ T30] audit: type=1400 audit(1747668160.062:2450): avc: denied { getopt } for pid=14322 comm="syz.1.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 733.650281][ T5839] m920x_read = error: -19 [ 733.654663][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 733.791396][T14116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.831222][ T5839] m920x_read = error: -19 [ 733.836180][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 733.913505][T14116] veth0_vlan: entered promiscuous mode [ 733.941853][T14116] veth1_vlan: entered promiscuous mode [ 734.003276][T14116] veth0_macvtap: entered promiscuous mode [ 734.024624][T14116] veth1_macvtap: entered promiscuous mode [ 734.066780][ T5839] m920x_read = error: -19 [ 734.071109][T14116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.080217][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 734.141536][T14116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.300047][ T5913] m920x_read = error: -19 [ 734.310555][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 734.755460][T14116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.795250][T14116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.826276][T14353] netlink: 'syz.0.2337': attribute type 32 has an invalid length. [ 734.830693][T14116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.834153][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 734.852105][T14116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.865721][T14353] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 734.900246][ T5839] m920x_read = error: -19 [ 734.904665][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 735.070412][ T5839] m920x_read = error: -19 [ 735.074775][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 735.271710][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.279613][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.016547][ T5839] m920x_read = error: -19 [ 736.023987][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 736.420770][ T5839] m920x_read = error: -19 [ 736.423988][ T6694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.425128][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 736.460094][ T6694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.650910][ T5839] m920x_read = error: -19 [ 736.655612][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 737.148211][ T5839] m920x_read = error: -19 [ 737.152689][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 737.165456][T14389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2347'. [ 737.205351][T14392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2348'. [ 737.301602][T14399] netlink: 'syz.1.2350': attribute type 32 has an invalid length. [ 737.309513][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 737.319856][T14399] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 737.341654][ T5839] m920x_read = error: -19 [ 737.345987][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 737.579131][ T5839] m920x_read = error: -19 [ 737.583950][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 737.760672][ T5839] m920x_read = error: -19 [ 737.774159][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 737.809603][T14420] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2353'. [ 737.862864][T14419] tmpfs: Bad value for 'mpol' [ 738.040334][ T5839] m920x_read = error: -19 [ 738.071359][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 738.140423][ T30] audit: type=1400 audit(1747668164.702:2451): avc: denied { getopt } for pid=14425 comm="syz.2.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 738.247264][T14433] overlayfs: failed to clone upperpath [ 738.450699][ T5913] m920x_read = error: -19 [ 738.455146][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 738.533946][T14439] tipc: Enabling of bearer rejected, already enabled [ 738.546316][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'. [ 738.620752][ T5913] m920x_read = error: -19 [ 738.695381][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 738.845708][ T30] audit: type=1400 audit(1747668165.412:2452): avc: denied { wake_alarm } for pid=14440 comm="syz.1.2362" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 738.980267][ T5913] m920x_read = error: -19 [ 739.044591][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 739.054881][T14445] tipc: New replicast peer: 255.255.255.255 [ 739.063521][T14445] tipc: Enabled bearer , priority 10 [ 739.126568][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2359'. [ 739.211128][ T3527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.240369][ T1202] m920x_read = error: -19 [ 739.246303][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 739.338648][ T3527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.428504][ T3527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.440252][ T1202] m920x_read = error: -19 [ 739.444595][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 739.521923][ T3527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.596162][ T3527] bridge_slave_1: left allmulticast mode [ 739.602882][ T3527] bridge_slave_1: left promiscuous mode [ 739.608519][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.610443][ T1202] m920x_read = error: -19 [ 739.619852][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 739.630492][ T3527] bridge_slave_0: left allmulticast mode [ 739.637673][ T3527] bridge_slave_0: left promiscuous mode [ 739.643529][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.780381][ T1202] m920x_read = error: -19 [ 739.784749][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 739.884486][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.896821][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.907001][ T3527] bond0 (unregistering): Released all slaves [ 739.950297][ T1202] m920x_read = error: -19 [ 739.954664][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 740.149207][ T1202] m920x_read = error: -19 [ 740.160272][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 740.652722][ T1202] m920x_read = error: -19 [ 740.677883][T14460] netlink: 'syz.1.2365': attribute type 11 has an invalid length. [ 740.678318][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 740.729069][T14459] overlayfs: failed to clone upperpath [ 740.885714][ T3527] hsr_slave_0: left promiscuous mode [ 740.897908][ T3527] hsr_slave_1: left promiscuous mode [ 740.905119][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.916234][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.932536][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 740.942494][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 740.950249][ T1202] m920x_read = error: -19 [ 740.950522][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.954577][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 740.960422][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 740.964912][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.970634][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 740.993860][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 741.014322][ T3527] veth1_macvtap: left promiscuous mode [ 741.020045][ T3527] veth0_macvtap: left promiscuous mode [ 741.025805][ T3527] veth1_vlan: left promiscuous mode [ 741.031312][ T3527] veth0_vlan: left promiscuous mode [ 741.110407][ T1202] m920x_read = error: -19 [ 741.116544][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 741.280241][ T1202] m920x_read = error: -19 [ 741.297009][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 741.917721][ T1202] m920x_read = error: -19 [ 741.922138][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 741.955397][T14484] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.2371'. [ 742.155482][ T1202] m920x_read = error: -19 [ 742.160295][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 742.215581][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 742.320322][ T1202] m920x_read = error: -19 [ 742.334006][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 742.560698][ T1202] m920x_read = error: -19 [ 742.587507][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 742.722290][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 742.820561][ T1202] m920x_read = error: -19 [ 742.829281][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 742.997661][ T1202] m920x_read = error: -19 [ 743.009370][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 743.080235][ T5825] Bluetooth: hci3: command tx timeout [ 743.088671][T14496] tipc: Enabling of bearer rejected, already enabled [ 743.096649][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 743.136327][T14466] lo speed is unknown, defaulting to 1000 [ 743.170283][ T1202] m920x_read = error: -19 [ 743.174651][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 743.400591][ T1202] m920x_read = error: -19 [ 743.404958][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 743.507832][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 743.525326][T14518] trusted_key: encrypted_key: keyword 'loadTwÂñyK¾s' not recognized [ 743.529255][T14515] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2379'. [ 743.570265][ T1202] m920x_read = error: -19 [ 743.572680][T14515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=14515 comm=syz.4.2379 [ 743.574631][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 743.603641][T14466] chnl_net:caif_netlink_parms(): no params data found [ 743.661094][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.668967][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.676463][T14466] bridge_slave_0: entered allmulticast mode [ 743.685399][T14466] bridge_slave_0: entered promiscuous mode [ 743.693411][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.708799][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.716641][T14466] bridge_slave_1: entered allmulticast mode [ 743.724747][T14466] bridge_slave_1: entered promiscuous mode [ 743.730858][ T5868] m920x_read = error: -19 [ 743.735197][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 743.744010][T14524] bridge0: port 3(veth0_to_bridge) entered blocking state [ 743.754028][T14524] bridge0: port 3(veth0_to_bridge) entered disabled state [ 743.761285][T14524] veth0_to_bridge: entered allmulticast mode [ 743.768269][T14524] veth0_to_bridge: entered promiscuous mode [ 743.774538][T14524] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.787627][T14524] bridge0: port 3(veth0_to_bridge) entered blocking state [ 743.794806][T14524] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 743.844861][T14466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.861876][T14466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.910434][ T1202] m920x_read = error: -19 [ 743.914898][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 743.932643][T14466] team0: Port device team_slave_0 added [ 743.947577][T14466] team0: Port device team_slave_1 added [ 744.039450][T14466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.060249][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.089016][ T5868] m920x_read = error: -19 [ 744.093944][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 744.106027][T14466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.151929][T14466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.158908][T14466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.217702][T14466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.248724][T14535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2385'. [ 744.260284][ T5868] m920x_read = error: -19 [ 744.264674][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 744.484179][ T5868] m920x_read = error: -19 [ 744.488524][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 744.761580][ T5868] m920x_read = error: -19 [ 744.766450][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 744.780669][T14466] hsr_slave_0: entered promiscuous mode [ 744.787049][T14466] hsr_slave_1: entered promiscuous mode [ 744.794362][T14466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.811738][T14466] Cannot create hsr debugfs directory [ 744.979713][ T5868] m920x_read = error: -19 [ 745.019324][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 745.201415][ T5825] Bluetooth: hci3: command tx timeout [ 745.325424][T14545] tipc: Enabling of bearer rejected, already enabled [ 745.333509][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 745.350441][ T5868] m920x_read = error: -19 [ 745.361073][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 745.673478][ T5868] m920x_read = error: -19 [ 745.678320][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 745.981298][ T5868] m920x_read = error: -19 [ 745.985828][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 746.282404][T14555] dvmrp8: entered allmulticast mode [ 746.389610][ T5868] m920x_read = error: -19 [ 746.506397][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 746.800457][ T5868] m920x_read = error: -19 [ 746.804826][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 746.829449][T14565] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 746.851118][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.857572][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.980846][ T5868] m920x_read = error: -19 [ 746.985223][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 746.999263][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 747.066264][T14575] x_tables: duplicate underflow at hook 1 [ 747.079901][T14573] overlayfs: failed to clone upperpath [ 747.096089][T14466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 747.105106][T14573] syz_tun: left promiscuous mode [ 747.111697][T14573] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 747.127369][T14466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 747.148104][T14466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 747.161807][T14466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.171123][ T5913] m920x_read = error: -19 [ 747.175522][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 747.241966][ T5825] Bluetooth: hci3: command tx timeout [ 747.260020][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.278407][T14466] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.315744][T14466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 747.326829][T14466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 747.346703][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.353905][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.362111][ T5839] m920x_read = error: -19 [ 747.366456][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 747.397169][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.404392][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.945112][ T5839] m920x_read = error: -19 [ 747.950268][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 748.289239][ T5839] m920x_read = error: -19 [ 748.690239][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 748.955687][ T5839] m920x_read = error: -19 [ 748.960065][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 749.454550][ T5825] Bluetooth: hci3: command tx timeout [ 749.455973][ T5839] m920x_read = error: -19 [ 749.546726][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 749.698095][T14466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.803083][T14466] veth0_vlan: entered promiscuous mode [ 749.816559][ T30] audit: type=1400 audit(1747668176.382:2453): avc: denied { ioctl } for pid=14612 comm="syz.4.2404" path="socket:[43774]" dev="sockfs" ino=43774 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 749.958407][ T30] audit: type=1326 audit(1747668176.512:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7ffc0000 [ 749.983771][ T5839] m920x_read = error: -19 [ 749.989364][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 750.109165][T14466] veth1_vlan: entered promiscuous mode [ 750.118165][ T30] audit: type=1326 audit(1747668176.512:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7ffc0000 [ 750.191982][ T30] audit: type=1326 audit(1747668176.512:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb56c38e969 code=0x7ffc0000 [ 750.199270][T14466] veth0_macvtap: entered promiscuous mode [ 750.222593][ T30] audit: type=1400 audit(1747668176.662:2457): avc: denied { map } for pid=14619 comm="syz.0.2406" path="socket:[43779]" dev="sockfs" ino=43779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 750.348368][ T30] audit: type=1326 audit(1747668176.672:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7ffc0000 [ 750.372352][ T30] audit: type=1326 audit(1747668176.672:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14604 comm="syz.1.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56c38e969 code=0x7ffc0000 [ 750.406456][ T5839] m920x_read = error: -19 [ 750.414219][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 750.533338][T14466] veth1_macvtap: entered promiscuous mode [ 751.230630][T14625] delete_channel: no stack [ 751.319449][T14466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.520730][T14466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.530301][ T5839] m920x_read = error: -19 [ 751.534686][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 751.624778][T14466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.642267][T14466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.651996][T14466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.661223][T14466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.677519][T14636] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 751.797050][ T5839] m920x_read = error: -19 [ 751.803417][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 751.842992][T14634] lo speed is unknown, defaulting to 1000 [ 751.986457][ T6695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.994456][ T1202] m920x_read = error: -19 [ 751.999580][ T6695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.010329][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 752.089067][ T30] audit: type=1400 audit(1747668178.652:2460): avc: denied { map } for pid=14646 comm="syz.4.2414" path="socket:[43861]" dev="sockfs" ino=43861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.105922][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.114075][ T30] audit: type=1400 audit(1747668178.652:2461): avc: denied { read accept } for pid=14646 comm="syz.4.2414" path="socket:[43861]" dev="sockfs" ino=43861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.135421][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.172635][ T1202] m920x_read = error: -19 [ 752.177545][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 752.360258][ T5901] m920x_read = error: -19 [ 752.364651][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 752.530314][ T5901] m920x_read = error: -19 [ 752.534810][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 752.830342][ T5901] m920x_read = error: -19 [ 752.851553][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 753.105430][ T5901] m920x_read = error: -19 [ 753.110279][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 753.387047][T14666] overlayfs: failed to clone upperpath [ 753.406669][ T30] audit: type=1400 audit(1747668179.732:2462): avc: denied { ioctl } for pid=14658 comm="syz.4.2417" path="socket:[44902]" dev="sockfs" ino=44902 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 753.463565][ T1202] m920x_read = error: -19 [ 753.498509][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 753.882361][ T1202] m920x_read = error: -19 [ 753.910585][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 754.097149][ T1202] m920x_read = error: -19 [ 754.101893][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 754.270612][ T1202] m920x_read = error: -19 [ 754.275053][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 754.344528][T14677] tipc: Enabling of bearer rejected, already enabled [ 754.355177][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2421'. [ 754.599315][ T1202] m920x_read = error: -19 [ 754.604302][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 755.625487][ T1202] m920x_read = error: -19 [ 755.642470][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 755.820317][ T5901] m920x_read = error: -19 [ 755.824841][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 756.605212][ T1202] m920x_read = error: -19 [ 756.614329][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 756.667461][ T6694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.733095][T14682] tipc: Enabling of bearer rejected, already enabled [ 756.740960][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 756.772290][T14684] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 756.810805][ T5868] m920x_read = error: -19 [ 756.817911][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 756.885900][ T6694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.968273][ T6694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.000618][ T5868] m920x_read = error: -19 [ 757.004978][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 757.033851][ T6694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.106685][ T6694] bridge_slave_1: left allmulticast mode [ 757.113222][ T6694] bridge_slave_1: left promiscuous mode [ 757.118864][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.127652][ T6694] bridge_slave_0: left allmulticast mode [ 757.134574][ T6694] bridge_slave_0: left promiscuous mode [ 757.140489][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.170837][ T5901] m920x_read = error: -19 [ 757.175176][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 757.340660][ T5901] m920x_read = error: -19 [ 757.345003][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 757.406808][ T6694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.417045][ T6694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.426553][ T6694] bond0 (unregistering): Released all slaves [ 757.510472][ T1202] m920x_read = error: -19 [ 757.514829][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 757.823576][ T1202] m920x_read = error: -19 [ 758.382379][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 758.783039][ T1202] m920x_read = error: -19 [ 758.787423][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 758.960456][ T5868] m920x_read = error: -19 [ 758.964827][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 759.044346][T13260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.054580][T13260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.062516][T13260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.070367][T13260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.077856][T13260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.178601][T14728] lo speed is unknown, defaulting to 1000 [ 759.189981][ T1202] m920x_read = error: -19 [ 759.198962][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 759.870099][ T1202] m920x_read = error: -19 [ 759.925714][ T6694] hsr_slave_0: left promiscuous mode [ 759.934628][ T6694] hsr_slave_1: left promiscuous mode [ 760.297940][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.394567][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 760.460042][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.487737][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.565611][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.693626][ T1202] m920x_read = error: -19 [ 760.697999][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 760.717538][T14740] overlayfs: failed to resolve './file1': -2 [ 760.726296][T14740] netlink: 'syz.4.2436': attribute type 23 has an invalid length. [ 760.747706][ T6694] veth1_macvtap: left promiscuous mode [ 760.757666][ T6694] veth0_macvtap: left promiscuous mode [ 760.768194][ T6694] veth1_vlan: left promiscuous mode [ 760.774005][ T6694] veth0_vlan: left promiscuous mode [ 760.863433][ T1202] m920x_read = error: -19 [ 760.869245][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 760.886309][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 761.030473][ T1202] m920x_read = error: -19 [ 761.161794][T13260] Bluetooth: hci3: command tx timeout [ 761.170227][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 761.407700][ T1202] m920x_read = error: -19 [ 761.416150][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 761.580310][ T5901] m920x_read = error: -19 [ 761.587107][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 761.786413][ T5901] m920x_read = error: -19 [ 761.795191][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 762.209891][ T5901] m920x_read = error: -19 [ 762.217887][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 762.297240][ T6694] team0 (unregistering): Port device team_slave_1 removed [ 762.345702][ T6694] team0 (unregistering): Port device team_slave_0 removed [ 762.382533][ T5901] m920x_read = error: -19 [ 762.389105][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 762.404949][ T30] audit: type=1400 audit(2000000008.280:2463): avc: denied { execute } for pid=14768 comm="syz.1.2444" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 762.594272][ T5901] m920x_read = error: -19 [ 762.598651][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 762.831077][ T5901] m920x_read = error: -19 [ 762.838944][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 763.213095][ T5901] m920x_read = error: -19 [ 763.218150][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 763.240490][T13260] Bluetooth: hci3: command tx timeout [ 763.380363][ T5901] m920x_read = error: -19 [ 763.384790][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 763.437046][T14743] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 763.553619][ T5901] m920x_read = error: -19 [ 763.557995][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 763.617548][T14789] netlink: 'syz.1.2449': attribute type 12 has an invalid length. [ 763.625569][T14789] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2449'. [ 763.770258][ T5901] m920x_read = error: -19 [ 763.774679][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 763.866594][T14728] chnl_net:caif_netlink_parms(): no params data found [ 763.940242][ T5901] m920x_read = error: -19 [ 763.944625][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 764.260043][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2453'. [ 764.670655][ T5901] m920x_read = error: -19 [ 764.682291][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 764.890625][ T5901] m920x_read = error: -19 [ 764.895048][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 765.022799][T14821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2454'. [ 765.064676][ T5901] m920x_read = error: -19 [ 765.069774][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 765.230815][ T5901] m920x_read = error: -19 [ 765.297477][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 765.336970][T14822] overlayfs: failed to clone upperpath [ 765.343168][T13260] Bluetooth: hci3: command tx timeout [ 765.447094][T14728] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.467387][T14728] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.486303][T14728] bridge_slave_0: entered allmulticast mode [ 765.508802][T14728] bridge_slave_0: entered promiscuous mode [ 765.522652][T14728] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.529930][T14728] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.537199][T14728] bridge_slave_1: entered allmulticast mode [ 765.544819][T14728] bridge_slave_1: entered promiscuous mode [ 766.106745][ T5868] m920x_read = error: -19 [ 766.111528][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 766.268948][T14728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.283275][ T5901] m920x_read = error: -19 [ 766.287697][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 766.415088][T14728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.450469][ T5901] m920x_read = error: -19 [ 766.459242][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 766.485561][T14728] team0: Port device team_slave_0 added [ 766.532964][T14830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2456'. [ 766.596032][T14728] team0: Port device team_slave_1 added [ 766.959525][T14832] netlink: 'syz.2.2458': attribute type 32 has an invalid length. [ 766.979641][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 766.995403][T14728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.002434][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.048946][T14728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.061585][T14832] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 767.090260][ T5901] m920x_read = error: -19 [ 767.097119][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 767.116259][T14728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.130217][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.156430][T14728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.246840][T14837] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 767.260636][ T5913] m920x_read = error: -19 [ 767.266294][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 767.402036][T13260] Bluetooth: hci3: command tx timeout [ 767.419397][T14728] hsr_slave_0: entered promiscuous mode [ 767.434066][ T5913] m920x_read = error: -19 [ 767.438607][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 768.115848][T14728] hsr_slave_1: entered promiscuous mode [ 768.124009][T14728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.134471][T14728] Cannot create hsr debugfs directory [ 768.523032][ T5901] m920x_read = error: -19 [ 768.527409][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 768.739353][ T5901] m920x_read = error: -19 [ 768.744195][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 769.571184][ T5901] m920x_read = error: -19 [ 769.575561][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 769.627133][T14857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2465'. [ 769.839722][ T5901] m920x_read = error: -19 [ 769.854547][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 770.516542][ T5901] m920x_read = error: -19 [ 770.580926][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 770.910828][ T5868] m920x_read = error: -19 [ 770.915205][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 771.093451][ T5868] m920x_read = error: -19 [ 771.097830][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 771.178387][T14881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2471'. [ 771.548190][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 771.570025][ T5868] m920x_read = error: -19 [ 771.574630][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 771.790932][ T5868] m920x_read = error: -19 [ 771.825909][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 772.141152][T14887] 9pnet_fd: Insufficient options for proto=fd [ 772.190301][ T5868] m920x_read = error: -19 [ 772.196662][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 772.295049][T14728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 772.306897][T14728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.366408][T14728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.379073][T14728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.386102][ T5868] m920x_read = error: -19 [ 772.395964][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 773.096474][ T5868] m920x_read = error: -19 [ 773.103120][T14728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.110295][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 773.213133][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2480'. [ 773.582309][ T5868] m920x_read = error: -19 [ 773.586709][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 773.618819][T14728] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.636041][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.643171][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.667383][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.674587][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.903243][ T5868] m920x_read = error: -19 [ 773.909588][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 774.712386][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 774.923266][ T5868] m920x_read = error: -19 [ 774.927644][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 775.120609][ T5868] m920x_read = error: -19 [ 775.124991][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 775.828389][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2487'. [ 775.838170][ T5868] m920x_read = error: -19 [ 775.851099][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 775.888857][T14728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.355576][ T5868] m920x_read = error: -19 [ 776.359963][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 776.387615][T14728] veth0_vlan: entered promiscuous mode [ 776.399166][T14728] veth1_vlan: entered promiscuous mode [ 776.542583][ T5868] m920x_read = error: -19 [ 776.547049][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 776.556971][T14728] veth0_macvtap: entered promiscuous mode [ 776.568378][T14728] veth1_macvtap: entered promiscuous mode [ 777.030531][ T5868] m920x_read = error: -19 [ 777.034896][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 777.051602][T14728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.078549][T14728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.091507][T14728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.136409][T14728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.149009][T14728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.157830][T14728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.357138][ T5868] m920x_read = error: -19 [ 777.400647][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 777.476387][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2496'. [ 778.191090][ T5868] m920x_read = error: -19 [ 778.218144][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 778.475343][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 779.311551][ T5868] m920x_read = error: -19 [ 779.315924][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 779.759120][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.760314][ T5868] m920x_read = error: -19 [ 779.780552][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.787963][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 779.829227][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.838119][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.985699][ T5868] m920x_read = error: -19 [ 779.990081][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 780.392455][T14991] tipc: Enabling of bearer rejected, already enabled [ 780.402651][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'. [ 780.814641][ T5868] m920x_read = error: -19 [ 780.818983][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 781.055645][ T5868] m920x_read = error: -19 [ 781.060394][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 781.557031][ T5868] m920x_read = error: -19 [ 781.561570][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 781.605997][T15007] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 781.729292][T15013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61714 sclass=netlink_route_socket pid=15013 comm=syz.1.2508 [ 781.807550][ T5868] m920x_read = error: -19 [ 781.813024][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 781.926219][T15017] tipc: Enabling of bearer rejected, already enabled [ 781.936158][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 782.011798][ T5868] m920x_read = error: -19 [ 782.016519][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 782.032004][ T30] audit: type=1400 audit(2000000027.910:2464): avc: denied { mount } for pid=15008 comm="syz.1.2508" name="/" dev="hugetlbfs" ino=46692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 782.145912][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2510'. [ 782.190268][ T5868] m920x_read = error: -19 [ 782.195069][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 782.561815][ T5868] m920x_read = error: -19 [ 782.567018][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 782.745590][ T5868] m920x_read = error: -19 [ 782.771625][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 783.267076][ T5868] m920x_read = error: -19 [ 783.271627][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 783.273757][T15027] Invalid source name [ 783.283587][T15027] UBIFS error (pid: 15027): cannot open "./file0", error -22 [ 783.440313][ T5868] m920x_read = error: -19 [ 783.630384][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 783.810722][ T5868] m920x_read = error: -19 [ 784.157796][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 784.347742][ T5868] m920x_read = error: -19 [ 784.374241][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 784.550780][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 784.572438][ T5868] m920x_read = error: -19 [ 785.037594][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 785.269336][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'. [ 785.861576][ T5868] m920x_read = error: -19 [ 785.865960][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 786.093242][ T5913] m920x_read = error: -19 [ 786.100294][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 786.240597][ T30] audit: type=1326 audit(2000000032.110:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 786.290254][ T5901] m920x_read = error: -19 [ 786.294596][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 786.422536][ T3479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.539775][ T3479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.585863][ T5913] m920x_read = error: -19 [ 786.590800][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 786.634265][ T3479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.450269][ T5901] m920x_read = error: -19 [ 787.454655][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 787.620254][ T5901] m920x_read = error: -19 [ 787.624701][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 787.741708][T15091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2530'. [ 787.778550][ T3479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.802833][ T5901] m920x_read = error: -19 [ 788.138809][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 788.337513][ T5868] m920x_read = error: -19 [ 788.355745][ T5868] dvb-usb: error -19 while querying for an remote control event. [ 788.772945][ T1202] m920x_read = error: -19 [ 788.777611][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 789.010661][ T1202] m920x_read = error: -19 [ 789.072101][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 789.154942][T15097] tipc: Enabling of bearer rejected, already enabled [ 789.162955][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2532'. [ 789.247351][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 789.260502][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 789.269476][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 789.278040][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.292628][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.327939][ T3479] bridge_slave_1: left allmulticast mode [ 789.430580][ T3479] bridge_slave_1: left promiscuous mode [ 789.437680][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.445260][ T5839] m920x_read = error: -19 [ 789.450060][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 789.460164][ T3479] bridge_slave_0: left allmulticast mode [ 789.466279][ T3479] bridge_slave_0: left promiscuous mode [ 789.473774][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.996084][ T5839] m920x_read = error: -19 [ 790.011499][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 790.112592][T15116] fuse: Bad value for 'group_id' [ 790.117560][T15116] fuse: Bad value for 'group_id' [ 790.184567][ T5901] m920x_read = error: -19 [ 790.203365][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 790.373559][ T5901] m920x_read = error: -19 [ 790.378049][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 790.849536][ T5901] m920x_read = error: -19 [ 790.869381][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 790.881921][ T30] audit: type=1326 audit(2000000036.760:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15113 comm="syz.2.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 790.954763][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.969271][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.981759][ T3479] bond0 (unregistering): Released all slaves [ 791.019660][T15100] lo speed is unknown, defaulting to 1000 [ 791.135937][ T1202] m920x_read = error: -19 [ 791.146323][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 791.321477][ T5825] Bluetooth: hci3: command tx timeout [ 791.426957][T15138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2543'. [ 792.215846][T15137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2544'. [ 792.229021][ T1202] m920x_read = error: -19 [ 792.236249][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 792.434182][ T1202] m920x_read = error: -19 [ 792.438558][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 792.650404][ T1202] m920x_read = error: -19 [ 792.655279][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 792.863853][T15156] tipc: Enabling of bearer rejected, already enabled [ 792.875225][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2546'. [ 792.887282][ T1202] m920x_read = error: -19 [ 792.893294][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 793.060715][ T1202] m920x_read = error: -19 [ 793.101974][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 793.199141][ T3479] hsr_slave_0: left promiscuous mode [ 793.213174][ T3479] hsr_slave_1: left promiscuous mode [ 793.219147][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.228367][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.236474][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.374514][ T1202] m920x_read = error: -19 [ 793.379349][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 793.402642][ T5825] Bluetooth: hci3: command tx timeout [ 793.814223][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.842247][ T1202] m920x_read = error: -19 [ 793.851861][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 793.951455][ T3479] veth1_macvtap: left promiscuous mode [ 793.958594][ T3479] veth0_macvtap: left promiscuous mode [ 793.964323][ T3479] veth1_vlan: left promiscuous mode [ 793.969731][ T3479] veth0_vlan: left promiscuous mode [ 794.118652][ T1202] m920x_read = error: -19 [ 794.917261][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 795.059384][ T30] audit: type=1326 audit(2000000040.930:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15160 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 795.095616][ T5901] m920x_read = error: -19 [ 795.106663][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 795.274329][ T5901] m920x_read = error: -19 [ 795.279593][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 795.460516][ T5901] m920x_read = error: -19 [ 795.480938][ T5825] Bluetooth: hci3: command tx timeout [ 795.487378][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 795.687492][ T5901] m920x_read = error: -19 [ 795.707901][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 795.977041][ T5901] m920x_read = error: -19 [ 795.996803][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 796.109858][T15187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2558'. [ 796.165233][ T5901] m920x_read = error: -19 [ 796.209797][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 796.460242][ T5901] m920x_read = error: -19 [ 796.489683][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 796.588683][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 796.649798][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 796.657133][ T5901] m920x_read = error: -19 [ 796.666062][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 797.461342][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2559'. [ 797.480246][ T5901] m920x_read = error: -19 [ 797.494809][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 797.560609][ T5825] Bluetooth: hci3: command tx timeout [ 797.661138][ T5901] m920x_read = error: -19 [ 797.665514][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 797.795223][ T30] audit: type=1400 audit(2000000043.670:2468): avc: denied { map } for pid=15196 comm="syz.0.2562" path="socket:[47194]" dev="sockfs" ino=47194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 797.843042][ T5901] m920x_read = error: -19 [ 797.850204][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 797.896608][T15100] chnl_net:caif_netlink_parms(): no params data found [ 798.013800][ T5901] m920x_read = error: -19 [ 798.019844][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 798.055403][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.062676][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.069871][T15100] bridge_slave_0: entered allmulticast mode [ 798.081824][T15100] bridge_slave_0: entered promiscuous mode [ 798.089906][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.097345][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.105345][T15100] bridge_slave_1: entered allmulticast mode [ 798.112787][T15100] bridge_slave_1: entered promiscuous mode [ 798.180571][ T5901] m920x_read = error: -19 [ 798.184945][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 798.196488][T15100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.267409][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2565'. [ 798.713860][ T5901] m920x_read = error: -19 [ 798.719985][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 798.729849][T15100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.774600][T15100] team0: Port device team_slave_0 added [ 798.791077][T15100] team0: Port device team_slave_1 added [ 798.815267][T15100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.822348][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.848790][T15100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.865334][T15100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.873171][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.890235][ T5901] m920x_read = error: -19 [ 798.899922][T15100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.914525][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 798.957590][T15100] hsr_slave_0: entered promiscuous mode [ 798.965635][T15100] hsr_slave_1: entered promiscuous mode [ 798.972063][T15100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.980001][T15100] Cannot create hsr debugfs directory [ 799.051616][T15217] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2569'. [ 799.080469][ T5901] m920x_read = error: -19 [ 799.084830][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 799.250708][ T5901] m920x_read = error: -19 [ 799.255090][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 799.446786][T15224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2570'. [ 800.074011][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'. [ 800.096401][ T5901] m920x_read = error: -19 [ 800.301983][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 800.350634][ T30] audit: type=1326 audit(2000000046.220:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff356d8e969 code=0x7fc00000 [ 800.471285][ T5901] m920x_read = error: -19 [ 800.475663][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 800.599155][T15238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.755126][ T5901] m920x_read = error: -19 [ 800.759530][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 800.761364][T15245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.255593][ T1202] m920x_read = error: -19 [ 801.263954][T15231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.279208][ T1202] dvb-usb: error -19 while querying for an remote control event. [ 801.305290][T15100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 801.316026][T15100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 801.328012][T15100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 801.338316][T15100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 801.395018][T15100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.415171][T15100] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.426752][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.433904][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.441748][ T5839] m920x_read = error: -19 [ 801.446887][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 801.456489][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.463612][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.610516][ T5839] m920x_read = error: -19 [ 801.614892][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 801.624019][T15100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.640187][T15100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.718718][T15253] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2581'. [ 801.800247][ T5839] m920x_read = error: -19 [ 802.204843][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 802.220964][T15249] lo speed is unknown, defaulting to 1000 [ 802.391371][ T5913] m920x_read = error: -19 [ 802.395789][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 802.467709][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2582'. [ 803.111858][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2583'. [ 803.161049][ T31] INFO: task kworker/1:8:5917 blocked for more than 143 seconds. [ 803.447482][ T5913] m920x_read = error: -19 [ 803.455005][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 803.525253][ T31] Not tainted 6.15.0-rc7-syzkaller #0 [ 803.531363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.540724][ T31] task:kworker/1:8 state:D stack:23400 pid:5917 tgid:5917 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 803.560308][ T31] Workqueue: usb_hub_wq hub_event [ 803.565421][ T31] Call Trace: [ 803.568876][ T31] [ 803.590132][ T31] __schedule+0x116f/0x5de0 [ 803.594702][ T31] ? __lock_acquire+0x9f0/0x1ba0 [ 803.599674][ T31] ? __pfx___schedule+0x10/0x10 [ 803.604852][ T31] ? find_held_lock+0x2b/0x80 [ 803.609741][ T31] ? schedule+0x2d7/0x3a0 [ 803.614416][ T31] schedule+0xe7/0x3a0 [ 803.618539][ T31] usb_kill_urb+0x253/0x320 [ 803.623154][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 803.628230][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 803.630416][ T5839] m920x_read = error: -19 [ 803.634615][ T31] usb_start_wait_urb+0x250/0x4b0 [ 803.643741][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 803.647581][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 803.649331][ T31] ? __asan_memset+0x23/0x50 [ 803.673227][T15100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.680125][ T31] usb_control_msg+0x326/0x4a0 [ 803.684937][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 803.696407][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 803.710118][ T31] hub_port_init+0x690/0x3a70 [ 803.720658][ T31] hub_event+0x2c67/0x4fa0 [ 803.725118][ T31] ? __pfx_hub_event+0x10/0x10 [ 803.729890][ T31] ? mce_timed_out+0x90/0xb0 [ 803.738172][ T31] ? mce_timed_out+0x90/0xb0 [ 803.744076][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 803.744877][T15100] veth0_vlan: entered promiscuous mode [ 803.755947][ T31] process_one_work+0x9cf/0x1b70 [ 803.760943][ T31] ? __pfx_destroy_super_work+0x10/0x10 [ 803.766547][ T31] ? __pfx_process_one_work+0x10/0x10 [ 803.767198][T15100] veth1_vlan: entered promiscuous mode [ 803.772108][ T31] ? assign_work+0x1a0/0x250 [ 803.782446][ T31] worker_thread+0x6c8/0xf10 [ 803.792105][ T31] ? __kthread_parkme+0x19e/0x250 [ 803.797251][ T31] ? __pfx_worker_thread+0x10/0x10 [ 803.808335][ T31] kthread+0x3c2/0x780 [ 803.813926][T15100] veth0_macvtap: entered promiscuous mode [ 803.814355][ T31] ? __pfx_kthread+0x10/0x10 [ 803.820225][ T5839] m920x_read = error: -19 [ 803.826110][ T31] ? __pfx_kthread+0x10/0x10 [ 803.829645][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 803.838436][ T31] ? __pfx_kthread+0x10/0x10 [ 803.843437][T15100] veth1_macvtap: entered promiscuous mode [ 803.852414][ T31] ? __pfx_kthread+0x10/0x10 [ 803.857152][ T31] ? rcu_is_watching+0x12/0xc0 [ 803.863009][T15100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.872062][ T31] ? __pfx_kthread+0x10/0x10 [ 803.874095][T15100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.876922][ T31] ret_from_fork+0x45/0x80 [ 803.876948][ T31] ? __pfx_kthread+0x10/0x10 [ 803.876968][ T31] ret_from_fork_asm+0x1a/0x30 [ 803.877009][ T31] [ 803.877079][ T31] [ 803.877079][ T31] Showing all locks held in the system: [ 803.961228][ T31] 2 locks held by ksoftirqd/1/23: [ 803.966332][ T31] 1 lock held by khungtaskd/31: [ 803.971702][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 803.990337][ T31] 3 locks held by kworker/u8:7/3444: [ 803.996111][ T31] #0: ffff88814d050948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 804.010337][ T5839] m920x_read = error: -19 [ 804.012329][ T31] #1: ffffc9000b8a7d18 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 804.014817][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 804.028359][ T31] #2: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 804.059868][ T31] 3 locks held by kworker/u8:8/3479: [ 804.067677][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 804.080566][ T31] #1: ffffc9000ba47d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 804.091077][ T31] #2: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 804.103698][ T31] 2 locks held by getty/5573: [ 804.108423][ T31] #0: ffff888035aca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 804.118607][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 804.130620][ T31] 3 locks held by kworker/1:6/5901: [ 804.135822][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 804.146637][ T31] #1: ffffc9000499fd18 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 804.158748][ T31] #2: ffff88805e895240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 804.168906][ T31] 5 locks held by kworker/1:8/5917: [ 804.175132][ T31] #0: ffff8880222d9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 804.186263][ T31] #1: ffffc9000303fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 804.197600][ T31] #2: ffff888145f71198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 804.206726][ T31] #3: ffff888145f74510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 804.210314][ T5839] m920x_read = error: -19 [ 804.216688][ T31] #4: ffff888141fcf368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 804.223800][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 804.231056][ T31] 1 lock held by syz-executor/15100: [ 804.243757][ T31] #0: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 804.253183][ T31] 3 locks held by syz.1.2580/15249: [ 804.258375][ T31] #0: ffffffff90112b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 804.267973][ T31] #1: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: setup_net+0x3f9/0x850 [ 804.276745][ T31] #2: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 804.287069][ T31] [ 804.289429][ T31] ============================================= [ 804.289429][ T31] [ 804.299841][ T31] NMI backtrace for cpu 0 [ 804.299856][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 804.299876][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.299891][ T31] Call Trace: [ 804.299897][ T31] [ 804.299904][ T31] dump_stack_lvl+0x116/0x1f0 [ 804.299934][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 804.299953][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 804.299978][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 804.299997][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 804.300020][ T31] watchdog+0xf70/0x12c0 [ 804.300043][ T31] ? __pfx_watchdog+0x10/0x10 [ 804.300059][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.300084][ T31] ? __kthread_parkme+0x19e/0x250 [ 804.300111][ T31] ? __pfx_watchdog+0x10/0x10 [ 804.300127][ T31] kthread+0x3c2/0x780 [ 804.300145][ T31] ? __pfx_kthread+0x10/0x10 [ 804.300167][ T31] ? __pfx_kthread+0x10/0x10 [ 804.300183][ T31] ? __pfx_kthread+0x10/0x10 [ 804.300198][ T31] ? __pfx_kthread+0x10/0x10 [ 804.300214][ T31] ? rcu_is_watching+0x12/0xc0 [ 804.300235][ T31] ? __pfx_kthread+0x10/0x10 [ 804.300253][ T31] ret_from_fork+0x45/0x80 [ 804.300270][ T31] ? __pfx_kthread+0x10/0x10 [ 804.300287][ T31] ret_from_fork_asm+0x1a/0x30 [ 804.300323][ T31] [ 804.321750][T15100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.325262][ T31] Sending NMI from CPU 0 to CPUs 1: [ 804.328113][T15100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.331023][ C1] NMI backtrace for cpu 1 [ 804.331036][ C1] CPU: 1 UID: 0 PID: 15100 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 804.331054][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.331063][ C1] RIP: 0010:mark_lock+0x5d/0x610 [ 804.331087][ C1] Code: 89 d3 83 fa 08 74 6d 41 bd 01 00 00 00 89 d9 41 d3 e5 4d 63 ed 41 0f b7 44 24 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 83 11 13 14 <0f> 83 86 00 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 0f ab 95 [ 804.331100][ C1] RSP: 0018:ffffc90000a085e0 EFLAGS: 00000003 [ 804.331112][ C1] RAX: 0000000000000007 RBX: 0000000000000009 RCX: 0000000000000020 [ 804.331121][ C1] RDX: 0000000000000008 RSI: ffff8880287bd438 RDI: ffff8880287bc880 [ 804.331130][ C1] RBP: ffffc90000a08678 R08: 0000000000080000 R09: 0000000000000000 [ 804.331139][ C1] R10: 0000000000000000 R11: ffffffff8e3bfc00 R12: ffff8880287bd438 [ 804.331148][ C1] R13: 0000000000000200 R14: ffff8880287bc880 R15: ffff8880287bc880 [ 804.331157][ C1] FS: 000055556f5d8500(0000) GS:ffff888124ada000(0000) knlGS:0000000000000000 [ 804.331172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.331182][ C1] CR2: 00007ff356f7fab8 CR3: 000000004e422000 CR4: 00000000003526f0 [ 804.331191][ C1] Call Trace: [ 804.331196][ C1] [ 804.331202][ C1] ? unwind_next_frame+0x3fe/0x20a0 [ 804.331221][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 804.331242][ C1] __lock_acquire+0x499/0x1ba0 [ 804.331263][ C1] ? lock_acquire+0x179/0x350 [ 804.331284][ C1] lock_acquire+0x179/0x350 [ 804.331303][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 804.331320][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 804.331336][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.331355][ C1] unwind_next_frame+0xd1/0x20a0 [ 804.331370][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 804.331385][ C1] ? call_timer_fn+0x197/0x620 [ 804.331403][ C1] ? net_rx_action+0xa97/0x1010 [ 804.331422][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.331439][ C1] arch_stack_walk+0x94/0x100 [ 804.331458][ C1] ? call_timer_fn+0x197/0x620 [ 804.331476][ C1] stack_trace_save+0x8e/0xc0 [ 804.331492][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 804.331511][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 804.331530][ C1] kasan_save_stack+0x33/0x60 [ 804.331543][ C1] ? kasan_save_stack+0x33/0x60 [ 804.331555][ C1] ? kasan_record_aux_stack+0xb8/0xd0 [ 804.331573][ C1] ? insert_work+0x36/0x230 [ 804.331586][ C1] ? __queue_work+0x97e/0x10f0 [ 804.331600][ C1] ? call_timer_fn+0x197/0x620 [ 804.331630][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 804.331647][ C1] insert_work+0x36/0x230 [ 804.331661][ C1] __queue_work+0x97e/0x10f0 [ 804.331678][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 804.331693][ C1] call_timer_fn+0x197/0x620 [ 804.331710][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 804.331729][ C1] ? __run_timers+0x559/0x960 [ 804.331748][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 804.331763][ C1] __run_timers+0x569/0x960 [ 804.331784][ C1] ? __pfx___run_timers+0x10/0x10 [ 804.331808][ C1] run_timer_base+0x114/0x190 [ 804.331826][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 804.331845][ C1] run_timer_softirq+0x1a/0x40 [ 804.331863][ C1] handle_softirqs+0x216/0x8e0 [ 804.331882][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 804.331903][ C1] __irq_exit_rcu+0x109/0x170 [ 804.331919][ C1] irq_exit_rcu+0x9/0x30 [ 804.331934][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 804.331952][ C1] [ 804.331957][ C1] [ 804.331962][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.331977][ C1] RIP: 0010:vprintk_emit+0x567/0x6d0 [ 804.331994][ C1] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 24 1e 20 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 82 19 20 00 48 85 ed 0f 85 25 01 00 00 04 1e 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 804.332007][ C1] RSP: 0018:ffffc900035aea28 EFLAGS: 00000293 [ 804.332017][ C1] RAX: 0000000000000000 RBX: 0000000000000049 RCX: ffffffff819b28fc [ 804.332026][ C1] RDX: ffff8880287bc880 RSI: ffffffff819b2906 RDI: 0000000000000007 [ 804.332034][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 804.332042][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920006b5d47 [ 804.332051][ C1] R13: 0000000000000200 R14: ffff888020eba440 R15: ffffc900035aeaf0 [ 804.332062][ C1] ? vprintk_emit+0x67c/0x6d0 [ 804.332077][ C1] ? vprintk_emit+0x686/0x6d0 [ 804.332093][ C1] ? vprintk_emit+0x686/0x6d0 [ 804.332109][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 804.332128][ C1] dev_printk_emit+0xfa/0x140 [ 804.332140][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 804.332162][ C1] ? ip4_datagram_release_cb+0x1f8/0xc90 [ 804.332184][ C1] ? reacquire_held_locks+0xcd/0x1f0 [ 804.332203][ C1] ? release_sock+0x21/0x220 [ 804.332221][ C1] __netdev_printk+0x1fb/0x500 [ 804.332237][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.332255][ C1] netdev_info+0xe4/0x120 [ 804.332270][ C1] ? __pfx_netdev_info+0x10/0x10 [ 804.332288][ C1] ? __pfx_inet_bind_sk+0x10/0x10 [ 804.332307][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.332322][ C1] ? selinux_netlbl_socket_post_create+0x34/0x1b0 [ 804.332344][ C1] nsim_udp_tunnel_set_port+0x2ae/0x400 [ 804.332363][ C1] __udp_tunnel_nic_device_sync.part.0+0x901/0xe10 [ 804.332386][ C1] ? __pfx___udp_tunnel_nic_device_sync.part.0+0x10/0x10 [ 804.332407][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 804.332427][ C1] ? udp_tunnel_nic_try_existing+0x390/0x470 [ 804.332445][ C1] udp_tunnel_nic_device_sync+0x111/0x190 [ 804.332463][ C1] __udp_tunnel_nic_add_port+0x694/0xd10 [ 804.332484][ C1] udp_tunnel_notify_add_rx_port+0x23c/0x450 [ 804.332502][ C1] ? __pfx_udp_tunnel_notify_add_rx_port+0x10/0x10 [ 804.332520][ C1] ? rcu_is_watching+0x12/0xc0 [ 804.332537][ C1] geneve_sock_add+0x67b/0x930 [ 804.332560][ C1] ? __pfx_geneve_sock_add+0x10/0x10 [ 804.332581][ C1] ? notifier_call_chain+0x369/0x410 [ 804.332599][ C1] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 804.332617][ C1] geneve_open+0xad/0x1c0 [ 804.332628][ C1] ? __pfx_geneve_open+0x10/0x10 [ 804.332648][ C1] __dev_open+0x2e7/0x7d0 [ 804.332661][ C1] ? __pfx___dev_open+0x10/0x10 [ 804.332676][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 804.332693][ C1] __dev_change_flags+0x55d/0x720 [ 804.332708][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 804.332724][ C1] ? do_setlink.constprop.0+0xa22/0x44b0 [ 804.332742][ C1] netif_change_flags+0x8d/0x160 [ 804.332757][ C1] do_setlink.constprop.0+0xddf/0x44b0 [ 804.332774][ C1] ? __lock_acquire+0x9f0/0x1ba0 [ 804.332794][ C1] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 804.332809][ C1] ? __pfx___schedule+0x10/0x10 [ 804.332829][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 804.332846][ C1] ? mark_held_locks+0x49/0x80 [ 804.332864][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 804.332882][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.332902][ C1] ? __mutex_lock+0x1ca/0xb90 [ 804.332921][ C1] ? rtnl_newlink+0x600/0x2000 [ 804.332937][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 804.332955][ C1] ? cap_capable+0xb3/0x250 [ 804.332977][ C1] rtnl_newlink+0x1446/0x2000 [ 804.332995][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.333010][ C1] ? find_held_lock+0x2b/0x80 [ 804.333026][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 804.333042][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 804.333058][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 804.333082][ C1] ? find_held_lock+0x2b/0x80 [ 804.333097][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.333111][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.333126][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 804.333142][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 804.333157][ C1] rtnetlink_rcv_msg+0x95b/0xe90 [ 804.333173][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.333193][ C1] netlink_rcv_skb+0x16a/0x440 [ 804.333210][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 804.333226][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.333248][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 804.333265][ C1] netlink_unicast+0x53d/0x7f0 [ 804.333282][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 804.333301][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 804.333319][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.333339][ C1] __sys_sendto+0x498/0x510 [ 804.333352][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 804.333373][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 804.333389][ C1] ? dnotify_flush+0x79/0x4c0 [ 804.333409][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 804.333422][ C1] ? do_syscall_64+0x91/0x260 [ 804.333440][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.333457][ C1] do_syscall_64+0xcd/0x260 [ 804.333476][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.333489][ C1] RIP: 0033:0x7f93541907fc [ 804.333501][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 804.333514][ C1] RSP: 002b:00007fff0abcc020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 804.333527][ C1] RAX: ffffffffffffffda RBX: 00007f9354ee4620 RCX: 00007f93541907fc [ 804.333536][ C1] RDX: 000000000000002c RSI: 00007f9354ee4670 RDI: 0000000000000003 [ 804.333544][ C1] RBP: 0000000000000000 R08: 00007fff0abcc074 R09: 000000000000000c [ 804.333553][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 804.333561][ C1] R13: 0000000000000000 R14: 00007f9354ee4670 R15: 0000000000000000 [ 804.333575][ C1] [ 804.335824][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 804.335836][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 804.335854][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.335864][ T31] Call Trace: [ 804.335870][ T31] [ 804.335877][ T31] dump_stack_lvl+0x3d/0x1f0 [ 804.335905][ T31] panic+0x71c/0x800 [ 804.335929][ T31] ? __pfx_panic+0x10/0x10 [ 804.335951][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 804.335970][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 804.335986][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 804.336002][ T31] ? watchdog+0xdda/0x12c0 [ 804.336018][ T31] ? watchdog+0xdcd/0x12c0 [ 804.336036][ T31] watchdog+0xdeb/0x12c0 [ 804.336055][ T31] ? __pfx_watchdog+0x10/0x10 [ 804.336070][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 804.336093][ T31] ? __kthread_parkme+0x19e/0x250 [ 804.336116][ T31] ? __pfx_watchdog+0x10/0x10 [ 804.336131][ T31] kthread+0x3c2/0x780 [ 804.336148][ T31] ? __pfx_kthread+0x10/0x10 [ 804.336166][ T31] ? __pfx_kthread+0x10/0x10 [ 804.336181][ T31] ? __pfx_kthread+0x10/0x10 [ 804.336196][ T31] ? __pfx_kthread+0x10/0x10 [ 804.336210][ T31] ? rcu_is_watching+0x12/0xc0 [ 804.336229][ T31] ? __pfx_kthread+0x10/0x10 [ 804.336245][ T31] ret_from_fork+0x45/0x80 [ 804.336260][ T31] ? __pfx_kthread+0x10/0x10 [ 804.336276][ T31] ret_from_fork_asm+0x1a/0x30 [ 804.336307][ T31] [ 804.338506][ T31] Kernel Offset: disabled